Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/hTPX0wueltyAuOUE-mUMlpUU5hs.roa
File: hTPX0wueltyAuOUE-mUMlpUU5hs.roa (raw, json)
Hash identifier: 5veCrDVfQmcZpw+3H03nX6okbEW3rLXK5nAbfuV9Ijs=
Subject key identifier: 85:33:D7:D3:0B:9E:96:DC:80:B8:E5:04:FA:65:0C:96:95:14:E6:1B
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 018E61916F89D2354AA1886AB9CCFDF1FB46
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/hTPX0wueltyAuOUE-mUMlpUU5hs.roa
Signing time: Thu 21 Mar 2024 15:11:44 +0000
ROA not before: Thu 21 Mar 2024 15:11:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 46.226.160.0/21 maxlen: 32
89.169.52.0/22 maxlen: 32
92.246.136.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:91:6f:89:d2:35:4a:a1:88:6a:b9:cc:fd:f1:fb:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Mar 21 15:11:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8533d7d30b9e96dc80b8e504fa650c969514e61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:71:7f:38:2a:6e:5f:f4:24:3a:6c:07:19:
7b:14:46:17:d9:44:fd:a0:66:f3:b9:22:9f:19:7a:
0b:1c:6a:91:da:6c:5b:e1:f2:fa:cc:3b:34:16:92:
ed:e3:ff:49:26:36:75:a9:9a:21:b0:b4:0c:46:06:
34:27:b5:5b:57:08:da:3a:ef:a8:f4:0e:d1:89:bc:
a5:e8:b2:c9:47:97:7e:b6:c5:98:43:3a:1b:65:51:
6d:89:57:0e:1c:72:4a:27:f0:6c:52:16:63:cd:ec:
82:cf:53:3c:7d:ae:a4:4e:f5:6a:b2:7c:13:1b:94:
40:97:7b:11:d3:70:3e:47:68:ed:f6:34:84:a7:43:
4e:8c:1f:5e:18:66:19:e8:2e:c0:2f:39:a6:90:46:
51:5b:7f:95:4e:0e:94:bf:c3:d6:75:0b:92:aa:18:
ab:c5:d6:5d:72:40:0a:16:8c:58:20:ff:65:28:50:
3d:a0:72:e8:aa:7f:a0:79:ec:44:f1:08:f7:db:75:
67:9e:75:ac:1e:7c:50:c3:a0:bc:ca:bb:48:0e:33:
c3:e4:5a:a2:e0:19:ed:10:ef:fe:50:ed:6f:0c:b5:
76:f8:8d:cb:6c:7f:dd:79:65:f4:36:2a:f4:4d:f3:
ef:d6:f0:b7:a4:cc:10:73:3b:58:1c:25:a0:9f:ba:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:33:D7:D3:0B:9E:96:DC:80:B8:E5:04:FA:65:0C:96:95:14:E6:1B
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/hTPX0wueltyAuOUE-mUMlpUU5hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.160.0/21
89.169.52.0/22
92.246.136.0/22
Signature Algorithm: sha256WithRSAEncryption
79:7f:8b:b8:8d:5b:eb:57:28:13:8d:10:76:ef:8e:4f:23:98:
68:c8:56:db:4c:5f:d3:e4:85:bb:e2:03:a0:a2:63:97:ef:2a:
e2:65:85:34:3c:bd:32:b0:d9:e1:96:d4:01:41:af:5a:8b:7c:
fb:4f:91:19:f2:fe:1d:4d:9b:7d:5e:57:fb:20:79:71:cb:e5:
10:3b:8b:91:fd:5e:73:38:83:a0:6c:b1:31:a0:06:77:20:56:
9a:36:da:4c:12:dd:89:67:8a:89:b9:60:62:79:7c:ec:91:68:
d6:38:31:7f:a7:b4:78:bc:55:22:06:58:e1:89:db:f3:24:98:
b5:4b:fa:7c:2d:b3:8b:61:ee:35:a7:6e:64:87:e8:d5:9d:49:
2d:8f:c5:52:b9:b6:3c:45:04:92:d7:c0:f5:18:f9:f7:c0:f0:
a5:70:29:6d:04:53:d9:d6:85:88:dc:0c:e7:7b:cc:8c:af:d9:
8f:30:77:c4:ee:a3:dd:fd:06:47:f2:5c:03:4f:a1:21:67:58:
0f:ed:98:d1:2e:53:b4:a4:e9:e4:fb:1d:06:97:7a:91:69:fb:
e6:17:1e:e8:44:7a:8a:c0:9a:73:2a:c8:87:51:fa:39:c0:18:
e3:95:a6:70:06:f7:1d:f4:09:03:d9:2e:39:bd:e3:bd:a6:28:
12:0a:7a:8d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY5hkW+J0jVKoYhqucz98ftGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5
M2NiZWEwHhcNMjQwMzIxMTUxMTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTMzZDdkMzBiOWU5NmRjODBiOGU1MDRmYTY1MGM5Njk1MTRlNjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkVxfzgqbl/0JDpsBxl7FEYX2UT9
oGbzuSKfGXoLHGqR2mxb4fL6zDs0FpLt4/9JJjZ1qZohsLQMRgY0J7VbVwjaOu+o
9A7Ribyl6LLJR5d+tsWYQzobZVFtiVcOHHJKJ/BsUhZjzeyCz1M8fa6kTvVqsnwT
G5RAl3sR03A+R2jt9jSEp0NOjB9eGGYZ6C7ALzmmkEZRW3+VTg6Uv8PWdQuSqhir
xdZdckAKFoxYIP9lKFA9oHLoqn+geexE8Qj323VnnnWsHnxQw6C8yrtIDjPD5Fqi
4BntEO/+UO1vDLV2+I3LbH/deWX0Nir0TfPv1vC3pMwQcztYHCWgn7pHvwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIUz19MLnpbcgLjlBPplDJaVFOYbMB8GA1UdIwQY
MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt
ZGJmOWQ0MWYxNzk4LzEvaFRQWDB3dWVsdHlBdU9VRS1tVU1scFVVNWhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4
LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDLuKgAwQC
Wak0AwQCXPaIMA0GCSqGSIb3DQEBCwUAA4IBAQB5f4u4jVvrVygTjRB2745PI5ho
yFbbTF/T5IW74gOgomOX7yriZYU0PL0ysNnhltQBQa9ai3z7T5EZ8v4dTZt9Xlf7
IHlxy+UQO4uR/V5zOIOgbLExoAZ3IFaaNtpMEt2JZ4qJuWBieXzskWjWODF/p7R4
vFUiBljhidvzJJi1S/p8LbOLYe41p25kh+jVnUktj8VSubY8RQSS18D1GPn3wPCl
cCltBFPZ1oWI3Azne8yMr9mPMHfE7qPd/QZH8lwDT6EhZ1gP7ZjRLlO0pOnk+x0G
l3qRafvmFx7oRHqKwJpzKsiHUfo5wBjjlaZwBvcd9AkD2S45veO9pigSCnqN
-----END CERTIFICATE-----
Generated at Thu May 30 08:52:30 2024 by rpki-client on console-ams.rpki-client.org