Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/IKbFVeLHSzMQzY8rr7EGrRNj5bo.roa
File: IKbFVeLHSzMQzY8rr7EGrRNj5bo.roa (raw, json)
Hash identifier: x3BeOtur65JCi3CHqxUUWa0qb/k4g4P1eVbr0A8E4/w=
Subject key identifier: 20:A6:C5:55:E2:C7:4B:33:10:CD:8F:2B:AF:B1:06:AD:13:63:E5:BA
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 018CC801781D36973AB853F34D5F11CABD4C
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/IKbFVeLHSzMQzY8rr7EGrRNj5bo.roa
Signing time: Tue 02 Jan 2024 02:29:48 +0000
ROA not before: Tue 02 Jan 2024 02:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 185.212.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:78:1d:36:97:3a:b8:53:f3:4d:5f:11:ca:bd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Jan 2 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20a6c555e2c74b3310cd8f2bafb106ad1363e5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:20:3f:31:74:69:c2:e6:08:62:ad:f4:45:f5:
28:e8:18:d8:0d:be:1f:28:e7:e7:94:13:fb:43:83:
3a:a7:b0:8d:7d:1b:73:48:62:92:8c:ff:ba:ca:e2:
fd:ab:2f:f5:ff:0b:5d:3a:48:94:66:fd:7c:ab:3d:
fd:90:b5:14:92:36:4a:9c:e4:30:45:5d:92:29:d3:
82:73:fb:71:e0:e2:f1:4a:4f:69:2b:45:41:9f:46:
2e:7b:c3:37:ef:04:86:3a:04:99:de:f6:e0:a1:9e:
ca:ac:a0:60:31:25:e5:2e:bc:20:e7:be:70:26:82:
b9:a6:28:d5:4d:10:bf:79:6c:14:7d:65:8e:fb:d1:
7e:6e:2f:ab:02:ed:56:c0:12:1c:17:bc:54:69:63:
4c:8d:54:e4:c1:17:4d:4d:73:f9:3a:81:f5:91:c7:
43:d2:5f:27:fb:fa:98:cb:a7:3e:35:7b:a7:5f:9b:
a3:32:be:56:59:20:6c:8d:03:36:f0:f3:85:1b:e7:
fd:b2:71:76:e3:61:25:b1:51:41:a0:f7:d4:c2:41:
05:0f:46:21:7b:10:f7:4f:6d:6e:87:bd:57:6d:84:
90:e1:6f:90:66:a4:e5:b3:4e:e8:73:08:29:49:16:
83:a8:eb:03:77:e6:f4:f5:97:ec:3e:2f:67:9b:91:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A6:C5:55:E2:C7:4B:33:10:CD:8F:2B:AF:B1:06:AD:13:63:E5:BA
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/IKbFVeLHSzMQzY8rr7EGrRNj5bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.204.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:34:f7:74:1a:a4:74:4f:03:60:29:50:5f:3a:3f:4c:18:6d:
d8:79:e0:8f:d7:12:23:7d:ae:99:e2:60:46:be:6c:f7:e4:bf:
d7:ec:ef:f2:d7:a7:eb:e8:0c:82:31:86:1a:bd:2c:a7:76:c2:
19:7a:2b:7b:54:b0:bb:76:84:6c:e5:34:2b:26:e2:ca:93:73:
24:c9:7c:6b:bb:08:98:49:9c:27:99:4e:58:b3:1d:95:78:d7:
a8:35:80:08:89:d9:ae:09:32:c3:ed:01:5b:99:1e:4e:b8:b2:
3e:7f:98:d7:8b:40:06:95:3f:ff:f5:16:bc:97:a0:b2:89:42:
b6:f2:fe:4c:5a:74:a8:ff:2d:c3:a9:e7:71:28:01:e6:f2:87:
90:c1:82:76:88:9e:4e:a9:d8:79:64:6a:be:ad:a5:da:b0:bc:
88:4f:1e:3a:26:ed:bf:c5:fb:d3:b8:a9:ae:51:03:e6:2d:7a:
e8:37:7d:2b:02:1f:ad:55:7d:a5:43:d2:05:fe:de:de:49:12:
9f:a9:2b:5e:1e:4e:8e:57:ee:1d:1c:10:f4:9f:f5:1b:eb:45:
2c:af:94:48:16:bd:55:26:b9:ba:3d:c7:50:38:5f:a3:6c:97:
ff:57:89:15:ce:c4:01:f0:b7:52:9a:97:7c:71:6a:e1:03:e3:
0a:d9:bf:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAXgdNpc6uFPzTV8Ryr1MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj
ZjE2YmUwHhcNMjQwMTAyMDIyOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGE2YzU1NWUyYzc0YjMzMTBjZDhmMmJhZmIxMDZhZDEzNjNlNWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliA/MXRpwuYIYq30RfUo6BjYDb4f
KOfnlBP7Q4M6p7CNfRtzSGKSjP+6yuL9qy/1/wtdOkiUZv18qz39kLUUkjZKnOQw
RV2SKdOCc/tx4OLxSk9pK0VBn0Yue8M37wSGOgSZ3vbgoZ7KrKBgMSXlLrwg575w
JoK5pijVTRC/eWwUfWWO+9F+bi+rAu1WwBIcF7xUaWNMjVTkwRdNTXP5OoH1kcdD
0l8n+/qYy6c+NXunX5ujMr5WWSBsjQM28POFG+f9snF242ElsVFBoPfUwkEFD0Yh
exD3T21uh71XbYSQ4W+QZqTls07ocwgpSRaDqOsDd+b09ZfsPi9nm5F9CwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCCmxVXix0szEM2PK6+xBq0TY+W6MB8GA1UdIwQY
MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt
OTcyNDNlMzE2MjcyLzEvSUtiRlZlTEhTek1Relk4cnI3RUdyUk5qNWJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy
LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudTMMA0G
CSqGSIb3DQEBCwUAA4IBAQCmNPd0GqR0TwNgKVBfOj9MGG3YeeCP1xIjfa6Z4mBG
vmz35L/X7O/y16fr6AyCMYYavSyndsIZeit7VLC7doRs5TQrJuLKk3MkyXxruwiY
SZwnmU5Ysx2VeNeoNYAIidmuCTLD7QFbmR5OuLI+f5jXi0AGlT//9Ra8l6CyiUK2
8v5MWnSo/y3DqedxKAHm8oeQwYJ2iJ5Oqdh5ZGq+raXasLyITx46Ju2/xfvTuKmu
UQPmLXroN30rAh+tVX2lQ9IF/t7eSRKfqSteHk6OV+4dHBD0n/Ub60Usr5RIFr1V
Jrm6PcdQOF+jbJf/V4kVzsQB8LdSmpd8cWrhA+MK2b9T
-----END CERTIFICATE-----
Generated at Sat May 4 09:01:54 2024 by rpki-client on console-fra.rpki-client.org