Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D6hlypF6P5fg54JONwMAra5Kooc.roa
File: D6hlypF6P5fg54JONwMAra5Kooc.roa (raw, json)
Hash identifier: nFzwJkr7tyzIiFQQpEwuP+3F8nhJcDgw/uNMBB0coMA=
Subject key identifier: 0F:A8:65:CA:91:7A:3F:97:E0:E7:82:4E:37:03:00:AD:AE:4A:A2:87
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018CC726A49628D57813EC62FA6A011ED5F7
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D6hlypF6P5fg54JONwMAra5Kooc.roa
Signing time: Mon 01 Jan 2024 22:30:47 +0000
ROA not before: Mon 01 Jan 2024 22:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142111
IP address blocks: 87.254.9.0/24 maxlen: 24
87.254.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:a4:96:28:d5:78:13:ec:62:fa:6a:01:1e:d5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jan 1 22:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fa865ca917a3f97e0e7824e370300adae4aa287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:9e:e7:a4:50:a9:dc:fe:1f:1e:aa:94:c9:
65:3b:1c:77:f7:de:a6:ef:dc:48:6c:7b:86:40:fa:
83:a4:c0:1e:33:0e:c7:c6:17:0a:94:a2:b9:99:2f:
6b:cb:32:a5:2e:6d:ec:aa:1e:8e:2f:b0:01:20:17:
98:8f:76:a8:4d:1f:f6:32:6a:7c:fc:67:55:69:a7:
12:4f:75:21:56:00:26:13:77:2e:bb:a9:6b:b5:41:
d3:fd:9b:4e:5c:32:34:56:b4:29:5d:75:7b:0d:da:
eb:81:14:90:2b:34:d5:7d:30:39:dc:64:dc:8a:62:
f3:bf:12:a8:17:25:c6:47:7a:fd:5a:36:64:63:ea:
61:9e:8b:54:e7:d3:cd:89:23:64:d8:7c:99:a7:ed:
91:f9:81:39:21:34:b6:20:31:66:71:b9:87:b5:c1:
00:f8:fe:62:59:d3:97:ff:66:75:33:a7:d6:ba:ab:
65:cd:f5:b2:ee:70:d0:b6:5f:3c:95:e5:b3:f1:c9:
8f:3c:b8:07:9d:2e:3b:a0:d7:85:a4:8b:ae:fa:77:
05:c7:33:84:82:97:52:45:33:c8:9a:c8:b9:f4:e9:
1e:a2:10:be:75:b0:fa:04:51:0b:63:c8:b1:cf:25:
cd:62:a0:c5:c0:44:a4:4f:3d:2d:8c:40:12:27:ec:
d5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A8:65:CA:91:7A:3F:97:E0:E7:82:4E:37:03:00:AD:AE:4A:A2:87
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D6hlypF6P5fg54JONwMAra5Kooc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.9.0/24
87.254.18.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:ed:c3:c7:13:b8:0a:3f:aa:d3:99:33:c0:c7:7b:5e:a6:02:
54:ba:cc:12:a6:95:58:e1:6d:01:10:a1:18:48:14:c3:0d:d4:
62:7f:56:66:01:22:84:8e:94:a6:4d:7b:a1:e3:2b:30:62:5d:
60:ce:7f:83:4a:b6:a8:99:1d:5e:1f:e9:a7:7b:fa:50:84:2f:
86:91:a9:c8:3e:f9:3e:e0:3c:1a:c5:4c:76:0f:0a:4b:f0:81:
8b:ea:b1:3b:6a:ae:83:78:4c:ce:7b:b8:31:4c:9b:1b:f7:c6:
a7:0d:69:9d:be:a5:39:70:04:8b:c9:d9:47:c7:79:10:c4:c2:
d2:97:9c:28:d5:a2:21:94:99:21:02:13:04:df:1a:97:0f:f8:
df:b3:f9:76:eb:df:7b:d6:4b:b3:e5:d5:f4:79:5f:b4:b9:1e:
1c:5e:0b:71:d9:58:9c:bb:63:4a:4a:8b:bf:4c:6b:70:2a:10:
06:de:09:5d:c0:5c:5f:b5:f2:67:5c:c6:44:a7:88:79:22:d4:
7f:22:b1:4d:38:2f:26:d0:af:cd:40:98:9e:f7:b5:0d:dd:37:
77:e9:e7:ff:6b:75:b0:28:3c:73:d6:6e:c5:6e:f2:25:e0:0a:
a3:0d:5f:9c:02:b5:0f:b6:ad:65:52:2a:3e:a2:01:a3:80:55:
a3:b7:10:5d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHJqSWKNV4E+xi+moBHtX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1
OGRjZDQwHhcNMjQwMTAxMjIzMDQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmE4NjVjYTkxN2EzZjk3ZTBlNzgyNGUzNzAzMDBhZGFlNGFhMjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM+e56RQqdz+Hx6qlMllOxx3996m
79xIbHuGQPqDpMAeMw7HxhcKlKK5mS9ryzKlLm3sqh6OL7ABIBeYj3aoTR/2Mmp8
/GdVaacST3UhVgAmE3cuu6lrtUHT/ZtOXDI0VrQpXXV7DdrrgRSQKzTVfTA53GTc
imLzvxKoFyXGR3r9WjZkY+phnotU59PNiSNk2HyZp+2R+YE5ITS2IDFmcbmHtcEA
+P5iWdOX/2Z1M6fWuqtlzfWy7nDQtl88leWz8cmPPLgHnS47oNeFpIuu+ncFxzOE
gpdSRTPImsi59OkeohC+dbD6BFELY8ixzyXNYqDFwESkTz0tjEASJ+zVMwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA+oZcqRej+X4OeCTjcDAK2uSqKHMB8GA1UdIwQY
MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt
NmZjZGNkNWFiNjYwLzEvRDZobHlwRjZQNWZnNTRKT053TUFyYTVLb29jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw
LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/4JAwQB
V/4SMA0GCSqGSIb3DQEBCwUAA4IBAQB77cPHE7gKP6rTmTPAx3tepgJUuswSppVY
4W0BEKEYSBTDDdRif1ZmASKEjpSmTXuh4yswYl1gzn+DSraomR1eH+mne/pQhC+G
kanIPvk+4DwaxUx2DwpL8IGL6rE7aq6DeEzOe7gxTJsb98anDWmdvqU5cASLydlH
x3kQxMLSl5wo1aIhlJkhAhME3xqXD/jfs/l269971kuz5dX0eV+0uR4cXgtx2Vic
u2NKSou/TGtwKhAG3gldwFxftfJnXMZEp4h5ItR/IrFNOC8m0K/NQJie97UN3Td3
6ef/a3WwKDxz1m7FbvIl4AqjDV+cArUPtq1lUio+ogGjgFWjtxBd
-----END CERTIFICATE-----
Generated at Fri May 10 10:17:03 2024 by rpki-client on console-ams.rpki-client.org