Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/V6w96IE7wBfa5pWKX9LFFVwOlNQ.roa
File: V6w96IE7wBfa5pWKX9LFFVwOlNQ.roa (raw, json)
Hash identifier: h8gDw9/nI+WW3b/5NP6d6uOxg5h+QCwuyBn6ay/LICA=
Subject key identifier: 57:AC:3D:E8:81:3B:C0:17:DA:E6:95:8A:5F:D2:C5:15:5C:0E:94:D4
Certificate issuer: /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial: 018FBEF5AD631C9D0EE7027FB7608DA69C62
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/V6w96IE7wBfa5pWKX9LFFVwOlNQ.roa
Signing time: Tue 28 May 2024 11:28:42 +0000
ROA not before: Tue 28 May 2024 11:28:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18186
IP address blocks: 185.238.212.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:be:f5:ad:63:1c:9d:0e:e7:02:7f:b7:60:8d:a6:9c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Validity
Not Before: May 28 11:28:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57ac3de8813bc017dae6958a5fd2c5155c0e94d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:40:7f:6b:7b:33:d8:89:8f:64:f3:ed:5a:6f:
95:53:6c:8e:26:2e:da:d7:0a:ce:cf:00:ea:38:a5:
34:9a:e5:cf:5e:f4:ea:41:ad:97:0a:ad:fd:f2:03:
02:3a:16:86:2c:79:a1:03:36:5a:b8:83:92:8f:72:
0e:8c:e7:92:31:34:a1:21:15:cd:fd:f5:71:29:46:
d9:c5:d2:c6:69:5c:b2:cd:8d:e4:84:85:88:05:dd:
0f:9a:1a:7b:2b:86:14:83:b1:b1:bf:da:f0:eb:ef:
fb:5b:98:41:2d:56:d8:23:26:8c:6e:cd:55:f3:85:
e0:c1:66:61:f7:10:45:68:4d:55:5e:02:e0:6b:db:
ea:b8:2f:8d:8e:79:30:67:01:e7:27:4f:3f:7d:7a:
36:3c:44:9d:73:3a:e4:6f:8e:66:46:b1:90:ae:0e:
71:21:94:79:2e:72:d8:43:d5:47:d0:82:fe:8e:ef:
f3:99:67:d7:5d:2c:ea:33:02:fa:f0:b4:b3:95:94:
6e:57:ff:dd:15:32:9a:ee:87:70:b3:10:31:ae:e6:
47:8b:e6:4f:a9:5e:c4:ea:18:b7:7a:f9:a5:74:4a:
4a:5f:58:46:71:2f:a0:a8:33:07:89:57:e2:8d:d7:
b1:f8:7b:01:bc:36:bc:65:e8:4d:54:ec:81:24:92:
28:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AC:3D:E8:81:3B:C0:17:DA:E6:95:8A:5F:D2:C5:15:5C:0E:94:D4
X509v3 Authority Key Identifier:
keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/V6w96IE7wBfa5pWKX9LFFVwOlNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.212.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:19:48:73:a0:f1:78:9b:9d:26:82:02:30:15:77:51:3a:14:
24:45:69:44:64:33:d3:f0:71:49:b4:81:a6:bd:99:ce:60:f5:
33:c2:e8:4f:ce:f2:b5:2a:85:49:2f:32:40:54:c0:e7:bd:20:
23:e8:ca:df:e4:4d:4e:53:62:55:a9:a5:e2:d4:43:07:c2:7d:
bf:62:5f:ba:3a:a0:30:ee:d4:10:eb:5f:ac:2d:ed:21:31:63:
1b:66:b5:a9:0e:a3:b0:7c:f2:91:57:ca:ad:f0:55:8c:a6:6a:
c8:22:8c:f1:17:da:a5:74:d1:e5:92:07:e5:4e:68:41:cd:8c:
39:08:c0:45:25:93:61:65:58:4a:9b:16:c3:3f:a8:24:d6:e2:
97:0e:30:c1:d6:a9:ce:cd:bc:8e:02:fe:a9:72:36:f1:29:17:
b5:65:53:ce:fa:78:5a:dc:0e:67:3a:f9:ab:00:4c:1a:25:7a:
77:fd:0d:4f:ef:34:da:fb:d6:ea:fa:c4:c4:eb:82:74:1e:5b:
26:d6:6d:1a:f0:9b:76:0e:5a:14:88:8f:da:3c:bf:b6:42:22:
33:ec:92:34:52:40:4e:75:5d:23:2e:39:88:36:60:9c:2e:4a:
7f:67:88:97:65:47:42:9e:29:b1:42:c6:9f:9f:fb:14:79:4b:
92:9b:eb:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY++9a1jHJ0O5wJ/t2CNppxiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZGI4NDdkMWRiMWUwYjJjMmMyNTUwMjIxMGZmNWE3MTk5
NjdhMTkwHhcNMjQwNTI4MTEyODQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2FjM2RlODgxM2JjMDE3ZGFlNjk1OGE1ZmQyYzUxNTVjMGU5NGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUB/a3sz2ImPZPPtWm+VU2yOJi7a
1wrOzwDqOKU0muXPXvTqQa2XCq398gMCOhaGLHmhAzZauIOSj3IOjOeSMTShIRXN
/fVxKUbZxdLGaVyyzY3khIWIBd0Pmhp7K4YUg7Gxv9rw6+/7W5hBLVbYIyaMbs1V
84XgwWZh9xBFaE1VXgLga9vquC+NjnkwZwHnJ08/fXo2PESdczrkb45mRrGQrg5x
IZR5LnLYQ9VH0IL+ju/zmWfXXSzqMwL68LSzlZRuV//dFTKa7odwsxAxruZHi+ZP
qV7E6hi3evmldEpKX1hGcS+gqDMHiVfijdex+HsBvDa8ZehNVOyBJJIo0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFesPeiBO8AX2uaVil/SxRVcDpTUMB8GA1UdIwQY
MBaAFDHbhH0dseCywsJVAiEP9acZlnoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEt
YmQ2ZTNiMDI2YzM3LzEvVjZ3OTZJRTd3QmZhNXBXS1g5TEZGVndPbE5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEtYmQ2ZTNiMDI2YzM3
LzEvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBue7UMA0G
CSqGSIb3DQEBCwUAA4IBAQDQGUhzoPF4m50mggIwFXdROhQkRWlEZDPT8HFJtIGm
vZnOYPUzwuhPzvK1KoVJLzJAVMDnvSAj6Mrf5E1OU2JVqaXi1EMHwn2/Yl+6OqAw
7tQQ61+sLe0hMWMbZrWpDqOwfPKRV8qt8FWMpmrIIozxF9qldNHlkgflTmhBzYw5
CMBFJZNhZVhKmxbDP6gk1uKXDjDB1qnOzbyOAv6pcjbxKRe1ZVPO+nha3A5nOvmr
AEwaJXp3/Q1P7zTa+9bq+sTE64J0Hlsm1m0a8Jt2DloUiI/aPL+2QiIz7JI0UkBO
dV0jLjmINmCcLkp/Z4iXZUdCnimxQsafn/sUeUuSm+uo
-----END CERTIFICATE-----
Generated at Thu Jun 20 12:04:30 2024 by rpki-client on console-fra.rpki-client.org