Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/V_RdZpOOH-zzvNuL7UM1Y0ReudY.roa
File: V_RdZpOOH-zzvNuL7UM1Y0ReudY.roa (raw, json)
Hash identifier: zXkglWb7U2I2Y4GNG2Ir8/d23ADGIpTJBtL08gUfzf0=
Subject key identifier: 57:F4:5D:66:93:8E:1F:EC:F3:BC:DB:8B:ED:43:35:63:44:5E:B9:D6
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 018DC602F9BCDFB562CCF92041CF076C786D
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/V_RdZpOOH-zzvNuL7UM1Y0ReudY.roa
Signing time: Tue 20 Feb 2024 10:15:00 +0000
ROA not before: Tue 20 Feb 2024 10:15:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9051
IP address blocks: 185.217.184.0/24 maxlen: 24
185.217.185.0/24 maxlen: 24
185.217.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c6:02:f9:bc:df:b5:62:cc:f9:20:41:cf:07:6c:78:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Feb 20 10:15:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57f45d66938e1fecf3bcdb8bed433563445eb9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e3:13:0e:52:2b:e2:b3:84:cb:2d:b8:80:20:
b8:f6:56:1e:a0:46:bb:84:65:09:cb:97:53:69:09:
9b:34:46:ad:51:63:6d:7c:80:2b:c1:ca:2d:53:fb:
5f:1d:cb:09:ac:2b:30:35:a4:1c:29:26:e8:5a:7d:
a1:1e:fc:cc:c2:2c:64:03:e2:0c:d9:89:74:de:6e:
43:92:3a:1e:7e:c7:40:0a:ad:96:78:22:b9:5c:e2:
7c:14:77:82:e7:12:28:41:84:f2:7d:14:4e:3f:c9:
6d:8d:39:52:22:cb:69:0a:0d:09:92:ab:5b:9d:af:
47:bd:da:16:5c:3b:56:02:53:34:fe:aa:81:79:5a:
39:d7:a6:89:b5:98:20:14:cf:70:3b:4f:d3:bd:9c:
7e:97:b6:d9:2e:9c:69:21:7f:f0:61:29:7e:54:22:
ff:43:56:2c:dc:ab:8b:60:a6:56:b5:eb:b5:c5:d4:
d7:0b:8c:a9:7d:50:5e:11:62:61:c7:59:30:b4:e7:
5c:38:c8:de:09:d4:10:12:4d:3f:78:a2:2f:98:6d:
cb:a1:77:20:88:68:4d:1b:05:38:c2:cf:d9:c8:7b:
fe:79:69:0e:6a:db:4b:6f:e1:df:99:9c:ab:5b:29:
b4:6f:12:1f:6b:83:ab:df:4c:06:45:16:33:c3:56:
90:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F4:5D:66:93:8E:1F:EC:F3:BC:DB:8B:ED:43:35:63:44:5E:B9:D6
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/V_RdZpOOH-zzvNuL7UM1Y0ReudY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.184.0-185.217.186.255
Signature Algorithm: sha256WithRSAEncryption
73:17:92:9d:d6:ff:78:15:4e:23:51:d8:be:fc:88:64:90:12:
72:3d:d8:98:94:fe:02:11:33:91:26:3f:f1:c1:b0:87:01:46:
25:0a:b1:66:51:b9:9f:53:7c:4a:c8:04:6d:3e:f5:7b:b2:c0:
f5:35:cc:a1:d9:e4:0a:5e:3f:50:0d:18:98:90:24:d6:d8:34:
65:41:c0:c6:f8:c3:64:58:1f:ce:a6:d3:d7:fa:26:75:21:60:
e1:b0:bf:0f:35:e6:e9:1d:05:fe:92:1d:f8:80:26:27:6c:80:
24:71:6e:7f:04:d3:a4:06:b6:34:7c:14:df:6e:8b:58:3c:02:
ff:bc:31:38:3e:e9:01:c6:36:b7:17:cf:57:41:7a:ed:57:7b:
6e:b3:eb:1c:25:80:64:50:e0:2d:c4:fb:ec:e7:11:7c:eb:c2:
17:2e:44:d2:49:d7:2e:b3:df:fa:b8:a1:27:76:eb:6b:b9:77:
bd:bd:c4:52:fc:82:00:a6:3e:73:c8:43:1e:17:9b:43:e8:93:
57:1e:cb:55:4f:0b:c8:7b:43:ff:e8:f1:dd:bb:52:45:d6:29:
32:89:27:cf:af:46:6e:a6:9d:50:89:be:42:05:a4:66:87:b9:
81:b7:be:18:a4:f2:d6:61:1e:3a:b6:20:7b:7f:dd:69:9b:98:
da:35:7d:e6
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAY3GAvm837VizPkgQc8HbHhtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYWIwMTBjZjVjMTFjMWIzMDY5M2QxMTQxN2I2MGNmNDVm
YjEyMDkwHhcNMjQwMjIwMTAxNTAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2Y0NWQ2NjkzOGUxZmVjZjNiY2RiOGJlZDQzMzU2MzQ0NWViOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeMTDlIr4rOEyy24gCC49lYeoEa7
hGUJy5dTaQmbNEatUWNtfIArwcotU/tfHcsJrCswNaQcKSboWn2hHvzMwixkA+IM
2Yl03m5DkjoefsdACq2WeCK5XOJ8FHeC5xIoQYTyfRROP8ltjTlSIstpCg0Jkqtb
na9HvdoWXDtWAlM0/qqBeVo516aJtZggFM9wO0/TvZx+l7bZLpxpIX/wYSl+VCL/
Q1Ys3KuLYKZWteu1xdTXC4ypfVBeEWJhx1kwtOdcOMjeCdQQEk0/eKIvmG3LoXcg
iGhNGwU4ws/ZyHv+eWkOattLb+HfmZyrWym0bxIfa4Or30wGRRYzw1aQowIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFFf0XWaTjh/s87zbi+1DNWNEXrnWMB8GA1UdIwQY
MBaAFAKrAQz1wRwbMGk9EUF7YM9F+xIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2Yt
MGI4YjA3NWU4NmRiLzEvVl9SZFpwT09ILXp6dk51TDdVTTFZMFJldWRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2YtMGI4YjA3NWU4NmRi
LzEvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO52bgD
BAC52bowDQYJKoZIhvcNAQELBQADggEBAHMXkp3W/3gVTiNR2L78iGSQEnI92JiU
/gIRM5EmP/HBsIcBRiUKsWZRuZ9TfErIBG0+9XuywPU1zKHZ5ApeP1ANGJiQJNbY
NGVBwMb4w2RYH86m09f6JnUhYOGwvw815ukdBf6SHfiAJidsgCRxbn8E06QGtjR8
FN9ui1g8Av+8MTg+6QHGNrcXz1dBeu1Xe26z6xwlgGRQ4C3E++znEXzrwhcuRNJJ
1y6z3/q4oSd262u5d729xFL8ggCmPnPIQx4Xm0Pok1cey1VPC8h7Q//o8d27UkXW
KTKJJ8+vRm6mnVCJvkIFpGaHuYG3vhik8tZhHjq2IHt/3WmbmNo1feY=
-----END CERTIFICATE-----
Generated at Fri May 17 08:19:26 2024 by rpki-client on console-fra.rpki-client.org