Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/dlv-naHwwybt8R3O-nXgjQLlKgA.roa
File: dlv-naHwwybt8R3O-nXgjQLlKgA.roa (raw, json)
Hash identifier: MJmY1yz4Z+k2e4k6bqdDO4pQmNPRn86i3apCvU0JMAs=
Subject key identifier: 76:5B:FE:9D:A1:F0:C3:26:ED:F1:1D:CE:FA:75:E0:8D:02:E5:2A:00
Certificate issuer: /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial: 018CC50009DF3717384092D1EF091B7A1687
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/dlv-naHwwybt8R3O-nXgjQLlKgA.roa
Signing time: Mon 01 Jan 2024 12:29:23 +0000
ROA not before: Mon 01 Jan 2024 12:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24631
IP address blocks: 185.171.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 19:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:09:df:37:17:38:40:92:d1:ef:09:1b:7a:16:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
Validity
Not Before: Jan 1 12:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=765bfe9da1f0c326edf11dcefa75e08d02e52a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1f:8d:73:5d:c4:d0:b6:12:78:63:33:ff:f3:
1f:d4:02:da:9d:bd:cc:39:b7:8c:48:cf:06:8d:ad:
82:20:e9:5b:08:57:0b:56:37:53:44:e0:8d:5f:63:
e7:c4:62:45:f8:b0:fa:50:e1:52:f8:0d:de:66:b6:
e6:a6:c3:8a:31:9a:cc:de:95:dc:a9:e4:a6:df:25:
54:fb:ee:6f:2d:06:07:d3:20:91:6c:c3:1d:8d:0b:
9d:08:1e:01:df:26:86:3b:22:17:27:b8:c8:f5:42:
d2:ab:01:5d:5e:aa:4c:ee:aa:27:c5:2b:2c:16:ab:
84:38:5b:e5:82:ec:61:7a:f1:61:c4:f9:79:07:62:
b4:a3:5e:3b:f5:1a:ff:d7:f4:cf:ce:15:99:f6:13:
a1:fe:a7:54:85:b1:97:2b:5a:f4:5d:46:fd:b0:3d:
6c:70:be:cc:2e:ac:8e:aa:6f:7d:f6:dd:3b:8a:4b:
c5:b7:08:09:ff:3c:2b:15:bc:22:f8:d5:8f:78:2d:
42:30:5e:3d:d6:20:bd:79:bc:0e:ee:3b:aa:e4:8b:
26:68:0a:7a:1f:f2:c2:00:a1:79:f3:8e:84:4f:c3:
27:be:b1:01:2c:e5:5a:d6:00:19:cc:56:28:ee:14:
a1:f1:a8:fe:fe:ed:5e:96:37:d2:7c:f0:9e:9f:be:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5B:FE:9D:A1:F0:C3:26:ED:F1:1D:CE:FA:75:E0:8D:02:E5:2A:00
X509v3 Authority Key Identifier:
keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/dlv-naHwwybt8R3O-nXgjQLlKgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.53.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:6d:b9:e5:0c:e2:33:6b:bd:9e:1d:69:1d:44:30:0b:f9:da:
76:a7:62:28:0b:17:35:36:76:fa:59:81:bb:48:b9:b8:d6:57:
04:c5:8b:cc:0d:54:51:28:56:8b:ab:9e:dc:e7:5d:bf:35:5c:
3b:96:a2:d1:4f:bf:6e:8e:4c:5b:37:39:c2:bc:32:9d:d1:3a:
47:26:01:58:a1:33:f8:59:3c:f5:ba:69:b8:a9:05:8f:5a:f9:
51:20:fa:f6:10:a8:2c:69:9d:34:c0:0a:71:ee:eb:d5:97:3c:
70:b3:6b:d2:c8:64:3a:2c:f7:b8:cc:d4:1f:53:25:f6:4b:7d:
ec:3c:58:a8:42:56:31:4c:8c:72:c3:72:01:59:8a:d6:3f:24:
79:5b:f9:19:e6:c6:d4:2f:73:10:a2:8a:ee:47:5d:dd:cc:03:
d0:5d:d8:62:e3:a8:03:f1:84:d8:12:06:8e:77:2c:d5:6d:31:
47:f0:85:33:f8:31:25:04:03:6c:62:b7:bb:d7:63:3d:08:db:
50:90:d3:ef:d2:a8:ac:df:83:aa:39:93:3f:dd:48:7b:7b:47:
93:5a:2e:2d:52:9e:b2:1f:80:93:67:1c:22:52:d2:e7:22:f7:
fd:ba:d4:74:18:ad:5f:15:10:27:01:c7:3b:63:c5:86:43:85:
9a:83:56:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAAnfNxc4QJLR7wkbehaHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzY2YjA1OGMwOTY3NTNhMzRhZDYyNWQ1MzI3NWNkMmRi
YTViMzMwHhcNMjQwMTAxMTIyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjViZmU5ZGExZjBjMzI2ZWRmMTFkY2VmYTc1ZTA4ZDAyZTUyYTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh+Nc13E0LYSeGMz//Mf1ALanb3M
ObeMSM8Gja2CIOlbCFcLVjdTROCNX2PnxGJF+LD6UOFS+A3eZrbmpsOKMZrM3pXc
qeSm3yVU++5vLQYH0yCRbMMdjQudCB4B3yaGOyIXJ7jI9ULSqwFdXqpM7qonxSss
FquEOFvlguxhevFhxPl5B2K0o1479Rr/1/TPzhWZ9hOh/qdUhbGXK1r0XUb9sD1s
cL7MLqyOqm999t07ikvFtwgJ/zwrFbwi+NWPeC1CMF491iC9ebwO7juq5IsmaAp6
H/LCAKF5846ET8MnvrEBLOVa1gAZzFYo7hSh8aj+/u1eljfSfPCen743tQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHZb/p2h8MMm7fEdzvp14I0C5SoAMB8GA1UdIwQY
MBaAFBx2awWMCWdTo0rWJdUydc0tulszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhackJZd0paMU9qU3RZbDFUSjF6UzI2V3pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hYjgzZGMtYzBlNy00ZWMzLWFmNzIt
ODE5MTdkZmZkY2Q3LzEvZGx2LW5hSHd3eWJ0OFIzTy1uWGdqUUxsS2dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9hYjgzZGMtYzBlNy00ZWMzLWFmNzItODE5MTdkZmZkY2Q3
LzEvSEhackJZd0paMU9qU3RZbDFUSjF6UzI2V3pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuas1MA0G
CSqGSIb3DQEBCwUAA4IBAQAcbbnlDOIza72eHWkdRDAL+dp2p2IoCxc1Nnb6WYG7
SLm41lcExYvMDVRRKFaLq57c512/NVw7lqLRT79ujkxbNznCvDKd0TpHJgFYoTP4
WTz1umm4qQWPWvlRIPr2EKgsaZ00wApx7uvVlzxws2vSyGQ6LPe4zNQfUyX2S33s
PFioQlYxTIxyw3IBWYrWPyR5W/kZ5sbUL3MQooruR13dzAPQXdhi46gD8YTYEgaO
dyzVbTFH8IUz+DElBANsYre712M9CNtQkNPv0qis34OqOZM/3Uh7e0eTWi4tUp6y
H4CTZxwiUtLnIvf9utR0GK1fFRAnAcc7Y8WGQ4Wag1bU
-----END CERTIFICATE-----
Generated at Mon May 20 00:58:52 2024 by rpki-client on console-fra.rpki-client.org