Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/HAzZOMrJpv4X6VlWzHjKmTQIdVs.roa
File: HAzZOMrJpv4X6VlWzHjKmTQIdVs.roa (raw, json)
Hash identifier: e0cAxj9DACUFrhO/e2+yCrVSBiphMG0Y98cNwWUP0XA=
Subject key identifier: 1C:0C:D9:38:CA:C9:A6:FE:17:E9:59:56:CC:78:CA:99:34:08:75:5B
Certificate issuer: /CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
Certificate serial: 018CC8DF3B79F2DA6A3FC5165CDB0933491A
Authority key identifier: 8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/HAzZOMrJpv4X6VlWzHjKmTQIdVs.roa
Signing time: Tue 02 Jan 2024 06:32:02 +0000
ROA not before: Tue 02 Jan 2024 06:32:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44684
IP address blocks: 91.244.180.0/24 maxlen: 24
2001:67c:7a4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:3b:79:f2:da:6a:3f:c5:16:5c:db:09:33:49:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
Validity
Not Before: Jan 2 06:32:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c0cd938cac9a6fe17e95956cc78ca993408755b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:25:e2:7c:00:6f:c9:31:ef:04:1d:57:4c:2f:
4c:93:65:25:27:13:73:dc:2e:5c:ec:51:6f:cf:f7:
15:01:5a:cb:0a:2c:4d:0c:f3:96:66:9c:13:e0:86:
7f:5c:be:f6:f0:0e:c8:82:6c:52:20:69:51:2a:0c:
af:2c:50:b7:9e:76:f1:63:9e:8c:6e:93:9c:da:80:
31:d3:63:4b:73:73:62:bf:5f:f8:d7:c9:2b:52:00:
43:d4:91:95:34:57:7a:37:99:ea:bd:6a:85:d1:4f:
43:d3:63:d8:57:8d:04:6d:25:1a:e9:63:97:18:27:
fc:b7:d1:43:d2:f6:26:59:c1:ba:53:3a:0c:fb:f2:
85:bd:d6:d2:be:46:fc:74:4f:84:43:25:f8:3b:8e:
47:a7:c3:86:ef:e9:d3:2c:40:29:76:1a:35:cb:ef:
b7:7b:f9:7f:1c:00:06:79:d2:3d:04:3c:7b:f9:59:
c1:8b:08:96:ca:cc:95:9c:06:39:c9:15:9b:aa:4d:
93:12:f8:41:c5:cd:da:6b:42:4d:88:1c:ee:67:27:
69:37:cd:15:bc:0e:54:2a:b4:2c:42:41:a2:fa:24:
99:91:bc:8e:f4:7a:82:32:55:05:5a:e2:51:aa:3f:
a2:dc:ee:13:8d:a2:72:7c:c3:1a:71:dd:4d:23:2b:
2f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0C:D9:38:CA:C9:A6:FE:17:E9:59:56:CC:78:CA:99:34:08:75:5B
X509v3 Authority Key Identifier:
keyid:8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/HAzZOMrJpv4X6VlWzHjKmTQIdVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.180.0/24
IPv6:
2001:67c:7a4::/48
Signature Algorithm: sha256WithRSAEncryption
48:59:8f:ad:4f:eb:70:c4:be:a8:ed:2a:40:b4:3d:27:4b:25:
84:8d:62:cd:7f:c8:4c:0a:78:1e:93:3c:c5:2c:03:f9:2b:f8:
ae:f2:db:b9:dd:00:26:64:d4:f5:b9:65:15:08:91:20:be:0e:
3c:73:5c:ad:2a:3e:0d:76:ff:9b:47:09:d9:d6:7b:36:ac:f6:
7e:e3:41:33:e9:4a:41:d2:b8:11:61:d1:b4:aa:c1:af:15:64:
2e:b3:55:a1:17:d1:df:2e:0e:30:f9:66:a9:f9:6b:a3:ef:50:
73:c2:57:a2:94:29:6d:5b:22:6c:83:09:cd:71:71:1f:ec:89:
eb:9a:ff:a4:a9:a4:e9:ad:21:c9:10:96:79:ba:4d:52:9d:a9:
9a:de:81:57:d3:d9:75:4d:f8:16:19:fe:3d:74:ac:b0:7e:3d:
5b:ac:6a:57:47:55:41:2d:84:15:18:2f:07:1e:90:16:09:d9:
61:0a:6d:2c:cb:b7:b8:32:f5:12:ea:05:e9:9b:c5:04:0c:f3:
75:2c:da:52:6c:31:93:97:13:46:f7:fb:09:d9:9f:dd:d6:01:
57:1d:a7:29:c7:9b:5b:98:7c:ab:86:22:32:c9:01:07:bb:2b:
cb:90:77:69:51:45:1b:e7:5f:d6:7c:14:5c:34:f7:da:63:b4:
cb:a7:5b:d0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzI3zt58tpqP8UWXNsJM0kaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODkyZjRkZWQ5MjI1N2U2N2JhNzRmMTc2MmM4YmM5MTRl
YmQ2MWMwHhcNMjQwMTAyMDYzMjAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzBjZDkzOGNhYzlhNmZlMTdlOTU5NTZjYzc4Y2E5OTM0MDg3NTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCXifABvyTHvBB1XTC9Mk2UlJxNz
3C5c7FFvz/cVAVrLCixNDPOWZpwT4IZ/XL728A7IgmxSIGlRKgyvLFC3nnbxY56M
bpOc2oAx02NLc3Niv1/418krUgBD1JGVNFd6N5nqvWqF0U9D02PYV40EbSUa6WOX
GCf8t9FD0vYmWcG6UzoM+/KFvdbSvkb8dE+EQyX4O45Hp8OG7+nTLEApdho1y++3
e/l/HAAGedI9BDx7+VnBiwiWysyVnAY5yRWbqk2TEvhBxc3aa0JNiBzuZydpN80V
vA5UKrQsQkGi+iSZkbyO9HqCMlUFWuJRqj+i3O4TjaJyfMMacd1NIysvNwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBwM2TjKyab+F+lZVsx4ypk0CHVbMB8GA1UdIwQY
MBaAFI2JL03tkiV+Z7p08XYsi8kU69YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallrdlRlMlNKWDVudW5UeGRpeUx5UlRyMWh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kMWE3MTctNGNmMy00YWU1LWIwZmMt
MGJkOWRkZjM5NzBlLzEvSEF6Wk9NckpwdjRYNlZsV3pIakttVFFJZFZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9kMWE3MTctNGNmMy00YWU1LWIwZmMtMGJkOWRkZjM5NzBl
LzEvallrdlRlMlNKWDVudW5UeGRpeUx5UlRyMWh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW/S0MA8E
AgACMAkDBwAgAQZ8B6QwDQYJKoZIhvcNAQELBQADggEBAEhZj61P63DEvqjtKkC0
PSdLJYSNYs1/yEwKeB6TPMUsA/kr+K7y27ndACZk1PW5ZRUIkSC+DjxzXK0qPg12
/5tHCdnWezas9n7jQTPpSkHSuBFh0bSqwa8VZC6zVaEX0d8uDjD5Zqn5a6PvUHPC
V6KUKW1bImyDCc1xcR/sieua/6SppOmtIckQlnm6TVKdqZregVfT2XVN+BYZ/j10
rLB+PVusaldHVUEthBUYLwcekBYJ2WEKbSzLt7gy9RLqBembxQQM83Us2lJsMZOX
E0b3+wnZn93WAVcdpynHm1uYfKuGIjLJAQe7K8uQd2lRRRvnX9Z8FFw099pjtMun
W9A=
-----END CERTIFICATE-----
Generated at Sat Jun 8 06:09:06 2024 by rpki-client on console-fra.rpki-client.org