Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/dkCsepCLSMKb-yKd1G0gwui3o9k.roa
File: dkCsepCLSMKb-yKd1G0gwui3o9k.roa (raw, json)
Hash identifier: ZQ4F7a3W8zCtf8ywCaHG79xixjm4YX/0j+SnvTq3BBY=
Subject key identifier: 76:40:AC:7A:90:8B:48:C2:9B:FB:22:9D:D4:6D:20:C2:E8:B7:A3:D9
Certificate issuer: /CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Certificate serial: 018CC72736784892E5DC003364BE93D90DBA
Authority key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/dkCsepCLSMKb-yKd1G0gwui3o9k.roa
Signing time: Mon 01 Jan 2024 22:31:24 +0000
ROA not before: Mon 01 Jan 2024 22:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56697
IP address blocks: 185.130.216.0/22 maxlen: 24
2a06:e2c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:36:78:48:92:e5:dc:00:33:64:be:93:d9:0d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Validity
Not Before: Jan 1 22:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7640ac7a908b48c29bfb229dd46d20c2e8b7a3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:16:d6:62:ce:49:cd:9e:48:e2:62:32:10:aa:
26:19:3a:6f:5f:98:5d:30:be:4e:1e:a3:44:90:b5:
b6:92:c6:a3:d3:a3:c3:4c:6a:85:35:28:ac:4e:bf:
e2:bf:26:54:39:8c:2a:58:10:0e:9c:9c:e9:49:30:
1a:86:ee:62:15:37:4f:27:62:f9:aa:48:db:cd:8c:
1d:02:08:dd:3d:3c:c7:fb:b6:93:1d:19:3a:ad:b0:
8a:6d:84:e6:e0:eb:d7:3e:ff:de:5d:43:90:a7:89:
67:08:b9:be:6c:83:32:35:d8:3c:94:ac:19:2f:88:
d8:ec:54:fc:23:3f:86:9b:d5:16:ae:fa:f5:e0:0c:
b1:29:a8:f6:25:93:f8:80:b0:5f:50:7f:c7:cb:37:
39:0f:06:7f:20:7c:b3:41:69:b5:9a:c4:c1:fc:98:
e4:3a:25:1d:99:6e:7f:86:ca:3a:01:ab:6b:1a:bd:
ac:0b:0d:7a:db:8f:a3:36:b0:b2:36:6d:5b:28:74:
7b:9d:31:78:d1:0d:5e:44:7e:07:98:2d:12:f3:c8:
98:3f:d0:e9:ce:46:58:2c:92:2f:f6:f6:97:26:b1:
57:51:a3:b9:41:c2:3e:b5:fe:34:a5:d9:7f:2c:04:
c8:e0:5a:3e:fa:8a:28:73:3a:b9:93:f3:ef:a3:c7:
7b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:40:AC:7A:90:8B:48:C2:9B:FB:22:9D:D4:6D:20:C2:E8:B7:A3:D9
X509v3 Authority Key Identifier:
keyid:4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/dkCsepCLSMKb-yKd1G0gwui3o9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.216.0/22
IPv6:
2a06:e2c0::/29
Signature Algorithm: sha256WithRSAEncryption
43:cc:a5:94:77:35:d1:fb:36:c7:00:f1:7c:e4:10:3d:7a:c6:
40:ca:2c:56:c9:51:08:85:8d:8a:88:5c:ee:d5:b7:6d:98:54:
4c:e2:02:12:b7:76:03:98:6c:75:97:11:dd:61:f4:bf:0a:1e:
31:9e:bb:cd:49:63:e2:aa:36:90:c7:86:8d:4a:3b:4a:38:b7:
4b:99:6a:39:22:86:34:05:01:3f:dc:c8:69:54:31:4b:f1:f7:
f7:be:86:a5:8c:77:a4:a1:1c:63:73:b5:14:80:08:b8:34:b1:
16:09:8b:b2:0d:af:ee:00:d1:49:b3:3f:d4:3c:6f:c3:23:6f:
6b:33:bd:d8:7e:bc:58:62:30:67:43:06:a1:15:a7:df:c3:26:
3b:fc:75:ba:bc:93:7b:15:0a:d4:18:ad:55:4e:11:d4:90:ef:
ad:95:bb:df:67:18:77:51:65:31:39:76:ce:db:3a:e4:b5:77:
4c:cd:a1:92:88:a8:1f:42:4c:e4:c3:da:8a:23:30:70:0a:c7:
64:37:c3:8a:5c:c6:90:2f:8c:a7:b2:3d:f4:de:6f:88:59:95:
85:9d:02:43:80:0d:b5:cb:8f:ea:b4:87:c1:14:32:b5:8c:f9:
22:9a:ae:db:2c:c8:46:3d:a8:83:35:9d:93:44:f0:b0:78:e1:
a9:3a:e5:84
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzHJzZ4SJLl3AAzZL6T2Q26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiODlkODdmOGU0MWI1MDgyZDM4OTE2MDE1ZTA1OWU1NmRk
MDExNGUwHhcNMjQwMTAxMjIzMTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjQwYWM3YTkwOGI0OGMyOWJmYjIyOWRkNDZkMjBjMmU4YjdhM2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhbWYs5JzZ5I4mIyEKomGTpvX5hd
ML5OHqNEkLW2ksaj06PDTGqFNSisTr/ivyZUOYwqWBAOnJzpSTAahu5iFTdPJ2L5
qkjbzYwdAgjdPTzH+7aTHRk6rbCKbYTm4OvXPv/eXUOQp4lnCLm+bIMyNdg8lKwZ
L4jY7FT8Iz+Gm9UWrvr14AyxKaj2JZP4gLBfUH/Hyzc5DwZ/IHyzQWm1msTB/Jjk
OiUdmW5/hso6AatrGr2sCw1624+jNrCyNm1bKHR7nTF40Q1eRH4HmC0S88iYP9Dp
zkZYLJIv9vaXJrFXUaO5QcI+tf40pdl/LATI4Fo++oooczq5k/Pvo8d7UQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHZArHqQi0jCm/sindRtIMLot6PZMB8GA1UdIwQY
MBaAFEuJ2H+OQbUILTiRYBXgWeVt0BFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzRuWWY0NUJ0UWd0T0pGZ0ZlQlo1VzNRRVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80YmE5NzMtMGU5Zi00MzUyLTk4Mzgt
NjQyZGM5MTI3NjgwLzEvZGtDc2VwQ0xTTUtiLXlLZDFHMGd3dWkzbzlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi80YmE5NzMtMGU5Zi00MzUyLTk4MzgtNjQyZGM5MTI3Njgw
LzEvUzRuWWY0NUJ0UWd0T0pGZ0ZlQlo1VzNRRVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYLYMA0E
AgACMAcDBQMqBuLAMA0GCSqGSIb3DQEBCwUAA4IBAQBDzKWUdzXR+zbHAPF85BA9
esZAyixWyVEIhY2KiFzu1bdtmFRM4gISt3YDmGx1lxHdYfS/Ch4xnrvNSWPiqjaQ
x4aNSjtKOLdLmWo5IoY0BQE/3MhpVDFL8ff3voaljHekoRxjc7UUgAi4NLEWCYuy
Da/uANFJsz/UPG/DI29rM73YfrxYYjBnQwahFaffwyY7/HW6vJN7FQrUGK1VThHU
kO+tlbvfZxh3UWUxOXbO2zrktXdMzaGSiKgfQkzkw9qKIzBwCsdkN8OKXMaQL4yn
sj303m+IWZWFnQJDgA21y4/qtIfBFDK1jPkimq7bLMhGPaiDNZ2TRPCweOGpOuWE
-----END CERTIFICATE-----
Generated at Fri Jun 7 22:12:57 2024 by rpki-client on console-ams.rpki-client.org