Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/hM2TXILjwRXKu19RCABsoim6Yx0.roa
File: hM2TXILjwRXKu19RCABsoim6Yx0.roa (raw, json)
Hash identifier: yD4bfloOB0QmM5WElpoC2NCau7DP9NvpFOTIvDCmumg=
Subject key identifier: 84:CD:93:5C:82:E3:C1:15:CA:BB:5F:51:08:00:6C:A2:29:BA:63:1D
Certificate issuer: /CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Certificate serial: 018CC3B67F6EDCA537AC99CAE7F326A5A27A
Authority key identifier: 89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/hM2TXILjwRXKu19RCABsoim6Yx0.roa
Signing time: Mon 01 Jan 2024 06:29:26 +0000
ROA not before: Mon 01 Jan 2024 06:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210885
IP address blocks: 87.236.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:7f:6e:dc:a5:37:ac:99:ca:e7:f3:26:a5:a2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Validity
Not Before: Jan 1 06:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84cd935c82e3c115cabb5f5108006ca229ba631d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0f:1a:74:a9:9a:fc:53:37:92:49:ae:f6:4f:
9b:a2:dc:ec:37:77:2e:3e:91:77:7f:96:e7:3b:9a:
9a:dd:d8:58:d9:fc:c6:55:b2:5e:a9:b0:c4:c3:3e:
da:94:2d:89:87:e3:68:d9:db:b1:2c:48:a8:3e:b1:
af:05:43:20:6c:92:40:0f:47:12:ca:18:a3:30:d9:
47:8b:01:b9:bf:39:c6:40:7a:ee:88:b2:09:1d:a1:
14:21:69:04:48:7a:a5:80:77:31:e2:9d:78:26:f5:
b7:1b:91:e0:26:fb:13:3d:52:30:8a:12:10:31:d1:
35:53:56:75:4b:dc:d6:e2:b0:09:97:b4:11:26:74:
6f:40:07:f0:f8:c7:4e:94:e7:68:bc:2c:22:f1:81:
40:76:ce:41:ce:72:e1:74:34:e5:cd:00:99:fb:13:
ef:64:98:84:f3:b4:5a:79:c7:67:b1:ce:7e:5d:ca:
dd:cc:99:e7:67:2d:e5:2c:9a:3c:de:d5:e3:0b:ee:
eb:5a:f7:c4:cf:58:d3:a5:d0:93:e9:5c:3a:2b:27:
f1:10:85:9f:7a:7c:01:8a:ec:36:10:cb:a7:2b:cb:
c6:34:e1:19:8a:8e:b7:7a:09:a8:b3:57:80:43:c6:
60:ab:d2:12:98:8a:13:f8:0d:6a:d2:4b:6c:86:5a:
5e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CD:93:5C:82:E3:C1:15:CA:BB:5F:51:08:00:6C:A2:29:BA:63:1D
X509v3 Authority Key Identifier:
keyid:89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/hM2TXILjwRXKu19RCABsoim6Yx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.149.0/24
Signature Algorithm: sha256WithRSAEncryption
18:2d:56:3b:57:6c:34:fc:a8:d2:f2:c2:63:66:2f:91:52:e7:
cf:c7:77:e4:82:0a:08:de:d5:2c:e8:3e:39:c9:07:49:78:51:
84:9c:10:bc:30:a4:68:6d:d1:0b:2f:c7:97:10:74:5f:60:3f:
87:37:49:97:3a:6c:9a:c4:5f:eb:36:40:af:41:a7:cb:8d:c1:
84:37:a1:d4:cd:39:17:f6:bc:7c:fa:0a:88:9d:6b:d1:46:72:
1f:77:24:48:e2:a4:f5:d9:1f:1d:0b:d0:71:03:27:3f:fd:52:
3f:ff:4a:e9:e2:be:d5:d5:0e:e2:4e:66:ce:89:f0:9f:4c:42:
c9:f2:28:9e:1b:7b:8b:6c:2c:1a:f9:ff:20:75:4a:91:b2:a4:
b9:aa:b0:43:8b:0b:93:39:e3:fe:fb:b7:f6:e9:b9:4a:4a:69:
a4:e1:cf:a8:69:81:5c:a0:58:2d:71:bf:45:32:a5:f5:dd:80:
46:78:64:e9:dd:f0:48:17:b7:e1:41:29:96:33:16:3e:f9:6d:
04:8b:52:bf:be:dc:54:e6:f9:9a:12:90:3c:f2:29:80:fe:00:
e6:51:c5:cc:06:b0:7f:07:47:6b:32:90:48:d5:87:2f:d7:a3:
78:a7:01:6b:2f:ca:14:c4:32:c9:e2:5e:89:9a:88:e0:86:b5:
b4:de:40:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtn9u3KU3rJnK5/MmpaJ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MzlhYmY3MWVlYzEwYzVkOTA2MDlmY2E5ZjM0Y2I4NWQz
ZDU0NGUwHhcNMjQwMTAxMDYyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGNkOTM1YzgyZTNjMTE1Y2FiYjVmNTEwODAwNmNhMjI5YmE2MzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ8adKma/FM3kkmu9k+botzsN3cu
PpF3f5bnO5qa3dhY2fzGVbJeqbDEwz7alC2Jh+No2duxLEioPrGvBUMgbJJAD0cS
yhijMNlHiwG5vznGQHruiLIJHaEUIWkESHqlgHcx4p14JvW3G5HgJvsTPVIwihIQ
MdE1U1Z1S9zW4rAJl7QRJnRvQAfw+MdOlOdovCwi8YFAds5BznLhdDTlzQCZ+xPv
ZJiE87Raecdnsc5+XcrdzJnnZy3lLJo83tXjC+7rWvfEz1jTpdCT6Vw6KyfxEIWf
enwBiuw2EMunK8vGNOEZio63egmos1eAQ8Zgq9ISmIoT+A1q0ktshlpe7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFITNk1yC48EVyrtfUQgAbKIpumMdMB8GA1UdIwQY
MBaAFIk5q/ce7BDF2QYJ/KnzTLhdPVROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVRtcjl4N3NFTVhaQmduOHFmTk11RjA5VkU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81ZDE4NTItYWZhOC00NWM1LWE2Yjct
YjVhYjc4OTYwYzZiLzEvaE0yVFhJTGp3UlhLdTE5UkNBQnNvaW02WXgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC81ZDE4NTItYWZhOC00NWM1LWE2YjctYjVhYjc4OTYwYzZi
LzEvaVRtcjl4N3NFTVhaQmduOHFmTk11RjA5VkU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+yVMA0G
CSqGSIb3DQEBCwUAA4IBAQAYLVY7V2w0/KjS8sJjZi+RUufPx3fkggoI3tUs6D45
yQdJeFGEnBC8MKRobdELL8eXEHRfYD+HN0mXOmyaxF/rNkCvQafLjcGEN6HUzTkX
9rx8+gqInWvRRnIfdyRI4qT12R8dC9BxAyc//VI//0rp4r7V1Q7iTmbOifCfTELJ
8iieG3uLbCwa+f8gdUqRsqS5qrBDiwuTOeP++7f26blKSmmk4c+oaYFcoFgtcb9F
MqX13YBGeGTp3fBIF7fhQSmWMxY++W0Ei1K/vtxU5vmaEpA88imA/gDmUcXMBrB/
B0drMpBI1Ycv16N4pwFrL8oUxDLJ4l6JmojghrW03kBC
-----END CERTIFICATE-----
Generated at Tue Nov 26 03:26:44 2024 by rpki-client on console-ams.rpki-client.org