Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/6GV4_SfX1qtoJ04oiJspb89b0qA.roa
File: 6GV4_SfX1qtoJ04oiJspb89b0qA.roa (raw, json)
Hash identifier: YPehfOkn1bsaEeljGvTWZNe5HdhLWaaJV/TmIaW6o0w=
Subject key identifier: E8:65:78:FD:27:D7:D6:AB:68:27:4E:28:88:9B:29:6F:CF:5B:D2:A0
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 018D9351D29D5B61B18C1191B6CD55705F1E
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/6GV4_SfX1qtoJ04oiJspb89b0qA.roa
Signing time: Sat 10 Feb 2024 14:00:29 +0000
ROA not before: Sat 10 Feb 2024 14:00:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 161.8.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:93:51:d2:9d:5b:61:b1:8c:11:91:b6:cd:55:70:5f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Feb 10 14:00:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e86578fd27d7d6ab68274e28889b296fcf5bd2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:a1:b9:a7:a6:75:1d:5c:0b:a2:09:15:59:
3d:4f:a8:50:a2:7b:db:05:4d:47:81:0d:7a:24:ba:
df:05:60:84:8a:e0:55:05:69:f6:0f:c6:6e:12:15:
05:21:0d:69:30:1f:fb:fd:13:ad:25:1c:04:10:a6:
f2:a9:e4:6c:95:2a:ec:35:d7:02:3a:17:0f:01:45:
bf:57:5e:ef:22:90:14:2b:08:c7:33:26:e2:99:b3:
72:5d:83:83:52:0f:f1:83:b6:89:e9:b6:5a:7b:72:
28:64:e8:1c:93:4e:b9:c0:ef:9a:e2:4b:41:ef:bd:
b8:c1:a6:36:93:c1:e2:13:20:f8:fe:ee:10:fb:05:
f6:f1:ad:c2:11:ac:3f:50:00:c5:0b:27:e4:2c:d5:
4d:ce:63:a1:bf:cc:4a:2e:8d:80:61:40:f7:3b:41:
b1:ad:4f:58:d6:c4:fd:41:89:92:b2:90:bd:be:ce:
87:1f:c0:27:b7:2a:d2:ba:db:03:b5:af:c8:c6:56:
7c:78:c2:d4:fe:2d:87:8d:83:3f:68:9f:6e:f8:25:
2b:28:ea:72:71:18:f6:1a:b7:24:2a:7b:9e:4e:76:
13:76:5d:7d:50:25:cb:74:14:79:d9:43:ce:31:cc:
c5:99:68:89:27:cd:c9:5e:46:af:95:ee:66:cd:31:
a1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:65:78:FD:27:D7:D6:AB:68:27:4E:28:88:9B:29:6F:CF:5B:D2:A0
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/6GV4_SfX1qtoJ04oiJspb89b0qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.8.160.0/19
Signature Algorithm: sha256WithRSAEncryption
2e:80:e9:29:a7:9e:d6:19:7c:06:84:fc:42:0b:9a:51:2d:28:
a5:1b:a8:0f:f4:fa:f5:95:75:6f:c3:0c:e4:d1:e8:9b:c7:a2:
10:36:63:f1:6f:5c:88:9f:85:47:d7:ca:25:7e:30:d8:94:52:
c2:44:dd:2d:f7:84:ae:1e:8d:dc:44:5d:ef:3b:dd:5d:11:e6:
10:dc:ef:75:7d:c5:ba:5a:a2:44:3f:d5:bc:6a:47:14:b5:56:
44:ab:d0:fb:b5:5b:39:f4:66:5a:78:5a:29:dc:a8:4a:34:27:
33:19:59:7d:93:53:62:2d:81:d9:a3:17:bb:63:48:fa:d6:f7:
f2:88:e4:7d:3d:aa:95:31:1f:a3:a5:cc:26:dc:25:eb:5d:d0:
33:a3:32:61:49:f0:eb:09:6f:04:18:bb:91:52:ff:56:27:11:
d2:5c:46:bd:ad:20:23:96:82:cc:98:74:57:37:94:a4:83:d3:
94:a1:60:fe:33:44:db:73:df:80:4c:9d:3b:9b:b1:d1:6d:62:
68:ec:4f:dd:80:5c:ae:bf:01:d9:cf:1f:0a:e5:2c:c2:9d:2b:
0a:fb:a9:01:96:64:e1:5b:30:73:71:6b:b9:24:cc:cc:e4:69:
74:55:66:66:e6:57:88:fa:5c:68:d4:43:ce:fc:9e:12:3c:cd:
4f:2d:4b:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2TUdKdW2GxjBGRts1VcF8eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5
MWQ0YTkwHhcNMjQwMjEwMTQwMDI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODY1NzhmZDI3ZDdkNmFiNjgyNzRlMjg4ODliMjk2ZmNmNWJkMmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWehuaemdR1cC6IJFVk9T6hQonvb
BU1HgQ16JLrfBWCEiuBVBWn2D8ZuEhUFIQ1pMB/7/ROtJRwEEKbyqeRslSrsNdcC
OhcPAUW/V17vIpAUKwjHMybimbNyXYODUg/xg7aJ6bZae3IoZOgck065wO+a4ktB
7724waY2k8HiEyD4/u4Q+wX28a3CEaw/UADFCyfkLNVNzmOhv8xKLo2AYUD3O0Gx
rU9Y1sT9QYmSspC9vs6HH8AntyrSutsDta/IxlZ8eMLU/i2HjYM/aJ9u+CUrKOpy
cRj2GrckKnueTnYTdl19UCXLdBR52UPOMczFmWiJJ83JXkavle5mzTGh2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOhleP0n19araCdOKIibKW/PW9KgMB8GA1UdIwQY
MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt
ZWI3YWFhNjgyOGJlLzEvNkdWNF9TZlgxcXRvSjA0b2lKc3BiODliMHFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl
LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFoQigMA0G
CSqGSIb3DQEBCwUAA4IBAQAugOkpp57WGXwGhPxCC5pRLSilG6gP9Pr1lXVvwwzk
0eibx6IQNmPxb1yIn4VH18olfjDYlFLCRN0t94SuHo3cRF3vO91dEeYQ3O91fcW6
WqJEP9W8akcUtVZEq9D7tVs59GZaeFop3KhKNCczGVl9k1NiLYHZoxe7Y0j61vfy
iOR9PaqVMR+jpcwm3CXrXdAzozJhSfDrCW8EGLuRUv9WJxHSXEa9rSAjloLMmHRX
N5Skg9OUoWD+M0Tbc9+ATJ07m7HRbWJo7E/dgFyuvwHZzx8K5SzCnSsK+6kBlmTh
WzBzcWu5JMzM5Gl0VWZm5leI+lxo1EPO/J4SPM1PLUvc
-----END CERTIFICATE-----
Generated at Sat Jun 8 10:23:21 2024 by rpki-client on console-ams.rpki-client.org