Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/rh9325CH6qyAawj-3CdMLng75Ek.roa
File: rh9325CH6qyAawj-3CdMLng75Ek.roa (raw, json)
Hash identifier: qfYdhCZv0V2yrX+ifFl2nX1wSkhdMmDl4kahWjgdXc8=
Subject key identifier: AE:1F:77:DB:90:87:EA:AC:80:6B:08:FE:DC:27:4C:2E:78:3B:E4:49
Certificate issuer: /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial: 018CC3B67BE64D37A1DD034F257C87B91505
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/rh9325CH6qyAawj-3CdMLng75Ek.roa
Signing time: Mon 01 Jan 2024 06:29:25 +0000
ROA not before: Mon 01 Jan 2024 06:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 45.91.255.0/24 maxlen: 24
193.57.172.0/24 maxlen: 24
2a11:5ec0::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:7b:e6:4d:37:a1:dd:03:4f:25:7c:87:b9:15:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Validity
Not Before: Jan 1 06:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae1f77db9087eaac806b08fedc274c2e783be449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2c:6e:5a:55:f6:69:65:16:63:02:e3:6f:1f:
ff:d4:e7:d9:c9:9d:53:ba:73:e6:a6:80:7f:15:6d:
43:f1:6a:9f:0b:a8:df:ce:99:fa:ee:91:30:33:b4:
f2:6c:77:da:75:d6:ce:4d:95:39:ea:04:b0:08:58:
5a:3b:56:7f:36:21:bc:94:b5:28:f9:17:56:dd:66:
e8:78:76:38:ca:36:92:e0:99:22:3c:60:93:e6:ba:
f7:37:b0:f3:19:cb:8d:85:78:e0:cf:5f:16:6d:91:
7a:2f:4a:dd:a7:46:00:02:92:9e:89:34:4b:5e:b8:
68:1b:3b:74:53:e9:5c:6c:b5:a9:50:5f:d2:ed:cb:
5c:2d:37:0d:1e:c2:2e:0b:12:69:ca:bc:94:0a:97:
cb:f5:68:25:38:35:61:70:a7:20:87:73:a2:77:f4:
5d:5b:60:d6:a5:79:a3:c0:b1:05:2b:b0:58:0b:61:
b7:b7:34:82:37:8a:4f:62:ed:b8:74:ea:2d:bc:90:
6c:63:38:8d:09:8f:89:16:51:cb:97:50:dc:13:5a:
52:c4:81:00:ff:86:99:24:77:d0:08:9a:67:54:cc:
eb:4f:8c:79:b0:27:0c:df:57:55:b3:d4:44:f1:11:
38:41:3c:de:06:af:29:0d:00:31:e3:89:5d:64:ce:
c0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1F:77:DB:90:87:EA:AC:80:6B:08:FE:DC:27:4C:2E:78:3B:E4:49
X509v3 Authority Key Identifier:
keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/rh9325CH6qyAawj-3CdMLng75Ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.255.0/24
193.57.172.0/24
IPv6:
2a11:5ec0::/40
Signature Algorithm: sha256WithRSAEncryption
a4:28:25:6b:3c:b1:bd:c9:9e:89:c8:18:aa:cd:61:97:ad:ae:
ab:22:5a:f4:6b:b7:43:7d:3a:9a:8e:8c:f5:6e:95:94:bf:de:
0a:b8:84:b5:54:e1:d0:f5:72:aa:ba:46:5c:6e:86:ce:dc:23:
44:52:58:67:1f:c3:87:d9:25:50:63:54:88:37:1b:24:52:26:
da:b8:7b:47:fb:e4:61:84:43:04:f2:ea:72:f1:f5:93:33:bb:
62:a5:c3:0f:2e:3b:07:68:24:df:77:bd:ca:15:d1:65:aa:67:
e3:a1:16:28:47:7c:3b:d3:b4:f5:29:2a:32:69:76:58:f2:3b:
81:9f:9a:c6:63:a5:dd:aa:3a:07:ff:e8:1f:7e:d8:0f:c9:af:
a1:0b:3d:11:9c:a7:c4:ae:76:c2:cd:a7:8c:b2:91:cc:49:99:
13:6a:e7:72:1e:b4:3b:0c:ec:68:4b:f2:c8:49:e3:d7:fe:51:
52:9e:ca:46:6e:2e:3a:61:9c:65:02:83:2a:cc:b6:aa:8b:3a:
06:f5:6b:51:14:a2:10:ec:b2:1d:23:8c:e3:03:45:a0:01:69:
be:7b:6d:d3:e7:e7:8d:39:69:cc:48:da:aa:62:e2:59:f0:0c:
07:84:3c:16:09:b6:7b:e6:a8:95:47:48:91:86:29:49:2d:5b:
e9:fe:03:59
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYzDtnvmTTeh3QNPJXyHuRUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzk4MDRlMjI3ZWFhYzlhYzA5YjA4MjFmYzA3ZWUyODE3
Nzc3YjUwHhcNMjQwMTAxMDYyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTFmNzdkYjkwODdlYWFjODA2YjA4ZmVkYzI3NGMyZTc4M2JlNDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgixuWlX2aWUWYwLjbx//1OfZyZ1T
unPmpoB/FW1D8WqfC6jfzpn67pEwM7TybHfaddbOTZU56gSwCFhaO1Z/NiG8lLUo
+RdW3WboeHY4yjaS4JkiPGCT5rr3N7DzGcuNhXjgz18WbZF6L0rdp0YAApKeiTRL
XrhoGzt0U+lcbLWpUF/S7ctcLTcNHsIuCxJpyryUCpfL9WglODVhcKcgh3Oid/Rd
W2DWpXmjwLEFK7BYC2G3tzSCN4pPYu24dOotvJBsYziNCY+JFlHLl1DcE1pSxIEA
/4aZJHfQCJpnVMzrT4x5sCcM31dVs9RE8RE4QTzeBq8pDQAx44ldZM7ADwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFK4fd9uQh+qsgGsI/twnTC54O+RJMB8GA1UdIwQY
MBaAFMrJgE4ifqrJrAmwgh/AfuKBd3e1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iY2VhNWQtNTE0ZS00ZjUyLWI0OWEt
OTBmYjU3ZDQwY2E3LzEvcmg5MzI1Q0g2cXlBYXdqLTNDZE1Mbmc3NUVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9iY2VhNWQtNTE0ZS00ZjUyLWI0OWEtOTBmYjU3ZDQwY2E3
LzEveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQALVv/AwQA
wTmsMA4EAgACMAgDBgAqEV7AADANBgkqhkiG9w0BAQsFAAOCAQEApCglazyxvcme
icgYqs1hl62uqyJa9Gu3Q306mo6M9W6VlL/eCriEtVTh0PVyqrpGXG6GztwjRFJY
Zx/Dh9klUGNUiDcbJFIm2rh7R/vkYYRDBPLqcvH1kzO7YqXDDy47B2gk33e9yhXR
Zapn46EWKEd8O9O09SkqMml2WPI7gZ+axmOl3ao6B//oH37YD8mvoQs9EZynxK52
ws2njLKRzEmZE2rnch60OwzsaEvyyEnj1/5RUp7KRm4uOmGcZQKDKsy2qos6BvVr
URSiEOyyHSOM4wNFoAFpvntt0+fnjTlpzEjaqmLiWfAMB4Q8Fgm2e+aolUdIkYYp
SS1b6f4DWQ==
-----END CERTIFICATE-----
Generated at Thu May 2 16:16:43 2024 by rpki-client on console-fra.rpki-client.org