Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b-8X-RDVzn1q9YJp4wteY9h2_c4.roa
File: b-8X-RDVzn1q9YJp4wteY9h2_c4.roa (raw, json)
Hash identifier: 79CScaLT8u/A+snFP/ce0SeZViy/H0yYtLx/ChD5OYQ=
Subject key identifier: 6F:EF:17:F9:10:D5:CE:7D:6A:F5:82:69:E3:0B:5E:63:D8:76:FD:CE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018CC500C27629E2A4C5CE9D68DACD6BEFB1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b-8X-RDVzn1q9YJp4wteY9h2_c4.roa
Signing time: Mon 01 Jan 2024 12:30:10 +0000
ROA not before: Mon 01 Jan 2024 12:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204579
IP address blocks: 185.13.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:c2:76:29:e2:a4:c5:ce:9d:68:da:cd:6b:ef:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 12:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fef17f910d5ce7d6af58269e30b5e63d876fdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:69:e3:e4:d1:21:b6:3c:2e:93:50:3c:f7:f1:
56:e7:44:a4:c1:73:0f:02:4a:bf:26:06:de:27:0d:
60:b5:8d:28:6c:13:ed:7f:66:4f:57:d8:46:78:a6:
6f:c1:a9:9f:41:83:3b:ea:08:ff:c2:0b:ed:18:c9:
b7:62:ae:4f:ea:97:a2:1e:ce:a5:f7:a0:14:26:ef:
5c:e0:fd:83:f2:80:5e:d7:b7:10:a9:2c:56:08:20:
80:46:cf:8a:71:50:6f:d8:de:4b:03:de:f6:2c:f4:
34:f4:ce:bf:07:5f:ea:1b:a1:90:40:4d:97:75:5d:
99:97:1e:8f:76:f1:c6:a2:6d:11:67:23:c3:37:05:
f6:d0:8e:75:e4:92:a7:ce:48:8e:d3:cf:b5:a0:70:
54:d8:69:5f:51:d0:3c:16:38:7a:6e:1d:68:36:f7:
13:b0:b9:41:fd:26:0f:77:21:4d:51:a7:0f:7d:74:
c4:19:d8:2d:76:af:e8:9c:23:af:ed:86:0a:fb:ae:
82:e1:15:e0:1a:cd:ea:2d:cc:6a:30:2c:63:3f:96:
0f:06:4e:60:52:d2:2f:dc:b0:b9:1f:c4:90:47:62:
9c:50:1e:32:d2:1f:c1:a7:68:95:cb:ae:ef:b6:a5:
bd:81:86:76:cd:5b:8b:3b:da:ce:78:e7:1a:c0:1f:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EF:17:F9:10:D5:CE:7D:6A:F5:82:69:E3:0B:5E:63:D8:76:FD:CE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b-8X-RDVzn1q9YJp4wteY9h2_c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.158.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:46:90:90:f1:5b:8f:a0:be:39:9a:b5:fd:00:9e:71:29:77:
28:13:a6:6f:59:23:73:dc:3e:8e:47:3e:d0:54:ce:3c:5d:ab:
af:31:99:26:cd:23:09:3e:14:52:3b:f9:28:9e:12:64:38:87:
ee:d0:86:0a:09:93:8c:7e:e3:c6:66:1a:58:bd:44:19:bd:23:
2a:68:ab:c9:ff:bc:38:41:66:b6:4a:d7:54:05:db:2b:cc:16:
56:63:1c:f1:01:3e:21:eb:79:07:a2:ef:0f:f4:73:5c:44:85:
88:1a:be:7f:ea:b3:9f:3f:c8:22:b5:2c:d0:7c:e6:90:ac:4a:
51:af:cc:93:79:6d:aa:bd:19:cf:1f:73:5d:7f:13:19:ae:c7:
44:15:19:fa:57:3e:f1:ed:66:75:cc:d4:1c:38:d3:4d:16:c6:
ee:ca:2f:ba:4f:7d:4f:8a:e8:5a:b8:ee:ec:d2:8c:10:91:97:
2f:f8:0b:64:3e:aa:dd:10:d2:53:e4:35:59:f3:81:47:7e:95:
46:01:a6:11:f5:4f:8c:5d:fc:46:6a:05:9b:c1:9e:20:37:66:
66:8c:1a:73:27:20:f7:cb:55:ed:21:68:bd:f7:d9:55:03:51:
6a:f5:a0:71:97:a2:6c:06:00:d2:5e:ce:c2:4f:39:be:10:c3:
43:8e:fd:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAMJ2KeKkxc6daNrNa++xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQwMTAxMTIzMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmVmMTdmOTEwZDVjZTdkNmFmNTgyNjllMzBiNWU2M2Q4NzZmZGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGnj5NEhtjwuk1A89/FW50SkwXMP
Akq/JgbeJw1gtY0obBPtf2ZPV9hGeKZvwamfQYM76gj/wgvtGMm3Yq5P6peiHs6l
96AUJu9c4P2D8oBe17cQqSxWCCCARs+KcVBv2N5LA972LPQ09M6/B1/qG6GQQE2X
dV2Zlx6PdvHGom0RZyPDNwX20I515JKnzkiO08+1oHBU2GlfUdA8Fjh6bh1oNvcT
sLlB/SYPdyFNUacPfXTEGdgtdq/onCOv7YYK+66C4RXgGs3qLcxqMCxjP5YPBk5g
UtIv3LC5H8SQR2KcUB4y0h/Bp2iVy67vtqW9gYZ2zVuLO9rOeOcawB9FowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG/vF/kQ1c59avWCaeMLXmPYdv3OMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvYi04WC1SRFZ6bjFxOVlKcDR3dGVZOWgyX2M0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ2eMA0G
CSqGSIb3DQEBCwUAA4IBAQAaRpCQ8VuPoL45mrX9AJ5xKXcoE6ZvWSNz3D6ORz7Q
VM48XauvMZkmzSMJPhRSO/konhJkOIfu0IYKCZOMfuPGZhpYvUQZvSMqaKvJ/7w4
QWa2StdUBdsrzBZWYxzxAT4h63kHou8P9HNcRIWIGr5/6rOfP8gitSzQfOaQrEpR
r8yTeW2qvRnPH3NdfxMZrsdEFRn6Vz7x7WZ1zNQcONNNFsbuyi+6T31PiuhauO7s
0owQkZcv+AtkPqrdENJT5DVZ84FHfpVGAaYR9U+MXfxGagWbwZ4gN2ZmjBpzJyD3
y1XtIWi999lVA1Fq9aBxl6JsBgDSXs7CTzm+EMNDjv0u
-----END CERTIFICATE-----
Generated at Thu May 30 08:25:26 2024 by rpki-client on console-ams.rpki-client.org