Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/H0GqALsRCb_JSJXkIrRb8EKfILM.roa
File: H0GqALsRCb_JSJXkIrRb8EKfILM.roa (raw, json)
Hash identifier: yJUtc0FIYOv3UVepgfc1HOT7AYBk8o4yAtGBS6PPzs0=
Subject key identifier: 1F:41:AA:00:BB:11:09:BF:C9:48:95:E4:22:B4:5B:F0:42:9F:20:B3
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 018CC3B6818DCBADA00A4D76E69BA9B6BA82
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/H0GqALsRCb_JSJXkIrRb8EKfILM.roa
Signing time: Mon 01 Jan 2024 06:29:26 +0000
ROA not before: Mon 01 Jan 2024 06:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29684
IP address blocks: 91.208.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:81:8d:cb:ad:a0:0a:4d:76:e6:9b:a9:b6:ba:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: Jan 1 06:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f41aa00bb1109bfc94895e422b45bf0429f20b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:92:f9:c1:20:de:54:7c:39:27:a3:7e:37:
8c:93:59:de:c4:90:d0:31:76:53:02:d4:9d:6c:d6:
8b:68:0d:80:28:36:a6:12:5c:d1:60:fc:82:6f:7c:
5d:ad:34:67:db:8b:6a:92:67:78:b6:b0:29:c7:52:
79:05:f5:65:f3:d5:f5:0f:c7:0d:a0:e4:ed:54:62:
ec:8c:aa:f4:2d:36:1b:b9:4c:44:0a:07:9d:07:21:
06:75:ac:e0:c8:1c:a9:5b:f2:d7:99:02:41:b4:eb:
59:fb:0b:63:6c:ec:82:cb:15:eb:c9:ce:45:bc:c9:
86:6a:97:98:0d:68:2f:c3:61:b6:27:81:3c:a6:a9:
4f:11:10:90:08:e4:f8:e2:27:be:8f:57:6b:dc:7d:
c0:0b:e9:bc:00:48:97:53:c3:c3:5f:fc:2d:68:54:
61:0c:3d:2d:d9:74:e5:4a:71:70:c3:29:37:ef:24:
08:e4:2c:77:d4:63:84:98:b5:da:d1:24:12:26:72:
81:a8:34:13:54:b5:91:d3:86:b1:3e:1d:01:5e:6a:
e9:42:44:47:51:eb:a0:ca:e4:03:5b:42:73:70:fe:
01:8a:38:34:66:8c:4f:5d:18:4f:3c:4a:1f:83:ee:
14:d3:c6:4f:23:13:e3:92:cf:de:29:2b:09:38:4a:
41:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:41:AA:00:BB:11:09:BF:C9:48:95:E4:22:B4:5B:F0:42:9F:20:B3
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/H0GqALsRCb_JSJXkIrRb8EKfILM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.4.0/24
Signature Algorithm: sha256WithRSAEncryption
79:db:9f:d6:89:22:0f:59:b9:89:bf:57:99:d4:10:83:3f:2e:
0e:69:e3:f1:ff:dc:cf:9d:3f:8f:ea:de:0f:d6:9a:99:11:f6:
fd:bd:c0:51:9c:c5:a6:cc:63:c2:ee:7e:60:c1:7e:22:20:13:
e3:7d:77:7f:13:8d:21:93:53:96:47:c2:19:6f:90:5a:50:5a:
65:be:c1:c6:f4:9b:f7:81:e6:09:2f:fb:3c:a9:9e:f1:29:85:
53:5b:4b:c3:3e:ee:f5:dd:18:80:c9:18:c0:fa:54:4f:b2:a0:
fb:4c:2a:1a:8a:6d:26:51:c1:50:55:da:fe:69:26:6b:3b:a6:
48:13:01:15:c3:b2:6a:8c:e1:6a:8c:43:86:dd:e1:36:63:82:
b7:a1:0e:ac:fb:50:81:c6:a5:57:fa:ae:dc:7c:eb:36:5f:cf:
8b:7d:43:67:21:a8:0d:cf:38:ee:64:b8:8e:39:75:b0:21:9b:
41:45:4a:06:29:88:3f:e0:5a:98:9f:a6:b8:70:4c:26:dc:85:
ea:22:28:f9:7a:4e:36:71:fa:3e:29:a5:2e:5d:d2:ce:6b:ac:
86:ab:a2:b8:68:52:4f:b5:5b:d4:d5:f8:b9:d1:3f:fd:84:9d:
f6:e2:df:92:92:90:cd:19:d2:92:d9:56:6f:e6:94:22:f9:f2:
23:78:97:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtoGNy62gCk125puptrqCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MjFmZDlkMjc4YjY0NThlOWJmMWNjZWJhMmMzMWExOWZi
OTZjZmQwHhcNMjQwMTAxMDYyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjQxYWEwMGJiMTEwOWJmYzk0ODk1ZTQyMmI0NWJmMDQyOWYyMGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrmS+cEg3lR8OSejfjeMk1nexJDQ
MXZTAtSdbNaLaA2AKDamElzRYPyCb3xdrTRn24tqkmd4trApx1J5BfVl89X1D8cN
oOTtVGLsjKr0LTYbuUxECgedByEGdazgyBypW/LXmQJBtOtZ+wtjbOyCyxXryc5F
vMmGapeYDWgvw2G2J4E8pqlPERCQCOT44ie+j1dr3H3AC+m8AEiXU8PDX/wtaFRh
DD0t2XTlSnFwwyk37yQI5Cx31GOEmLXa0SQSJnKBqDQTVLWR04axPh0BXmrpQkRH
UeugyuQDW0JzcP4Bijg0ZoxPXRhPPEofg+4U08ZPIxPjks/eKSsJOEpBLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB9BqgC7EQm/yUiV5CK0W/BCnyCzMB8GA1UdIwQY
MBaAFNch/Z0ni2RY6b8czrosMaGfuWz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi82ZDc1MmEtNTljNS00N2EwLWIzY2Qt
OGY5NzliNjk5NDNmLzEvSDBHcUFMc1JDYl9KU0pYa0lyUmI4RUtmSUxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi82ZDc1MmEtNTljNS00N2EwLWIzY2QtOGY5NzliNjk5NDNm
LzEvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9AEMA0G
CSqGSIb3DQEBCwUAA4IBAQB525/WiSIPWbmJv1eZ1BCDPy4OaePx/9zPnT+P6t4P
1pqZEfb9vcBRnMWmzGPC7n5gwX4iIBPjfXd/E40hk1OWR8IZb5BaUFplvsHG9Jv3
geYJL/s8qZ7xKYVTW0vDPu713RiAyRjA+lRPsqD7TCoaim0mUcFQVdr+aSZrO6ZI
EwEVw7JqjOFqjEOG3eE2Y4K3oQ6s+1CBxqVX+q7cfOs2X8+LfUNnIagNzzjuZLiO
OXWwIZtBRUoGKYg/4FqYn6a4cEwm3IXqIij5ek42cfo+KaUuXdLOa6yGq6K4aFJP
tVvU1fi50T/9hJ324t+SkpDNGdKS2VZv5pQi+fIjeJfD
-----END CERTIFICATE-----
Generated at Tue May 7 15:57:28 2024 by rpki-client on console-fra.rpki-client.org