Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/_AXWezBs9vjBwIqxl2n6HkCgPvI.roa
File: _AXWezBs9vjBwIqxl2n6HkCgPvI.roa (raw, json)
Hash identifier: wYHCsNvvwxV1ZuOCMghAu+XGWZSmBrUriITwP4FZJ9g=
Subject key identifier: FC:05:D6:7B:30:6C:F6:F8:C1:C0:8A:B1:97:69:FA:1E:40:A0:3E:F2
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 018D7EC6D1FB6276AB3320DB013FD4BA1BEC
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/_AXWezBs9vjBwIqxl2n6HkCgPvI.roa
Signing time: Tue 06 Feb 2024 14:16:15 +0000
ROA not before: Tue 06 Feb 2024 14:16:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 185.235.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7e:c6:d1:fb:62:76:ab:33:20:db:01:3f:d4:ba:1b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Feb 6 14:16:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc05d67b306cf6f8c1c08ab19769fa1e40a03ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ab:26:98:32:e5:59:aa:8b:ad:f7:51:22:b6:
7d:e4:f8:a4:5b:9b:cd:66:d3:ea:4e:b3:fa:df:b5:
41:f0:81:7c:76:83:0c:53:1d:87:cc:1d:0f:55:ec:
62:9d:6f:c5:8a:c1:2e:0d:ef:e0:eb:76:f2:32:ff:
40:b5:eb:61:6e:2c:a8:56:53:39:28:fa:8c:5a:8a:
59:1b:ff:26:d0:be:99:70:8a:7a:99:0d:b0:1e:6f:
74:31:e5:7e:e7:21:61:e1:cf:91:0a:54:b6:12:f4:
d5:26:56:a7:b1:e4:6f:da:04:43:7c:0c:b6:e9:04:
7d:5d:80:51:86:90:78:52:db:9e:22:29:15:d7:44:
f0:3c:83:85:46:85:02:0d:00:4d:85:1f:0d:36:12:
ce:a1:a5:a3:4d:8a:02:af:1b:40:7f:4b:0b:95:05:
3e:03:16:fa:a0:36:1b:4d:b4:28:f8:e9:5c:63:0d:
f0:51:d1:45:7a:68:60:30:e8:65:dd:e7:83:a9:4a:
ee:af:e5:aa:e0:ed:9c:d6:95:28:ee:22:8a:5d:49:
95:1f:d9:87:af:0a:09:0b:a7:b9:99:e0:e4:ac:5f:
89:0b:63:49:29:22:6f:9e:92:8c:11:a9:ca:47:c7:
30:21:72:47:40:63:dd:a3:5f:ff:a9:bf:c0:cd:a9:
79:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:05:D6:7B:30:6C:F6:F8:C1:C0:8A:B1:97:69:FA:1E:40:A0:3E:F2
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/_AXWezBs9vjBwIqxl2n6HkCgPvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.71.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b5:df:b3:75:fa:2a:39:04:be:84:51:e8:af:39:d2:f2:98:
f2:88:59:91:e1:48:a6:11:f6:8a:e9:47:22:7d:eb:6a:b0:cc:
b0:d8:19:fa:d4:3e:d5:d3:14:14:cd:9c:bc:79:a1:59:af:48:
1b:b5:d6:3f:cf:ba:da:4b:d4:f0:b8:42:1a:c7:c8:f6:b6:e3:
20:73:f8:9b:61:21:0b:e6:50:aa:00:46:10:f3:2d:bc:70:cf:
0b:44:ce:50:03:a6:ef:9a:aa:04:ce:50:84:9c:b2:bf:8b:65:
0d:bc:a3:4b:32:17:0f:56:1a:2a:9f:a4:6d:93:90:83:a9:b3:
24:8b:49:85:4b:01:89:49:eb:33:2a:3e:79:4c:6d:1d:c8:8a:
2f:92:1d:6d:e8:48:0d:ec:72:59:73:b1:a2:06:69:02:b1:21:
f9:c2:99:25:40:ba:21:53:3c:1a:da:e9:86:33:95:f4:93:b7:
9a:52:b9:d2:f3:15:fd:4d:b9:8e:1e:d7:80:4b:30:40:3d:61:
d2:b2:0b:e0:ab:58:9f:49:dd:ec:78:5e:13:56:0e:cb:db:97:
ec:e4:6f:5a:c9:24:5c:b1:5c:d2:94:7c:00:79:a4:ef:5b:10:
fc:d7:05:c5:ac:dd:f9:ca:86:51:82:96:54:dd:42:51:eb:03:
a9:31:23:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1+xtH7YnarMyDbAT/UuhvsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjQwMjA2MTQxNjE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzA1ZDY3YjMwNmNmNmY4YzFjMDhhYjE5NzY5ZmExZTQwYTAzZWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqsmmDLlWaqLrfdRIrZ95PikW5vN
ZtPqTrP637VB8IF8doMMUx2HzB0PVexinW/FisEuDe/g63byMv9AtethbiyoVlM5
KPqMWopZG/8m0L6ZcIp6mQ2wHm90MeV+5yFh4c+RClS2EvTVJlanseRv2gRDfAy2
6QR9XYBRhpB4UtueIikV10TwPIOFRoUCDQBNhR8NNhLOoaWjTYoCrxtAf0sLlQU+
Axb6oDYbTbQo+OlcYw3wUdFFemhgMOhl3eeDqUrur+Wq4O2c1pUo7iKKXUmVH9mH
rwoJC6e5meDkrF+JC2NJKSJvnpKMEanKR8cwIXJHQGPdo1//qb/Azal5iQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPwF1nswbPb4wcCKsZdp+h5AoD7yMB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvX0FYV2V6QnM5dmpCd0lxeGwybjZIa0NnUHZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuetHMA0G
CSqGSIb3DQEBCwUAA4IBAQCHtd+zdfoqOQS+hFHorznS8pjyiFmR4UimEfaK6Uci
fetqsMyw2Bn61D7V0xQUzZy8eaFZr0gbtdY/z7raS9TwuEIax8j2tuMgc/ibYSEL
5lCqAEYQ8y28cM8LRM5QA6bvmqoEzlCEnLK/i2UNvKNLMhcPVhoqn6Rtk5CDqbMk
i0mFSwGJSeszKj55TG0dyIovkh1t6EgN7HJZc7GiBmkCsSH5wpklQLohUzwa2umG
M5X0k7eaUrnS8xX9TbmOHteASzBAPWHSsgvgq1ifSd3seF4TVg7L25fs5G9aySRc
sVzSlHwAeaTvWxD81wXFrN35yoZRgpZU3UJR6wOpMSMj
-----END CERTIFICATE-----
Generated at Sat Apr 27 11:05:10 2024 by rpki-client on console-ams.rpki-client.org