Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/bDHnN1ewGBDOb1NpqCuc5yx9Qgc.roa
File: bDHnN1ewGBDOb1NpqCuc5yx9Qgc.roa (raw, json)
Hash identifier: 0/qh9xJ9CnUJxUn7raKHV5tmfGcjGYb5Z3I7zfWZGX8=
Subject key identifier: 6C:31:E7:37:57:B0:18:10:CE:6F:53:69:A8:2B:9C:E7:2C:7D:42:07
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 018CC79468944A4406DE2B884519C700B85D
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/bDHnN1ewGBDOb1NpqCuc5yx9Qgc.roa
Signing time: Tue 02 Jan 2024 00:30:41 +0000
ROA not before: Tue 02 Jan 2024 00:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2856
IP address blocks: 170.246.64.0/22 maxlen: 24
185.102.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 19:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:68:94:4a:44:06:de:2b:88:45:19:c7:00:b8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 2 00:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c31e73757b01810ce6f5369a82b9ce72c7d4207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:67:38:f3:78:a4:e0:cd:e2:82:9e:5a:21:
97:c8:83:59:e3:7b:9e:06:90:70:c1:1a:7c:3e:b4:
b3:4d:cb:f6:a5:e6:14:bf:9b:93:5a:0d:f9:42:00:
b7:e2:72:6e:6a:3e:c6:8b:a5:e6:19:63:c8:d8:f0:
1f:2b:67:c8:82:bd:41:1e:ff:52:1c:d8:f5:a2:08:
4e:ff:c5:34:72:cf:99:06:43:ad:c1:25:78:29:01:
f5:ea:c7:73:e2:a0:cf:e8:90:a9:fd:ce:fe:fc:d6:
a8:df:d9:d5:f5:6e:e8:c0:ca:dc:fa:5b:86:77:69:
40:46:d1:cf:cb:19:69:5b:09:47:75:ac:75:3d:76:
d5:cd:49:40:e7:d9:b3:e8:ad:9d:49:e5:8d:d6:e9:
ea:1a:40:f1:ac:3f:4e:60:c5:41:dd:74:ae:de:0b:
3e:c3:f1:55:a1:cf:6a:82:40:48:9f:10:8a:d9:f0:
14:b1:4d:0b:7d:09:e0:6a:f4:ed:4d:c7:11:9a:73:
3e:6e:88:91:3b:b5:f4:a4:a0:08:6f:70:61:5c:6c:
8d:c6:ce:29:0b:26:f3:ea:f2:76:86:4f:c4:0d:61:
f2:58:16:92:dc:9a:d6:f8:d1:5c:49:4f:14:92:d1:
6c:bf:0d:83:f8:9e:bc:cd:7b:10:7c:da:37:29:f1:
81:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:31:E7:37:57:B0:18:10:CE:6F:53:69:A8:2B:9C:E7:2C:7D:42:07
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/bDHnN1ewGBDOb1NpqCuc5yx9Qgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.64.0/22
185.102.4.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:53:f4:b5:28:0b:cf:d7:19:5d:24:5e:55:16:27:da:42:f6:
2d:39:6b:e6:65:25:a0:9e:c7:af:f5:9e:fe:b9:42:2c:cc:72:
4f:3d:40:e9:29:bf:8c:ff:fb:c3:7c:3e:7c:bc:2c:ae:ac:aa:
95:29:27:33:ed:e4:ce:aa:f3:f3:6e:d2:28:9d:78:10:39:e6:
99:6d:89:df:04:00:9e:6d:e6:b0:cc:f2:0a:9f:de:bc:92:74:
1d:c7:52:b7:6d:bf:6b:ae:50:c3:19:d3:97:d4:d2:92:0e:9b:
cf:a2:85:1c:cd:fa:54:08:a8:68:49:2f:4c:07:99:18:db:f7:
19:d6:4e:62:b8:55:12:e0:f6:4a:38:1e:96:c0:48:de:24:fe:
ef:ae:9b:cc:4f:97:ef:a3:b4:19:9a:d6:ff:53:07:fe:71:5a:
46:07:c3:84:93:64:5b:db:89:42:f6:12:ce:ba:2d:cb:18:4f:
c0:7f:97:97:bf:c9:47:5f:39:49:ca:e6:82:6f:bd:57:8a:ea:
ab:33:18:be:ec:1f:1e:58:15:6f:00:00:63:3a:12:c5:94:15:
4b:68:bd:a3:4d:7a:94:de:af:ec:be:f3:67:95:82:7a:08:90:
1f:18:62:df:32:40:31:4b:2d:16:66:7a:19:b6:d4:4a:79:ae:
b5:35:b6:2f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHlGiUSkQG3iuIRRnHALhdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4
ODE3ZDgwHhcNMjQwMTAyMDAzMDQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzMxZTczNzU3YjAxODEwY2U2ZjUzNjlhODJiOWNlNzJjN2Q0MjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx19nOPN4pODN4oKeWiGXyINZ43ue
BpBwwRp8PrSzTcv2peYUv5uTWg35QgC34nJuaj7Gi6XmGWPI2PAfK2fIgr1BHv9S
HNj1oghO/8U0cs+ZBkOtwSV4KQH16sdz4qDP6JCp/c7+/Nao39nV9W7owMrc+luG
d2lARtHPyxlpWwlHdax1PXbVzUlA59mz6K2dSeWN1unqGkDxrD9OYMVB3XSu3gs+
w/FVoc9qgkBInxCK2fAUsU0LfQngavTtTccRmnM+boiRO7X0pKAIb3BhXGyNxs4p
Cybz6vJ2hk/EDWHyWBaS3JrW+NFcSU8UktFsvw2D+J68zXsQfNo3KfGB7wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGwx5zdXsBgQzm9TaagrnOcsfUIHMB8GA1UdIwQY
MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt
MmQxOTE4YmExYzBlLzEvYkRIbk4xZXdHQkRPYjFOcHFDdWM1eXg5UWdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl
LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCqvZAAwQC
uWYEMA0GCSqGSIb3DQEBCwUAA4IBAQCmU/S1KAvP1xldJF5VFifaQvYtOWvmZSWg
nsev9Z7+uUIszHJPPUDpKb+M//vDfD58vCyurKqVKScz7eTOqvPzbtIonXgQOeaZ
bYnfBACebeawzPIKn968knQdx1K3bb9rrlDDGdOX1NKSDpvPooUczfpUCKhoSS9M
B5kY2/cZ1k5iuFUS4PZKOB6WwEjeJP7vrpvMT5fvo7QZmtb/Uwf+cVpGB8OEk2Rb
24lC9hLOui3LGE/Af5eXv8lHXzlJyuaCb71XiuqrMxi+7B8eWBVvAABjOhLFlBVL
aL2jTXqU3q/svvNnlYJ6CJAfGGLfMkAxSy0WZnoZttRKea61NbYv
-----END CERTIFICATE-----
Generated at Sat May 4 00:37:11 2024 by rpki-client on console-fra.rpki-client.org