Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/gF1rNNltKaH4Pj-DBFDV5l0W4WQ.roa
File: gF1rNNltKaH4Pj-DBFDV5l0W4WQ.roa (raw, json)
Hash identifier: LusZQTsRkWhMZvzilXVRzdgK7xGH2bUpqQCqMXpUgZg=
Subject key identifier: 80:5D:6B:34:D9:6D:29:A1:F8:3E:3F:83:04:50:D5:E6:5D:16:E1:64
Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial: 018CCA2ABE87738436CB4F6A48812A2D0F7C
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/gF1rNNltKaH4Pj-DBFDV5l0W4WQ.roa
Signing time: Tue 02 Jan 2024 12:34:08 +0000
ROA not before: Tue 02 Jan 2024 12:34:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6908
IP address blocks: 185.215.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:be:87:73:84:36:cb:4f:6a:48:81:2a:2d:0f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Validity
Not Before: Jan 2 12:34:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=805d6b34d96d29a1f83e3f830450d5e65d16e164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:5a:30:2e:c2:3a:d0:bf:5b:3f:28:8a:8b:
e0:1a:d0:d2:0f:48:a9:09:5e:f8:dc:15:ad:92:3e:
94:d1:a2:01:15:f0:2c:41:1b:1b:21:66:9b:a1:51:
18:2f:eb:22:1c:9f:5a:22:64:c5:16:11:56:58:f9:
aa:fd:53:63:ad:bb:48:07:55:d9:e2:46:cb:d9:bf:
72:4b:b2:40:6f:48:f0:1e:32:fa:26:d5:36:e3:93:
d9:b8:e7:42:ca:bd:8b:84:b3:52:7e:17:94:44:42:
9f:ce:9b:0f:00:c5:cd:79:bb:cd:a8:94:ea:49:ac:
8f:04:f4:ac:b4:91:89:ff:06:28:33:57:b8:cc:ae:
c5:0e:a4:ac:70:5d:fb:73:73:45:a5:27:0f:17:73:
e8:d5:23:8a:c5:0f:3e:ea:b8:61:b3:2f:a8:2f:48:
3d:6e:45:66:e9:84:83:ab:04:bb:dc:fb:db:68:c7:
b6:47:6b:a1:04:12:35:d1:e6:7e:83:aa:fa:de:07:
ce:85:e4:7c:40:fd:95:81:22:ce:67:72:44:42:31:
dc:3c:ac:08:91:38:e6:ef:27:a3:84:60:73:a8:f7:
0b:66:5b:ac:a5:55:90:36:59:aa:40:c8:63:f9:ec:
7e:3f:75:6e:1c:6c:80:90:77:55:48:02:38:1e:3b:
3b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5D:6B:34:D9:6D:29:A1:F8:3E:3F:83:04:50:D5:E6:5D:16:E1:64
X509v3 Authority Key Identifier:
keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/gF1rNNltKaH4Pj-DBFDV5l0W4WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.36.0/22
Signature Algorithm: sha256WithRSAEncryption
88:df:ea:9e:77:7d:2e:68:43:6b:75:14:33:09:77:ea:38:1a:
df:6b:c9:f3:59:88:db:5f:7f:10:99:b4:ee:63:4f:d2:b8:14:
aa:e8:a7:72:c7:4c:d7:1d:28:a8:5b:1a:d0:f3:e7:10:77:d3:
0b:3a:83:4a:a4:6e:0d:c8:b9:0e:e5:89:7b:68:4c:77:26:7c:
cf:f3:2d:21:77:9b:84:0b:72:a3:f7:ae:fe:8b:ca:aa:c2:6d:
86:e9:0f:d1:f8:b3:b5:bf:4b:d6:1a:89:e0:b0:53:29:ff:5d:
85:5e:2d:13:d8:86:9c:14:9d:3c:1e:15:4c:6f:2d:80:9a:bb:
88:b7:66:ed:0e:8d:88:d7:be:ec:cf:bb:1f:8b:ae:d7:fd:7d:
43:52:ba:12:52:96:bf:1d:11:dd:8e:06:94:4c:1f:63:da:8a:
06:d7:03:56:14:5b:9c:6d:31:13:78:45:56:b8:8a:43:81:a3:
fc:9d:00:a7:65:ab:48:be:08:3b:ce:45:9d:2a:55:43:5f:c5:
db:64:02:45:0f:68:7b:c7:4f:ee:75:a4:41:37:35:18:5b:6e:
d5:da:86:4b:eb:98:a7:19:ed:29:9f:81:ce:0b:2f:a9:aa:39:
0e:ec:ee:55:6e:86:ae:af:f2:d8:a0:82:b5:b2:e1:0c:db:cc:
a7:9a:5e:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKr6Hc4Q2y09qSIEqLQ98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDk1YTRjZWNiZWFmYjNlYWRmNmVkMDM0OWJiMGI5NmRh
NDY0ZWUwHhcNMjQwMTAyMTIzNDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDVkNmIzNGQ5NmQyOWExZjgzZTNmODMwNDUwZDVlNjVkMTZlMTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuitaMC7COtC/Wz8oiovgGtDSD0ip
CV743BWtkj6U0aIBFfAsQRsbIWaboVEYL+siHJ9aImTFFhFWWPmq/VNjrbtIB1XZ
4kbL2b9yS7JAb0jwHjL6JtU245PZuOdCyr2LhLNSfheUREKfzpsPAMXNebvNqJTq
SayPBPSstJGJ/wYoM1e4zK7FDqSscF37c3NFpScPF3Po1SOKxQ8+6rhhsy+oL0g9
bkVm6YSDqwS73PvbaMe2R2uhBBI10eZ+g6r63gfOheR8QP2VgSLOZ3JEQjHcPKwI
kTjm7yejhGBzqPcLZluspVWQNlmqQMhj+ex+P3VuHGyAkHdVSAI4Hjs7xwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIBdazTZbSmh+D4/gwRQ1eZdFuFkMB8GA1UdIwQY
MBaAFGNJWkzsvq+z6t9u0DSbsLltpGTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMt
MzgyMGY3ZWUyY2I4LzEvZ0Yxck5ObHRLYUg0UGotREJGRFY1bDBXNFdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMtMzgyMGY3ZWUyY2I4
LzEvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudckMA0G
CSqGSIb3DQEBCwUAA4IBAQCI3+qed30uaENrdRQzCXfqOBrfa8nzWYjbX38QmbTu
Y0/SuBSq6Kdyx0zXHSioWxrQ8+cQd9MLOoNKpG4NyLkO5Yl7aEx3JnzP8y0hd5uE
C3Kj967+i8qqwm2G6Q/R+LO1v0vWGongsFMp/12FXi0T2IacFJ08HhVMby2AmruI
t2btDo2I177sz7sfi67X/X1DUroSUpa/HRHdjgaUTB9j2ooG1wNWFFucbTETeEVW
uIpDgaP8nQCnZatIvgg7zkWdKlVDX8XbZAJFD2h7x0/udaRBNzUYW27V2oZL65in
Ge0pn4HOCy+pqjkO7O5Vboaur/LYoIK1suEM28ynml4T
-----END CERTIFICATE-----
Generated at Sun Jun 23 03:18:57 2024 by rpki-client on console-fra.rpki-client.org