Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/bu-pXh-NmAGc52JriqGQFMYiGwA.roa
File: bu-pXh-NmAGc52JriqGQFMYiGwA.roa (raw, json)
Hash identifier: 9isU9KLM9xw2Ij5Bfa2bGKp9xWoFFIyKabZGHYWYIbc=
Subject key identifier: 6E:EF:A9:5E:1F:8D:98:01:9C:E7:62:6B:8A:A1:90:14:C6:22:1B:00
Certificate issuer: /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Certificate serial: 018CC5000EA4C6C67044DC3B2B437DC8BFCF
Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/bu-pXh-NmAGc52JriqGQFMYiGwA.roa
Signing time: Mon 01 Jan 2024 12:29:24 +0000
ROA not before: Mon 01 Jan 2024 12:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210085
IP address blocks: 178.17.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:0e:a4:c6:c6:70:44:dc:3b:2b:43:7d:c8:bf:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Validity
Not Before: Jan 1 12:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6eefa95e1f8d98019ce7626b8aa19014c6221b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:81:91:24:f8:ca:c9:b7:f7:4f:3e:8d:24:
4f:7b:ab:3e:d2:8a:11:bd:5e:c9:7b:3b:15:63:72:
b1:92:f7:ab:49:c0:7b:72:71:b2:af:c9:3b:3d:5d:
9e:43:db:da:cc:f3:73:d2:bc:5c:78:30:d7:d1:3b:
04:fa:0c:b3:04:38:e6:9e:7c:28:5c:b9:51:3a:51:
83:6c:e7:55:91:1c:51:45:65:8d:43:30:46:ce:73:
d4:78:15:e0:09:6f:89:d4:ff:72:6a:49:59:de:21:
2a:44:16:c8:27:78:5f:16:a6:2c:c6:16:1d:d6:35:
e3:20:7c:4d:f7:b9:f1:9e:85:5a:84:17:e3:8f:7f:
05:c4:21:e5:7f:77:d6:40:73:2c:0f:7a:4a:28:a9:
44:ce:2b:9f:28:bf:18:e4:fe:b3:e8:33:db:09:e6:
fd:d7:09:44:a2:30:9f:48:11:31:2d:e7:8a:3c:7a:
d6:71:62:be:73:4f:28:65:c8:e9:53:da:0f:34:05:
f5:44:02:71:b2:45:c0:ab:8b:78:ff:94:c3:aa:b2:
3b:ec:43:58:0f:39:ea:08:86:60:07:97:e5:61:dc:
d7:e4:6d:28:b1:ea:ef:2a:f7:bb:6b:62:71:2c:0c:
10:b2:9b:7d:08:4b:f2:bd:fb:b6:47:45:3c:62:fc:
f6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EF:A9:5E:1F:8D:98:01:9C:E7:62:6B:8A:A1:90:14:C6:22:1B:00
X509v3 Authority Key Identifier:
keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/bu-pXh-NmAGc52JriqGQFMYiGwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.216.0/24
Signature Algorithm: sha256WithRSAEncryption
85:f1:c0:7c:ce:ce:47:2a:d8:96:2f:70:75:0a:22:e2:c3:a6:
84:cc:0a:21:2a:39:46:15:33:b6:a1:8b:84:cd:d3:32:ea:a0:
35:8d:9c:01:00:40:6b:6d:82:88:3f:2f:e9:25:7e:34:31:49:
e3:ec:b7:9e:5a:ab:d2:b9:23:27:74:ed:ee:dc:fe:a1:ae:c5:
ce:bf:44:9b:b8:cf:50:3a:69:ca:65:4f:bd:48:de:24:41:3b:
26:ed:ff:59:70:42:0c:04:61:85:39:74:89:65:ca:b9:e5:dd:
ea:b7:23:26:b6:83:b9:1a:b8:6b:b2:75:f5:d1:18:16:b8:7a:
72:c2:ca:19:2a:f7:9d:4a:79:e1:7c:e0:e8:4c:d1:13:77:54:
4f:26:e8:cc:7c:88:1b:f7:da:41:b9:4a:ca:70:04:7f:38:ee:
96:d0:8e:8e:fd:a8:94:19:d4:9d:fc:ba:3c:a9:f2:1b:d4:ca:
a3:38:3a:1b:56:c2:db:1e:ff:88:ef:26:8a:45:76:ea:dc:c7:
41:6e:01:b2:8a:21:3f:c9:94:02:60:65:dd:e5:d7:d3:1a:08:
33:85:2e:33:b5:1c:7d:3a:ad:14:36:cb:bc:d7:92:42:d1:56:
74:86:b3:ee:9e:c8:a9:5d:9a:43:6f:e9:ab:4b:a0:93:2c:cb:
f4:88:98:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAA6kxsZwRNw7K0N9yL/PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjA0NzdmOWQwOWEyYzc0ZjRjNDU5ZTgwYjcyOWFmZWVi
MzEyZDQwHhcNMjQwMTAxMTIyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWVmYTk1ZTFmOGQ5ODAxOWNlNzYyNmI4YWExOTAxNGM2MjIxYjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw++BkST4ysm3908+jSRPe6s+0ooR
vV7JezsVY3KxkverScB7cnGyr8k7PV2eQ9vazPNz0rxceDDX0TsE+gyzBDjmnnwo
XLlROlGDbOdVkRxRRWWNQzBGznPUeBXgCW+J1P9yaklZ3iEqRBbIJ3hfFqYsxhYd
1jXjIHxN97nxnoVahBfjj38FxCHlf3fWQHMsD3pKKKlEziufKL8Y5P6z6DPbCeb9
1wlEojCfSBExLeeKPHrWcWK+c08oZcjpU9oPNAX1RAJxskXAq4t4/5TDqrI77ENY
DznqCIZgB5flYdzX5G0oservKve7a2JxLAwQspt9CEvyvfu2R0U8Yvz2JQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG7vqV4fjZgBnOdia4qhkBTGIhsAMB8GA1UdIwQY
MBaAFKGwR3+dCaLHT0xFnoC3Ka/usxLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNDUxYjctOTA5MS00YTI3LWFiOTEt
MzQ4ZjlmZmJkODgzLzEvYnUtcFhoLU5tQUdjNTJKcmlxR1FGTVlpR3dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8yNDUxYjctOTA5MS00YTI3LWFiOTEtMzQ4ZjlmZmJkODgz
LzEvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshHYMA0G
CSqGSIb3DQEBCwUAA4IBAQCF8cB8zs5HKtiWL3B1CiLiw6aEzAohKjlGFTO2oYuE
zdMy6qA1jZwBAEBrbYKIPy/pJX40MUnj7LeeWqvSuSMndO3u3P6hrsXOv0SbuM9Q
OmnKZU+9SN4kQTsm7f9ZcEIMBGGFOXSJZcq55d3qtyMmtoO5GrhrsnX10RgWuHpy
wsoZKvedSnnhfODoTNETd1RPJujMfIgb99pBuUrKcAR/OO6W0I6O/aiUGdSd/Lo8
qfIb1MqjODobVsLbHv+I7yaKRXbq3MdBbgGyiiE/yZQCYGXd5dfTGggzhS4ztRx9
Oq0UNsu815JC0VZ0hrPunsipXZpDb+mrS6CTLMv0iJjk
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:48:41 2024 by rpki-client on console-fra.rpki-client.org