Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/t2JrHUqTd0kBoQB8g7V324EXGlI.roa
File: t2JrHUqTd0kBoQB8g7V324EXGlI.roa (raw, json)
Hash identifier: JcSA/9kpashBdZQicFXiQRuxXk7PSkDLdqi9KH1OC+0=
Subject key identifier: B7:62:6B:1D:4A:93:77:49:01:A1:00:7C:83:B5:77:DB:81:17:1A:52
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018CC501199A633A39D43B1986567FAE9984
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/t2JrHUqTd0kBoQB8g7V324EXGlI.roa
Signing time: Mon 01 Jan 2024 12:30:32 +0000
ROA not before: Mon 01 Jan 2024 12:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48314
IP address blocks: 185.243.114.0/24 maxlen: 24
185.243.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:19:9a:63:3a:39:d4:3b:19:86:56:7f:ae:99:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 12:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7626b1d4a93774901a1007c83b577db81171a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:47:15:0b:c3:43:04:9e:15:27:e7:bc:21:
c9:5f:2c:0f:05:00:0a:a0:e1:2b:84:be:50:6c:55:
cd:a1:98:d8:4d:e1:c8:59:7a:ea:81:3c:61:4e:95:
3a:47:43:93:e0:b7:98:ea:7e:a0:40:97:2a:90:ea:
0b:be:a1:3c:85:bd:ee:16:c5:3f:d7:3e:7a:67:00:
d2:82:95:cb:1c:b9:3e:65:8d:66:2c:7b:f9:eb:ec:
97:a7:9c:27:19:7a:98:9f:a4:f3:99:fe:25:d5:47:
c1:35:6f:0d:fc:99:6b:46:ca:03:20:09:18:13:4d:
7d:94:58:9e:f0:ba:05:61:82:64:cd:47:51:fe:65:
e8:3f:2c:91:79:9d:b5:90:72:d6:94:b7:dc:2b:66:
0c:a1:4c:5b:82:c9:4e:77:4c:2f:17:d7:41:0e:98:
4c:4f:c4:14:75:9d:f7:8d:01:5b:80:c6:71:47:ed:
25:02:33:db:85:41:44:c5:eb:b3:94:31:59:2e:38:
c3:34:46:e5:80:0d:a8:59:8a:41:30:3f:b0:de:c1:
f3:ba:43:c2:e8:21:f6:65:c9:6f:1c:17:41:30:f3:
fd:19:59:a3:2a:64:d9:c6:42:a9:b0:1c:23:3f:98:
a8:62:ba:34:c4:38:0a:6b:a4:6b:b6:e3:1d:e2:92:
85:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:62:6B:1D:4A:93:77:49:01:A1:00:7C:83:B5:77:DB:81:17:1A:52
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/t2JrHUqTd0kBoQB8g7V324EXGlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.114.0/23
Signature Algorithm: sha256WithRSAEncryption
66:99:07:6e:3c:94:6c:af:dc:ae:d2:3f:35:2a:9a:ea:bf:e5:
7c:25:35:4b:b7:a2:af:0f:e1:10:d8:08:79:6b:71:42:d7:90:
29:a4:a6:07:1c:e2:4e:66:95:c6:b6:1c:be:ee:70:77:61:9f:
30:ee:5c:f8:fe:20:12:87:61:81:38:22:72:e0:5f:60:fd:69:
b3:94:5f:4e:ba:3e:39:a4:73:69:b7:97:4e:3d:a0:25:a6:21:
57:43:28:62:3f:fc:a9:92:fb:6e:b8:d9:16:df:36:fa:17:2f:
a0:90:21:ed:50:1f:7c:34:6b:77:61:53:2a:ca:4b:cf:c4:be:
a2:59:79:1a:1c:bd:94:66:fb:08:c5:b1:bc:65:51:95:c2:0a:
c1:82:d3:b7:3d:72:a0:03:db:47:57:e3:55:6d:90:75:f9:9d:
c1:14:fa:2a:3c:34:b0:32:0e:e5:70:27:20:d5:74:6b:37:56:
d8:35:0b:9b:69:e6:87:95:80:8c:15:3f:85:70:61:5d:fa:a5:
91:2d:96:f5:f9:bd:55:f4:8c:76:4f:54:fa:95:a4:46:dc:bf:
f7:fe:69:97:f7:ca:35:2d:db:3d:1a:82:e1:89:86:6b:3f:39:
62:a9:b1:2d:ff:71:59:72:26:4c:f6:cc:09:e5:cb:e4:40:08:
b2:1c:c4:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFARmaYzo51DsZhlZ/rpmEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjQwMTAxMTIzMDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzYyNmIxZDRhOTM3NzQ5MDFhMTAwN2M4M2I1NzdkYjgxMTcxYTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBhHFQvDQwSeFSfnvCHJXywPBQAK
oOErhL5QbFXNoZjYTeHIWXrqgTxhTpU6R0OT4LeY6n6gQJcqkOoLvqE8hb3uFsU/
1z56ZwDSgpXLHLk+ZY1mLHv56+yXp5wnGXqYn6Tzmf4l1UfBNW8N/JlrRsoDIAkY
E019lFie8LoFYYJkzUdR/mXoPyyReZ21kHLWlLfcK2YMoUxbgslOd0wvF9dBDphM
T8QUdZ33jQFbgMZxR+0lAjPbhUFExeuzlDFZLjjDNEblgA2oWYpBMD+w3sHzukPC
6CH2ZclvHBdBMPP9GVmjKmTZxkKpsBwjP5ioYro0xDgKa6RrtuMd4pKFTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLdiax1Kk3dJAaEAfIO1d9uBFxpSMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvdDJKckhVcVRkMGtCb1FCOGc3VjMyNEVYR2xJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufNyMA0G
CSqGSIb3DQEBCwUAA4IBAQBmmQduPJRsr9yu0j81Kprqv+V8JTVLt6KvD+EQ2Ah5
a3FC15AppKYHHOJOZpXGthy+7nB3YZ8w7lz4/iASh2GBOCJy4F9g/WmzlF9Ouj45
pHNpt5dOPaAlpiFXQyhiP/ypkvtuuNkW3zb6Fy+gkCHtUB98NGt3YVMqykvPxL6i
WXkaHL2UZvsIxbG8ZVGVwgrBgtO3PXKgA9tHV+NVbZB1+Z3BFPoqPDSwMg7lcCcg
1XRrN1bYNQubaeaHlYCMFT+FcGFd+qWRLZb1+b1V9Ix2T1T6laRG3L/3/mmX98o1
Lds9GoLhiYZrPzliqbEt/3FZciZM9swJ5cvkQAiyHMQe
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:16:34 2024 by rpki-client on console-ams.rpki-client.org