Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/6AEf_Qhjsa-c29oz-Y1Icfl_LjU.roa
File: 6AEf_Qhjsa-c29oz-Y1Icfl_LjU.roa (raw, json)
Hash identifier: 3R6ZiwV33Y3SdSSgIVh2UwNOmAm9b9c8idPaVdpa8GA=
Subject key identifier: E8:01:1F:FD:08:63:B1:AF:9C:DB:DA:33:F9:8D:48:71:F9:7F:2E:35
Certificate issuer: /CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Certificate serial: 018CF99F604B4BC10AD805E0B0B5DC90948E
Authority key identifier: 7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/6AEf_Qhjsa-c29oz-Y1Icfl_LjU.roa
Signing time: Thu 11 Jan 2024 17:43:40 +0000
ROA not before: Thu 11 Jan 2024 17:43:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64462
IP address blocks: 185.83.111.0/24 maxlen: 24
185.83.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f9:9f:60:4b:4b:c1:0a:d8:05:e0:b0:b5:dc:90:94:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Validity
Not Before: Jan 11 17:43:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8011ffd0863b1af9cdbda33f98d4871f97f2e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:71:db:3b:c6:8c:83:f9:e7:b2:21:0b:d9:5b:
38:c0:3b:bd:e2:44:8b:42:e0:05:be:5f:19:d9:1c:
92:00:4d:2c:72:e7:a2:91:0b:18:2f:12:81:2d:54:
6c:5c:a5:22:32:24:98:14:36:b1:42:e2:c6:52:62:
bf:59:e1:2c:d0:ec:f3:4d:9e:07:42:f0:6e:b5:7b:
7e:c6:07:d2:a5:e6:76:b4:76:82:ab:8b:a1:ae:94:
80:45:23:b9:4b:03:17:de:27:5d:7e:f3:09:d1:fd:
7a:67:79:a1:2e:a2:7f:c5:53:78:b1:eb:99:3e:d1:
24:a8:81:27:73:3b:09:d8:61:45:c9:9f:b4:b7:d2:
a3:cc:20:d8:03:85:fb:fb:ce:19:91:63:79:69:99:
45:a8:ea:b8:50:af:1d:79:33:ec:d9:8d:34:02:37:
53:20:19:cb:5e:f6:f4:09:00:0c:17:43:30:e3:37:
b6:37:90:e0:20:7b:9c:b2:9c:fd:0b:90:13:0c:e7:
4e:1a:bd:e5:0f:13:b7:44:ef:24:b1:7b:29:43:b5:
f2:a5:a4:00:63:d5:00:53:07:c1:19:13:53:e7:48:
76:5c:fb:0f:fc:9f:61:a0:85:56:30:2a:90:a6:bd:
f6:78:dd:71:1f:00:1c:15:30:e8:57:e0:ac:ee:b3:
2c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:01:1F:FD:08:63:B1:AF:9C:DB:DA:33:F9:8D:48:71:F9:7F:2E:35
X509v3 Authority Key Identifier:
keyid:7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/6AEf_Qhjsa-c29oz-Y1Icfl_LjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.110.0/23
Signature Algorithm: sha256WithRSAEncryption
42:11:68:ef:d2:db:bf:4d:2b:32:da:d0:57:29:08:6d:f1:77:
1c:f8:6d:09:96:e3:c0:23:c1:08:b8:d2:97:28:b1:6e:60:3e:
d1:ed:92:58:44:7d:08:5f:86:be:99:8b:0b:3c:c7:de:b5:00:
cd:fc:9e:2d:dd:76:99:e5:8b:7b:f9:57:6b:47:4a:d2:dd:09:
ac:6e:97:45:16:87:8a:bd:d2:db:bd:a8:f0:28:6c:5f:2b:74:
b7:10:0f:1e:ca:81:c3:98:63:80:e9:4e:56:8f:b7:c9:b4:4c:
60:df:f4:ef:6a:96:95:0d:de:98:bf:33:7e:3b:61:a1:1f:33:
29:9d:b2:94:60:d2:b3:44:f0:2a:db:93:91:eb:71:4d:14:53:
84:98:3c:82:2a:b0:89:c1:18:fb:7f:98:40:0f:6c:87:24:38:
a8:19:c4:84:f9:8e:a1:34:58:fd:59:e8:93:06:eb:ef:a8:8d:
f7:86:08:1e:0a:00:78:53:f3:28:00:87:65:d3:09:09:76:db:
1f:75:ee:08:7f:a8:ba:60:7e:73:5a:0b:69:fa:b4:2e:44:22:
0b:b5:9f:8e:b7:58:a3:7b:fa:c3:97:6e:20:bb:dd:d1:4f:1f:
9e:49:4b:70:41:fc:01:38:75:a4:d9:f3:25:5d:9a:d7:e8:5c:
b0:8b:6d:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYz5n2BLS8EK2AXgsLXckJSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiODhkNGE0YWIxOGE1OWI2NjRkYWJhZmRiMzg4MGRjMzVi
MjJiOTEwHhcNMjQwMTExMTc0MzQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODAxMWZmZDA4NjNiMWFmOWNkYmRhMzNmOThkNDg3MWY5N2YyZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3HbO8aMg/nnsiEL2Vs4wDu94kSL
QuAFvl8Z2RySAE0scueikQsYLxKBLVRsXKUiMiSYFDaxQuLGUmK/WeEs0OzzTZ4H
QvButXt+xgfSpeZ2tHaCq4uhrpSARSO5SwMX3iddfvMJ0f16Z3mhLqJ/xVN4seuZ
PtEkqIEnczsJ2GFFyZ+0t9KjzCDYA4X7+84ZkWN5aZlFqOq4UK8deTPs2Y00AjdT
IBnLXvb0CQAMF0Mw4ze2N5DgIHucspz9C5ATDOdOGr3lDxO3RO8ksXspQ7XypaQA
Y9UAUwfBGRNT50h2XPsP/J9hoIVWMCqQpr32eN1xHwAcFTDoV+Cs7rMsmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOgBH/0IY7GvnNvaM/mNSHH5fy41MB8GA1UdIwQY
MBaAFHuI1KSrGKWbZk2rr9s4gNw1siuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTRqVXBLc1lwWnRtVGF1djJ6aUEzRFd5SzVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMDQ4ZTQtODE4Yy00NjAxLWIwMjMt
NzQzNzY1YmQwZjNlLzEvNkFFZl9RaGpzYS1jMjlvei1ZMUljZmxfTGpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yMDQ4ZTQtODE4Yy00NjAxLWIwMjMtNzQzNzY1YmQwZjNl
LzEvZTRqVXBLc1lwWnRtVGF1djJ6aUEzRFd5SzVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuVNuMA0G
CSqGSIb3DQEBCwUAA4IBAQBCEWjv0tu/TSsy2tBXKQht8Xcc+G0JluPAI8EIuNKX
KLFuYD7R7ZJYRH0IX4a+mYsLPMfetQDN/J4t3XaZ5Yt7+VdrR0rS3QmsbpdFFoeK
vdLbvajwKGxfK3S3EA8eyoHDmGOA6U5Wj7fJtExg3/TvapaVDd6YvzN+O2GhHzMp
nbKUYNKzRPAq25OR63FNFFOEmDyCKrCJwRj7f5hAD2yHJDioGcSE+Y6hNFj9WeiT
BuvvqI33hggeCgB4U/MoAIdl0wkJdtsfde4If6i6YH5zWgtp+rQuRCILtZ+Ot1ij
e/rDl24gu93RTx+eSUtwQfwBOHWk2fMlXZrX6Fywi23X
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:23:29 2024 by rpki-client on console-ams.rpki-client.org