Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/aHFDk0h0zmf_Jj7slGbrqjj8s6U.roa
File: aHFDk0h0zmf_Jj7slGbrqjj8s6U.roa (raw, json)
Hash identifier: XNYcWQL4xGS94k5E1nIvyLBAIF4jPz1iBJCqcBx8UJY=
Subject key identifier: 68:71:43:93:48:74:CE:67:FF:26:3E:EC:94:66:EB:AA:38:FC:B3:A5
Certificate issuer: /CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Certificate serial: 018CC2DB42DE8A1FFFE53A3B58FA74F0054B
Authority key identifier: 55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/aHFDk0h0zmf_Jj7slGbrqjj8s6U.roa
Signing time: Mon 01 Jan 2024 02:29:58 +0000
ROA not before: Mon 01 Jan 2024 02:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56911
IP address blocks: 195.234.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:42:de:8a:1f:ff:e5:3a:3b:58:fa:74:f0:05:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Validity
Not Before: Jan 1 02:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=687143934874ce67ff263eec9466ebaa38fcb3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:43:f9:fc:69:66:51:9e:f0:49:2f:44:9d:
2d:6d:8c:80:86:4c:27:51:06:e4:b6:e9:2b:55:24:
bd:bc:02:a8:93:47:8d:89:a8:7b:90:8d:4a:f0:80:
fa:69:c4:7a:72:1c:55:1c:6f:8a:db:da:14:63:65:
ab:f1:32:92:8f:1f:43:3b:01:66:c2:db:bf:34:d4:
ba:4b:9b:8a:b3:8f:5b:66:db:0c:68:05:1e:f1:c8:
8d:52:8d:17:31:2a:d3:d1:a3:f6:cc:90:4b:aa:3d:
46:07:21:a5:f9:e0:2c:48:b1:e2:03:e6:40:6d:43:
bd:37:44:81:57:76:12:e0:fc:23:c9:4c:cc:34:0f:
cb:ce:9a:4c:92:50:6b:f5:f1:b3:59:36:b3:43:cd:
ec:6e:eb:41:74:d3:32:58:5b:00:38:9f:7c:f4:86:
9a:67:04:5c:cc:7b:2e:78:93:61:ab:54:dc:56:f2:
bf:cb:d6:9c:ff:4d:37:bc:6a:da:33:4c:07:03:c9:
0b:39:1a:f4:fe:d1:32:f8:b3:c2:5d:8a:f3:69:b2:
75:45:23:7a:b0:77:30:77:7c:70:0a:3b:1d:60:af:
a7:5f:40:45:0d:41:5c:13:52:b2:ec:c8:ed:c3:22:
78:11:f2:8a:7f:29:c5:6e:ab:6e:8c:fe:3d:dd:e6:
af:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:71:43:93:48:74:CE:67:FF:26:3E:EC:94:66:EB:AA:38:FC:B3:A5
X509v3 Authority Key Identifier:
keyid:55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/aHFDk0h0zmf_Jj7slGbrqjj8s6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.93.0/24
Signature Algorithm: sha256WithRSAEncryption
39:4d:2a:0b:1e:b2:61:98:53:2b:1f:be:f8:3e:0c:24:a9:35:
61:24:64:d5:fd:eb:f5:c8:b9:bf:22:3f:72:bf:45:18:04:cd:
c8:4e:a8:ea:8a:d2:8f:f1:f2:42:fb:44:17:ab:c7:0f:26:7e:
da:02:75:b4:5b:be:49:38:e1:a9:93:2b:2b:da:ba:c8:d5:11:
5b:f2:5b:f6:e9:8c:43:34:ac:6e:42:25:82:6e:c9:07:d6:af:
b9:73:40:a3:42:85:80:65:3b:7e:5a:b1:b3:00:95:70:65:81:
02:52:f0:1a:44:3d:c9:b7:49:01:ec:34:42:ba:5b:6b:56:40:
9e:47:bf:b2:23:69:f2:7b:af:60:63:f0:d1:be:80:23:9f:9b:
d8:0a:a0:13:6b:f2:c6:cb:c2:b0:c8:25:0b:67:23:08:9e:81:
73:ed:60:50:94:9b:8c:47:7c:79:ab:0c:eb:7e:80:00:97:0d:
c1:b9:b0:b0:2b:83:75:42:23:96:ae:36:55:31:6f:31:2b:9c:
80:4b:bd:37:fb:ac:1f:ea:49:a4:0a:52:84:65:da:b5:ff:fe:
08:79:a0:37:a0:c2:58:90:59:e0:f2:85:b7:92:71:16:12:ca:
0c:c1:68:0f:81:60:6a:16:a5:be:ba:cd:2d:e6:d4:66:03:05:
57:d6:2f:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC20Leih//5To7WPp08AVLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NjEwYTU5ZGRmZmJkMjRlZTRiMjk5ZTliMjRiMWJmMDM2
ZjhlNDMwHhcNMjQwMTAxMDIyOTU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODcxNDM5MzQ4NzRjZTY3ZmYyNjNlZWM5NDY2ZWJhYTM4ZmNiM2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovFD+fxpZlGe8EkvRJ0tbYyAhkwn
UQbktukrVSS9vAKok0eNiah7kI1K8ID6acR6chxVHG+K29oUY2Wr8TKSjx9DOwFm
wtu/NNS6S5uKs49bZtsMaAUe8ciNUo0XMSrT0aP2zJBLqj1GByGl+eAsSLHiA+ZA
bUO9N0SBV3YS4PwjyUzMNA/LzppMklBr9fGzWTazQ83sbutBdNMyWFsAOJ989Iaa
ZwRczHsueJNhq1TcVvK/y9ac/003vGraM0wHA8kLORr0/tEy+LPCXYrzabJ1RSN6
sHcwd3xwCjsdYK+nX0BFDUFcE1Ky7MjtwyJ4EfKKfynFbqtujP493eavMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGhxQ5NIdM5n/yY+7JRm66o4/LOlMB8GA1UdIwQY
MBaAFFVhClnd/70k7kspnpsksb8Db45DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVldFS1dkM192U1R1U3ltZW15U3h2d052amtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xN2EzYmQtNzU0YS00NTkzLWI1MWUt
OWZiNDE1YjA5YjVlLzEvYUhGRGswaDB6bWZfSmo3c2xHYnJxamo4czZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xN2EzYmQtNzU0YS00NTkzLWI1MWUtOWZiNDE1YjA5YjVl
LzEvVldFS1dkM192U1R1U3ltZW15U3h2d052amtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+pdMA0G
CSqGSIb3DQEBCwUAA4IBAQA5TSoLHrJhmFMrH774PgwkqTVhJGTV/ev1yLm/Ij9y
v0UYBM3ITqjqitKP8fJC+0QXq8cPJn7aAnW0W75JOOGpkysr2rrI1RFb8lv26YxD
NKxuQiWCbskH1q+5c0CjQoWAZTt+WrGzAJVwZYECUvAaRD3Jt0kB7DRCultrVkCe
R7+yI2nye69gY/DRvoAjn5vYCqATa/LGy8KwyCULZyMInoFz7WBQlJuMR3x5qwzr
foAAlw3BubCwK4N1QiOWrjZVMW8xK5yAS703+6wf6kmkClKEZdq1//4IeaA3oMJY
kFng8oW3knEWEsoMwWgPgWBqFqW+us0t5tRmAwVX1i8c
-----END CERTIFICATE-----
Generated at Fri Jun 7 18:06:39 2024 by rpki-client on console-fra.rpki-client.org