Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/DHztZfL4dtQjbE6TuQn019RdJu4.roa
File: DHztZfL4dtQjbE6TuQn019RdJu4.roa (raw, json)
Hash identifier: uYfjSLlt77pEmD0BFO7YLQgzNVw9k6l/8UI7EWcBWKU=
Subject key identifier: 0C:7C:ED:65:F2:F8:76:D4:23:6C:4E:93:B9:09:F4:D7:D4:5D:26:EE
Certificate issuer: /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Certificate serial: 018CC56DF9124BD6C82C1A15386549B4DC66
Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/DHztZfL4dtQjbE6TuQn019RdJu4.roa
Signing time: Mon 01 Jan 2024 14:29:27 +0000
ROA not before: Mon 01 Jan 2024 14:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 94.140.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f9:12:4b:d6:c8:2c:1a:15:38:65:49:b4:dc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Validity
Not Before: Jan 1 14:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c7ced65f2f876d4236c4e93b909f4d7d45d26ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:83:70:be:e2:61:57:f9:b2:85:44:3b:1d:
30:42:92:bd:b9:df:ee:ca:3d:a6:71:45:da:37:ab:
bf:8a:bb:4e:a0:38:57:53:d4:0f:4b:c2:1b:46:0f:
7e:32:a4:4d:2b:2d:23:1e:7e:05:e1:5b:90:2b:8a:
a9:b8:2f:c7:a7:95:9c:c9:0b:d9:aa:59:13:52:44:
3a:00:26:da:08:d4:66:f7:06:68:39:12:18:01:06:
06:59:9f:c7:6a:96:e1:7f:c6:50:29:af:46:09:ef:
44:bb:7a:b3:28:be:07:ae:ab:6e:48:bb:4e:33:62:
b2:ef:74:71:69:94:dd:cf:3a:a9:b7:89:3a:90:aa:
45:ab:8a:a4:24:60:41:45:13:e8:04:91:6f:1c:a5:
e7:f9:07:6a:d9:4c:d1:32:42:9f:51:dc:16:a5:cd:
6f:1f:6e:c6:53:73:af:ca:40:75:97:38:19:5f:9d:
64:36:fa:c2:b4:c2:7c:50:48:2b:e3:2f:8a:51:7e:
64:6d:e5:c4:57:a0:16:4a:95:b0:c3:dd:99:a5:81:
6a:dd:9a:c1:0d:bd:9a:8e:91:3c:46:17:8b:4d:b2:
99:19:d9:6e:3c:c4:f3:67:f3:dd:ed:7c:85:dc:dc:
a6:17:6f:6f:7f:55:f9:24:a3:a2:c0:b3:79:41:35:
2b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7C:ED:65:F2:F8:76:D4:23:6C:4E:93:B9:09:F4:D7:D4:5D:26:EE
X509v3 Authority Key Identifier:
keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/DHztZfL4dtQjbE6TuQn019RdJu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.140.0.0/24
Signature Algorithm: sha256WithRSAEncryption
58:d6:ab:f4:fc:96:03:d9:52:81:7c:f9:0e:65:c1:fc:63:13:
05:eb:ca:fd:79:2a:ca:6e:c6:41:f2:b2:2e:ad:bf:e5:f0:df:
7f:2e:49:fa:0b:7a:47:7d:56:e8:b8:24:90:e0:41:c6:f0:52:
1c:9a:9b:7e:3e:9e:69:e5:81:49:9d:32:3f:e8:1e:a9:6b:fb:
8e:03:24:77:59:ea:3a:6b:c8:a0:92:f8:04:3d:68:f2:7e:6b:
91:4a:b1:11:d5:ff:ab:46:1f:1e:33:5f:17:91:c9:2e:b3:da:
77:5a:d8:c5:e4:5e:13:6a:15:fe:7a:ec:a2:ea:52:a2:99:60:
d4:3a:da:d2:af:17:67:e0:e5:3c:f1:53:8b:6a:98:b4:a5:0d:
fb:40:c2:1c:af:b0:2b:47:b1:3c:18:39:4b:c7:af:6b:79:c1:
e8:13:0a:6b:08:70:88:01:be:c2:91:d9:37:f8:a8:0e:0c:cf:
b9:af:91:94:03:02:3e:32:55:b2:ff:b1:91:16:10:83:5c:2c:
83:e2:11:eb:bf:c4:36:ec:e3:72:28:aa:8f:06:40:d1:36:9f:
0a:84:f8:7b:80:c7:2a:bc:d6:71:9e:98:71:6b:db:60:bc:7b:
b0:cf:eb:69:91:91:d4:0f:25:fa:80:2c:ea:38:b1:b0:78:5a:
da:ee:bb:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbfkSS9bILBoVOGVJtNxmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxODE0YTI4YThjMWViZTBhZGMzM2ExNTE5Yjk4ODNlMzA4
NGJiNTkwHhcNMjQwMTAxMTQyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzdjZWQ2NWYyZjg3NmQ0MjM2YzRlOTNiOTA5ZjRkN2Q0NWQyNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq+DcL7iYVf5soVEOx0wQpK9ud/u
yj2mcUXaN6u/irtOoDhXU9QPS8IbRg9+MqRNKy0jHn4F4VuQK4qpuC/Hp5WcyQvZ
qlkTUkQ6ACbaCNRm9wZoORIYAQYGWZ/Hapbhf8ZQKa9GCe9Eu3qzKL4HrqtuSLtO
M2Ky73RxaZTdzzqpt4k6kKpFq4qkJGBBRRPoBJFvHKXn+Qdq2UzRMkKfUdwWpc1v
H27GU3OvykB1lzgZX51kNvrCtMJ8UEgr4y+KUX5kbeXEV6AWSpWww92ZpYFq3ZrB
Db2ajpE8RheLTbKZGdluPMTzZ/Pd7XyF3NymF29vf1X5JKOiwLN5QTUrhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAx87WXy+HbUI2xOk7kJ9NfUXSbuMB8GA1UdIwQY
MBaAFLGBSiiowevgrcM6FRm5iD4whLtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1lGS0tLakI2LUN0d3pvVkdibUlQakNFdTFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zZmJmZjYtNzNlZS00ODEyLThlNGIt
ODFkYWJjODFjMDVjLzEvREh6dFpmTDRkdFFqYkU2VHVRbjAxOVJkSnU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8zZmJmZjYtNzNlZS00ODEyLThlNGItODFkYWJjODFjMDVj
LzEvc1lGS0tLakI2LUN0d3pvVkdibUlQakNFdTFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXowAMA0G
CSqGSIb3DQEBCwUAA4IBAQBY1qv0/JYD2VKBfPkOZcH8YxMF68r9eSrKbsZB8rIu
rb/l8N9/Lkn6C3pHfVbouCSQ4EHG8FIcmpt+Pp5p5YFJnTI/6B6pa/uOAyR3Weo6
a8igkvgEPWjyfmuRSrER1f+rRh8eM18Xkckus9p3WtjF5F4TahX+euyi6lKimWDU
OtrSrxdn4OU88VOLapi0pQ37QMIcr7ArR7E8GDlLx69recHoEwprCHCIAb7Ckdk3
+KgODM+5r5GUAwI+MlWy/7GRFhCDXCyD4hHrv8Q27ONyKKqPBkDRNp8KhPh7gMcq
vNZxnphxa9tgvHuwz+tpkZHUDyX6gCzqOLGweFra7rtz
-----END CERTIFICATE-----
Generated at Tue May 7 20:32:07 2024 by rpki-client on console-ams.rpki-client.org