Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/9H1LQjGw1C8PnJD4wbHs1naFP2U.roa
File: 9H1LQjGw1C8PnJD4wbHs1naFP2U.roa (raw, json)
Hash identifier: eexSul/G6hqGg8kuA3vUiPydTGMguIAjfrVCSAS2Cdc=
Subject key identifier: F4:7D:4B:42:31:B0:D4:2F:0F:9C:90:F8:C1:B1:EC:D6:76:85:3F:65
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 018CC94E24B72F6041F270108A0E74595C2C
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/9H1LQjGw1C8PnJD4wbHs1naFP2U.roa
Signing time: Tue 02 Jan 2024 08:33:10 +0000
ROA not before: Tue 02 Jan 2024 08:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52012
IP address blocks: 192.109.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:24:b7:2f:60:41:f2:70:10:8a:0e:74:59:5c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Jan 2 08:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f47d4b4231b0d42f0f9c90f8c1b1ecd676853f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e3:8c:7a:b2:7f:cc:cb:d1:2d:85:84:b3:2a:
ac:fa:88:10:1d:bd:19:86:9e:6d:2d:1a:d8:08:e9:
58:45:9e:8a:71:1c:72:16:7f:79:c5:e2:ac:4e:49:
a3:49:21:c9:a3:b1:5b:e8:54:ec:ea:62:66:57:15:
e0:aa:5c:56:43:54:6c:fe:40:db:e6:5d:53:d2:96:
66:ee:e8:19:f7:ef:6e:1e:c7:3e:15:23:b0:21:f9:
61:78:59:18:8c:ef:87:a0:26:24:b9:ee:c4:e9:d1:
ef:78:38:e7:4c:92:3a:90:1c:e9:f8:e3:24:0c:f7:
d5:b6:d9:1c:2c:d7:20:e8:71:94:f9:01:d4:b7:23:
16:9a:d9:c4:0e:17:9c:05:52:05:b5:ef:6c:b6:2f:
5a:4f:75:52:0c:20:d8:28:c4:3e:00:2b:26:ec:48:
ae:d9:04:48:37:57:2b:39:c0:4b:53:ef:b7:7a:a8:
43:3b:de:a0:90:71:62:c9:09:f1:fd:23:30:d2:46:
8e:7c:33:b1:e1:a1:b7:a9:0b:24:2d:65:e0:56:b9:
57:33:a0:4d:ce:3e:2d:66:d5:ae:2e:aa:8d:f3:ca:
25:26:40:d1:fb:6a:ed:19:44:fd:e7:46:cc:8e:1f:
12:ea:44:dd:e4:c8:b4:c8:11:0b:6e:87:96:db:5e:
8b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7D:4B:42:31:B0:D4:2F:0F:9C:90:F8:C1:B1:EC:D6:76:85:3F:65
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/9H1LQjGw1C8PnJD4wbHs1naFP2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.195.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:3b:5f:f0:8f:10:12:ac:e6:e9:e2:41:4a:37:b7:67:89:24:
4b:e2:49:4a:83:f9:0d:94:fb:64:dd:63:a0:03:3f:ce:f9:74:
ec:ae:c6:9d:49:54:56:d0:c0:2a:82:0e:af:ad:bd:06:32:3a:
cd:6d:75:35:28:82:63:04:f8:9b:2e:94:5e:08:39:89:f6:2e:
8a:ed:82:7a:1b:24:33:e1:2b:2b:1a:51:a9:cb:1a:47:8f:ff:
75:50:9b:af:b8:7d:26:02:b7:2c:23:ac:5f:4e:d1:c1:66:f2:
43:71:4f:29:ce:69:12:47:63:04:1e:93:b5:5a:48:72:c6:59:
2d:8f:04:79:d5:36:a3:1b:f8:38:f0:08:54:6c:4e:18:e8:1e:
a4:5c:ee:d7:cf:63:07:3d:14:ce:64:84:ca:e8:c1:0c:12:75:
2c:af:1b:3b:dc:b2:44:b1:f0:a6:9c:4b:a0:a6:fe:a4:6c:64:
a2:6f:73:7f:c1:4c:59:a9:17:1a:3f:b2:2a:61:cb:92:97:6f:
12:bb:82:f6:a0:23:14:f8:09:51:ac:b3:37:3e:c8:f8:71:d8:
8d:37:bd:c1:44:53:0d:80:c5:57:06:c2:44:90:d0:0c:1b:95:
59:f0:3b:e8:94:ae:ab:b8:20:2f:0d:6e:20:60:df:22:ea:6e:
46:0a:ab:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTiS3L2BB8nAQig50WVwsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NTMxNjZhNmYxZjMzZTQ3MjBlNjdkMjRkZDMyZTQ0NTgw
MzUyZjAwHhcNMjQwMTAyMDgzMzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDdkNGI0MjMxYjBkNDJmMGY5YzkwZjhjMWIxZWNkNjc2ODUzZjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOOMerJ/zMvRLYWEsyqs+ogQHb0Z
hp5tLRrYCOlYRZ6KcRxyFn95xeKsTkmjSSHJo7Fb6FTs6mJmVxXgqlxWQ1Rs/kDb
5l1T0pZm7ugZ9+9uHsc+FSOwIflheFkYjO+HoCYkue7E6dHveDjnTJI6kBzp+OMk
DPfVttkcLNcg6HGU+QHUtyMWmtnEDhecBVIFte9sti9aT3VSDCDYKMQ+ACsm7Eiu
2QRIN1crOcBLU++3eqhDO96gkHFiyQnx/SMw0kaOfDOx4aG3qQskLWXgVrlXM6BN
zj4tZtWuLqqN88olJkDR+2rtGUT950bMjh8S6kTd5Mi0yBELboeW216LHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPR9S0IxsNQvD5yQ+MGx7NZ2hT9lMB8GA1UdIwQY
MBaAFLZTFmpvHzPkcg5n0k3TLkRYA1LwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGxNV2FtOGZNLVJ5RG1mU1RkTXVSRmdEVXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hZWI4YmMtODg0Yy00MDRmLWJjYjIt
ZmNkMzdmMjYwNDdmLzEvOUgxTFFqR3cxQzhQbkpENHdiSHMxbmFGUDJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9hZWI4YmMtODg0Yy00MDRmLWJjYjItZmNkMzdmMjYwNDdm
LzEvdGxNV2FtOGZNLVJ5RG1mU1RkTXVSRmdEVXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG3DMA0G
CSqGSIb3DQEBCwUAA4IBAQC2O1/wjxASrObp4kFKN7dniSRL4klKg/kNlPtk3WOg
Az/O+XTsrsadSVRW0MAqgg6vrb0GMjrNbXU1KIJjBPibLpReCDmJ9i6K7YJ6GyQz
4SsrGlGpyxpHj/91UJuvuH0mArcsI6xfTtHBZvJDcU8pzmkSR2MEHpO1Wkhyxlkt
jwR51TajG/g48AhUbE4Y6B6kXO7Xz2MHPRTOZITK6MEMEnUsrxs73LJEsfCmnEug
pv6kbGSib3N/wUxZqRcaP7IqYcuSl28Su4L2oCMU+AlRrLM3Psj4cdiNN73BRFMN
gMVXBsJEkNAMG5VZ8DvolK6ruCAvDW4gYN8i6m5GCquz
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:50:11 2024 by rpki-client on console-fra.rpki-client.org