Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/PyhwpqWc97EgUJX4ODB5w8DXyyw.roa
File: PyhwpqWc97EgUJX4ODB5w8DXyyw.roa (raw, json)
Hash identifier: kenO6+v3RkJBWhBI8cLAoi9yAF2UmQChqTDKmPXD21E=
Subject key identifier: 3F:28:70:A6:A5:9C:F7:B1:20:50:95:F8:38:30:79:C3:C0:D7:CB:2C
Certificate issuer: /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial: 018CC9BC571AD0CCBDCD4987A9F3851F20C8
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/PyhwpqWc97EgUJX4ODB5w8DXyyw.roa
Signing time: Tue 02 Jan 2024 10:33:32 +0000
ROA not before: Tue 02 Jan 2024 10:33:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4214120002
IP address blocks: 185.168.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:57:1a:d0:cc:bd:cd:49:87:a9:f3:85:1f:20:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
Validity
Not Before: Jan 2 10:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f2870a6a59cf7b1205095f8383079c3c0d7cb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:2b:48:3a:86:be:65:68:8b:bf:c5:1e:e3:
bb:27:11:3d:06:29:24:f1:41:e0:88:0c:61:31:47:
bf:15:7c:7b:a1:54:31:8c:64:fd:9b:91:65:36:22:
28:57:15:18:98:3e:01:f7:3d:cc:92:2a:fe:db:9b:
1c:16:b6:39:12:6f:0d:e3:b4:26:1a:88:85:d4:11:
71:0c:a8:10:b7:21:14:11:04:bc:e3:ee:90:3b:e7:
11:58:b0:12:73:e1:6b:1a:be:47:e2:c7:03:27:15:
1b:62:c3:92:36:d1:7f:85:fd:a0:4b:d9:42:f6:1e:
48:18:9d:40:21:43:ab:9a:b0:b9:f4:4d:a5:fb:a4:
9a:a7:78:fd:90:48:1d:03:be:27:7f:4c:30:ff:34:
ef:70:74:be:eb:ba:db:81:1e:69:bd:39:ab:8f:6f:
a2:f0:32:44:85:82:0f:b8:93:ed:8b:0f:80:82:da:
95:11:16:92:19:a5:cd:69:c6:a1:da:03:56:4f:ee:
cc:6b:ef:71:d6:4c:56:85:5e:6f:f3:d9:77:fb:b6:
ac:cc:b1:4d:5a:71:9d:c6:46:cb:f6:0c:ca:5f:d6:
6a:27:27:e3:00:57:82:97:5a:14:b8:18:fd:0d:b6:
fa:54:86:93:e2:5e:5d:a5:8a:1c:ea:9e:cb:78:17:
f0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:28:70:A6:A5:9C:F7:B1:20:50:95:F8:38:30:79:C3:C0:D7:CB:2C
X509v3 Authority Key Identifier:
keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/PyhwpqWc97EgUJX4ODB5w8DXyyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.163.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:8a:4e:da:17:04:f1:bc:c2:76:ea:16:96:21:04:00:de:97:
5b:c8:ab:c3:fe:8f:2b:d1:19:37:74:dd:67:69:74:eb:3d:b1:
54:5a:0b:5c:89:95:df:6d:f0:52:95:a8:e6:3b:e3:47:87:a0:
c1:0e:52:08:dc:df:2f:77:2d:d8:d0:21:a0:a4:c5:3f:0b:ae:
0c:62:b4:4a:19:4c:e5:74:1b:63:0c:9e:fd:2a:06:2b:a7:91:
f2:85:26:42:12:82:00:50:40:cc:39:54:67:95:dd:8e:58:65:
f5:87:b6:27:8c:79:81:70:2a:59:b4:36:7d:34:f5:76:96:38:
cc:b0:ce:95:33:bf:2b:01:61:ab:ed:61:e3:0a:8a:a3:7f:38:
8c:f9:de:13:dd:68:b1:98:a1:ab:94:85:0d:e5:66:2b:d6:a6:
2b:87:8a:62:89:01:b0:10:b3:10:b0:21:ee:02:35:59:62:0a:
56:b5:c6:3c:65:eb:a6:ac:62:27:f5:c4:88:85:de:15:f5:46:
a0:e6:6c:89:60:35:44:38:49:61:7d:bc:74:f9:1d:81:a6:c6:
e9:37:6d:e9:b8:07:9d:cc:f8:4f:1f:eb:28:72:10:dc:98:e2:
d5:05:45:39:75:29:76:29:e2:89:c6:91:d9:28:91:23:6e:58:
6b:d8:05:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvFca0My9zUmHqfOFHyDIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTZlYmY2NmI4MGYwODEzNTg1OGQxNDRjZWQ2Zjc4NTgz
NGY1ZjQwHhcNMjQwMTAyMTAzMzMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjI4NzBhNmE1OWNmN2IxMjA1MDk1ZjgzODMwNzljM2MwZDdjYjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS4rSDqGvmVoi7/FHuO7JxE9Bikk
8UHgiAxhMUe/FXx7oVQxjGT9m5FlNiIoVxUYmD4B9z3Mkir+25scFrY5Em8N47Qm
GoiF1BFxDKgQtyEUEQS84+6QO+cRWLASc+FrGr5H4scDJxUbYsOSNtF/hf2gS9lC
9h5IGJ1AIUOrmrC59E2l+6Sap3j9kEgdA74nf0ww/zTvcHS+67rbgR5pvTmrj2+i
8DJEhYIPuJPtiw+AgtqVERaSGaXNacah2gNWT+7Ma+9x1kxWhV5v89l3+7aszLFN
WnGdxkbL9gzKX9ZqJyfjAFeCl1oUuBj9Dbb6VIaT4l5dpYoc6p7LeBfwRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD8ocKalnPexIFCV+DgwecPA18ssMB8GA1UdIwQY
MBaAFJJW6/ZrgPCBNYWNFEztb3hYNPX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xicjltdUE4SUUxaFkwVVRPMXZlRmcwOWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iNzE3YzUtYTY0Yi00NDc1LWJlM2Ut
NWRhOGQ2NzdkODQ3LzEvUHlod3BxV2M5N0VnVUpYNE9EQjV3OERYeXl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9iNzE3YzUtYTY0Yi00NDc1LWJlM2UtNWRhOGQ2NzdkODQ3
LzEva2xicjltdUE4SUUxaFkwVVRPMXZlRmcwOWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaijMA0G
CSqGSIb3DQEBCwUAA4IBAQAfik7aFwTxvMJ26haWIQQA3pdbyKvD/o8r0Rk3dN1n
aXTrPbFUWgtciZXfbfBSlajmO+NHh6DBDlII3N8vdy3Y0CGgpMU/C64MYrRKGUzl
dBtjDJ79KgYrp5HyhSZCEoIAUEDMOVRnld2OWGX1h7YnjHmBcCpZtDZ9NPV2ljjM
sM6VM78rAWGr7WHjCoqjfziM+d4T3WixmKGrlIUN5WYr1qYrh4piiQGwELMQsCHu
AjVZYgpWtcY8ZeumrGIn9cSIhd4V9Uag5myJYDVEOElhfbx0+R2BpsbpN23puAed
zPhPH+sochDcmOLVBUU5dSl2KeKJxpHZKJEjblhr2AVQ
-----END CERTIFICATE-----
Generated at Sun May 5 14:37:36 2024 by rpki-client on console-ams.rpki-client.org