Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/qHPNZtRTcQs61u-Mq6Z7SktsKEo.roa
File: qHPNZtRTcQs61u-Mq6Z7SktsKEo.roa (raw, json)
Hash identifier: MybL7Z0kJ9jcdfYf3KJVVGKmj47sNOKBMio+i+vkV6M=
Subject key identifier: A8:73:CD:66:D4:53:71:0B:3A:D6:EF:8C:AB:A6:7B:4A:4B:6C:28:4A
Certificate issuer: /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial: 018CC56DE4C267EDF725F95F584754695900
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/qHPNZtRTcQs61u-Mq6Z7SktsKEo.roa
Signing time: Mon 01 Jan 2024 14:29:22 +0000
ROA not before: Mon 01 Jan 2024 14:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33846
IP address blocks: 164.133.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e4:c2:67:ed:f7:25:f9:5f:58:47:54:69:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
Validity
Not Before: Jan 1 14:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a873cd66d453710b3ad6ef8caba67b4a4b6c284a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c8:c0:97:08:a2:d5:b2:43:ae:5e:cf:9c:2b:
5a:b7:88:25:b3:a9:27:a7:8c:21:fd:11:ed:fc:dd:
b9:99:cc:88:42:26:a0:05:93:d4:d5:34:6e:a5:eb:
a0:43:84:e4:43:ff:04:ad:fb:2a:9e:72:6e:f5:70:
67:f6:0d:7b:a3:67:de:09:e1:a4:61:0b:d0:03:7e:
e3:ee:93:d2:1a:43:6d:31:fe:56:5a:31:75:b9:e3:
ca:3b:7b:59:98:42:90:44:4e:29:12:00:6b:fe:16:
4a:b6:d0:cb:9a:28:a6:09:4d:f3:00:ea:a0:d8:1e:
38:74:ab:ab:26:5a:0b:a4:7e:61:80:3a:7d:71:fd:
2c:b1:01:71:89:c3:d7:81:87:ac:86:b0:50:87:c7:
da:84:5c:10:f8:ad:41:79:62:55:b5:47:81:2f:d0:
ba:73:8d:60:14:46:84:aa:a2:c1:8f:7d:16:0c:68:
79:00:65:66:ab:1c:6a:8c:72:dd:ae:3e:5c:9f:0a:
9f:e7:47:0e:d1:0c:83:c1:fa:8a:bd:87:5e:e3:ed:
32:56:51:a0:ae:db:f6:62:e4:07:86:91:01:ca:cd:
a4:7f:a5:78:f3:5e:ae:cd:68:c1:a0:34:12:54:6f:
cd:a2:f5:69:70:c3:82:71:a7:64:6c:37:f7:56:60:
1d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:73:CD:66:D4:53:71:0B:3A:D6:EF:8C:AB:A6:7B:4A:4B:6C:28:4A
X509v3 Authority Key Identifier:
keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/qHPNZtRTcQs61u-Mq6Z7SktsKEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.133.230.0/24
Signature Algorithm: sha256WithRSAEncryption
77:89:75:d1:91:b1:d6:c6:83:0e:8a:fd:65:7c:54:cd:d3:08:
47:6f:6b:af:26:99:d8:8d:54:fe:1c:d3:0f:74:ca:1d:50:28:
3d:a0:ff:5c:9f:8f:67:35:22:2c:a1:2b:01:a5:cf:ba:3f:3e:
11:18:68:78:fa:e5:9b:7a:8a:29:57:8b:d9:78:b1:52:d2:3a:
d0:29:c7:ac:aa:43:1d:d7:50:3e:b7:11:5a:56:8b:c3:83:68:
ab:83:9e:cf:9a:3c:95:49:3e:d1:19:c2:14:11:50:3f:bd:aa:
36:9b:70:2f:95:6f:d2:aa:c0:66:04:9b:1d:c6:1d:c3:7c:92:
d1:89:93:31:84:9b:82:68:92:69:ff:eb:af:d3:42:79:17:fd:
9f:2d:7a:b4:2b:bb:b7:d6:3c:08:66:5f:67:f7:40:d5:12:73:
c1:54:65:bb:61:65:76:53:a7:be:24:ed:a9:1d:67:a1:4e:c9:
f7:16:48:78:01:c2:ec:fc:a3:6a:dc:de:34:49:a6:6f:55:63:
21:21:61:0c:d8:66:58:5d:49:7c:7f:c5:e2:de:6e:6f:c9:ea:
f2:47:7e:fe:27:10:6b:d3:c7:de:bc:38:c3:90:54:de:b5:4b:
62:dc:70:ed:fe:48:36:a4:13:4c:36:bc:4d:32:4c:32:23:10:
cc:c4:da:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbeTCZ+33JflfWEdUaVkAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlY2VjNTMxZTVjMzc3NTZiODI4NjYzZjljYzIwYWQ2MjE3
NzEzYWMwHhcNMjQwMTAxMTQyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODczY2Q2NmQ0NTM3MTBiM2FkNmVmOGNhYmE2N2I0YTRiNmMyODRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcjAlwii1bJDrl7PnCtat4gls6kn
p4wh/RHt/N25mcyIQiagBZPU1TRupeugQ4TkQ/8ErfsqnnJu9XBn9g17o2feCeGk
YQvQA37j7pPSGkNtMf5WWjF1uePKO3tZmEKQRE4pEgBr/hZKttDLmiimCU3zAOqg
2B44dKurJloLpH5hgDp9cf0ssQFxicPXgYeshrBQh8fahFwQ+K1BeWJVtUeBL9C6
c41gFEaEqqLBj30WDGh5AGVmqxxqjHLdrj5cnwqf50cO0QyDwfqKvYde4+0yVlGg
rtv2YuQHhpEBys2kf6V4816uzWjBoDQSVG/NovVpcMOCcadkbDf3VmAd1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKhzzWbUU3ELOtbvjKume0pLbChKMB8GA1UdIwQY
MBaAFL7OxTHlw3dWuChmP5zCCtYhdxOsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnM3Rk1lWERkMWE0S0dZX25NSUsxaUYzRTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xYmNiOGItYTNmOC00OGNjLThkYjkt
M2RmOWUyMWY0YmNjLzEvcUhQTlp0UlRjUXM2MXUtTXE2WjdTa3RzS0VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8xYmNiOGItYTNmOC00OGNjLThkYjktM2RmOWUyMWY0YmNj
LzEvdnM3Rk1lWERkMWE0S0dZX25NSUsxaUYzRTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApIXmMA0G
CSqGSIb3DQEBCwUAA4IBAQB3iXXRkbHWxoMOiv1lfFTN0whHb2uvJpnYjVT+HNMP
dModUCg9oP9cn49nNSIsoSsBpc+6Pz4RGGh4+uWbeoopV4vZeLFS0jrQKcesqkMd
11A+txFaVovDg2irg57PmjyVST7RGcIUEVA/vao2m3AvlW/SqsBmBJsdxh3DfJLR
iZMxhJuCaJJp/+uv00J5F/2fLXq0K7u31jwIZl9n90DVEnPBVGW7YWV2U6e+JO2p
HWehTsn3Fkh4AcLs/KNq3N40SaZvVWMhIWEM2GZYXUl8f8Xi3m5vyeryR37+JxBr
08fevDjDkFTetUti3HDt/kg2pBNMNrxNMkwyIxDMxNqE
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:55:11 2024 by rpki-client on console-fra.rpki-client.org