Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/hO7YqFOl08feK-t-JRUKoKNVCnI.roa
File: hO7YqFOl08feK-t-JRUKoKNVCnI.roa (raw, json)
Hash identifier: 83zJQ2atLd/9hMqMCKBJVyjZMXwDdQU5qPai1Sv8bws=
Subject key identifier: 84:EE:D8:A8:53:A5:D3:C7:DE:2B:EB:7E:25:15:0A:A0:A3:55:0A:72
Certificate issuer: /CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Certificate serial: 018CC8015BBD2CA0F22F9623419DECC6C217
Authority key identifier: 41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/hO7YqFOl08feK-t-JRUKoKNVCnI.roa
Signing time: Tue 02 Jan 2024 02:29:41 +0000
ROA not before: Tue 02 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200060
IP address blocks: 161.54.0.0/16 maxlen: 16
2001:67c:2780::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:5b:bd:2c:a0:f2:2f:96:23:41:9d:ec:c6:c2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Validity
Not Before: Jan 2 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84eed8a853a5d3c7de2beb7e25150aa0a3550a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:62:3d:65:d1:5c:02:d2:c1:22:af:d1:3e:e2:
cc:d6:18:69:a0:0f:91:ff:1a:d7:53:be:8f:c6:9e:
74:70:ae:df:86:bf:a2:00:d4:56:eb:15:cf:cd:72:
0a:1a:2d:f2:0f:eb:94:5b:1a:69:58:1b:e5:b7:a2:
a5:2d:34:68:20:3e:f4:5f:33:51:5d:de:70:51:f0:
9b:c1:14:09:f9:14:09:6f:b3:0e:19:67:b9:66:ef:
4a:bd:ed:97:a9:4e:22:ca:d4:a4:89:79:57:55:9c:
8c:62:57:ea:15:d1:9e:2f:fb:5e:6d:4e:e5:f3:d8:
8d:77:3b:88:78:e2:f1:0c:f4:74:07:1c:8e:f4:1b:
45:45:d0:ae:5d:cf:71:f9:0c:cb:ed:12:2f:ff:0c:
d5:a5:22:31:5b:3d:78:c6:07:d9:49:ce:ae:36:1c:
f9:98:93:65:9a:88:2a:c0:f6:18:66:89:57:cb:9d:
4c:e8:1c:d6:dd:16:88:69:f9:ef:87:99:9f:f9:44:
30:b8:b0:38:99:9c:6d:42:cc:39:27:26:1c:12:3f:
fd:58:08:a2:2c:2d:6b:c7:8a:56:a6:35:98:c0:f5:
96:26:90:69:7d:ce:61:de:48:1c:3d:7b:68:5e:28:
21:c5:48:df:c1:64:ff:15:08:dc:79:93:18:91:ca:
41:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EE:D8:A8:53:A5:D3:C7:DE:2B:EB:7E:25:15:0A:A0:A3:55:0A:72
X509v3 Authority Key Identifier:
keyid:41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/hO7YqFOl08feK-t-JRUKoKNVCnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.54.0.0/16
IPv6:
2001:67c:2780::/48
Signature Algorithm: sha256WithRSAEncryption
b2:3e:35:c7:f9:af:3a:f7:c4:19:e4:fb:c5:a3:08:d9:f8:fd:
0a:53:f4:5d:6a:65:c5:ff:3d:14:f0:db:4b:37:f1:21:d1:87:
62:71:3c:c4:1a:d0:08:05:88:db:7a:39:97:de:27:96:cb:36:
ec:d2:26:01:08:8f:92:a2:e3:e2:1e:ee:69:e4:fb:10:13:8b:
38:45:f5:84:32:da:d8:22:38:5a:b4:68:f1:e8:94:9f:32:d7:
50:21:12:97:eb:21:e0:e0:b4:d6:da:7f:ad:1f:1b:00:07:c2:
3a:b6:0d:aa:50:24:15:36:1f:ed:77:b0:0c:d8:ec:c4:e7:3e:
d5:bb:d7:90:87:2a:59:bd:83:5a:16:dc:78:4e:23:c4:a2:2f:
15:cb:67:58:e8:f4:d0:70:4b:26:8a:ff:f2:cf:bc:ae:18:22:
1a:93:5f:ab:08:ed:14:40:a4:cf:68:0c:f0:0e:f6:87:80:f6:
a5:20:ad:38:57:d8:e7:48:c1:45:35:36:e2:2e:78:8f:6a:37:
a4:d3:48:a2:4f:2b:2e:06:0f:7c:8c:ae:96:dc:86:57:33:fe:
ce:e8:21:f8:d7:b1:66:48:fd:44:9d:13:af:46:36:84:26:95:
d6:7e:9f:84:a6:7f:4b:23:d5:23:eb:bb:ce:5a:6f:bc:f2:46:
df:c6:61:7e
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYzIAVu9LKDyL5YjQZ3sxsIXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZmU2ZDAxMDI5OThjMzg2ZjhkODU2ZmE1ZjkxZDdhZDNh
YjRkNzcwHhcNMjQwMTAyMDIyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGVlZDhhODUzYTVkM2M3ZGUyYmViN2UyNTE1MGFhMGEzNTUwYTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWI9ZdFcAtLBIq/RPuLM1hhpoA+R
/xrXU76Pxp50cK7fhr+iANRW6xXPzXIKGi3yD+uUWxppWBvlt6KlLTRoID70XzNR
Xd5wUfCbwRQJ+RQJb7MOGWe5Zu9Kve2XqU4iytSkiXlXVZyMYlfqFdGeL/tebU7l
89iNdzuIeOLxDPR0BxyO9BtFRdCuXc9x+QzL7RIv/wzVpSIxWz14xgfZSc6uNhz5
mJNlmogqwPYYZolXy51M6BzW3RaIafnvh5mf+UQwuLA4mZxtQsw5JyYcEj/9WAii
LC1rx4pWpjWYwPWWJpBpfc5h3kgcPXtoXighxUjfwWT/FQjceZMYkcpBVwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFITu2KhTpdPH3ivrfiUVCqCjVQpyMB8GA1UdIwQY
MBaAFEH+bQECmYw4b42Fb6X5HXrTq013MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWY1dEFRS1pqRGh2allWdnBma2RldE9yVFhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xMmZlMDMtYTJkNC00YWI0LTk0YmEt
OGNiNmQwZTVjY2UyLzEvaE83WXFGT2wwOGZlSy10LUpSVUtvS05WQ25JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8xMmZlMDMtYTJkNC00YWI0LTk0YmEtOGNiNmQwZTVjY2Uy
LzEvUWY1dEFRS1pqRGh2allWdnBma2RldE9yVFhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjALBAIAATAFAwMAoTYwDwQC
AAIwCQMHACABBnwngDANBgkqhkiG9w0BAQsFAAOCAQEAsj41x/mvOvfEGeT7xaMI
2fj9ClP0XWplxf89FPDbSzfxIdGHYnE8xBrQCAWI23o5l94nlss27NImAQiPkqLj
4h7uaeT7EBOLOEX1hDLa2CI4WrRo8eiUnzLXUCESl+sh4OC01tp/rR8bAAfCOrYN
qlAkFTYf7XewDNjsxOc+1bvXkIcqWb2DWhbceE4jxKIvFctnWOj00HBLJor/8s+8
rhgiGpNfqwjtFECkz2gM8A72h4D2pSCtOFfY50jBRTU24i54j2o3pNNIok8rLgYP
fIyultyGVzP+zugh+NexZkj9RJ0Tr0Y2hCaV1n6fhKZ/SyPVI+u7zlpvvPJG38Zh
fg==
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:21:10 2024 by rpki-client on console-ams.rpki-client.org