Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/L6y6W2G8Id95CPYXLCHA7N3qZ7M.roa
File: L6y6W2G8Id95CPYXLCHA7N3qZ7M.roa (raw, json)
Hash identifier: oLlW1B1zggZoA0t23S/PXyTTfcuxlwAm3gTivnz5i70=
Subject key identifier: 2F:AC:BA:5B:61:BC:21:DF:79:08:F6:17:2C:21:C0:EC:DD:EA:67:B3
Certificate issuer: /CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Certificate serial: 018CC4934AB741947E121399B234FB5853DE
Authority key identifier: 54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/L6y6W2G8Id95CPYXLCHA7N3qZ7M.roa
Signing time: Mon 01 Jan 2024 10:30:36 +0000
ROA not before: Mon 01 Jan 2024 10:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208426
IP address blocks: 185.42.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:4a:b7:41:94:7e:12:13:99:b2:34:fb:58:53:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Validity
Not Before: Jan 1 10:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2facba5b61bc21df7908f6172c21c0ecddea67b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:57:5d:63:97:6a:26:77:d3:38:15:5a:fd:08:
a9:a4:09:90:e0:0e:33:25:b1:19:3e:55:05:c4:6d:
cf:c1:2d:26:15:86:07:be:97:ae:05:85:39:ab:1e:
b9:e3:ab:b0:2a:83:dc:b3:86:5a:e4:97:8d:50:3f:
18:92:5f:5d:bd:6f:46:23:fc:77:cc:9c:4d:85:80:
10:1c:e9:e2:2f:46:01:82:78:c3:16:87:79:84:71:
7b:d0:ec:e4:64:17:f2:b7:58:c4:59:b2:69:24:02:
b1:ae:72:ea:92:0b:da:e4:2b:94:d3:73:2c:64:b2:
0f:40:ef:09:28:d9:2b:32:86:d7:bb:b6:c3:6e:05:
1d:d1:c4:fe:78:81:a4:dd:4c:85:15:2f:62:ca:3b:
ef:d3:b9:08:98:f6:a6:e0:9f:44:79:d4:04:a2:cd:
dc:89:96:6a:b4:6b:64:d8:96:08:11:dd:4a:e4:75:
c4:b0:4c:5d:43:fc:9f:8f:4f:6f:95:1d:1c:84:40:
c8:56:9e:e4:dd:7b:25:5c:48:fd:7f:fc:55:46:59:
ad:4c:32:25:40:16:61:cd:62:ca:e8:08:89:38:eb:
07:38:9f:7e:9e:c3:3b:34:2a:a2:a2:09:36:be:08:
df:ce:95:8b:38:a1:08:22:b0:e8:9a:f5:6e:4e:0a:
f6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AC:BA:5B:61:BC:21:DF:79:08:F6:17:2C:21:C0:EC:DD:EA:67:B3
X509v3 Authority Key Identifier:
keyid:54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/L6y6W2G8Id95CPYXLCHA7N3qZ7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.187.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:b3:67:76:07:51:13:3a:db:c1:47:f2:85:cc:72:53:20:e7:
e6:e9:cb:dd:83:85:d7:71:0e:b5:f0:c3:0d:34:66:8f:b7:04:
86:3f:dd:4c:ef:dd:6d:96:f6:f7:bc:30:f6:df:cf:c9:2c:90:
d5:ef:9f:05:28:7b:85:61:ed:1c:56:87:dd:5a:35:df:3a:18:
0d:dc:2e:62:e2:1e:5c:26:ee:ac:eb:6c:73:f9:c1:3b:a3:ab:
de:98:89:12:cd:82:23:3a:76:00:9e:87:03:76:7a:28:ec:21:
6d:17:e2:fd:e3:97:36:d2:73:0e:2c:a0:78:4d:23:ed:39:c7:
7f:a8:d7:42:d8:70:f0:27:65:72:f1:eb:dd:19:7b:18:a8:f6:
98:ba:01:c4:7a:c9:92:ef:1a:10:d3:72:1e:07:d2:f5:58:81:
b7:65:00:6f:c7:1e:ce:91:12:78:c3:52:16:73:c5:03:a1:99:
6c:72:32:1b:a2:d8:2e:22:ff:87:b8:7d:a6:3f:86:d6:95:35:
1d:d3:29:b5:c0:35:26:38:fa:af:d3:2e:0f:aa:05:a7:f3:1e:
8d:b5:ed:06:87:d0:fa:e3:a1:59:d4:65:01:61:be:5b:1e:da:
e0:75:9e:ac:fb:cb:0e:5c:38:04:40:60:b4:87:d4:57:60:a8:
49:13:9c:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk0q3QZR+EhOZsjT7WFPeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NTg0YTIxOWY2ZjUwNjZkODQ4ZWQyYWI5NjRkYTg5NjZk
NDBhMmEwHhcNMjQwMTAxMTAzMDM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmFjYmE1YjYxYmMyMWRmNzkwOGY2MTcyYzIxYzBlY2RkZWE2N2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglddY5dqJnfTOBVa/QippAmQ4A4z
JbEZPlUFxG3PwS0mFYYHvpeuBYU5qx6546uwKoPcs4Za5JeNUD8Ykl9dvW9GI/x3
zJxNhYAQHOniL0YBgnjDFod5hHF70OzkZBfyt1jEWbJpJAKxrnLqkgva5CuU03Ms
ZLIPQO8JKNkrMobXu7bDbgUd0cT+eIGk3UyFFS9iyjvv07kImPam4J9EedQEos3c
iZZqtGtk2JYIEd1K5HXEsExdQ/yfj09vlR0chEDIVp7k3XslXEj9f/xVRlmtTDIl
QBZhzWLK6AiJOOsHOJ9+nsM7NCqiogk2vgjfzpWLOKEIIrDomvVuTgr28QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC+sulthvCHfeQj2FywhwOzd6mezMB8GA1UdIwQY
MBaAFFRYSiGfb1Bm2EjtKrlk2olm1AoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkZoS0laOXZVR2JZU08wcXVXVGFpV2JVQ2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kZDNkZDEtMDliNS00YWEyLWFlYzAt
OWZiMWNlNGQ3MjBiLzEvTDZ5NlcyRzhJZDk1Q1BZWExDSEE3TjNxWjdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9kZDNkZDEtMDliNS00YWEyLWFlYzAtOWZiMWNlNGQ3MjBi
LzEvVkZoS0laOXZVR2JZU08wcXVXVGFpV2JVQ2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSq7MA0G
CSqGSIb3DQEBCwUAA4IBAQBcs2d2B1ETOtvBR/KFzHJTIOfm6cvdg4XXcQ618MMN
NGaPtwSGP91M791tlvb3vDD238/JLJDV758FKHuFYe0cVofdWjXfOhgN3C5i4h5c
Ju6s62xz+cE7o6vemIkSzYIjOnYAnocDdnoo7CFtF+L945c20nMOLKB4TSPtOcd/
qNdC2HDwJ2Vy8evdGXsYqPaYugHEesmS7xoQ03IeB9L1WIG3ZQBvxx7OkRJ4w1IW
c8UDoZlscjIbotguIv+HuH2mP4bWlTUd0ym1wDUmOPqv0y4PqgWn8x6Nte0Gh9D6
46FZ1GUBYb5bHtrgdZ6s+8sOXDgEQGC0h9RXYKhJE5ww
-----END CERTIFICATE-----
Generated at Fri Jun 7 22:12:00 2024 by rpki-client on console-ams.rpki-client.org