Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/HF2tf_pyxtIQnxoX876J9PRwhdw.roa
File: HF2tf_pyxtIQnxoX876J9PRwhdw.roa (raw, json)
Hash identifier: +9YU/EkibapSRZ90m0ReJOVV+tqxQGIEXYu3VwaCXwE=
Subject key identifier: 1C:5D:AD:7F:FA:72:C6:D2:10:9F:1A:17:F3:BE:89:F4:F4:70:85:DC
Certificate issuer: /CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Certificate serial: 0193080404DD779AA1189A87E6006B749BFF
Authority key identifier: 11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/HF2tf_pyxtIQnxoX876J9PRwhdw.roa
Signing time: Thu 07 Nov 2024 19:05:01 +0000
ROA not before: Thu 07 Nov 2024 19:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2906
IP address blocks: 185.9.188.0/22 maxlen: 24
2a03:5640::/32 maxlen: 48
2a03:5640::/36 maxlen: 48
2a03:5640:f000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:08:04:04:dd:77:9a:a1:18:9a:87:e6:00:6b:74:9b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Validity
Not Before: Nov 7 19:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c5dad7ffa72c6d2109f1a17f3be89f4f47085dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:53:c0:09:a1:4a:16:48:c6:78:a2:90:e7:74:
a7:bd:7b:18:4b:4d:18:c2:93:5c:ee:6d:fb:1e:38:
73:29:29:4a:7b:bd:9f:86:79:5b:07:16:0c:03:33:
54:a9:cf:0a:74:70:cc:cc:11:5d:ce:ec:d6:87:ca:
9e:79:0a:c7:cd:79:4b:dd:06:2c:a0:51:73:30:62:
89:10:19:61:78:0c:2e:a4:1d:cd:2b:ed:25:ac:6c:
18:ed:6d:e5:05:b0:2c:ea:0e:91:9b:ae:d7:20:aa:
a3:be:95:8a:14:19:47:20:4c:4b:1b:95:d8:6e:c4:
40:73:1b:d7:23:44:4e:c5:30:3d:ca:a1:f8:e9:4d:
f8:de:49:f9:df:e0:55:7d:a6:76:f4:9f:61:43:cd:
67:a1:43:a8:42:91:c7:18:ee:7f:d9:00:c3:d0:08:
b5:c9:af:a0:d4:e9:7e:99:3e:95:5f:bb:6b:a7:fc:
1d:59:f7:d9:42:02:35:99:24:86:d5:f7:e3:87:b8:
bb:36:dc:ef:72:d5:5c:8e:04:a5:ef:2c:bc:ea:c7:
d9:16:48:7d:55:a3:da:01:a8:9d:1c:d6:93:9d:24:
c1:26:59:55:ea:0f:9d:1b:77:ca:33:08:4b:cb:3e:
0a:07:67:31:e0:fa:99:1a:a0:2d:cc:b7:61:01:c5:
ae:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5D:AD:7F:FA:72:C6:D2:10:9F:1A:17:F3:BE:89:F4:F4:70:85:DC
X509v3 Authority Key Identifier:
keyid:11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/HF2tf_pyxtIQnxoX876J9PRwhdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.188.0/22
IPv6:
2a03:5640::/32
Signature Algorithm: sha256WithRSAEncryption
7e:67:43:1b:1d:59:53:93:0c:34:ab:d2:93:54:40:ec:cf:b0:
7b:0b:5a:99:67:0d:cf:01:97:2d:e0:45:61:bc:d6:a4:ed:df:
9c:73:32:70:47:7c:fd:17:d4:a5:fd:b9:84:99:08:3d:c7:dd:
43:c4:23:1f:9a:14:fb:ff:3a:02:e2:5b:16:d2:b7:b5:02:15:
e9:d7:b8:98:5f:1a:0a:a7:63:31:74:b9:f3:2b:76:d0:e7:44:
d6:57:d6:2b:82:f0:0a:6c:4d:d4:0e:b3:11:8b:02:11:82:2e:
0a:99:31:53:80:5e:46:1f:4e:04:40:a4:94:9d:43:9c:42:bc:
fc:b1:46:68:c7:e6:cd:c2:be:81:66:70:80:81:55:51:b1:50:
48:dd:d6:93:01:52:48:ed:d9:78:6d:2f:d8:4c:e4:e3:49:fb:
5b:4b:cb:27:b3:1b:3a:55:fa:1c:f3:90:86:a9:70:0c:69:29:
ea:50:b7:7a:2f:58:06:21:e5:2e:d1:9a:fa:72:53:7f:f8:f2:
a1:a5:2b:67:96:43:3f:ed:91:90:eb:70:2f:8e:13:5f:2e:4f:
05:5f:bd:c6:35:63:89:ef:c2:1a:77:c6:cd:0f:a5:db:41:a6:
d9:cf:52:a3:77:67:4e:dd:84:e3:b8:d0:6f:b3:e0:e1:46:b4:
1c:0c:28:24
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZMIBATdd5qhGJqH5gBrdJv/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExOGJhNGVmOTAxYWFjMTA4NzZjY2Y5NzZhNWY3ZDE2YzRj
YTc5ZjAwHhcNMjQxMTA3MTkwNTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzVkYWQ3ZmZhNzJjNmQyMTA5ZjFhMTdmM2JlODlmNGY0NzA4NWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VPACaFKFkjGeKKQ53SnvXsYS00Y
wpNc7m37HjhzKSlKe72fhnlbBxYMAzNUqc8KdHDMzBFdzuzWh8qeeQrHzXlL3QYs
oFFzMGKJEBlheAwupB3NK+0lrGwY7W3lBbAs6g6Rm67XIKqjvpWKFBlHIExLG5XY
bsRAcxvXI0ROxTA9yqH46U343kn53+BVfaZ29J9hQ81noUOoQpHHGO5/2QDD0Ai1
ya+g1Ol+mT6VX7trp/wdWffZQgI1mSSG1ffjh7i7NtzvctVcjgSl7yy86sfZFkh9
VaPaAaidHNaTnSTBJllV6g+dG3fKMwhLyz4KB2cx4PqZGqAtzLdhAcWukwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBxdrX/6csbSEJ8aF/O+ifT0cIXcMB8GA1UdIwQY
MBaAFBGLpO+QGqwQh2zPl2pffRbEynnwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVl1azc1QWFyQkNIYk0tWGFsOTlGc1RLZWZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iZDRkOGQtOTM4MC00MGU5LTgxNDIt
ZjJiNGVmYmE1OWJjLzEvSEYydGZfcHl4dElRbnhvWDg3Nko5UFJ3aGR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9iZDRkOGQtOTM4MC00MGU5LTgxNDItZjJiNGVmYmE1OWJj
LzEvRVl1azc1QWFyQkNIYk0tWGFsOTlGc1RLZWZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuQm8MA0E
AgACMAcDBQAqA1ZAMA0GCSqGSIb3DQEBCwUAA4IBAQB+Z0MbHVlTkww0q9KTVEDs
z7B7C1qZZw3PAZct4EVhvNak7d+cczJwR3z9F9Sl/bmEmQg9x91DxCMfmhT7/zoC
4lsW0re1AhXp17iYXxoKp2MxdLnzK3bQ50TWV9YrgvAKbE3UDrMRiwIRgi4KmTFT
gF5GH04EQKSUnUOcQrz8sUZox+bNwr6BZnCAgVVRsVBI3daTAVJI7dl4bS/YTOTj
SftbS8snsxs6Vfoc85CGqXAMaSnqULd6L1gGIeUu0Zr6clN/+PKhpStnlkM/7ZGQ
63AvjhNfLk8FX73GNWOJ78Iad8bND6XbQabZz1Kjd2dO3YTjuNBvs+DhRrQcDCgk
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:30:58 2024 by rpki-client on console-fra.rpki-client.org