Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/bIJYqfv9IHGrQjyE4GgSllSv5g4.roa
File: bIJYqfv9IHGrQjyE4GgSllSv5g4.roa (raw, json)
Hash identifier: Hy1bWsaxQgBGP2wW8N3RM0L57jOzcCKdUzuUPIaS/wM=
Subject key identifier: 6C:82:58:A9:FB:FD:20:71:AB:42:3C:84:E0:68:12:96:54:AF:E6:0E
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 0191B2064C1D2DD68E2C42715D30330A176A
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/bIJYqfv9IHGrQjyE4GgSllSv5g4.roa
Signing time: Mon 02 Sep 2024 09:17:22 +0000
ROA not before: Mon 02 Sep 2024 09:17:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216361
IP address blocks: 185.244.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:06:4c:1d:2d:d6:8e:2c:42:71:5d:30:33:0a:17:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Sep 2 09:17:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c8258a9fbfd2071ab423c84e068129654afe60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c5:38:76:13:fb:9f:a1:b8:02:3c:78:fc:08:
38:a5:4e:9f:7f:64:97:6e:8b:63:d6:1f:0a:62:f1:
f1:c5:89:01:71:97:f7:00:77:ed:86:1c:22:8f:bf:
d1:06:4e:08:46:c0:7f:73:2c:3a:c4:0a:9f:8e:e2:
b8:6d:9b:08:f5:9f:0b:d9:3d:00:1b:a0:6f:43:e0:
68:5f:61:14:12:a0:65:98:55:29:90:d9:2e:6d:f7:
76:dd:8a:aa:be:87:b0:9c:04:6b:c0:12:af:39:1b:
bb:93:80:49:b9:c3:58:eb:f2:bf:47:5b:97:3d:56:
51:1c:50:a2:09:03:4b:0f:f9:ab:9d:75:90:ba:e9:
d2:6c:e1:62:12:9c:9c:34:9d:b0:33:0a:b7:ca:d4:
b4:64:78:ee:81:58:0b:1b:d8:3b:51:a4:de:94:9e:
1e:d7:b4:08:9f:56:49:96:bd:9c:02:28:a2:31:6c:
f8:fa:9a:91:58:94:2e:42:14:72:81:02:a9:81:aa:
92:df:30:42:66:d2:69:91:14:29:8b:a6:0f:5e:2c:
05:01:0e:1a:d2:71:84:d4:63:39:6b:76:16:4c:f5:
04:b4:65:e6:6a:86:70:90:1c:90:a7:9d:c0:dc:f8:
1e:47:97:db:59:6b:57:d9:38:94:e9:e8:dd:74:94:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:82:58:A9:FB:FD:20:71:AB:42:3C:84:E0:68:12:96:54:AF:E6:0E
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/bIJYqfv9IHGrQjyE4GgSllSv5g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.26.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:6d:e2:b0:60:8f:0b:61:ba:fb:3e:02:bf:37:5f:e7:14:e0:
e2:30:a0:11:f0:72:c2:78:a8:53:61:f7:2a:d6:bb:24:c3:4e:
39:14:d3:9a:95:ff:c2:cf:2e:18:84:e3:00:02:60:22:0d:07:
ff:e7:85:cd:9d:a5:b4:bb:60:9d:8c:3e:6e:9e:d1:6e:4c:72:
71:99:ea:89:76:ac:12:1a:2f:05:c5:3c:ee:d0:75:97:34:9f:
99:a8:88:62:0c:b1:1a:f5:a4:3d:ab:ce:e8:b4:ee:4b:77:93:
bb:ee:25:ca:f6:ae:fb:57:20:52:87:97:de:12:06:43:76:08:
28:45:ee:7e:63:e2:29:55:a9:53:14:01:87:1e:51:7a:37:f4:
09:04:90:d2:60:e8:bd:5e:18:c8:86:f2:08:06:b1:55:ba:d7:
7d:64:e1:d9:2a:fe:80:fa:30:4f:47:ee:c8:9c:fd:34:54:f7:
a2:21:69:e9:11:ef:f3:3a:8b:16:ff:85:5b:ce:3e:24:68:d1:
4b:67:ee:48:ee:b7:ac:79:66:b7:4e:6d:9c:72:8c:03:72:44:
85:10:f2:88:d3:e0:af:de:d2:e9:94:5f:39:c4:1f:94:b8:22:
d3:b6:8b:22:0c:c0:67:77:fc:6d:4f:70:9b:ba:32:32:14:ee:
6c:76:35:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGyBkwdLdaOLEJxXTAzChdqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi
Yjg2Y2UwHhcNMjQwOTAyMDkxNzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzgyNThhOWZiZmQyMDcxYWI0MjNjODRlMDY4MTI5NjU0YWZlNjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28U4dhP7n6G4Ajx4/Ag4pU6ff2SX
botj1h8KYvHxxYkBcZf3AHfthhwij7/RBk4IRsB/cyw6xAqfjuK4bZsI9Z8L2T0A
G6BvQ+BoX2EUEqBlmFUpkNkubfd23YqqvoewnARrwBKvORu7k4BJucNY6/K/R1uX
PVZRHFCiCQNLD/mrnXWQuunSbOFiEpycNJ2wMwq3ytS0ZHjugVgLG9g7UaTelJ4e
17QIn1ZJlr2cAiiiMWz4+pqRWJQuQhRygQKpgaqS3zBCZtJpkRQpi6YPXiwFAQ4a
0nGE1GM5a3YWTPUEtGXmaoZwkByQp53A3PgeR5fbWWtX2TiU6ejddJSKWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGyCWKn7/SBxq0I8hOBoEpZUr+YOMB8GA1UdIwQY
MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt
ZjljYjBhN2IyMDZjLzEvYklKWXFmdjlJSEdyUWp5RTRHZ1NsbFN2NWc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj
LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufQaMA0G
CSqGSIb3DQEBCwUAA4IBAQCxbeKwYI8LYbr7PgK/N1/nFODiMKAR8HLCeKhTYfcq
1rskw045FNOalf/Czy4YhOMAAmAiDQf/54XNnaW0u2CdjD5untFuTHJxmeqJdqwS
Gi8FxTzu0HWXNJ+ZqIhiDLEa9aQ9q87otO5Ld5O77iXK9q77VyBSh5feEgZDdggo
Re5+Y+IpValTFAGHHlF6N/QJBJDSYOi9XhjIhvIIBrFVutd9ZOHZKv6A+jBPR+7I
nP00VPeiIWnpEe/zOosW/4Vbzj4kaNFLZ+5I7reseWa3Tm2ccowDckSFEPKI0+Cv
3tLplF85xB+UuCLTtosiDMBnd/xtT3CbujIyFO5sdjUh
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:30:32 2024 by rpki-client on console-fra.rpki-client.org