Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/DZUDJ1OrHg4AC5YEwlDkGujtVxM.roa
File: DZUDJ1OrHg4AC5YEwlDkGujtVxM.roa (raw, json)
Hash identifier: TGYaRp6sELVEUxDkMoxL9TmVoGBFwpX726m4+vdr/1M=
Subject key identifier: 0D:95:03:27:53:AB:1E:0E:00:0B:96:04:C2:50:E4:1A:E8:ED:57:13
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 018CC6B7FD27CB55D95CDDB94258B57CB6FD
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/DZUDJ1OrHg4AC5YEwlDkGujtVxM.roa
Signing time: Mon 01 Jan 2024 20:29:55 +0000
ROA not before: Mon 01 Jan 2024 20:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.210.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:fd:27:cb:55:d9:5c:dd:b9:42:58:b5:7c:b6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Jan 1 20:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d95032753ab1e0e000b9604c250e41ae8ed5713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5b:b5:ce:e2:b3:e9:5e:9c:20:1c:bf:6c:58:
2d:56:88:c3:58:01:6d:3f:9c:38:bb:4a:3e:c5:e1:
4c:9f:28:99:77:76:b7:57:05:27:52:c1:45:f3:02:
75:ef:e7:59:0c:20:2e:77:ef:18:45:b3:53:76:3b:
7f:62:ad:ce:fb:f9:0a:b4:97:8c:5f:a9:75:b6:79:
c4:21:08:0b:5a:a9:99:8f:10:52:99:80:28:85:21:
56:a4:af:25:b4:07:aa:69:c1:a5:25:94:96:a5:9b:
83:19:fa:aa:ea:c2:50:fc:c3:0c:42:21:15:f0:b8:
bb:39:80:1a:4d:b8:03:43:e8:f9:75:0f:2f:17:80:
d2:bc:74:70:85:ff:9a:8a:79:33:3a:58:a5:32:38:
05:db:17:c1:64:3b:0a:1b:3a:4f:f5:34:c3:cf:6d:
1f:66:f1:c6:d1:15:64:37:6d:da:c1:35:cb:83:b1:
19:91:fd:69:60:15:4a:12:c2:04:c7:73:cc:a1:91:
b2:6c:c9:e9:1d:56:2d:ec:9d:c7:f0:b6:6f:ec:96:
30:d5:c7:2e:4a:43:d9:b8:a3:41:92:70:7b:63:8c:
9b:c9:fc:77:6b:91:ed:5c:85:35:75:65:ed:bb:55:
3a:a2:45:fe:c9:93:d1:30:be:47:25:7c:3e:89:7f:
ef:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:95:03:27:53:AB:1E:0E:00:0B:96:04:C2:50:E4:1A:E8:ED:57:13
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/DZUDJ1OrHg4AC5YEwlDkGujtVxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.156.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ac:a1:88:c8:ff:e9:92:d2:36:1c:dc:c7:82:94:e3:e3:e6:
d3:81:f5:6c:8b:f3:92:85:a8:eb:fc:af:f9:d7:0f:0d:86:76:
54:aa:5f:e1:cd:b5:8f:c1:ca:9f:98:dd:81:54:21:21:2b:7d:
f6:84:4c:ee:e8:33:50:cd:96:d9:8d:6c:4d:7b:0c:57:ed:5d:
22:23:50:30:7a:07:c1:06:d2:62:54:1e:34:3a:de:48:2a:f4:
03:03:99:b7:93:a3:bb:4b:72:4c:7f:89:28:25:52:fe:15:61:
29:82:bf:dc:f9:a3:ab:15:ae:d7:73:f0:e9:83:b8:cf:9d:64:
89:2f:47:bd:bd:f8:7e:40:2f:72:48:c4:80:23:23:68:b5:b0:
ee:bc:5e:78:52:18:e2:ef:ee:46:71:f4:95:c1:d3:69:22:6e:
1d:66:3d:ae:90:77:28:78:9c:fc:0a:00:83:a4:5b:04:c6:42:
5b:d3:2f:85:99:60:b4:17:c0:54:43:61:96:2d:c2:26:79:78:
09:a7:58:0d:8d:70:16:eb:a9:9f:9f:3d:92:ed:3f:46:fd:60:
29:51:8c:37:1f:f3:20:b3:00:8e:c3:cf:ed:57:93:f8:d8:dc:
01:44:12:76:1d:f6:66:8c:c9:e3:e3:3a:96:4e:e9:b0:a9:4f:
85:e5:87:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt/0ny1XZXN25Qli1fLb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZWU1ZTcxNDA5YjIxZmQ1YzgyMGYzZDNhYzNmZGMwZmNl
NzVhMGIwHhcNMjQwMTAxMjAyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDk1MDMyNzUzYWIxZTBlMDAwYjk2MDRjMjUwZTQxYWU4ZWQ1NzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFu1zuKz6V6cIBy/bFgtVojDWAFt
P5w4u0o+xeFMnyiZd3a3VwUnUsFF8wJ17+dZDCAud+8YRbNTdjt/Yq3O+/kKtJeM
X6l1tnnEIQgLWqmZjxBSmYAohSFWpK8ltAeqacGlJZSWpZuDGfqq6sJQ/MMMQiEV
8Li7OYAaTbgDQ+j5dQ8vF4DSvHRwhf+ainkzOlilMjgF2xfBZDsKGzpP9TTDz20f
ZvHG0RVkN23awTXLg7EZkf1pYBVKEsIEx3PMoZGybMnpHVYt7J3H8LZv7JYw1ccu
SkPZuKNBknB7Y4ybyfx3a5HtXIU1dWXtu1U6okX+yZPRML5HJXw+iX/vpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA2VAydTqx4OAAuWBMJQ5Bro7VcTMB8GA1UdIwQY
MBaAFCPuXnFAmyH9XIIPPTrD/cD851oLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNGI5M2MtYTAzZC00YWRhLTgzZmMt
YmM2MzdhODUxMmIxLzEvRFpVREoxT3JIZzRBQzVZRXdsRGtHdWp0VnhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zNGI5M2MtYTAzZC00YWRhLTgzZmMtYmM2MzdhODUxMmIx
LzEvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudKcMA0G
CSqGSIb3DQEBCwUAA4IBAQBYrKGIyP/pktI2HNzHgpTj4+bTgfVsi/OShajr/K/5
1w8NhnZUql/hzbWPwcqfmN2BVCEhK332hEzu6DNQzZbZjWxNewxX7V0iI1AwegfB
BtJiVB40Ot5IKvQDA5m3k6O7S3JMf4koJVL+FWEpgr/c+aOrFa7Xc/Dpg7jPnWSJ
L0e9vfh+QC9ySMSAIyNotbDuvF54Uhji7+5GcfSVwdNpIm4dZj2ukHcoeJz8CgCD
pFsExkJb0y+FmWC0F8BUQ2GWLcImeXgJp1gNjXAW66mfnz2S7T9G/WApUYw3H/Mg
swCOw8/tV5P42NwBRBJ2HfZmjMnj4zqWTumwqU+F5Yc6
-----END CERTIFICATE-----
Generated at Thu May 2 17:37:34 2024 by rpki-client on console-ams.rpki-client.org