Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/XYU_bdpX0c1PQNodlgCf4h9rL_E.roa
File: XYU_bdpX0c1PQNodlgCf4h9rL_E.roa (raw, json)
Hash identifier: WeoMSq/B4Jrd3wj/dRxGVK5ltrRtHoyZcNhPhjSI7pA=
Subject key identifier: 5D:85:3F:6D:DA:57:D1:CD:4F:40:DA:1D:96:00:9F:E2:1F:6B:2F:F1
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 018CC94CCAE70FDC77F6994B261500A58681
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/XYU_bdpX0c1PQNodlgCf4h9rL_E.roa
Signing time: Tue 02 Jan 2024 08:31:42 +0000
ROA not before: Tue 02 Jan 2024 08:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202984
IP address blocks: 185.231.244.0/24 maxlen: 24
185.231.246.0/23 maxlen: 23
185.231.245.0/24 maxlen: 24
194.147.114.0/24 maxlen: 24
2a0c:9300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:ca:e7:0f:dc:77:f6:99:4b:26:15:00:a5:86:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: Jan 2 08:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d853f6dda57d1cd4f40da1d96009fe21f6b2ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:62:7d:1d:38:ad:4e:7f:12:c6:06:e3:1f:6c:
3a:76:9d:a7:8b:f4:c0:dd:da:d8:fe:f8:6e:e7:84:
ec:94:a3:12:9a:6b:e5:e0:18:6b:3f:e9:0b:35:a5:
8f:a8:91:d4:57:cb:04:b5:fb:5d:c0:dd:6d:aa:9c:
f5:04:ba:47:f1:31:f7:61:21:0c:2c:35:5c:11:42:
a9:a3:ae:e8:80:5c:0b:a9:25:24:39:de:cf:11:68:
89:46:9d:d2:88:d2:72:4c:7c:51:53:56:a8:f8:2b:
0a:12:8c:71:64:eb:d8:fd:be:d4:67:36:12:68:e7:
f0:93:76:d6:1c:3b:3f:f2:90:b8:d6:dc:cd:21:5c:
54:5e:b7:75:67:2b:f9:fc:f4:85:50:d0:d7:9c:80:
46:24:7c:96:f6:50:97:b0:53:9f:41:7f:f3:55:eb:
90:bb:39:08:ab:5d:79:e7:58:e7:75:94:bc:f2:e1:
81:5f:16:d7:fd:34:84:f2:70:ed:c5:fa:17:0c:83:
dd:e9:95:06:11:ce:b5:05:2b:a8:46:d7:a1:e2:f9:
5a:41:9d:cb:b1:4e:f7:f2:3f:e4:58:1f:92:9e:09:
43:60:a0:a4:cc:e6:fa:9e:11:2b:64:fa:84:f9:7d:
30:ce:ee:ae:f4:3a:18:7b:44:a1:54:eb:71:a0:18:
cf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:85:3F:6D:DA:57:D1:CD:4F:40:DA:1D:96:00:9F:E2:1F:6B:2F:F1
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/XYU_bdpX0c1PQNodlgCf4h9rL_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.244.0/22
194.147.114.0/24
IPv6:
2a0c:9300::/29
Signature Algorithm: sha256WithRSAEncryption
c6:ff:31:32:e8:8d:30:8d:62:f1:e2:4f:0b:93:c2:21:dc:19:
ec:92:22:4a:ec:b2:ab:90:f2:ac:a2:00:0b:4b:64:2f:92:d7:
ae:b5:e8:b7:ec:85:1e:e5:91:95:9a:cc:9e:4f:c3:ef:c9:92:
ad:24:da:fb:3b:b2:eb:c4:e9:b4:32:96:95:ff:0f:d0:b9:5a:
a5:ab:bd:9b:ab:d4:a0:42:eb:cb:53:6a:80:4d:c6:1f:5f:4b:
ab:29:c2:a0:66:0e:82:21:83:40:72:1a:db:aa:7d:de:44:84:
bb:7f:32:6d:e3:18:04:52:8c:60:71:44:3c:5e:14:68:de:47:
f0:75:d4:43:71:54:4d:4a:fd:4b:b4:de:1a:cb:ec:c2:2a:4f:
63:b6:f9:d1:c2:c7:80:eb:d5:b0:d3:a9:5a:37:06:2d:e8:99:
81:18:b0:d0:0f:b7:b9:de:cc:ab:04:34:ca:33:3c:88:c5:0f:
5e:0f:cc:2d:a2:de:36:30:9c:3c:07:03:57:de:09:86:8f:f5:
d9:0f:55:8d:2c:2f:17:8b:eb:49:18:f7:fc:a6:03:36:45:f1:
2e:20:7b:68:09:55:4c:97:5f:bf:f4:c0:5b:27:6b:0c:af:0c:
7d:63:0f:8a:57:be:e7:6a:f5:67:18:da:03:7c:1d:b4:6b:39:
e7:68:7b:9b
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzJTMrnD9x39plLJhUApYaBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzVjMWY3YjcxNDBjODcyZTdmM2ZmMzQ2MmI0ZWRjNjMx
ZDc2NzQwHhcNMjQwMTAyMDgzMTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDg1M2Y2ZGRhNTdkMWNkNGY0MGRhMWQ5NjAwOWZlMjFmNmIyZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42J9HTitTn8SxgbjH2w6dp2ni/TA
3drY/vhu54TslKMSmmvl4BhrP+kLNaWPqJHUV8sEtftdwN1tqpz1BLpH8TH3YSEM
LDVcEUKpo67ogFwLqSUkOd7PEWiJRp3SiNJyTHxRU1ao+CsKEoxxZOvY/b7UZzYS
aOfwk3bWHDs/8pC41tzNIVxUXrd1Zyv5/PSFUNDXnIBGJHyW9lCXsFOfQX/zVeuQ
uzkIq11551jndZS88uGBXxbX/TSE8nDtxfoXDIPd6ZUGEc61BSuoRteh4vlaQZ3L
sU738j/kWB+SnglDYKCkzOb6nhErZPqE+X0wzu6u9DoYe0ShVOtxoBjPnQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFF2FP23aV9HNT0DaHZYAn+Ifay/xMB8GA1UdIwQY
MBaAFGE1wfe3FAyHLn8/80YrTtxjHXZ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80MzNlZGYtYWFmOC00NjY5LTg3N2Mt
ZTM3ODFkOGZlNzRjLzEvWFlVX2JkcFgwYzFQUU5vZGxnQ2Y0aDlyTF9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS80MzNlZGYtYWFmOC00NjY5LTg3N2MtZTM3ODFkOGZlNzRj
LzEvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuef0AwQA
wpNyMA0EAgACMAcDBQMqDJMAMA0GCSqGSIb3DQEBCwUAA4IBAQDG/zEy6I0wjWLx
4k8Lk8Ih3BnskiJK7LKrkPKsogALS2Qvkteutei37IUe5ZGVmsyeT8PvyZKtJNr7
O7LrxOm0MpaV/w/QuVqlq72bq9SgQuvLU2qATcYfX0urKcKgZg6CIYNAchrbqn3e
RIS7fzJt4xgEUoxgcUQ8XhRo3kfwddRDcVRNSv1LtN4ay+zCKk9jtvnRwseA69Ww
06laNwYt6JmBGLDQD7e53syrBDTKMzyIxQ9eD8wtot42MJw8BwNX3gmGj/XZD1WN
LC8Xi+tJGPf8pgM2RfEuIHtoCVVMl1+/9MBbJ2sMrwx9Yw+KV77navVnGNoDfB20
aznnaHub
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:22:33 2024 by rpki-client on console-ams.rpki-client.org