Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/bCjYzOlZfBwagYUgscXvbd6c0i0.roa
File: bCjYzOlZfBwagYUgscXvbd6c0i0.roa (raw, json)
Hash identifier: IlZ9xfBK9k7Zgb/1Q0+KY73nnARUVI1GXiZ1eXnmLxM=
Subject key identifier: 6C:28:D8:CC:E9:59:7C:1C:1A:81:85:20:B1:C5:EF:6D:DE:9C:D2:2D
Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Certificate serial: 018E186F25F6F35FE744536806728D3C104D
Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/bCjYzOlZfBwagYUgscXvbd6c0i0.roa
Signing time: Thu 07 Mar 2024 10:22:01 +0000
ROA not before: Thu 07 Mar 2024 10:22:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202790
IP address blocks: 146.19.201.0/24 maxlen: 24
185.152.124.0/22 maxlen: 24
212.18.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:6f:25:f6:f3:5f:e7:44:53:68:06:72:8d:3c:10:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Validity
Not Before: Mar 7 10:22:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c28d8cce9597c1c1a818520b1c5ef6dde9cd22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d8:bc:c4:30:5c:6c:17:f3:35:0c:ed:3f:15:
86:d3:d1:fc:eb:a6:0c:9f:15:2e:6b:65:92:c4:b1:
4b:b1:11:17:17:e3:4f:be:e8:55:5f:19:02:db:23:
3f:b7:6e:bc:e3:7f:b8:8a:69:08:83:2d:b5:4a:55:
82:08:90:40:ea:2b:e7:43:59:31:18:5d:fd:f9:cb:
39:26:66:b8:59:cd:e1:2d:98:40:23:55:08:9f:59:
6f:5f:1b:0c:53:f6:48:b6:cc:bd:e2:29:3a:80:83:
e5:97:52:45:77:3b:27:f7:e0:92:c4:53:21:f4:ad:
93:91:50:cd:4d:42:78:75:26:e1:65:30:8f:53:7b:
ce:aa:aa:65:f1:5f:fa:aa:91:ca:70:72:7d:b5:29:
b6:2a:2c:06:5d:86:29:00:11:4c:ab:74:7e:9f:8a:
a4:51:28:7e:28:44:32:c5:5f:4f:a8:2f:2a:1c:6b:
30:38:e3:47:d9:e2:31:73:f4:f2:00:b9:d8:5b:0b:
99:81:ca:80:70:44:02:c5:1f:a8:e9:59:27:41:f5:
1b:5f:15:91:09:42:56:e8:10:17:b9:31:05:90:ac:
85:e3:40:33:db:a4:5e:ea:fb:f3:0e:19:f0:10:9a:
9c:fc:0c:bc:52:f3:15:56:b9:73:4d:ed:8f:be:c9:
30:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:28:D8:CC:E9:59:7C:1C:1A:81:85:20:B1:C5:EF:6D:DE:9C:D2:2D
X509v3 Authority Key Identifier:
keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/bCjYzOlZfBwagYUgscXvbd6c0i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.201.0/24
185.152.124.0/22
212.18.121.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:35:a6:fa:2e:d7:8e:78:b6:4b:b2:d4:ef:e8:04:32:96:c9:
f3:67:e4:23:dc:e9:5e:ab:c0:63:09:69:7f:a3:27:15:07:16:
11:3e:f9:08:cc:72:b4:03:94:1c:99:2b:75:0f:e7:e8:10:02:
a0:c4:94:49:66:25:a0:93:55:32:cc:64:fc:2e:1f:67:f9:43:
ce:48:5c:e0:06:ef:a1:3c:a2:83:54:5a:db:fd:61:63:35:81:
d8:ea:5e:0e:b0:5d:19:e8:b4:54:ff:e0:57:27:6d:92:0c:9d:
55:12:0a:f1:70:2e:09:fe:ec:bf:10:01:ed:e1:6e:f4:44:93:
0b:7e:14:16:fc:24:58:9b:e4:ee:98:0e:8f:cc:f6:4b:12:fc:
53:54:18:fa:cb:8b:c6:a4:a7:67:69:d1:56:89:ac:57:87:dd:
b1:35:57:00:7d:5f:d4:97:58:9d:77:b4:ad:7c:e3:ef:c0:d8:
d3:37:e5:1d:83:94:07:b2:cd:d5:5a:ea:8d:d8:3b:a0:71:99:
de:b2:1d:dc:f0:45:7b:c2:1d:24:a6:08:2c:19:17:bb:12:76:
2a:9e:ea:09:0d:a5:2c:bd:f0:56:f3:47:8b:46:bf:12:65:37:
46:2a:95:ca:55:35:b4:18:b8:01:24:13:91:77:cc:36:96:55:
48:c8:a2:ca
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY4YbyX281/nRFNoBnKNPBBNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMGU0ZDJkYmRlOTg2ZmRjMjViZjNiZjc1NjM3ODUyZGE4
N2FiZjEwHhcNMjQwMzA3MTAyMjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzI4ZDhjY2U5NTk3YzFjMWE4MTg1MjBiMWM1ZWY2ZGRlOWNkMjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9i8xDBcbBfzNQztPxWG09H866YM
nxUua2WSxLFLsREXF+NPvuhVXxkC2yM/t26843+4imkIgy21SlWCCJBA6ivnQ1kx
GF39+cs5Jma4Wc3hLZhAI1UIn1lvXxsMU/ZItsy94ik6gIPll1JFdzsn9+CSxFMh
9K2TkVDNTUJ4dSbhZTCPU3vOqqpl8V/6qpHKcHJ9tSm2KiwGXYYpABFMq3R+n4qk
USh+KEQyxV9PqC8qHGswOONH2eIxc/TyALnYWwuZgcqAcEQCxR+o6VknQfUbXxWR
CUJW6BAXuTEFkKyF40Az26Re6vvzDhnwEJqc/Ay8UvMVVrlzTe2PvskwDwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGwo2MzpWXwcGoGFILHF723enNItMB8GA1UdIwQY
MBaAFB4OTS296Yb9wlvzv3VjeFLah6vxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGc1TkxiM3BodjNDV19PX2RXTjRVdHFIcV9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jOWUxMTUtMTIzNi00ZmRhLWEwMzMt
OTllZWExZjBhMzU0LzEvYkNqWXpPbFpmQndhZ1lVZ3NjWHZiZDZjMGkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9jOWUxMTUtMTIzNi00ZmRhLWEwMzMtOTllZWExZjBhMzU0
LzEvSGc1TkxiM3BodjNDV19PX2RXTjRVdHFIcV9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAkhPJAwQC
uZh8AwQA1BJ5MA0GCSqGSIb3DQEBCwUAA4IBAQBcNab6LteOeLZLstTv6AQylsnz
Z+Qj3Oleq8BjCWl/oycVBxYRPvkIzHK0A5QcmSt1D+foEAKgxJRJZiWgk1UyzGT8
Lh9n+UPOSFzgBu+hPKKDVFrb/WFjNYHY6l4OsF0Z6LRU/+BXJ22SDJ1VEgrxcC4J
/uy/EAHt4W70RJMLfhQW/CRYm+TumA6PzPZLEvxTVBj6y4vGpKdnadFWiaxXh92x
NVcAfV/Ul1idd7StfOPvwNjTN+Udg5QHss3VWuqN2DugcZnesh3c8EV7wh0kpggs
GRe7EnYqnuoJDaUsvfBW80eLRr8SZTdGKpXKVTW0GLgBJBORd8w2llVIyKLK
-----END CERTIFICATE-----
Generated at Sat Jun 1 17:16:35 2024 by rpki-client on console-fra.rpki-client.org