Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/Bi1we-NbgEf8wsQx99ZHNp9wRvc.roa
File: Bi1we-NbgEf8wsQx99ZHNp9wRvc.roa (raw, json)
Hash identifier: k5R92/xyP5zsmxdPyJ8Hu5pxX4AX1+rZ3V2x0rYicyo=
Subject key identifier: 06:2D:70:7B:E3:5B:80:47:FC:C2:C4:31:F7:D6:47:36:9F:70:46:F7
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 018CC2DAFE973D8FC30565BB188BD38D6DEC
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/Bi1we-NbgEf8wsQx99ZHNp9wRvc.roa
Signing time: Mon 01 Jan 2024 02:29:40 +0000
ROA not before: Mon 01 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12302
IP address blocks: 185.190.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:fe:97:3d:8f:c3:05:65:bb:18:8b:d3:8d:6d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Jan 1 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=062d707be35b8047fcc2c431f7d647369f7046f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:de:37:8f:a2:d0:91:e7:44:80:ae:a5:38:
6b:45:fd:ae:c4:96:d3:49:c8:02:54:a6:36:c2:2b:
12:55:4d:86:52:1b:c4:32:c7:e0:67:e0:87:f7:89:
8d:9f:78:8c:eb:7a:02:8c:d6:36:61:cb:9c:45:98:
4f:e2:48:06:e8:bb:e1:45:1a:4d:24:3d:82:72:f6:
9f:58:0c:97:ff:d6:07:e8:7f:ec:0e:d0:50:b6:36:
12:d5:e4:26:6b:5a:c5:8e:2d:00:78:6f:42:25:02:
0b:27:e1:59:4e:da:7d:8c:e4:93:c8:9a:a5:26:fa:
4b:53:75:34:5e:fe:d7:72:1f:e6:67:a6:e1:4a:6a:
29:5c:80:a2:9e:89:e3:a9:6a:6f:7b:d4:f3:c3:21:
93:3e:e2:47:89:14:6a:b2:d8:88:8e:f3:07:5d:c0:
65:56:ef:4b:79:b7:ac:56:c0:8d:5b:46:09:61:cb:
d4:cd:1d:24:27:e1:0c:18:37:09:6f:f3:3e:3f:bc:
43:30:98:49:49:7a:63:98:b0:43:db:8a:80:47:a5:
59:32:e3:06:a6:9d:24:a7:27:e8:a6:83:26:3e:64:
f5:b7:91:5e:d8:09:b1:e2:cb:a7:af:72:2e:d9:ce:
a5:52:dc:55:b5:bc:39:48:b1:c7:92:c3:be:08:08:
36:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2D:70:7B:E3:5B:80:47:FC:C2:C4:31:F7:D6:47:36:9F:70:46:F7
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/Bi1we-NbgEf8wsQx99ZHNp9wRvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.212.0/24
Signature Algorithm: sha256WithRSAEncryption
48:dd:68:9f:b0:3f:40:90:27:72:f3:dd:48:e4:21:8c:96:5c:
25:33:7f:3a:ff:7b:80:eb:47:d8:82:c4:a9:44:3d:f0:ca:14:
71:49:27:1e:86:48:1a:08:58:68:d4:3f:be:fe:cf:d5:40:f5:
c7:b8:85:37:c3:1d:d8:66:43:b9:c2:e9:11:13:88:0f:7f:29:
65:42:57:b7:89:7b:85:37:67:ee:ae:42:e9:2d:7b:d1:61:51:
d4:9d:c3:54:27:58:1e:b1:df:b0:93:0d:db:fe:9c:0c:a9:bd:
09:6b:5a:2c:6d:a4:26:1b:62:02:8e:6a:7b:fe:db:6c:91:d9:
4b:be:df:b6:82:5e:b4:3b:23:c1:00:75:63:f4:19:2c:6d:ed:
38:30:f2:ec:8d:d3:89:2a:e6:dd:11:4c:a5:8f:73:cd:1b:e1:
31:6a:9e:b8:54:d3:8e:22:17:a2:cd:0f:18:1b:c9:c9:e9:e8:
5b:81:99:a8:7d:1d:51:5e:2b:a0:5c:65:2b:8e:58:f3:5b:b6:
bb:c9:f5:4c:b4:a0:a1:2e:8f:9b:d0:91:75:17:41:85:12:2d:
3a:54:40:38:3b:97:40:54:3d:c8:0c:46:6d:f1:23:a2:f5:02:
ea:b9:fa:23:c5:c0:ed:56:b3:bf:8a:40:fa:aa:3c:99:ef:1f:
59:e9:50:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2v6XPY/DBWW7GIvTjW3sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZDEwYjg4ZWIyNGY2MjYyZDkzMTUzNjhhNWQwMWUxZTA4
NjBjNGUwHhcNMjQwMTAxMDIyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjJkNzA3YmUzNWI4MDQ3ZmNjMmM0MzFmN2Q2NDczNjlmNzA0NmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfreN4+i0JHnRICupThrRf2uxJbT
ScgCVKY2wisSVU2GUhvEMsfgZ+CH94mNn3iM63oCjNY2YcucRZhP4kgG6LvhRRpN
JD2CcvafWAyX/9YH6H/sDtBQtjYS1eQma1rFji0AeG9CJQILJ+FZTtp9jOSTyJql
JvpLU3U0Xv7Xch/mZ6bhSmopXICinonjqWpve9TzwyGTPuJHiRRqstiIjvMHXcBl
Vu9LebesVsCNW0YJYcvUzR0kJ+EMGDcJb/M+P7xDMJhJSXpjmLBD24qAR6VZMuMG
pp0kpyfopoMmPmT1t5Fe2Amx4sunr3Iu2c6lUtxVtbw5SLHHksO+CAg2XQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAYtcHvjW4BH/MLEMffWRzafcEb3MB8GA1UdIwQY
MBaAFEHRC4jrJPYmLZMVNopdAeHghgxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWRFTGlPc2s5aVl0a3hVMmlsMEI0ZUNHREU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85OTg3ODYtODcxOS00ZDhlLTk1MDAt
ZWY5NzAwNmM0NTBiLzEvQmkxd2UtTmJnRWY4d3NReDk5WkhOcDl3UnZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85OTg3ODYtODcxOS00ZDhlLTk1MDAtZWY5NzAwNmM0NTBi
LzEvUWRFTGlPc2s5aVl0a3hVMmlsMEI0ZUNHREU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub7UMA0G
CSqGSIb3DQEBCwUAA4IBAQBI3WifsD9AkCdy891I5CGMllwlM386/3uA60fYgsSp
RD3wyhRxSScehkgaCFho1D++/s/VQPXHuIU3wx3YZkO5wukRE4gPfyllQle3iXuF
N2furkLpLXvRYVHUncNUJ1gesd+wkw3b/pwMqb0Ja1osbaQmG2ICjmp7/ttskdlL
vt+2gl60OyPBAHVj9Bksbe04MPLsjdOJKubdEUylj3PNG+Exap64VNOOIheizQ8Y
G8nJ6ehbgZmofR1RXiugXGUrjljzW7a7yfVMtKChLo+b0JF1F0GFEi06VEA4O5dA
VD3IDEZt8SOi9QLqufojxcDtVrO/ikD6qjyZ7x9Z6VAO
-----END CERTIFICATE-----
Generated at Sun Jun 23 03:07:36 2024 by rpki-client on console-fra.rpki-client.org