Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/tBnzRD1UPfJdzs1g_50bjNVPunc.roa
File: tBnzRD1UPfJdzs1g_50bjNVPunc.roa (raw, json)
Hash identifier: AuW0+eurExbcHbhg+ufRSeVT4XhWJxrh51ekrVWF0sM=
Subject key identifier: B4:19:F3:44:3D:54:3D:F2:5D:CE:CD:60:FF:9D:1B:8C:D5:4F:BA:77
Certificate issuer: /CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Certificate serial: 018CC4936889A3F0523E56C3E3552359D53A
Authority key identifier: 1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/tBnzRD1UPfJdzs1g_50bjNVPunc.roa
Signing time: Mon 01 Jan 2024 10:30:43 +0000
ROA not before: Mon 01 Jan 2024 10:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1213
IP address blocks: 143.239.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:68:89:a3:f0:52:3e:56:c3:e3:55:23:59:d5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Validity
Not Before: Jan 1 10:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b419f3443d543df25dcecd60ff9d1b8cd54fba77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:57:1a:83:1b:69:9a:4f:ef:2f:b8:84:cd:29:
3e:13:de:4e:fd:dd:86:87:c1:18:9c:50:af:91:8f:
94:cf:9b:ee:1d:18:15:8d:bf:ae:d9:51:ed:f9:d0:
15:ea:af:ee:0d:27:92:d2:48:b4:62:fe:a5:61:24:
7c:c8:05:e1:15:51:20:ac:a3:d2:78:46:b5:2e:80:
70:78:d3:a3:b6:01:df:5b:76:54:15:73:a7:2e:2e:
69:f9:07:f6:1e:e1:40:eb:fd:79:f4:47:e2:8a:f5:
6e:52:fc:85:62:7f:67:24:40:5b:a5:50:94:5f:14:
90:06:e3:b0:03:44:20:71:19:0f:7b:6e:09:fb:4d:
a0:25:6e:e4:23:25:62:90:5e:a6:8b:90:2c:aa:74:
5d:81:e4:d4:ab:e1:73:52:61:1c:45:69:f2:e7:95:
40:0f:b3:da:76:16:bf:c9:5a:1b:fc:2e:6c:9d:31:
8d:37:8a:60:46:f0:14:d0:20:b8:0e:a3:c7:a4:78:
70:bf:15:42:95:be:a3:d2:68:a9:f0:3d:f0:e9:cf:
7e:81:6e:e2:9a:25:e4:86:4d:54:e4:95:ed:db:79:
93:7a:42:aa:87:01:8c:6f:cd:39:83:ee:b4:40:6b:
da:03:12:cd:d9:3f:76:0f:be:ae:30:6d:e3:81:38:
73:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:19:F3:44:3D:54:3D:F2:5D:CE:CD:60:FF:9D:1B:8C:D5:4F:BA:77
X509v3 Authority Key Identifier:
keyid:1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/tBnzRD1UPfJdzs1g_50bjNVPunc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.239.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:88:24:d2:5c:3c:2d:bc:5a:6c:f2:03:dd:c3:62:a7:c7:1e:
58:b4:f8:6c:f3:a9:b9:8c:9e:7f:0e:b6:20:0c:c9:ac:a7:9e:
ca:51:fe:87:c1:fd:0e:e2:17:11:a3:a7:6e:03:cc:d4:08:a2:
1a:57:6e:b1:df:3d:2d:c6:91:e4:4b:47:46:85:8c:86:68:d3:
02:2f:19:bd:ed:a5:d0:02:f4:25:38:dd:99:20:77:a2:28:d5:
2d:0a:d2:0d:02:48:f0:21:d8:bd:9c:80:70:15:02:06:a6:a8:
a5:e2:8d:67:56:64:f9:bc:a8:a7:0e:53:fa:00:aa:0b:28:2b:
29:6c:14:c2:52:1a:9c:ed:b7:2b:f0:03:5e:42:ed:63:cd:b7:
1d:9e:5b:ca:4b:3e:f1:68:78:e7:11:5f:ea:49:f6:0e:1b:53:
84:ef:14:22:56:8c:22:02:b8:2e:a5:b5:83:bc:1b:ac:6e:bd:
02:b0:03:27:08:6a:f3:9a:6e:c2:6f:e8:39:15:03:ec:63:30:
cb:f4:d8:40:30:02:e8:ef:cb:2f:cb:a3:bf:a7:26:01:3b:ae:
1a:17:9d:f5:d4:e9:34:2c:eb:0b:80:b8:35:d6:c8:9e:10:fa:
b0:89:cd:ca:35:62:94:fe:16:5a:c4:b6:75:9b:04:33:6c:aa:
2a:a8:4d:8d
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYzEk2iJo/BSPlbD41UjWdU6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNGMyNjI3M2RhMjgyMWZjZTI2MDc1YWEwYTZlMjMwMWVj
ODQ5MjcwHhcNMjQwMTAxMTAzMDQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDE5ZjM0NDNkNTQzZGYyNWRjZWNkNjBmZjlkMWI4Y2Q1NGZiYTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVcagxtpmk/vL7iEzSk+E95O/d2G
h8EYnFCvkY+Uz5vuHRgVjb+u2VHt+dAV6q/uDSeS0ki0Yv6lYSR8yAXhFVEgrKPS
eEa1LoBweNOjtgHfW3ZUFXOnLi5p+Qf2HuFA6/159EfiivVuUvyFYn9nJEBbpVCU
XxSQBuOwA0QgcRkPe24J+02gJW7kIyVikF6mi5AsqnRdgeTUq+FzUmEcRWny55VA
D7Padha/yVob/C5snTGNN4pgRvAU0CC4DqPHpHhwvxVClb6j0mip8D3w6c9+gW7i
miXkhk1U5JXt23mTekKqhwGMb805g+60QGvaAxLN2T92D76uMG3jgThz1wIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFLQZ80Q9VD3yXc7NYP+dG4zVT7p3MB8GA1UdIwQY
MBaAFBxMJic9ooIfziYHWqCm4jAeyEknMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEV3bUp6MmlnaF9PSmdkYW9LYmlNQjdJU1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81NDVjY2UtYWYxMS00ZWY3LTlhNWQt
ZDM1YjQzMGFmMjZkLzEvdEJuelJEMVVQZkpkenMxZ181MGJqTlZQdW5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS81NDVjY2UtYWYxMS00ZWY3LTlhNWQtZDM1YjQzMGFmMjZk
LzEvSEV3bUp6MmlnaF9PSmdkYW9LYmlNQjdJU1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj+8wDQYJ
KoZIhvcNAQELBQADggEBAGWIJNJcPC28WmzyA93DYqfHHli0+GzzqbmMnn8OtiAM
yaynnspR/ofB/Q7iFxGjp24DzNQIohpXbrHfPS3GkeRLR0aFjIZo0wIvGb3tpdAC
9CU43Zkgd6Io1S0K0g0CSPAh2L2cgHAVAgamqKXijWdWZPm8qKcOU/oAqgsoKyls
FMJSGpzttyvwA15C7WPNtx2eW8pLPvFoeOcRX+pJ9g4bU4TvFCJWjCICuC6ltYO8
G6xuvQKwAycIavOabsJv6DkVA+xjMMv02EAwAujvyy/Lo7+nJgE7rhoXnfXU6TQs
6wuAuDXWyJ4Q+rCJzco1YpT+FlrEtnWbBDNsqiqoTY0=
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:46:44 2024 by rpki-client on console-ams.rpki-client.org