Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/715585-c8db-46fd-b8f2-b405585e73b7/1/AQCIaa4KXvCj57W9qYTDdrsRJF0.roa
File: AQCIaa4KXvCj57W9qYTDdrsRJF0.roa (raw, json)
Hash identifier: S6FCqTR4KeyBxYNYkPN5cWhhEGUYO6NvzNwoj1suSWA=
Subject key identifier: 01:00:88:69:AE:0A:5E:F0:A3:E7:B5:BD:A9:84:C3:76:BB:11:24:5D
Certificate issuer: /CN=5f6f0f8a59605d57a411218fac8a029bb06abb65
Certificate serial: 018CC7272C44B09DD33CB297B76DEB4913B5
Authority key identifier: 5F:6F:0F:8A:59:60:5D:57:A4:11:21:8F:AC:8A:02:9B:B0:6A:BB:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X28PillgXVekESGPrIoCm7Bqu2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/715585-c8db-46fd-b8f2-b405585e73b7/1/AQCIaa4KXvCj57W9qYTDdrsRJF0.roa
Signing time: Mon 01 Jan 2024 22:31:22 +0000
ROA not before: Mon 01 Jan 2024 22:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60631
IP address blocks: 176.97.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/715585-c8db-46fd-b8f2-b405585e73b7/1/X28PillgXVekESGPrIoCm7Bqu2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/715585-c8db-46fd-b8f2-b405585e73b7/1/X28PillgXVekESGPrIoCm7Bqu2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/X28PillgXVekESGPrIoCm7Bqu2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:2c:44:b0:9d:d3:3c:b2:97:b7:6d:eb:49:13:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6f0f8a59605d57a411218fac8a029bb06abb65
Validity
Not Before: Jan 1 22:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01008869ae0a5ef0a3e7b5bda984c376bb11245d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:57:b7:4a:36:f6:18:25:63:47:bf:f5:79:01:
3d:0a:c7:ce:b8:7c:3f:74:f5:97:3d:e4:27:22:e4:
09:ab:7b:b6:26:29:2b:c4:34:8f:90:91:df:ac:e9:
d6:e4:66:78:9f:28:fc:45:c9:5a:b6:38:b9:6e:14:
f7:35:ff:8b:56:61:df:6e:56:ee:78:0e:61:23:c0:
f4:62:ca:3d:a8:70:31:b4:4a:9c:f2:c8:5e:2d:9d:
c0:22:40:f7:c2:57:11:33:f4:12:2b:c8:1e:c7:72:
40:cb:36:04:24:cb:30:da:b7:69:51:26:82:32:27:
1c:41:20:0b:3f:df:cd:e7:c8:f8:71:2b:4a:15:fc:
44:97:c7:f3:8b:1e:41:f8:1e:2a:de:89:16:79:6b:
ad:2e:5a:01:82:5f:68:f4:a5:61:32:13:38:44:93:
80:5c:21:6a:41:15:de:36:3d:2a:d3:c5:1e:8c:61:
2b:ac:99:b8:47:75:0e:6f:48:ec:d4:9e:38:0a:8a:
45:9d:f8:e4:e1:65:b1:25:65:e2:a6:a2:ca:e5:9d:
ba:2d:be:a8:6e:2f:4c:4b:ba:1c:e2:e5:de:14:16:
33:c1:f5:e9:42:2d:4a:77:20:be:2c:d4:46:ee:e2:
d2:27:b2:32:37:3d:85:48:4d:6d:23:00:7f:af:d2:
15:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:00:88:69:AE:0A:5E:F0:A3:E7:B5:BD:A9:84:C3:76:BB:11:24:5D
X509v3 Authority Key Identifier:
keyid:5F:6F:0F:8A:59:60:5D:57:A4:11:21:8F:AC:8A:02:9B:B0:6A:BB:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X28PillgXVekESGPrIoCm7Bqu2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/715585-c8db-46fd-b8f2-b405585e73b7/1/AQCIaa4KXvCj57W9qYTDdrsRJF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/715585-c8db-46fd-b8f2-b405585e73b7/1/X28PillgXVekESGPrIoCm7Bqu2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.218.0/24
Signature Algorithm: sha256WithRSAEncryption
36:b0:3f:e1:9c:d0:f3:65:8c:00:ce:73:26:5d:3a:02:60:49:
b8:09:ae:a2:f0:a8:04:7a:cc:43:71:cf:e9:e1:92:a0:8f:1b:
ad:ca:2a:5e:df:1c:a5:68:2b:50:f7:45:65:d0:99:c7:e3:2a:
23:cc:65:13:d3:44:a7:03:51:d9:4c:68:75:d3:37:56:44:b0:
b2:a3:06:a5:30:01:5e:a8:7b:5d:e7:01:d2:d2:60:38:68:65:
dd:bf:27:f5:e8:f0:fe:20:79:df:50:93:57:38:54:7b:10:f5:
9e:88:46:ad:51:eb:b0:63:71:ae:ae:60:52:d7:5c:86:07:43:
93:1d:ec:3f:bb:13:63:d4:bc:47:60:00:1f:a5:7f:c5:2a:a8:
24:d9:83:7a:7c:e9:1b:37:89:4e:0a:dc:3c:e1:02:0c:e5:b2:
5b:76:cb:cb:b1:13:b0:18:e1:6d:7a:b8:8e:36:77:8c:47:a3:
84:0a:b1:8e:4d:16:df:df:49:2c:d0:94:29:7a:68:94:cb:a2:
51:d3:15:da:2e:9d:47:02:3f:9e:94:a3:09:38:bc:9b:b0:e0:
b1:4a:13:3f:60:a6:a7:00:87:2e:30:a0:81:97:73:d9:24:db:
00:71:b6:38:2f:ce:1d:76:9c:ac:21:43:1f:37:92:e0:d3:8a:
cf:fa:bc:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJyxEsJ3TPLKXt23rSRO1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNmYwZjhhNTk2MDVkNTdhNDExMjE4ZmFjOGEwMjliYjA2
YWJiNjUwHhcNMjQwMTAxMjIzMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTAwODg2OWFlMGE1ZWYwYTNlN2I1YmRhOTg0YzM3NmJiMTEyNDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFe3Sjb2GCVjR7/1eQE9CsfOuHw/
dPWXPeQnIuQJq3u2JikrxDSPkJHfrOnW5GZ4nyj8Rclatji5bhT3Nf+LVmHfblbu
eA5hI8D0Yso9qHAxtEqc8sheLZ3AIkD3wlcRM/QSK8gex3JAyzYEJMsw2rdpUSaC
MiccQSALP9/N58j4cStKFfxEl8fzix5B+B4q3okWeWutLloBgl9o9KVhMhM4RJOA
XCFqQRXeNj0q08UejGErrJm4R3UOb0js1J44CopFnfjk4WWxJWXipqLK5Z26Lb6o
bi9MS7oc4uXeFBYzwfXpQi1KdyC+LNRG7uLSJ7IyNz2FSE1tIwB/r9IV9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAEAiGmuCl7wo+e1vamEw3a7ESRdMB8GA1UdIwQY
MBaAFF9vD4pZYF1XpBEhj6yKApuwartlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDI4UGlsbGdYVmVrRVNHUHJJb0NtN0JxdTJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83MTU1ODUtYzhkYi00NmZkLWI4ZjIt
YjQwNTU4NWU3M2I3LzEvQVFDSWFhNEtYdkNqNTdXOXFZVERkcnNSSkYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC83MTU1ODUtYzhkYi00NmZkLWI4ZjItYjQwNTU4NWU3M2I3
LzEvWDI4UGlsbGdYVmVrRVNHUHJJb0NtN0JxdTJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGHaMA0G
CSqGSIb3DQEBCwUAA4IBAQA2sD/hnNDzZYwAznMmXToCYEm4Ca6i8KgEesxDcc/p
4ZKgjxutyipe3xylaCtQ90Vl0JnH4yojzGUT00SnA1HZTGh10zdWRLCyowalMAFe
qHtd5wHS0mA4aGXdvyf16PD+IHnfUJNXOFR7EPWeiEatUeuwY3GurmBS11yGB0OT
Hew/uxNj1LxHYAAfpX/FKqgk2YN6fOkbN4lOCtw84QIM5bJbdsvLsROwGOFteriO
NneMR6OECrGOTRbf30ks0JQpemiUy6JR0xXaLp1HAj+elKMJOLybsOCxShM/YKan
AIcuMKCBl3PZJNsAcbY4L84ddpysIUMfN5Lg04rP+rxR
-----END CERTIFICATE-----
Generated at Sun Jun 2 15:05:41 2024 by rpki-client on console-fra.rpki-client.org