Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/HTXzRkTZNPif_ktc0GNXgQAszVU.roa
File: HTXzRkTZNPif_ktc0GNXgQAszVU.roa (raw, json)
Hash identifier: JYdPIIU/LkqK+7zCdjlOjS+EqmvSK7vAdfpygdrU20g=
Subject key identifier: 1D:35:F3:46:44:D9:34:F8:9F:FE:4B:5C:D0:63:57:81:00:2C:CD:55
Certificate issuer: /CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Certificate serial: 018CC56EAC2DB5327C58F4D774AE06D543F4
Authority key identifier: 73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/HTXzRkTZNPif_ktc0GNXgQAszVU.roa
Signing time: Mon 01 Jan 2024 14:30:13 +0000
ROA not before: Mon 01 Jan 2024 14:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49348
IP address blocks: 185.86.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ac:2d:b5:32:7c:58:f4:d7:74:ae:06:d5:43:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Validity
Not Before: Jan 1 14:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d35f34644d934f89ffe4b5cd0635781002ccd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7d:82:91:e9:3d:14:41:ff:8f:be:33:a0:c1:
6f:e9:92:74:dd:ae:06:59:f5:85:6a:63:83:25:1e:
69:0a:e3:09:87:7e:0c:5e:2a:c9:aa:ff:ae:dd:19:
ed:48:11:f3:d3:e3:36:29:47:de:90:bf:7b:c0:ce:
5e:f7:fc:57:aa:a1:df:63:21:05:17:c6:61:7b:dc:
41:15:62:13:37:72:2b:4b:6a:e7:ce:7c:a5:e6:bc:
6c:10:61:2d:ac:3a:73:d0:93:71:2f:c4:68:28:4a:
d2:10:26:a6:d5:f5:b0:59:72:10:0f:f3:40:26:fb:
47:0e:51:0e:b6:46:e5:de:9c:84:21:aa:79:6f:23:
1b:dd:a9:ff:ee:38:af:10:79:00:65:c0:6d:45:fa:
7b:45:a2:71:cd:24:0e:e3:51:36:b0:53:00:cb:2a:
54:a7:5b:3c:4e:69:50:28:c1:b8:58:ef:cc:14:5e:
9e:08:49:c1:74:4c:c9:26:fc:37:85:c8:47:48:49:
38:9f:ab:93:b2:3e:86:3c:c2:b8:ee:28:c8:a7:ef:
53:8e:15:3f:0c:51:a9:35:2e:38:5a:7b:41:5e:12:
31:db:fa:b9:ef:56:f5:cd:fe:fd:4a:9f:7d:7a:12:
47:03:9f:3e:d5:2e:dc:c1:af:01:fd:6b:88:2f:71:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:35:F3:46:44:D9:34:F8:9F:FE:4B:5C:D0:63:57:81:00:2C:CD:55
X509v3 Authority Key Identifier:
keyid:73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/HTXzRkTZNPif_ktc0GNXgQAszVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.228.0/23
Signature Algorithm: sha256WithRSAEncryption
65:7a:8a:97:36:08:13:ed:c1:e8:e0:1e:b3:21:71:80:84:59:
85:75:ab:fd:21:c7:e8:55:7a:62:a4:ff:3e:18:53:f7:05:17:
cd:b4:85:ee:77:c1:83:d7:d5:81:bd:7b:2b:c4:4d:bd:76:c5:
03:6e:48:5b:dd:12:e0:05:9d:25:66:76:a2:d9:f7:04:b1:fe:
77:e0:77:9e:69:26:fc:91:6e:35:16:f8:75:6e:86:af:f4:7b:
62:f1:59:a5:28:f2:9d:06:50:f0:91:fe:53:46:3a:43:94:75:
ed:12:67:94:e1:b8:a4:fe:72:65:03:f7:4c:6f:29:2f:03:23:
ac:da:ac:8d:31:fb:ea:6b:1d:7e:4c:da:f5:18:72:27:e4:8d:
83:21:ee:ad:fd:41:a5:ef:32:7a:ce:64:5f:d5:04:60:a1:ed:
8c:04:34:fa:6f:7c:96:a7:d6:bf:e4:e2:c3:9f:10:fc:56:72:
87:f8:df:58:a8:ab:6f:90:30:8a:16:72:23:a2:da:4e:27:88:
58:22:43:a4:9a:c8:09:5c:b8:aa:83:1a:cd:3b:f0:ca:16:78:
8e:51:e9:f8:cd:9e:bb:1b:03:00:7f:57:ea:3e:a8:99:3c:d2:
c6:ac:95:6c:63:87:e6:36:c7:60:bb:16:bf:e1:fa:b5:6a:29:
61:45:5c:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbqwttTJ8WPTXdK4G1UP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczOTc1ZDVkYTlkYThhMDc0YjMzZmJjYjVjMDlkNTAzYTNi
NDQzYTEwHhcNMjQwMTAxMTQzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDM1ZjM0NjQ0ZDkzNGY4OWZmZTRiNWNkMDYzNTc4MTAwMmNjZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg32Ckek9FEH/j74zoMFv6ZJ03a4G
WfWFamODJR5pCuMJh34MXirJqv+u3RntSBHz0+M2KUfekL97wM5e9/xXqqHfYyEF
F8Zhe9xBFWITN3IrS2rnznyl5rxsEGEtrDpz0JNxL8RoKErSECam1fWwWXIQD/NA
JvtHDlEOtkbl3pyEIap5byMb3an/7jivEHkAZcBtRfp7RaJxzSQO41E2sFMAyypU
p1s8TmlQKMG4WO/MFF6eCEnBdEzJJvw3hchHSEk4n6uTsj6GPMK47ijIp+9TjhU/
DFGpNS44WntBXhIx2/q571b1zf79Sp99ehJHA58+1S7cwa8B/WuIL3Hr0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB0180ZE2TT4n/5LXNBjV4EALM1VMB8GA1UdIwQY
MBaAFHOXXV2p2ooHSzP7y1wJ1QOjtEOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzVkZFhhbmFpZ2RMTV92TFhBblZBNk8wUTZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mMDE3MmUtNjljMi00MjJmLTgyOTYt
OWU4MGQwZDg3YzJkLzEvSFRYelJrVFpOUGlmX2t0YzBHTlhnUUFzelZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9mMDE3MmUtNjljMi00MjJmLTgyOTYtOWU4MGQwZDg3YzJk
LzEvYzVkZFhhbmFpZ2RMTV92TFhBblZBNk8wUTZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuVbkMA0G
CSqGSIb3DQEBCwUAA4IBAQBleoqXNggT7cHo4B6zIXGAhFmFdav9IcfoVXpipP8+
GFP3BRfNtIXud8GD19WBvXsrxE29dsUDbkhb3RLgBZ0lZnai2fcEsf534HeeaSb8
kW41Fvh1boav9Hti8VmlKPKdBlDwkf5TRjpDlHXtEmeU4bik/nJlA/dMbykvAyOs
2qyNMfvqax1+TNr1GHIn5I2DIe6t/UGl7zJ6zmRf1QRgoe2MBDT6b3yWp9a/5OLD
nxD8VnKH+N9YqKtvkDCKFnIjotpOJ4hYIkOkmsgJXLiqgxrNO/DKFniOUen4zZ67
GwMAf1fqPqiZPNLGrJVsY4fmNsdguxa/4fq1ailhRVw9
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:03:57 2024 by rpki-client on console-ams.rpki-client.org