Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/bdPXIU3yX7KswZUTNRLfwt2T3pI.roa
File: bdPXIU3yX7KswZUTNRLfwt2T3pI.roa (raw, json)
Hash identifier: axhabltBlV7/lwnxJo7BhwUji+NGwMn6SxsaW2o2A8U=
Subject key identifier: 6D:D3:D7:21:4D:F2:5F:B2:AC:C1:95:13:35:12:DF:C2:DD:93:DE:92
Certificate issuer: /CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Certificate serial: 018CC8DFAB939B2E1CE60DA8F076A064C3D4
Authority key identifier: E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/bdPXIU3yX7KswZUTNRLfwt2T3pI.roa
Signing time: Tue 02 Jan 2024 06:32:30 +0000
ROA not before: Tue 02 Jan 2024 06:32:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26506
IP address blocks: 78.89.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:ab:93:9b:2e:1c:e6:0d:a8:f0:76:a0:64:c3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Validity
Not Before: Jan 2 06:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6dd3d7214df25fb2acc195133512dfc2dd93de92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ef:3e:9c:5c:67:90:85:3a:28:68:45:a2:b0:
00:e6:e0:98:87:b3:79:32:52:83:e3:25:cb:56:7a:
9c:ba:8a:ea:af:11:19:87:c4:11:de:f4:9e:71:fb:
41:1a:b6:d7:df:84:33:95:ad:c8:47:47:c0:99:70:
a4:84:64:c0:3a:e5:a0:67:3c:c0:e5:55:f3:f8:1f:
0f:6f:17:7e:04:bc:23:a8:1d:f8:6d:cd:4f:40:ad:
d0:f4:b9:75:90:4f:9e:52:8b:dc:5d:b2:7a:03:a8:
ac:61:50:22:fc:82:4e:4c:c6:c6:9c:48:0b:36:91:
84:4d:8b:bd:2f:b4:51:f5:e9:3f:ba:9d:59:32:1e:
14:dc:38:5e:cd:0c:b7:91:10:43:5c:7f:b1:a6:22:
72:73:c7:06:7a:ef:21:5c:6b:e4:12:af:39:6b:43:
09:0e:e0:fe:49:15:45:c6:45:94:83:b0:40:29:07:
8d:32:d0:23:bc:d6:79:24:0c:47:f1:4b:e0:16:ff:
73:23:19:84:36:63:a4:ab:a9:37:17:d1:ce:07:a9:
62:4e:61:41:cf:8a:79:c7:a6:16:db:e0:34:d8:f9:
56:45:98:dd:f8:ac:d4:b7:e3:74:e5:82:49:f6:34:
d0:71:df:29:dc:8f:1a:ed:5c:c1:54:ca:65:c4:e2:
a0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D3:D7:21:4D:F2:5F:B2:AC:C1:95:13:35:12:DF:C2:DD:93:DE:92
X509v3 Authority Key Identifier:
keyid:E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/bdPXIU3yX7KswZUTNRLfwt2T3pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.89.148.0/24
Signature Algorithm: sha256WithRSAEncryption
65:90:28:f1:0c:0c:f7:f6:13:e0:db:d3:68:1f:c5:49:d1:35:
0a:0c:6b:60:33:f2:31:35:d5:24:5e:fa:d7:b2:d4:7a:31:28:
76:74:97:15:38:fe:3c:42:62:4e:06:a2:93:43:3d:96:65:c3:
a1:ff:f8:8a:46:a4:e9:60:3d:03:9d:6e:2a:68:91:c2:ef:c8:
c9:8e:85:e4:ee:5d:53:47:d0:f6:4f:fe:93:80:62:61:55:9a:
9b:66:69:48:b2:df:57:02:62:6e:57:34:4e:4f:01:00:97:24:
f5:71:5b:26:97:20:9c:d0:07:a4:45:af:c7:8e:d8:d2:02:9e:
f8:e8:77:c2:4a:4a:12:0e:e3:50:c9:da:fe:cc:eb:77:be:42:
d0:b1:6b:4c:85:45:af:09:5a:4c:5d:41:cc:78:63:a8:90:c5:
a8:a6:16:1a:eb:9d:43:a9:58:90:14:30:65:ef:e8:3f:e1:e7:
ee:54:0b:0f:22:26:fa:ac:1b:d7:4c:32:aa:12:5e:5d:9d:b0:
9f:18:57:bf:b8:59:33:69:f5:ef:1b:11:94:2f:d6:45:a0:5e:
0e:59:18:51:0c:19:38:30:64:73:68:83:f6:77:ca:e1:87:f1:
7f:cd:4c:46:df:6b:3b:15:9b:93:ca:f4:14:56:c6:f7:91:c4:
83:d5:bc:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI36uTmy4c5g2o8HagZMPUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NjM2YWI4MWEzNDNhOWZmZDgyNTdlYWNiMWRkZWM1Mzg5
NjY4MDQwHhcNMjQwMTAyMDYzMjMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGQzZDcyMTRkZjI1ZmIyYWNjMTk1MTMzNTEyZGZjMmRkOTNkZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu8+nFxnkIU6KGhForAA5uCYh7N5
MlKD4yXLVnqcuorqrxEZh8QR3vSecftBGrbX34Qzla3IR0fAmXCkhGTAOuWgZzzA
5VXz+B8Pbxd+BLwjqB34bc1PQK3Q9Ll1kE+eUovcXbJ6A6isYVAi/IJOTMbGnEgL
NpGETYu9L7RR9ek/up1ZMh4U3DhezQy3kRBDXH+xpiJyc8cGeu8hXGvkEq85a0MJ
DuD+SRVFxkWUg7BAKQeNMtAjvNZ5JAxH8UvgFv9zIxmENmOkq6k3F9HOB6liTmFB
z4p5x6YW2+A02PlWRZjd+KzUt+N05YJJ9jTQcd8p3I8a7VzBVMplxOKgLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG3T1yFN8l+yrMGVEzUS38Ldk96SMB8GA1UdIwQY
MBaAFOZjargaNDqf/YJX6ssd3sU4lmgEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW1OcXVCbzBPcF85Z2xmcXl4M2V4VGlXYUFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xNDU1ZDItNzI0YS00MzllLTk2ZWQt
OTg3NmFlYmJkMmM5LzEvYmRQWElVM3lYN0tzd1pVVE5STGZ3dDJUM3BJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8xNDU1ZDItNzI0YS00MzllLTk2ZWQtOTg3NmFlYmJkMmM5
LzEvNW1OcXVCbzBPcF85Z2xmcXl4M2V4VGlXYUFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATlmUMA0G
CSqGSIb3DQEBCwUAA4IBAQBlkCjxDAz39hPg29NoH8VJ0TUKDGtgM/IxNdUkXvrX
stR6MSh2dJcVOP48QmJOBqKTQz2WZcOh//iKRqTpYD0DnW4qaJHC78jJjoXk7l1T
R9D2T/6TgGJhVZqbZmlIst9XAmJuVzROTwEAlyT1cVsmlyCc0AekRa/HjtjSAp74
6HfCSkoSDuNQydr+zOt3vkLQsWtMhUWvCVpMXUHMeGOokMWophYa651DqViQFDBl
7+g/4efuVAsPIib6rBvXTDKqEl5dnbCfGFe/uFkzafXvGxGUL9ZFoF4OWRhRDBk4
MGRzaIP2d8rhh/F/zUxG32s7FZuTyvQUVsb3kcSD1bzS
-----END CERTIFICATE-----
Generated at Tue May 21 23:22:07 2024 by rpki-client on console-ams.rpki-client.org