Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/rUsxCR3C-v2mtiudMGGXAIdycT0.roa
File: rUsxCR3C-v2mtiudMGGXAIdycT0.roa (raw, json)
Hash identifier: SFiwXpoDtXifD0XbApdn28f3uY28SVJ1KM+WjWldqtg=
Subject key identifier: AD:4B:31:09:1D:C2:FA:FD:A6:B6:2B:9D:30:61:97:00:87:72:71:3D
Certificate issuer: /CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Certificate serial: 018CC4924BEC90DB9BDC7571B2E2879287DC
Authority key identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/rUsxCR3C-v2mtiudMGGXAIdycT0.roa
Signing time: Mon 01 Jan 2024 10:29:31 +0000
ROA not before: Mon 01 Jan 2024 10:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56795
IP address blocks: 85.204.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft
rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:4b:ec:90:db:9b:dc:75:71:b2:e2:87:92:87:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Validity
Not Before: Jan 1 10:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad4b31091dc2fafda6b62b9d306197008772713d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:52:bf:7e:dd:55:70:29:98:3c:0c:62:66:
db:20:ce:79:1c:71:dc:07:02:a3:44:2e:11:b5:e5:
05:ee:fc:d4:89:09:70:dd:b3:f4:96:dc:51:84:04:
61:e9:62:26:d7:f8:a8:90:d1:73:86:2b:63:b4:99:
93:d3:79:ce:26:fd:18:6f:72:6d:0b:a1:a6:47:f3:
37:85:5f:b5:b5:4d:37:38:f5:71:47:c1:06:cb:e9:
dd:57:ed:0c:e1:56:68:30:4c:cf:3a:50:14:c1:74:
1e:ee:51:9e:c4:21:7f:a5:dc:25:18:bf:bd:ad:37:
23:12:e4:9f:82:1a:8b:ae:4a:fc:cd:8d:03:14:fa:
b4:07:95:be:11:08:66:97:46:7b:ac:fe:89:f0:0a:
d0:bb:e1:b6:bd:66:28:09:94:fa:1d:97:0e:37:75:
e1:af:21:de:64:03:69:57:03:99:bd:8f:0c:49:16:
77:4d:8b:b5:1f:2a:72:02:c3:76:d2:9a:a2:3b:d7:
37:0a:f2:20:33:8a:2b:fa:67:a6:ea:15:b7:6b:94:
81:29:74:57:44:a9:5e:fc:48:1b:42:34:41:9d:48:
e9:d6:9c:c1:9d:54:24:42:0f:ed:2a:b9:c7:26:db:
a5:20:b5:f5:a9:34:83:85:f8:7d:18:55:11:fe:62:
7b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4B:31:09:1D:C2:FA:FD:A6:B6:2B:9D:30:61:97:00:87:72:71:3D
X509v3 Authority Key Identifier:
keyid:7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/rUsxCR3C-v2mtiudMGGXAIdycT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.46.0/24
Signature Algorithm: sha256WithRSAEncryption
25:38:cc:9b:b7:50:64:3c:60:3e:d7:f0:a8:0f:cc:d6:b5:d1:
1b:7c:de:92:c1:3f:b3:16:94:b6:be:8d:36:b1:2f:c6:56:2b:
2b:a6:41:a6:ba:c4:09:9e:38:13:27:c2:43:c9:6d:49:dd:51:
75:71:32:9d:1b:c6:fb:60:3a:04:4f:4e:76:6c:04:d0:09:92:
43:80:ff:b3:af:7e:aa:0d:c5:43:89:35:d1:b3:d3:9c:ae:7e:
dd:02:40:1f:4a:d7:2c:31:06:90:13:30:76:6f:da:3c:46:d1:
30:c0:94:58:55:8b:43:2f:3c:20:4a:86:cc:51:87:b1:17:f6:
66:ac:d9:0c:bb:ed:b9:1c:4f:e7:36:b8:a3:00:68:4f:a2:95:
c6:8c:3d:5e:bd:04:14:86:fd:3d:0e:88:d7:c9:e6:55:61:e3:
7c:51:cb:1e:a6:16:b5:1f:e3:7e:15:b3:9d:7b:e5:5e:7f:ac:
ac:04:c5:8b:a5:71:47:1c:d2:f7:bf:db:b5:82:ee:f6:b0:b1:
c6:2d:7a:fd:14:3f:89:2c:f1:26:c7:08:94:32:50:79:57:a6:
8d:b1:6a:a5:04:57:ef:71:65:f2:ce:19:7d:0f:3a:66:5b:b0:
67:f1:31:e1:0e:78:93:a9:53:e0:56:47:ee:4a:07:7f:f8:28:
a9:a0:97:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkkvskNub3HVxsuKHkofcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZWYwNjllN2UzZWQ1YmY3MGY2ODJjZTQwYzU4MTBmZjNl
NWUzNzgwHhcNMjQwMTAxMTAyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDRiMzEwOTFkYzJmYWZkYTZiNjJiOWQzMDYxOTcwMDg3NzI3MTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzVSv37dVXApmDwMYmbbIM55HHHc
BwKjRC4RteUF7vzUiQlw3bP0ltxRhARh6WIm1/iokNFzhitjtJmT03nOJv0Yb3Jt
C6GmR/M3hV+1tU03OPVxR8EGy+ndV+0M4VZoMEzPOlAUwXQe7lGexCF/pdwlGL+9
rTcjEuSfghqLrkr8zY0DFPq0B5W+EQhml0Z7rP6J8ArQu+G2vWYoCZT6HZcON3Xh
ryHeZANpVwOZvY8MSRZ3TYu1HypyAsN20pqiO9c3CvIgM4or+mem6hW3a5SBKXRX
RKle/EgbQjRBnUjp1pzBnVQkQg/tKrnHJtulILX1qTSDhfh9GFUR/mJ7owIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK1LMQkdwvr9prYrnTBhlwCHcnE9MB8GA1UdIwQY
MBaAFHrvBp5+PtW/cPaCzkDFgQ/z5eN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXU4R25uNC0xYjl3OW9MT1FNV0JEX1BsNDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jMGJiNTItNzBkZS00YWYwLWE5ZmIt
OTAwMDM0ZjAwZDllLzEvclVzeENSM0MtdjJtdGl1ZE1HR1hBSWR5Y1QwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9jMGJiNTItNzBkZS00YWYwLWE5ZmItOTAwMDM0ZjAwZDll
LzEvZXU4R25uNC0xYjl3OW9MT1FNV0JEX1BsNDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcwuMA0G
CSqGSIb3DQEBCwUAA4IBAQAlOMybt1BkPGA+1/CoD8zWtdEbfN6SwT+zFpS2vo02
sS/GVisrpkGmusQJnjgTJ8JDyW1J3VF1cTKdG8b7YDoET052bATQCZJDgP+zr36q
DcVDiTXRs9Ocrn7dAkAfStcsMQaQEzB2b9o8RtEwwJRYVYtDLzwgSobMUYexF/Zm
rNkMu+25HE/nNrijAGhPopXGjD1evQQUhv09DojXyeZVYeN8Ucsepha1H+N+FbOd
e+Vef6ysBMWLpXFHHNL3v9u1gu72sLHGLXr9FD+JLPEmxwiUMlB5V6aNsWqlBFfv
cWXyzhl9DzpmW7Bn8THhDniTqVPgVkfuSgd/+CipoJcC
-----END CERTIFICATE-----
Generated at Sun Sep 29 01:33:18 2024 by rpki-client on console-ams.rpki-client.org