Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/2vnWNpa9n6_uQA8_P5SizsK4cwY.roa
File: 2vnWNpa9n6_uQA8_P5SizsK4cwY.roa (raw, json)
Hash identifier: SUTV3wb047Rd9aklRlapacjw4HXLC5ea5rMvDHlobqk=
Subject key identifier: DA:F9:D6:36:96:BD:9F:AF:EE:40:0F:3F:3F:94:A2:CE:C2:B8:73:06
Certificate issuer: /CN=2b0b1a51773d1a0f09f626e61fe057b81a432bb2
Certificate serial: 018CC8705D791F1C5767FCD8FB2368A846A1
Authority key identifier: 2B:0B:1A:51:77:3D:1A:0F:09:F6:26:E6:1F:E0:57:B8:1A:43:2B:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/2vnWNpa9n6_uQA8_P5SizsK4cwY.roa
Signing time: Tue 02 Jan 2024 04:30:56 +0000
ROA not before: Tue 02 Jan 2024 04:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209235
IP address blocks: 185.130.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:5d:79:1f:1c:57:67:fc:d8:fb:23:68:a8:46:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0b1a51773d1a0f09f626e61fe057b81a432bb2
Validity
Not Before: Jan 2 04:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=daf9d63696bd9fafee400f3f3f94a2cec2b87306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e6:a0:0e:a5:22:50:d4:ca:fa:3a:fd:33:6a:
b3:4f:f1:b2:8b:90:01:0f:21:31:5c:df:e5:99:82:
cb:22:eb:ec:76:37:05:47:b2:9b:e9:c3:f7:77:96:
fb:db:fb:9d:8c:12:d8:6d:27:ed:c0:70:66:0b:bc:
03:8d:c0:dc:e0:9c:43:8d:71:71:85:7d:21:53:47:
97:01:21:9f:2c:3d:37:91:36:83:c8:68:bb:c4:1c:
42:ec:de:c2:d6:a8:57:d1:61:28:d1:01:ea:dc:34:
28:89:20:f6:40:55:48:0d:b7:d7:16:08:64:a3:6b:
03:2d:6d:4b:8d:04:64:72:22:33:86:87:7d:d8:01:
4c:91:ce:8e:9e:36:8e:16:4e:0b:0c:f3:5d:1a:be:
57:6b:22:fe:c7:3a:b2:f7:cf:7a:79:86:c4:eb:57:
8f:9f:bb:af:a9:52:28:da:6e:85:0e:f0:09:f0:79:
68:0f:48:bf:40:ca:8b:9e:ef:34:e1:24:b6:37:11:
e9:bb:b3:be:9a:b7:56:32:75:24:af:21:c8:55:94:
9b:d1:9d:26:26:35:9b:ff:7e:31:0e:8c:d7:26:dc:
6a:7a:01:de:4d:b8:fe:06:fc:4d:ea:d6:52:23:08:
97:6b:27:69:25:35:99:20:c6:d8:61:7a:be:3a:9d:
e0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F9:D6:36:96:BD:9F:AF:EE:40:0F:3F:3F:94:A2:CE:C2:B8:73:06
X509v3 Authority Key Identifier:
keyid:2B:0B:1A:51:77:3D:1A:0F:09:F6:26:E6:1F:E0:57:B8:1A:43:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/2vnWNpa9n6_uQA8_P5SizsK4cwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.194.0/24
Signature Algorithm: sha256WithRSAEncryption
55:69:4c:30:84:3b:41:06:c2:05:19:7b:89:9f:9c:ae:49:ef:
88:a6:5d:32:e6:4a:7e:6e:3b:56:ba:53:9a:17:7b:c4:1a:7e:
3b:33:b5:1a:18:21:e9:89:df:c7:8c:97:ad:66:22:b1:7d:5c:
fd:1e:1c:04:43:73:29:5f:f0:0f:bd:0b:ee:ab:8b:11:26:c8:
62:3c:ce:65:d2:9f:6b:09:79:e0:47:90:3b:b0:6a:c2:f5:17:
49:2f:56:05:8c:7d:b2:98:60:24:d5:2e:30:a3:14:d0:d4:42:
86:0c:57:1f:59:62:41:4f:e6:a1:f2:4a:ce:8e:71:e7:26:6c:
a3:bc:25:45:b7:50:96:9b:7d:72:f9:8a:58:d1:74:c6:30:94:
18:b6:fa:23:f1:13:00:dc:75:57:a8:bb:3c:26:fb:33:c6:74:
17:f3:50:04:f9:e6:90:44:9b:4d:4d:57:c7:e9:79:12:d7:dc:
4f:85:1f:d8:c0:e4:7e:b9:ec:85:70:be:f1:81:25:0a:ff:03:
1d:96:5d:1e:c4:5b:02:da:14:f2:b1:b9:57:67:1a:bf:e9:c0:
49:81:f7:b7:be:87:d8:ba:49:51:d7:e3:91:e3:93:6a:73:bc:
da:39:ad:e9:ea:22:13:64:24:a2:ca:ce:85:46:93:78:cf:f0:
f8:dc:64:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIcF15HxxXZ/zY+yNoqEahMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMGIxYTUxNzczZDFhMGYwOWY2MjZlNjFmZTA1N2I4MWE0
MzJiYjIwHhcNMjQwMTAyMDQzMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWY5ZDYzNjk2YmQ5ZmFmZWU0MDBmM2YzZjk0YTJjZWMyYjg3MzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluagDqUiUNTK+jr9M2qzT/Gyi5AB
DyExXN/lmYLLIuvsdjcFR7Kb6cP3d5b72/udjBLYbSftwHBmC7wDjcDc4JxDjXFx
hX0hU0eXASGfLD03kTaDyGi7xBxC7N7C1qhX0WEo0QHq3DQoiSD2QFVIDbfXFghk
o2sDLW1LjQRkciIzhod92AFMkc6OnjaOFk4LDPNdGr5XayL+xzqy9896eYbE61eP
n7uvqVIo2m6FDvAJ8HloD0i/QMqLnu804SS2NxHpu7O+mrdWMnUkryHIVZSb0Z0m
JjWb/34xDozXJtxqegHeTbj+BvxN6tZSIwiXaydpJTWZIMbYYXq+Op3g+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNr51jaWvZ+v7kAPPz+Uos7CuHMGMB8GA1UdIwQY
MBaAFCsLGlF3PRoPCfYm5h/gV7gaQyuyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3dzYVVYYzlHZzhKOWlibUgtQlh1QnBESzdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9iNWI3MzItZTMxMy00MDQzLTljMmQt
ZmJhMjMwOTlkNzZiLzEvMnZuV05wYTluNl91UUE4X1A1U2l6c0s0Y3dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9iNWI3MzItZTMxMy00MDQzLTljMmQtZmJhMjMwOTlkNzZi
LzEvS3dzYVVYYzlHZzhKOWlibUgtQlh1QnBESzdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYLCMA0G
CSqGSIb3DQEBCwUAA4IBAQBVaUwwhDtBBsIFGXuJn5yuSe+Ipl0y5kp+bjtWulOa
F3vEGn47M7UaGCHpid/HjJetZiKxfVz9HhwEQ3MpX/APvQvuq4sRJshiPM5l0p9r
CXngR5A7sGrC9RdJL1YFjH2ymGAk1S4woxTQ1EKGDFcfWWJBT+ah8krOjnHnJmyj
vCVFt1CWm31y+YpY0XTGMJQYtvoj8RMA3HVXqLs8JvszxnQX81AE+eaQRJtNTVfH
6XkS19xPhR/YwOR+ueyFcL7xgSUK/wMdll0exFsC2hTysblXZxq/6cBJgfe3vofY
uklR1+OR45Nqc7zaOa3p6iITZCSiys6FRpN4z/D43GRJ
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:01 2024 by rpki-client on console-fra.rpki-client.org