Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/1-b-Tcu2PjVVK8y4R_aTOTKlPzxo.roa
File: 1-b-Tcu2PjVVK8y4R_aTOTKlPzxo.roa (raw, json)
Hash identifier: G/2rUxEzdsJc4jVtvWHdk9qkXPIYNbwnv6+ZftnaxbA=
Subject key identifier: F9:BF:93:72:ED:8F:8D:55:4A:F3:2E:11:FD:A4:CE:4C:A9:4F:CF:1A
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 018CC49340F4985FA5032E877C874D68BB03
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/1-b-Tcu2PjVVK8y4R_aTOTKlPzxo.roa
Signing time: Mon 01 Jan 2024 10:30:33 +0000
ROA not before: Mon 01 Jan 2024 10:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205403
IP address blocks: 145.14.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:40:f4:98:5f:a5:03:2e:87:7c:87:4d:68:bb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 10:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9bf9372ed8f8d554af32e11fda4ce4ca94fcf1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:58:d9:d3:a1:e2:cf:76:c3:fb:18:5a:58:db:
30:ec:23:a8:86:78:b8:da:51:26:72:31:33:71:9e:
d0:75:cd:1c:65:2f:99:07:f5:46:52:cd:e4:54:aa:
ee:73:4a:5e:12:d2:51:d9:c0:05:dd:c5:fd:fa:3a:
4e:30:46:5a:71:7a:60:83:fd:95:1e:d5:aa:e6:dc:
68:a2:9f:cf:32:80:86:3d:10:33:9c:6d:dc:cd:25:
c8:ae:25:26:b9:bd:d1:62:bd:4f:df:26:78:3c:1f:
5c:57:b7:55:51:14:a6:77:3a:e0:cc:4d:24:ea:69:
70:a6:2a:1b:94:c0:e1:87:d9:a6:8d:e0:c4:a0:d7:
f8:e6:79:a7:41:e7:1a:80:33:2b:0a:f6:8e:e9:82:
34:c3:43:c8:fc:66:0f:3e:10:58:22:f8:73:9c:d3:
67:57:90:ce:bd:cc:4e:c3:4e:04:84:f6:b3:a0:f1:
81:8f:ac:7c:48:82:49:e4:19:60:ae:e3:b4:28:1d:
83:ea:40:38:51:05:4e:a3:05:a6:5b:20:26:73:50:
f3:11:85:9c:d7:dd:64:86:ea:7c:f0:1e:54:02:48:
f4:99:e0:50:be:7e:3a:48:60:87:60:db:58:e8:e6:
47:c3:b4:b3:30:e6:29:61:04:a9:20:ae:8e:d7:06:
69:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BF:93:72:ED:8F:8D:55:4A:F3:2E:11:FD:A4:CE:4C:A9:4F:CF:1A
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/1-b-Tcu2PjVVK8y4R_aTOTKlPzxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.14.6.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ee:d3:ed:4c:87:b9:b5:12:81:59:d7:a8:34:52:de:18:60:
a8:56:54:12:80:ca:c4:ef:bf:0c:2d:b2:c9:cc:b6:6c:f5:cc:
6a:34:98:71:89:cb:29:92:17:84:54:97:40:32:7e:49:a2:3e:
ec:05:ff:a7:5a:93:d1:68:be:e5:0e:6e:e5:2e:d5:31:79:4e:
69:af:5a:eb:1a:ad:6b:48:4e:b9:c5:1f:f9:9f:4b:f3:01:0f:
71:f9:6d:ea:d9:cd:10:cd:be:ed:71:78:70:c1:73:b7:cd:22:
56:6d:35:ec:f0:c2:c6:c8:e5:2a:12:fe:87:6a:12:28:51:c3:
2f:77:f7:fa:d3:1a:20:20:29:e4:f7:dc:e6:34:c8:9c:9f:de:
1b:a2:94:40:9a:48:ea:85:23:d9:73:39:06:d6:8d:cc:98:1c:
45:c4:2b:89:89:62:fd:a1:14:bc:25:6c:8f:7a:31:58:28:fb:
95:b6:29:1d:29:32:42:68:98:43:d6:ba:42:9e:4e:cb:e9:a0:
25:86:34:44:4c:20:47:f9:c5:a7:cb:f0:9c:b7:69:4c:02:99:
ba:d7:8d:ba:af:a8:1c:fc:32:2e:37:44:15:d5:0e:ed:9f:61:
89:2b:98:40:2e:46:96:5b:12:48:2a:31:b9:cf:fc:57:6e:e9:
cf:d6:3b:f2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzEk0D0mF+lAy6HfIdNaLsDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi
Y2RkZmYwHhcNMjQwMTAxMTAzMDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWJmOTM3MmVkOGY4ZDU1NGFmMzJlMTFmZGE0Y2U0Y2E5NGZjZjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFjZ06Hiz3bD+xhaWNsw7COohni4
2lEmcjEzcZ7Qdc0cZS+ZB/VGUs3kVKruc0peEtJR2cAF3cX9+jpOMEZacXpgg/2V
HtWq5txoop/PMoCGPRAznG3czSXIriUmub3RYr1P3yZ4PB9cV7dVURSmdzrgzE0k
6mlwpioblMDhh9mmjeDEoNf45nmnQecagDMrCvaO6YI0w0PI/GYPPhBYIvhznNNn
V5DOvcxOw04EhPazoPGBj6x8SIJJ5BlgruO0KB2D6kA4UQVOowWmWyAmc1DzEYWc
191khup88B5UAkj0meBQvn46SGCHYNtY6OZHw7SzMOYpYQSpIK6O1wZpyQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPm/k3Ltj41VSvMuEf2kzkypT88aMB8GA1UdIwQY
MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt
MjRmZGRjNmQxNDdiLzEvMS1iLVRjdTJQalZWSzh5NFJfYVRPVEtsUHp4by5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWEvNzAyYjI4LWUxNTgtNDBjMC04MzMwLTI0ZmRkYzZkMTQ3
Yi8xL0hIc0d2MEV3RGNUVER6ME9HQXlibGRLODNmOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJEOBjAN
BgkqhkiG9w0BAQsFAAOCAQEALu7T7UyHubUSgVnXqDRS3hhgqFZUEoDKxO+/DC2y
ycy2bPXMajSYcYnLKZIXhFSXQDJ+SaI+7AX/p1qT0Wi+5Q5u5S7VMXlOaa9a6xqt
a0hOucUf+Z9L8wEPcflt6tnNEM2+7XF4cMFzt80iVm017PDCxsjlKhL+h2oSKFHD
L3f3+tMaICAp5Pfc5jTInJ/eG6KUQJpI6oUj2XM5BtaNzJgcRcQriYli/aEUvCVs
j3oxWCj7lbYpHSkyQmiYQ9a6Qp5Oy+mgJYY0REwgR/nFp8vwnLdpTAKZuteNuq+o
HPwyLjdEFdUO7Z9hiSuYQC5GllsSSCoxuc/8V27pz9Y78g==
-----END CERTIFICATE-----
Generated at Tue Jul 2 17:38:52 2024 by rpki-client on console-fra.rpki-client.org