Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/KnK1rKutag3Poqz-7s61Ytf_xIQ.roa
File: KnK1rKutag3Poqz-7s61Ytf_xIQ.roa (raw, json)
Hash identifier: qX2Za2e5y833MABv/W1yriO0+PwJSFb6HgTNrZGLHe8=
Subject key identifier: 2A:72:B5:AC:AB:AD:6A:0D:CF:A2:AC:FE:EE:CE:B5:62:D7:FF:C4:84
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC42570771580D38957BDA2FE4BD425B2
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/KnK1rKutag3Poqz-7s61Ytf_xIQ.roa
Signing time: Mon 01 Jan 2024 08:30:37 +0000
ROA not before: Mon 01 Jan 2024 08:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211266
IP address blocks: 85.202.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:70:77:15:80:d3:89:57:bd:a2:fe:4b:d4:25:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a72b5acabad6a0dcfa2acfeeeceb562d7ffc484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3f:f1:11:a8:bf:1e:19:81:ac:3d:ce:f1:2b:
1a:e2:91:b7:80:21:91:c7:4b:ca:8b:3b:fd:29:f9:
30:fe:89:e4:7b:ee:29:4e:ee:1c:05:0c:06:97:eb:
50:68:32:d1:69:06:01:0c:e9:01:43:ff:90:84:45:
82:80:f4:4a:6b:76:ab:41:d9:b6:83:29:77:bd:c4:
fb:5f:a1:ea:04:94:86:f4:cc:b9:d3:ae:30:05:ea:
56:0b:ae:4e:f4:5e:4c:06:d3:69:81:3e:78:68:58:
90:2f:f8:48:bf:4d:53:bc:53:ab:88:98:4d:d6:91:
3e:0d:96:1c:a7:6a:58:1d:dd:4d:66:28:34:1a:9c:
95:8f:00:bf:d6:bd:94:1e:cf:94:c9:52:fb:9c:91:
04:17:43:a0:16:43:69:a3:0a:92:fd:3d:16:eb:c6:
89:4b:07:21:28:45:23:50:76:ff:27:19:c2:fe:36:
4d:4c:29:fe:55:8e:e9:26:2f:48:55:45:9d:14:1f:
14:09:94:e2:9c:c8:1a:a4:22:fa:ae:b5:e0:e8:c6:
a5:75:dc:3f:93:11:f7:8b:57:51:f2:6e:21:86:43:
ae:a6:30:51:72:96:de:64:5b:30:ae:1c:1a:2c:86:
61:99:b2:cb:12:32:d4:ac:56:de:8b:64:f4:e7:5f:
61:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:72:B5:AC:AB:AD:6A:0D:CF:A2:AC:FE:EE:CE:B5:62:D7:FF:C4:84
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/KnK1rKutag3Poqz-7s61Ytf_xIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.160.0/24
Signature Algorithm: sha256WithRSAEncryption
20:56:f9:09:7f:08:24:00:bc:10:34:c7:d8:aa:32:3c:18:4b:
85:5e:49:fe:51:e1:e1:41:14:24:91:9e:a8:6f:16:73:90:2c:
7c:74:42:ae:f5:cf:f4:95:29:20:b6:3b:64:56:7b:66:2f:0b:
7b:47:ea:a3:76:d7:55:55:f0:f1:87:5e:02:60:07:d4:02:49:
16:a2:84:0b:7b:dd:19:b3:b1:8c:0f:e9:06:ff:23:29:ac:95:
35:9c:30:a6:b8:60:bf:81:0e:ca:32:8c:5a:13:38:ad:fc:a6:
90:dc:50:7c:78:4a:29:88:f2:22:ad:75:67:7d:cf:7a:5d:4f:
be:a7:e2:cd:77:47:df:eb:b6:82:8d:1d:45:bd:a8:9a:74:90:
f5:35:9c:cf:a7:fe:13:21:18:31:7e:f1:66:8e:9b:66:b9:99:
95:0b:73:a4:7c:b0:b2:1b:ea:c8:50:69:21:c4:cc:e2:cc:5d:
83:21:b8:3d:a8:8f:7c:2e:6a:3c:78:af:49:2c:3f:15:86:85:
cf:fc:e2:84:b5:0e:68:de:b2:53:6b:9d:12:6e:80:27:d6:cd:
84:ca:a8:f9:f6:a2:e0:2c:32:8a:bd:85:51:79:26:d3:b2:49:
6e:2b:50:8f:c5:ef:19:8d:2f:f8:f4:84:ac:ee:cd:85:f3:21:
12:1d:17:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJXB3FYDTiVe9ov5L1CWyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjQwMTAxMDgzMDM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTcyYjVhY2FiYWQ2YTBkY2ZhMmFjZmVlZWNlYjU2MmQ3ZmZjNDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8z/xEai/HhmBrD3O8Ssa4pG3gCGR
x0vKizv9Kfkw/onke+4pTu4cBQwGl+tQaDLRaQYBDOkBQ/+QhEWCgPRKa3arQdm2
gyl3vcT7X6HqBJSG9My5064wBepWC65O9F5MBtNpgT54aFiQL/hIv01TvFOriJhN
1pE+DZYcp2pYHd1NZig0GpyVjwC/1r2UHs+UyVL7nJEEF0OgFkNpowqS/T0W68aJ
SwchKEUjUHb/JxnC/jZNTCn+VY7pJi9IVUWdFB8UCZTinMgapCL6rrXg6Malddw/
kxH3i1dR8m4hhkOupjBRcpbeZFswrhwaLIZhmbLLEjLUrFbei2T0519hqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCpytayrrWoNz6Ks/u7OtWLX/8SEMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvS25LMXJLdXRhZzNQb3F6LTdzNjFZdGZfeElRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcqgMA0G
CSqGSIb3DQEBCwUAA4IBAQAgVvkJfwgkALwQNMfYqjI8GEuFXkn+UeHhQRQkkZ6o
bxZzkCx8dEKu9c/0lSkgtjtkVntmLwt7R+qjdtdVVfDxh14CYAfUAkkWooQLe90Z
s7GMD+kG/yMprJU1nDCmuGC/gQ7KMoxaEzit/KaQ3FB8eEopiPIirXVnfc96XU++
p+LNd0ff67aCjR1FvaiadJD1NZzPp/4TIRgxfvFmjptmuZmVC3OkfLCyG+rIUGkh
xMzizF2DIbg9qI98Lmo8eK9JLD8VhoXP/OKEtQ5o3rJTa50SboAn1s2Eyqj59qLg
LDKKvYVReSbTskluK1CPxe8ZjS/49ISs7s2F8yESHRe0
-----END CERTIFICATE-----
Generated at Thu May 23 02:35:43 2024 by rpki-client on console-fra.rpki-client.org