Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/hT1sVyYFXdVY6uulwsgUVuvdTFA.roa
File: hT1sVyYFXdVY6uulwsgUVuvdTFA.roa (raw, json)
Hash identifier: unRZXbiQugdeK3oUiz6LMdlkiXolsXlbVafp5hBgjnk=
Subject key identifier: 85:3D:6C:57:26:05:5D:D5:58:EA:EB:A5:C2:C8:14:56:EB:DD:4C:50
Certificate issuer: /CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b
Certificate serial: 018CE92CDD8AF70C8708F4CFC567D156445A
Authority key identifier: 58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/hT1sVyYFXdVY6uulwsgUVuvdTFA.roa
Signing time: Mon 08 Jan 2024 13:04:40 +0000
ROA not before: Mon 08 Jan 2024 13:04:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213251
IP address blocks: 2a0b:bbc0:1c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 19:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:2c:dd:8a:f7:0c:87:08:f4:cf:c5:67:d1:56:44:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b
Validity
Not Before: Jan 8 13:04:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=853d6c5726055dd558eaeba5c2c81456ebdd4c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:52:68:f3:eb:fa:76:86:9b:bb:8c:0b:fe:1f:
d2:85:56:c9:00:64:2e:2c:91:bf:59:be:40:03:e4:
44:07:c9:d2:63:15:73:a8:1c:51:01:4f:b0:40:cb:
19:eb:d0:6b:1e:32:21:3a:8c:fd:4a:4b:4e:20:52:
2f:d3:9a:3e:e7:5d:ba:2b:39:c0:5f:e3:e5:2c:48:
7d:0c:6e:e5:be:f0:d7:f3:db:33:a4:df:5b:21:4e:
e6:2c:78:02:7f:36:6e:26:b9:b7:1e:93:71:e5:8f:
e2:c2:c1:14:11:06:72:93:ff:cc:45:d9:95:6a:36:
6a:09:6b:d1:ab:8f:f8:bb:92:19:92:7b:73:07:40:
a0:74:69:a8:24:c0:e2:0f:54:85:a3:e1:44:5c:9e:
9b:0d:db:f3:a9:b9:f0:87:db:da:2d:46:f8:eb:c7:
1a:0b:a7:55:e1:b9:fc:84:81:1c:9e:c0:27:97:8e:
03:db:6a:54:19:c0:ef:01:96:e7:c7:45:28:08:eb:
18:3a:24:a9:d9:74:44:a1:c5:b1:86:b0:25:f3:6e:
e6:29:27:5c:97:26:23:67:e2:4c:17:d0:23:9b:4e:
45:cb:56:6c:44:59:be:6a:3c:ad:ba:e6:f0:24:70:
54:8b:c3:d6:c8:79:8e:67:5d:b5:57:9f:a0:e5:7e:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3D:6C:57:26:05:5D:D5:58:EA:EB:A5:C2:C8:14:56:EB:DD:4C:50
X509v3 Authority Key Identifier:
keyid:58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/hT1sVyYFXdVY6uulwsgUVuvdTFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:bbc0:1c00::/40
Signature Algorithm: sha256WithRSAEncryption
ae:3a:ce:64:c8:70:83:92:a8:29:d0:6c:bd:2f:a5:c7:bb:0f:
ec:98:19:0c:0c:0e:13:46:fc:dd:ca:a3:f2:74:24:22:94:c2:
dd:3c:97:99:c0:3f:cf:dc:10:3e:76:0d:71:ac:29:5c:41:55:
f2:d0:5a:ad:22:66:30:85:10:60:4d:a5:d0:9f:b0:42:f3:34:
31:c2:a0:d6:63:14:1a:51:86:dd:44:74:48:60:01:5a:ec:a7:
76:d9:1a:6f:d6:6c:cb:f3:13:f3:cd:ff:d3:a3:93:bc:e2:9c:
c6:fa:e2:5e:9e:09:1d:02:80:22:20:07:47:f3:27:f6:a8:48:
97:b4:96:7a:57:54:e4:53:aa:cd:3e:da:0c:2c:69:00:05:eb:
ae:aa:89:3e:34:87:72:1e:67:20:f6:45:8f:10:9b:4a:8b:94:
14:6f:48:38:4e:05:82:88:88:94:e7:64:5c:2c:fd:0e:81:6c:
51:7b:e9:e4:7b:0d:1b:e6:93:fb:66:62:a0:23:18:03:a7:37:
5d:4e:81:17:da:c9:20:3a:85:e2:8c:e0:7b:f5:86:3c:49:80:
b4:b2:24:ce:ca:58:81:97:ad:15:6c:28:cc:67:a1:2c:5f:de:
1c:66:83:d4:9b:03:7e:46:d7:a7:61:1c:a7:0d:f5:f3:81:f6:
69:ab:8a:ff
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzpLN2K9wyHCPTPxWfRVkRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZmZhMTRkZjJhODljYjY3MDk2MzZmMmIwYjU3MGFiY2Nm
OGI4NGIwHhcNMjQwMTA4MTMwNDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTNkNmM1NzI2MDU1ZGQ1NThlYWViYTVjMmM4MTQ1NmViZGQ0YzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFJo8+v6doabu4wL/h/ShVbJAGQu
LJG/Wb5AA+REB8nSYxVzqBxRAU+wQMsZ69BrHjIhOoz9SktOIFIv05o+5126KznA
X+PlLEh9DG7lvvDX89szpN9bIU7mLHgCfzZuJrm3HpNx5Y/iwsEUEQZyk//MRdmV
ajZqCWvRq4/4u5IZkntzB0CgdGmoJMDiD1SFo+FEXJ6bDdvzqbnwh9vaLUb468ca
C6dV4bn8hIEcnsAnl44D22pUGcDvAZbnx0UoCOsYOiSp2XREocWxhrAl827mKSdc
lyYjZ+JMF9Ajm05Fy1ZsRFm+ajytuubwJHBUi8PWyHmOZ121V5+g5X6DlQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFIU9bFcmBV3VWOrrpcLIFFbr3UxQMB8GA1UdIwQY
MBaAFFj/oU3yqJy2cJY28rC1cKvM+LhLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1AtaFRmS29uTFp3bGpieXNMVndxOHo0dUVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wYjA2YmMtYjhjNy00Zjc1LWIyOWUt
YzEwN2E3YWMwNDg4LzEvaFQxc1Z5WUZYZFZZNnV1bHdzZ1VWdXZkVEZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wYjA2YmMtYjhjNy00Zjc1LWIyOWUtYzEwN2E3YWMwNDg4
LzEvV1AtaFRmS29uTFp3bGpieXNMVndxOHo0dUVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgu7wBww
DQYJKoZIhvcNAQELBQADggEBAK46zmTIcIOSqCnQbL0vpce7D+yYGQwMDhNG/N3K
o/J0JCKUwt08l5nAP8/cED52DXGsKVxBVfLQWq0iZjCFEGBNpdCfsELzNDHCoNZj
FBpRht1EdEhgAVrsp3bZGm/WbMvzE/PN/9Ojk7zinMb64l6eCR0CgCIgB0fzJ/ao
SJe0lnpXVORTqs0+2gwsaQAF666qiT40h3IeZyD2RY8Qm0qLlBRvSDhOBYKIiJTn
ZFws/Q6BbFF76eR7DRvmk/tmYqAjGAOnN11OgRfaySA6heKM4Hv1hjxJgLSyJM7K
WIGXrRVsKMxnoSxf3hxmg9SbA35G16dhHKcN9fOB9mmriv8=
-----END CERTIFICATE-----
Generated at Fri Jun 21 03:39:12 2024 by rpki-client on console-ams.rpki-client.org