Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/f1rTv_IThnKFCb1aBgyKclbpYww.roa
File: f1rTv_IThnKFCb1aBgyKclbpYww.roa (raw, json)
Hash identifier: 0l3/QRiN5Bjf1+H4l72sOlSy4RSkPa3MDqTG4rhZcsU=
Subject key identifier: 7F:5A:D3:BF:F2:13:86:72:85:09:BD:5A:06:0C:8A:72:56:E9:63:0C
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018CC870771BC861BBA25D1A2F5A54E38C22
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/f1rTv_IThnKFCb1aBgyKclbpYww.roa
Signing time: Tue 02 Jan 2024 04:31:02 +0000
ROA not before: Tue 02 Jan 2024 04:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212609
IP address blocks: 185.239.245.0/24 maxlen: 24
185.254.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:77:1b:c8:61:bb:a2:5d:1a:2f:5a:54:e3:8c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jan 2 04:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f5ad3bff21386728509bd5a060c8a7256e9630c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cd:10:4e:5c:59:17:04:88:17:da:91:cc:18:
43:2e:31:8e:b3:8b:7b:ee:59:e1:28:f5:6a:94:3e:
ed:af:83:45:d6:84:45:ae:e4:2b:52:e9:a1:e0:f3:
d3:af:71:dc:d7:8d:11:88:83:a8:3d:79:73:dd:c4:
43:86:16:49:22:d0:62:ff:8d:7a:7d:be:9e:0a:49:
54:d6:67:cd:49:d7:9c:5c:f4:70:ac:4e:a4:2b:73:
fb:1a:7d:47:76:0d:a3:35:14:1d:dd:17:8c:2d:43:
6a:7d:0a:70:97:e7:29:ca:79:fb:57:d6:8f:1a:7f:
a6:48:5c:1a:74:f9:60:9e:20:e8:4c:23:5a:66:03:
fb:87:be:87:0c:06:d9:ca:cb:50:4e:1d:d1:b1:5f:
25:9a:81:7f:5a:c5:9a:55:aa:5b:c2:e9:86:76:a6:
a7:00:a9:9a:33:21:10:a8:5e:45:8e:b6:7d:10:f1:
d1:56:7c:db:1c:17:e1:5f:49:67:7b:10:a1:b1:03:
86:8a:f9:94:e6:47:a1:bc:14:80:3d:ad:cd:ea:bd:
a0:a5:53:0d:6f:ff:0d:b4:8d:c3:8b:33:94:d3:88:
c2:b4:bc:33:8d:ab:ef:be:a6:3f:1b:40:cc:e9:b7:
ac:03:e6:5f:b8:e3:5c:ef:85:ad:95:59:2b:fd:f8:
75:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5A:D3:BF:F2:13:86:72:85:09:BD:5A:06:0C:8A:72:56:E9:63:0C
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/f1rTv_IThnKFCb1aBgyKclbpYww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.245.0/24
185.254.19.0/24
Signature Algorithm: sha256WithRSAEncryption
15:cc:9d:49:0c:fb:5e:0b:83:7b:82:8b:19:4b:aa:c4:66:95:
c5:51:3e:87:9b:80:02:23:41:4c:60:50:c6:ce:20:32:d9:62:
ce:eb:24:70:18:74:1a:f1:96:06:a5:b9:7b:61:a5:bc:b2:73:
e4:0d:8d:5c:f2:9b:7a:0f:1a:53:c1:81:11:b7:06:32:21:cd:
ec:18:65:bb:e1:bd:3b:77:b5:b6:9a:ef:69:4a:07:66:c1:aa:
59:ef:cd:a8:35:28:bd:8e:16:d1:26:74:ef:65:68:06:0b:e3:
06:b8:b6:34:17:bc:d5:80:d8:6a:07:a6:4c:b5:cd:69:6f:98:
75:78:26:cb:f2:1e:b4:b5:54:08:8a:5c:cd:44:f5:9b:5c:7c:
71:ff:eb:fd:75:9a:b3:ff:b5:bc:99:84:40:9f:57:42:48:dd:
b7:fd:29:30:79:34:36:65:81:bd:d3:bf:d4:61:37:41:3b:41:
5f:88:5a:39:5d:2a:94:a1:74:bb:59:23:0e:fd:14:20:9b:a9:
97:67:af:9a:37:45:e3:33:c5:8d:61:22:b5:5c:0c:e8:c8:8c:
db:41:df:c0:38:09:bb:b5:e8:ba:3e:1b:80:9c:70:98:a2:eb:
66:cb:c8:41:c3:0b:8c:b2:0c:ea:0c:85:1d:81:76:24:0b:5d:
62:84:a6:b1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzIcHcbyGG7ol0aL1pU44wiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMTQ1YThiZGYyYmNhMTUwZjI1ZWQ1NGEyNzdiOGY2NTNl
ZmRiM2UwHhcNMjQwMTAyMDQzMTAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjVhZDNiZmYyMTM4NjcyODUwOWJkNWEwNjBjOGE3MjU2ZTk2MzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis0QTlxZFwSIF9qRzBhDLjGOs4t7
7lnhKPVqlD7tr4NF1oRFruQrUumh4PPTr3Hc140RiIOoPXlz3cRDhhZJItBi/416
fb6eCklU1mfNSdecXPRwrE6kK3P7Gn1Hdg2jNRQd3ReMLUNqfQpwl+cpynn7V9aP
Gn+mSFwadPlgniDoTCNaZgP7h76HDAbZystQTh3RsV8lmoF/WsWaVapbwumGdqan
AKmaMyEQqF5FjrZ9EPHRVnzbHBfhX0lnexChsQOGivmU5kehvBSAPa3N6r2gpVMN
b/8NtI3DizOU04jCtLwzjavvvqY/G0DM6besA+ZfuONc74WtlVkr/fh1XwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH9a07/yE4ZyhQm9WgYMinJW6WMMMB8GA1UdIwQY
MBaAFCsUWovfK8oVDyXtVKJ3uPZT79s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMt
MzA0MGJlZDNjY2NkLzEvZjFyVHZfSVRobktGQ2IxYUJneUtjbGJwWXd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMtMzA0MGJlZDNjY2Nk
LzEvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAue/1AwQA
uf4TMA0GCSqGSIb3DQEBCwUAA4IBAQAVzJ1JDPteC4N7gosZS6rEZpXFUT6Hm4AC
I0FMYFDGziAy2WLO6yRwGHQa8ZYGpbl7YaW8snPkDY1c8pt6DxpTwYERtwYyIc3s
GGW74b07d7W2mu9pSgdmwapZ782oNSi9jhbRJnTvZWgGC+MGuLY0F7zVgNhqB6ZM
tc1pb5h1eCbL8h60tVQIilzNRPWbXHxx/+v9dZqz/7W8mYRAn1dCSN23/SkweTQ2
ZYG907/UYTdBO0FfiFo5XSqUoXS7WSMO/RQgm6mXZ6+aN0XjM8WNYSK1XAzoyIzb
Qd/AOAm7tei6PhuAnHCYoutmy8hBwwuMsgzqDIUdgXYkC11ihKax
-----END CERTIFICATE-----
Generated at Sun Apr 21 03:49:37 2024 by rpki-client on console-fra.rpki-client.org