Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/XIUYW0wkCi20UGYMo_J6tF-NsqU.roa
File: XIUYW0wkCi20UGYMo_J6tF-NsqU.roa (raw, json)
Hash identifier: iEhL6pYIUceinoa0BR4E/VhRO8DSPT7xPqXhghFB2JM=
Subject key identifier: 5C:85:18:5B:4C:24:0A:2D:B4:50:66:0C:A3:F2:7A:B4:5F:8D:B2:A5
Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Certificate serial: 018CC3B6F9400E10FEDAF1AABFBC1D49F729
Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/XIUYW0wkCi20UGYMo_J6tF-NsqU.roa
Signing time: Mon 01 Jan 2024 06:29:57 +0000
ROA not before: Mon 01 Jan 2024 06:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205547
IP address blocks: 185.207.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f9:40:0e:10:fe:da:f1:aa:bf:bc:1d:49:f7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Validity
Not Before: Jan 1 06:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c85185b4c240a2db450660ca3f27ab45f8db2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d6:b1:6f:d8:18:09:bf:a1:ea:b3:1c:0a:86:
1a:73:5a:4c:f9:32:cd:30:24:79:d8:4a:dd:2f:97:
9c:74:d7:fb:ab:52:85:fd:09:b2:f9:e6:da:fa:82:
4f:19:40:ca:85:62:1e:0b:fb:99:97:81:9b:11:5c:
43:4c:1f:79:8d:6d:24:9c:9d:d9:4c:bd:d4:53:2f:
6d:c0:21:37:68:7a:56:5a:ad:9d:ea:65:fc:85:19:
ca:dc:7d:a8:09:6a:c6:ff:9c:8b:5c:42:59:f3:f4:
be:cb:e2:72:b1:d8:4d:eb:5e:9e:6b:e8:71:1b:79:
ab:9b:33:11:60:d0:63:38:5f:39:a3:4a:0b:9e:7b:
76:31:9c:0b:e8:fc:ab:47:24:15:37:a5:d9:54:41:
0e:1d:d7:b0:0e:a7:c2:cc:17:a8:dc:d8:5e:59:a1:
a3:ac:00:a2:26:cc:f2:df:5d:ef:07:5c:a1:8b:3a:
71:0a:11:ce:90:53:7d:07:5f:5e:f3:65:72:94:55:
a5:d0:98:c9:f4:69:2f:6a:01:9f:4f:cb:1d:7a:b8:
44:13:10:28:96:ab:68:28:eb:f2:ec:65:d5:f5:35:
25:2a:d6:90:e9:f5:f8:6a:f2:3b:af:24:8e:3b:a5:
34:40:cd:e9:be:a4:c5:58:2c:f4:f2:ca:b4:9c:03:
b8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:85:18:5B:4C:24:0A:2D:B4:50:66:0C:A3:F2:7A:B4:5F:8D:B2:A5
X509v3 Authority Key Identifier:
keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/XIUYW0wkCi20UGYMo_J6tF-NsqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.34.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f7:67:85:71:a6:40:cc:54:2d:7f:c2:df:c2:c3:24:6f:f4:
26:2c:b9:43:11:fe:07:09:ad:1c:ca:fc:2f:a7:9d:6f:0b:db:
fa:ec:9e:dc:38:87:09:bf:ab:27:f4:1b:4e:66:b1:11:28:7a:
c5:0a:3d:5d:02:bc:be:fd:01:95:97:5a:77:cd:80:a4:e6:61:
b2:22:62:c2:df:22:9c:08:7f:a2:0c:8f:27:6e:0e:4c:ac:cb:
b2:23:89:09:f6:98:f8:c1:c9:60:c3:6b:f1:31:b2:c7:ae:73:
cf:c0:ab:d4:b9:b0:89:2f:f1:fa:12:16:5f:80:54:c5:20:1d:
4e:52:cf:c8:53:21:3c:9e:f5:41:49:98:d2:61:c4:ac:5e:de:
30:4d:73:06:78:73:60:76:c0:4e:5f:3b:f2:6f:25:65:b8:c3:
5a:09:d4:25:9a:04:82:fb:c9:48:eb:6f:5f:be:58:24:e9:27:
8c:58:b7:9e:67:c7:bf:8a:6f:51:e2:43:8e:17:87:7c:8f:31:
5e:b9:6e:0d:47:1b:6e:b8:1f:96:d7:af:87:07:da:b7:c6:67:
94:f8:69:c7:b1:a3:9c:73:1d:7e:59:6d:33:81:26:c1:87:80:
7d:8d:87:e4:10:74:a5:3b:2c:19:fd:d8:a8:1d:da:f5:02:e0:
f2:98:75:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtvlADhD+2vGqv7wdSfcpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkOWEwYzg0YjMwNzIwZjRkNGNlNGJkYmEwMWRkMDU0NGQw
MjhlY2QwHhcNMjQwMTAxMDYyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Yzg1MTg1YjRjMjQwYTJkYjQ1MDY2MGNhM2YyN2FiNDVmOGRiMmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNaxb9gYCb+h6rMcCoYac1pM+TLN
MCR52ErdL5ecdNf7q1KF/Qmy+eba+oJPGUDKhWIeC/uZl4GbEVxDTB95jW0knJ3Z
TL3UUy9twCE3aHpWWq2d6mX8hRnK3H2oCWrG/5yLXEJZ8/S+y+JysdhN616ea+hx
G3mrmzMRYNBjOF85o0oLnnt2MZwL6PyrRyQVN6XZVEEOHdewDqfCzBeo3NheWaGj
rACiJszy313vB1yhizpxChHOkFN9B19e82VylFWl0JjJ9GkvagGfT8sderhEExAo
lqtoKOvy7GXV9TUlKtaQ6fX4avI7rySOO6U0QM3pvqTFWCz08sq0nAO4AQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFyFGFtMJAottFBmDKPyerRfjbKlMB8GA1UdIwQY
MBaAFJ2aDISzByD01M5L26Ad0FRNAo7NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMt
NTJjYWQ2Njc1ZmM2LzEvWElVWVcwd2tDaTIwVUdZTW9fSjZ0Ri1Oc3FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMtNTJjYWQ2Njc1ZmM2
LzEvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc8iMA0G
CSqGSIb3DQEBCwUAA4IBAQAg92eFcaZAzFQtf8LfwsMkb/QmLLlDEf4HCa0cyvwv
p51vC9v67J7cOIcJv6sn9BtOZrERKHrFCj1dAry+/QGVl1p3zYCk5mGyImLC3yKc
CH+iDI8nbg5MrMuyI4kJ9pj4wclgw2vxMbLHrnPPwKvUubCJL/H6EhZfgFTFIB1O
Us/IUyE8nvVBSZjSYcSsXt4wTXMGeHNgdsBOXzvybyVluMNaCdQlmgSC+8lI629f
vlgk6SeMWLeeZ8e/im9R4kOOF4d8jzFeuW4NRxtuuB+W16+HB9q3xmeU+GnHsaOc
cx1+WW0zgSbBh4B9jYfkEHSlOywZ/dioHdr1AuDymHWC
-----END CERTIFICATE-----
Generated at Sun Jun 2 19:43:05 2024 by rpki-client on console-ams.rpki-client.org