Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/I17BDfo2E1zvoWoKFJiy4xmNx-M.roa
File: I17BDfo2E1zvoWoKFJiy4xmNx-M.roa (raw, json)
Hash identifier: Rzzh28Bcxva2v2yHZstoSjp3pMx4pYBqiHmcrIGTbR0=
Subject key identifier: 23:5E:C1:0D:FA:36:13:5C:EF:A1:6A:0A:14:98:B2:E3:19:8D:C7:E3
Certificate issuer: /CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
Certificate serial: 018CC64B3A7BF807ED57252A0842D6390804
Authority key identifier: 77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/I17BDfo2E1zvoWoKFJiy4xmNx-M.roa
Signing time: Mon 01 Jan 2024 18:31:08 +0000
ROA not before: Mon 01 Jan 2024 18:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211111
IP address blocks: 185.159.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:3a:7b:f8:07:ed:57:25:2a:08:42:d6:39:08:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
Validity
Not Before: Jan 1 18:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=235ec10dfa36135cefa16a0a1498b2e3198dc7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:96:96:83:48:7a:2d:02:69:f4:1d:12:a7:7e:
f2:c9:57:47:1b:83:b0:0b:12:ff:98:ee:e1:23:f2:
ec:37:f8:9c:9b:f0:d8:2d:db:55:7a:ec:47:5a:8c:
08:78:59:98:8a:8f:5b:a1:bd:b2:4d:24:c5:1a:30:
66:4b:3c:f8:6b:f6:a8:d1:cb:5e:fe:0f:f6:de:07:
6f:b6:a2:58:b4:aa:ad:22:b7:6c:bb:8b:12:0a:3e:
d5:d5:b5:1f:a7:f7:c2:7c:c7:03:ce:67:83:a9:22:
b6:16:7e:8c:c6:a6:d0:d9:27:29:2a:49:ea:3d:5e:
df:a3:68:a4:d2:96:78:ee:ec:d7:5d:9c:c6:59:42:
8e:17:e1:ad:25:a4:b0:e9:fb:b3:96:15:ce:49:f7:
7c:f1:9d:d6:a7:38:40:69:d8:7a:94:1c:0d:7a:50:
ff:c4:01:4e:93:4a:2a:0e:a3:4c:7a:3c:c4:a5:40:
48:fd:5b:66:51:49:f6:05:4a:66:ce:43:33:03:dc:
ef:a0:4b:71:f1:63:9d:c8:9a:4d:7b:b6:69:39:a4:
3c:4c:25:25:dd:25:c4:12:ae:62:9d:df:f9:6d:70:
46:12:ba:fd:07:78:79:3e:bd:93:60:6a:76:cd:f9:
d4:a3:73:3e:0a:e6:d1:d3:9e:e2:f3:6a:41:31:67:
02:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5E:C1:0D:FA:36:13:5C:EF:A1:6A:0A:14:98:B2:E3:19:8D:C7:E3
X509v3 Authority Key Identifier:
keyid:77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/I17BDfo2E1zvoWoKFJiy4xmNx-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.87.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e9:e2:5c:27:65:47:12:82:0c:21:00:5a:72:85:e7:53:21:
1d:05:4d:b9:5b:2e:f0:11:e9:46:e2:a6:de:fa:c0:17:49:c5:
f7:70:a6:17:30:a0:07:7c:9f:e5:73:85:df:34:99:75:a1:ff:
7e:7f:b4:0b:60:0a:8b:f0:0a:97:3e:6c:5d:4c:52:36:28:84:
48:68:54:3a:79:05:70:77:a3:ca:29:3f:c0:8a:1e:2c:52:b3:
7c:8a:96:9e:8f:fb:a0:34:6b:36:2b:68:ee:99:2a:f0:07:6c:
b9:46:43:14:6e:31:f2:ef:46:a5:c9:2a:bf:00:2a:03:f3:d2:
83:63:4e:1b:54:1d:45:c2:8c:c9:19:30:a8:26:88:03:04:fa:
da:64:8b:a0:da:53:cf:fe:e6:a4:56:8b:6e:48:16:60:76:d3:
09:e8:3b:0b:7f:9a:08:ff:b5:3f:b2:14:59:b3:82:7e:46:ae:
75:17:99:82:d2:7f:3b:57:10:e6:04:d4:b9:b2:ba:cc:ef:bf:
7d:c1:00:d2:01:f5:4a:7a:1e:1f:e9:dd:56:44:a2:16:21:ce:
0b:55:9a:b0:eb:d6:6d:21:4b:5a:5f:f2:66:cd:a9:11:77:9c:
de:99:5d:7d:cd:aa:11:26:e9:28:89:66:12:28:e9:f6:bb:8e:
ef:f9:ff:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSzp7+AftVyUqCELWOQgEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZGZjZjA5ODI0ODY4NjliNzFkYmRiN2NjNjEzYzRiMzgx
MzY3YzQwHhcNMjQwMTAxMTgzMTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzVlYzEwZGZhMzYxMzVjZWZhMTZhMGExNDk4YjJlMzE5OGRjN2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJaWg0h6LQJp9B0Sp37yyVdHG4Ow
CxL/mO7hI/LsN/icm/DYLdtVeuxHWowIeFmYio9bob2yTSTFGjBmSzz4a/ao0cte
/g/23gdvtqJYtKqtIrdsu4sSCj7V1bUfp/fCfMcDzmeDqSK2Fn6MxqbQ2ScpKknq
PV7fo2ik0pZ47uzXXZzGWUKOF+GtJaSw6fuzlhXOSfd88Z3WpzhAadh6lBwNelD/
xAFOk0oqDqNMejzEpUBI/VtmUUn2BUpmzkMzA9zvoEtx8WOdyJpNe7ZpOaQ8TCUl
3SXEEq5ind/5bXBGErr9B3h5Pr2TYGp2zfnUo3M+CubR057i82pBMWcCbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCNewQ36NhNc76FqChSYsuMZjcfjMB8GA1UdIwQY
MBaAFHffzwmCSGhptx29t8xhPEs4E2fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDlfUENZSklhR20zSGIyM3pHRThTemdUWjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83YmFiOTctNDhhMy00YWU3LWExNTEt
MTUxYmYzNGY0NjhiLzEvSTE3QkRmbzJFMXp2b1dvS0ZKaXk0eG1OeC1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83YmFiOTctNDhhMy00YWU3LWExNTEtMTUxYmYzNGY0Njhi
LzEvZDlfUENZSklhR20zSGIyM3pHRThTemdUWjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ9XMA0G
CSqGSIb3DQEBCwUAA4IBAQAg6eJcJ2VHEoIMIQBacoXnUyEdBU25Wy7wEelG4qbe
+sAXScX3cKYXMKAHfJ/lc4XfNJl1of9+f7QLYAqL8AqXPmxdTFI2KIRIaFQ6eQVw
d6PKKT/Aih4sUrN8ipaej/ugNGs2K2jumSrwB2y5RkMUbjHy70alySq/ACoD89KD
Y04bVB1FwozJGTCoJogDBPraZIug2lPP/uakVotuSBZgdtMJ6DsLf5oI/7U/shRZ
s4J+Rq51F5mC0n87VxDmBNS5srrM7799wQDSAfVKeh4f6d1WRKIWIc4LVZqw69Zt
IUtaX/JmzakRd5zemV19zaoRJukoiWYSKOn2u47v+f8p
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:35:25 2024 by rpki-client on console-ams.rpki-client.org