Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/hrzeflkZYXbRU71a0dQTMZeoqGs.roa
File: hrzeflkZYXbRU71a0dQTMZeoqGs.roa (raw, json)
Hash identifier: Vd2kLrxfzMC0BhnuAKRuf0tIZKHK3FWYmATM3plwQiQ=
Subject key identifier: 86:BC:DE:7E:59:19:61:76:D1:53:BD:5A:D1:D4:13:31:97:A8:A8:6B
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 018CC4255A5A1184BE1555563D5ECCBC1D71
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/hrzeflkZYXbRU71a0dQTMZeoqGs.roa
Signing time: Mon 01 Jan 2024 08:30:31 +0000
ROA not before: Mon 01 Jan 2024 08:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31898
IP address blocks: 89.38.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5a:5a:11:84:be:15:55:56:3d:5e:cc:bc:1d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86bcde7e59196176d153bd5ad1d4133197a8a86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:0a:d2:c5:c5:4d:fd:13:b3:5f:e1:a3:91:
9b:65:dc:ca:6f:e2:00:f8:2e:f6:73:7e:c2:bb:be:
97:c3:e5:a1:c2:21:b6:51:af:d6:b4:56:a6:36:d3:
c5:81:10:e5:95:eb:5f:7b:13:b1:e7:03:f7:67:49:
c9:e4:6d:66:d5:09:5e:a6:91:fb:c2:8e:ad:91:41:
a1:fd:d5:76:75:c5:e3:c0:08:4b:a5:ff:56:ff:5e:
6e:c1:f1:03:7f:b3:4f:95:9e:a1:68:90:18:a1:40:
44:18:e4:9d:a4:9f:d4:d4:16:df:64:33:4b:c1:27:
c2:25:c8:e2:73:0b:48:d1:7a:ee:fa:4c:64:33:3b:
9e:3a:fb:ca:42:69:51:a6:7c:ed:d1:b8:a1:a1:36:
32:a5:59:ac:b6:33:eb:c9:8f:bd:86:db:3e:aa:6c:
71:a7:93:34:82:53:ed:db:fb:f1:18:45:a9:d1:ff:
7c:b2:5b:e4:6f:83:23:6e:6f:b6:25:7b:16:4a:af:
e1:eb:65:38:d2:f7:69:57:3e:7e:ed:fa:58:2f:f6:
95:42:2f:85:23:f8:c4:7f:20:1b:f3:6d:4f:6d:c1:
d1:09:0b:f8:9b:2b:75:45:fc:a7:f6:b8:50:30:99:
41:1e:ec:71:68:7b:e3:4a:bc:7d:76:ff:cd:7f:f2:
a4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BC:DE:7E:59:19:61:76:D1:53:BD:5A:D1:D4:13:31:97:A8:A8:6B
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/hrzeflkZYXbRU71a0dQTMZeoqGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.28.0/22
Signature Algorithm: sha256WithRSAEncryption
93:b4:a8:fa:c9:37:67:b3:69:61:10:59:03:4e:98:f9:55:75:
8c:5a:53:28:56:ed:40:ad:f4:c4:28:74:cf:6a:96:dd:49:65:
8a:43:53:cb:cf:8d:a4:49:cc:89:52:2b:dc:e6:39:58:73:0b:
ca:99:53:11:c9:28:18:d9:6a:ac:92:99:cb:ee:9b:ec:f5:a7:
7b:cc:b1:47:f7:0c:64:ae:82:36:57:49:ca:33:c7:ec:3b:85:
76:b5:a7:0a:d3:65:5e:ff:f6:be:c1:3e:2c:4e:f5:79:ec:51:
0f:10:26:14:6e:fa:ea:0c:d1:94:48:33:10:44:9b:13:e9:97:
78:52:09:84:a1:3a:77:6c:ef:13:29:9e:29:14:e6:09:a3:fa:
2b:a0:22:ba:21:d8:ec:d1:ec:7a:23:1a:ae:f1:91:f2:8e:10:
cc:fd:0f:c9:c1:80:10:17:ef:f4:32:a4:d3:1d:9b:70:61:fe:
9a:71:7b:1d:7e:e2:79:a6:38:f6:98:61:e5:96:7b:c7:78:71:
a0:e5:a2:e8:81:b9:7a:6b:92:06:0f:f4:d6:f5:d6:3f:a4:de:
32:00:3a:6e:b4:e0:4c:1b:19:89:b8:f0:bb:c6:2c:23:3d:67:
14:60:f0:0d:80:75:ed:b3:e1:5b:61:4e:85:14:b6:22:1c:ad:
37:72:39:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJVpaEYS+FVVWPV7MvB1xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZWZlOWQzNmY1Zjg4ZmRmMDQ3NDJjNDE0MGM3NTMyMDkw
YWI3NzAwHhcNMjQwMTAxMDgzMDMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmJjZGU3ZTU5MTk2MTc2ZDE1M2JkNWFkMWQ0MTMzMTk3YThhODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgoK0sXFTf0Ts1/ho5GbZdzKb+IA
+C72c37Cu76Xw+WhwiG2Ua/WtFamNtPFgRDlletfexOx5wP3Z0nJ5G1m1QleppH7
wo6tkUGh/dV2dcXjwAhLpf9W/15uwfEDf7NPlZ6haJAYoUBEGOSdpJ/U1BbfZDNL
wSfCJcjicwtI0Xru+kxkMzueOvvKQmlRpnzt0bihoTYypVmstjPryY+9hts+qmxx
p5M0glPt2/vxGEWp0f98slvkb4Mjbm+2JXsWSq/h62U40vdpVz5+7fpYL/aVQi+F
I/jEfyAb821PbcHRCQv4myt1Rfyn9rhQMJlBHuxxaHvjSrx9dv/Nf/KkewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIa83n5ZGWF20VO9WtHUEzGXqKhrMB8GA1UdIwQY
MBaAFNnv6dNvX4j98EdCxBQMdTIJCrdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1Yzkt
MzlmNmQ2NDI1MzM4LzEvaHJ6ZWZsa1pZWGJSVTcxYTBkUVRNWmVvcUdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1YzktMzlmNmQ2NDI1MzM4
LzEvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWSYcMA0G
CSqGSIb3DQEBCwUAA4IBAQCTtKj6yTdns2lhEFkDTpj5VXWMWlMoVu1ArfTEKHTP
apbdSWWKQ1PLz42kScyJUivc5jlYcwvKmVMRySgY2WqskpnL7pvs9ad7zLFH9wxk
roI2V0nKM8fsO4V2tacK02Ve//a+wT4sTvV57FEPECYUbvrqDNGUSDMQRJsT6Zd4
UgmEoTp3bO8TKZ4pFOYJo/oroCK6Idjs0ex6Ixqu8ZHyjhDM/Q/JwYAQF+/0MqTT
HZtwYf6acXsdfuJ5pjj2mGHllnvHeHGg5aLogbl6a5IGD/TW9dY/pN4yADputOBM
GxmJuPC7xiwjPWcUYPANgHXts+FbYU6FFLYiHK03cjn4
-----END CERTIFICATE-----
Generated at Thu May 2 02:44:36 2024 by rpki-client on console-fra.rpki-client.org