Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/hclvSAY7iQoyAjzIrcXl28JZc70.roa
File: hclvSAY7iQoyAjzIrcXl28JZc70.roa (raw, json)
Hash identifier: goduEkowMAzk2pOHJZbCpJrl/jYaOd2gl5e8NOS6+BU=
Subject key identifier: 85:C9:6F:48:06:3B:89:0A:32:02:3C:C8:AD:C5:E5:DB:C2:59:73:BD
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 018CC6B798148B0CB244E65E3EBA07221DA2
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/hclvSAY7iQoyAjzIrcXl28JZc70.roa
Signing time: Mon 01 Jan 2024 20:29:29 +0000
ROA not before: Mon 01 Jan 2024 20:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47282
IP address blocks: 62.140.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:98:14:8b:0c:b2:44:e6:5e:3e:ba:07:22:1d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Jan 1 20:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85c96f48063b890a32023cc8adc5e5dbc25973bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:ea:1a:fb:50:5e:55:7d:49:8c:96:9e:d4:
b2:a9:ae:9f:05:85:f1:6f:19:5e:91:df:3e:e3:b5:
4e:44:01:e2:9a:e7:ff:c4:40:ff:60:9b:f6:37:96:
84:0e:c5:40:91:ff:60:cb:79:87:5e:61:6a:74:67:
f9:3b:1a:c1:ba:c6:b4:ac:06:e9:b3:38:ab:72:66:
b0:ec:a9:ef:e5:1c:11:e3:78:df:fa:b1:65:9c:6a:
9c:7c:9a:d1:17:05:42:b3:b4:d0:d3:d7:e7:a7:aa:
5a:aa:0f:a2:6b:c3:aa:5b:09:51:85:df:d6:72:39:
be:84:76:66:d0:05:69:bd:a1:67:11:40:b2:42:18:
06:c4:2f:d6:55:0c:18:f7:20:fe:72:84:5f:d6:8d:
8e:12:02:2f:87:37:18:d1:01:85:76:b6:59:76:0c:
8a:75:23:f4:b4:97:12:a0:e4:37:71:e7:22:f5:6a:
d7:ab:ff:91:38:7c:1a:4c:27:57:c4:f1:b6:3d:e0:
de:c9:fb:22:6b:b9:ac:0c:81:ce:b0:1b:58:86:15:
4c:db:7b:4d:a7:76:17:ca:c5:6f:3f:37:d9:95:9e:
3c:50:e6:fe:09:01:4e:fd:3c:cc:1f:10:7a:06:70:
67:aa:90:0f:be:76:f5:85:0e:56:7f:cf:7f:9a:41:
8f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C9:6F:48:06:3B:89:0A:32:02:3C:C8:AD:C5:E5:DB:C2:59:73:BD
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/hclvSAY7iQoyAjzIrcXl28JZc70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.140.242.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:2e:db:f5:87:e4:16:e2:14:da:d2:7a:ef:99:74:1e:88:e1:
64:5c:97:2f:1c:4d:28:b4:61:cf:7a:79:39:db:5d:ec:0b:ca:
0d:67:04:0d:3c:43:22:6c:74:38:42:db:05:73:68:68:cf:1b:
46:9f:b7:30:44:8f:3e:cd:15:6f:8d:e1:85:9e:d7:c2:5c:2a:
da:e1:83:e0:43:ef:02:8a:e4:e0:94:ea:ef:32:81:e8:7d:b2:
7e:a3:8b:7b:a9:55:42:7c:83:77:7b:84:00:a6:46:bb:b5:40:
b6:a8:9f:bb:26:01:d2:64:2d:a6:78:86:6d:08:27:23:20:c3:
8d:1e:c1:e2:c3:29:8c:05:21:3b:96:ac:da:be:08:25:97:f6:
41:b2:9f:69:9e:ee:53:a3:3f:5d:be:01:47:99:f3:1c:63:57:
1d:a8:42:1e:6c:ed:7d:4c:ca:a4:09:e1:fd:f0:9f:bc:84:b1:
22:d4:9e:69:af:d2:a2:e4:9e:17:31:14:86:87:07:59:51:62:
ee:6f:6d:21:d1:97:ce:55:30:a8:3f:ae:79:72:10:8f:5b:1b:
7d:01:dd:40:c5:35:18:d9:8c:64:24:78:76:b6:a6:45:d3:65:
d6:f5:93:22:09:76:b7:ce:79:58:26:e2:a3:c2:e9:5b:a7:0e:
fa:99:7b:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt5gUiwyyROZeProHIh2iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0
MzE3MjUwHhcNMjQwMTAxMjAyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWM5NmY0ODA2M2I4OTBhMzIwMjNjYzhhZGM1ZTVkYmMyNTk3M2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJrqGvtQXlV9SYyWntSyqa6fBYXx
bxlekd8+47VORAHimuf/xED/YJv2N5aEDsVAkf9gy3mHXmFqdGf5OxrBusa0rAbp
szircmaw7Knv5RwR43jf+rFlnGqcfJrRFwVCs7TQ09fnp6paqg+ia8OqWwlRhd/W
cjm+hHZm0AVpvaFnEUCyQhgGxC/WVQwY9yD+coRf1o2OEgIvhzcY0QGFdrZZdgyK
dSP0tJcSoOQ3ceci9WrXq/+ROHwaTCdXxPG2PeDeyfsia7msDIHOsBtYhhVM23tN
p3YXysVvPzfZlZ48UOb+CQFO/TzMHxB6BnBnqpAPvnb1hQ5Wf89/mkGPIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIXJb0gGO4kKMgI8yK3F5dvCWXO9MB8GA1UdIwQY
MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt
ZjRjNWZjM2NhMmM0LzEvaGNsdlNBWTdpUW95QWp6SXJjWGwyOEpaYzcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0
LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPozyMA0G
CSqGSIb3DQEBCwUAA4IBAQANLtv1h+QW4hTa0nrvmXQeiOFkXJcvHE0otGHPenk5
213sC8oNZwQNPEMibHQ4QtsFc2hozxtGn7cwRI8+zRVvjeGFntfCXCra4YPgQ+8C
iuTglOrvMoHofbJ+o4t7qVVCfIN3e4QApka7tUC2qJ+7JgHSZC2meIZtCCcjIMON
HsHiwymMBSE7lqzavggll/ZBsp9pnu5Toz9dvgFHmfMcY1cdqEIebO19TMqkCeH9
8J+8hLEi1J5pr9Ki5J4XMRSGhwdZUWLub20h0ZfOVTCoP655chCPWxt9Ad1AxTUY
2YxkJHh2tqZF02XW9ZMiCXa3znlYJuKjwulbpw76mXt/
-----END CERTIFICATE-----
Generated at Fri Jun 7 16:37:26 2024 by rpki-client on console-fra.rpki-client.org