Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/HIeqwj4Da97511pFmAjy_GhbB1M.roa
File: HIeqwj4Da97511pFmAjy_GhbB1M.roa (raw, json)
Hash identifier: OdQ/lbtXPSVmXAsHZytGw5o4IjsMQ/CHxbFt8EfQxDI=
Subject key identifier: 1C:87:AA:C2:3E:03:6B:DE:F9:D7:5A:45:98:08:F2:FC:68:5B:07:53
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 018CC64AD8648A0B1AF681B9B8001DA2C01B
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/HIeqwj4Da97511pFmAjy_GhbB1M.roa
Signing time: Mon 01 Jan 2024 18:30:43 +0000
ROA not before: Mon 01 Jan 2024 18:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210626
IP address blocks: 91.199.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:d8:64:8a:0b:1a:f6:81:b9:b8:00:1d:a2:c0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Jan 1 18:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c87aac23e036bdef9d75a459808f2fc685b0753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:10:8e:28:e5:79:7c:97:47:82:6a:f2:b8:45:
4b:42:16:85:0d:07:02:fc:c1:4a:b6:88:6c:8c:7f:
c7:fd:ff:22:6c:b4:70:e2:d3:c0:e7:4a:12:38:ae:
b6:85:ff:6b:aa:62:dc:fb:0f:98:71:51:ee:5f:ae:
23:d3:b6:5d:b8:89:38:b7:d2:1c:46:f6:c4:11:6d:
6e:c8:dc:39:c1:2f:2a:e2:b1:0a:98:75:58:ba:af:
fb:17:f7:b3:56:59:71:85:94:54:ba:a9:53:fc:65:
c4:15:e6:b5:af:49:bd:7c:a1:66:73:71:1a:f3:20:
de:b7:78:42:5d:bf:e1:e6:a1:c3:16:7b:35:b2:b6:
e8:b0:d0:d2:29:f5:da:75:ad:0e:03:cc:1a:58:d8:
b6:37:f2:9f:ae:dc:8c:6b:92:77:63:9e:91:68:9b:
55:d2:a8:bc:43:24:d4:64:3f:69:d5:2e:56:f3:d3:
28:db:0e:ae:f2:9c:25:28:92:4c:10:3b:e7:55:95:
d9:71:54:f7:ef:81:5c:d6:21:75:ab:70:b2:b2:a0:
39:c6:73:a9:a3:3c:b2:86:40:39:c1:af:4f:56:8b:
e6:a7:c0:c2:b4:d7:e8:6f:c5:c6:55:e1:02:04:99:
ea:54:42:63:24:c9:4b:73:bf:b4:fe:8c:2d:60:bf:
52:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:87:AA:C2:3E:03:6B:DE:F9:D7:5A:45:98:08:F2:FC:68:5B:07:53
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/HIeqwj4Da97511pFmAjy_GhbB1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.70.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f4:58:ae:29:d8:d8:37:74:82:1b:a7:65:16:bc:61:64:e8:
71:84:df:64:85:c9:2c:84:33:94:11:b9:81:cc:43:30:f7:70:
98:0a:70:ff:02:71:b2:a9:63:08:f3:b2:47:21:0e:ca:b2:24:
4a:ce:96:4c:c3:f3:f7:9d:b7:a7:2f:bc:84:bb:fb:61:5c:a3:
b1:09:71:5f:61:19:3c:e2:b8:62:8e:5e:62:7a:2f:c2:11:3d:
0e:79:23:33:6c:1a:d9:10:00:a5:85:1f:ab:5a:1b:49:d6:93:
d4:69:cf:5c:3f:2f:d7:21:06:29:e5:c6:19:49:6f:2a:42:84:
09:29:2c:bf:e8:d4:2c:08:64:8b:46:3c:c4:0d:27:9f:06:f0:
ca:9c:6c:dc:b4:55:25:f7:a7:5f:2c:1c:55:de:d5:80:76:48:
7d:fd:00:58:b4:62:b5:b4:d6:21:a7:d1:44:10:80:40:82:19:
a9:15:e5:75:9a:8f:95:3a:50:5f:aa:dd:ba:f8:0e:92:80:c8:
a5:78:db:3f:4e:d8:4d:22:5d:f5:30:bb:7e:7b:a0:99:90:c2:
98:90:28:0d:67:69:99:bb:49:5e:a5:4a:6a:65:76:24:6a:08:
c2:f5:89:da:2f:53:b3:a6:bb:b4:d7:0c:fa:e7:1b:32:49:f9:
4d:62:30:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSthkigsa9oG5uAAdosAbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMTE0MDBkNTQ4ZmEyMWFmODE5YTBjNmUyM2U3N2E2MDEy
ZWI1ZTkwHhcNMjQwMTAxMTgzMDQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzg3YWFjMjNlMDM2YmRlZjlkNzVhNDU5ODA4ZjJmYzY4NWIwNzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxCOKOV5fJdHgmryuEVLQhaFDQcC
/MFKtohsjH/H/f8ibLRw4tPA50oSOK62hf9rqmLc+w+YcVHuX64j07ZduIk4t9Ic
RvbEEW1uyNw5wS8q4rEKmHVYuq/7F/ezVllxhZRUuqlT/GXEFea1r0m9fKFmc3Ea
8yDet3hCXb/h5qHDFns1srbosNDSKfXada0OA8waWNi2N/KfrtyMa5J3Y56RaJtV
0qi8QyTUZD9p1S5W89Mo2w6u8pwlKJJMEDvnVZXZcVT374Fc1iF1q3CysqA5xnOp
ozyyhkA5wa9PVovmp8DCtNfob8XGVeECBJnqVEJjJMlLc7+0/owtYL9SDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFByHqsI+A2ve+ddaRZgI8vxoWwdTMB8GA1UdIwQY
MBaAFAARQA1Uj6Ia+BmgxuI+d6YBLrXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmRhYWItNjgyOS00NWZhLTk2N2Ut
MDFmNDYwNmM2NWVjLzEvSEllcXdqNERhOTc1MTFwRm1BanlfR2hiQjFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81MmRhYWItNjgyOS00NWZhLTk2N2UtMDFmNDYwNmM2NWVj
LzEvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8dGMA0G
CSqGSIb3DQEBCwUAA4IBAQCW9FiuKdjYN3SCG6dlFrxhZOhxhN9khckshDOUEbmB
zEMw93CYCnD/AnGyqWMI87JHIQ7KsiRKzpZMw/P3nbenL7yEu/thXKOxCXFfYRk8
4rhijl5iei/CET0OeSMzbBrZEAClhR+rWhtJ1pPUac9cPy/XIQYp5cYZSW8qQoQJ
KSy/6NQsCGSLRjzEDSefBvDKnGzctFUl96dfLBxV3tWAdkh9/QBYtGK1tNYhp9FE
EIBAghmpFeV1mo+VOlBfqt26+A6SgMileNs/TthNIl31MLt+e6CZkMKYkCgNZ2mZ
u0lepUpqZXYkagjC9YnaL1Ozpru01wz65xsySflNYjBP
-----END CERTIFICATE-----
Generated at Sat May 18 00:28:36 2024 by rpki-client on console-ams.rpki-client.org