Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/1-WcSIjOU0UwOA9pLWGEyt3S9KrM.roa
File: 1-WcSIjOU0UwOA9pLWGEyt3S9KrM.roa (raw, json)
Hash identifier: ZPiBFbP5J0Wkntm1J4MElWcRENrt2GDRYU0CxLD/PNc=
Subject key identifier: F9:67:12:22:33:94:D1:4C:0E:03:DA:4B:58:61:32:B7:74:BD:2A:B3
Certificate issuer: /CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Certificate serial: 018CC26CF276F2F296A0646F11EB2C7D440D
Authority key identifier: A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/1-WcSIjOU0UwOA9pLWGEyt3S9KrM.roa
Signing time: Mon 01 Jan 2024 00:29:29 +0000
ROA not before: Mon 01 Jan 2024 00:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199727
IP address blocks: 185.189.173.0/24 maxlen: 24
185.189.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 07:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f2:76:f2:f2:96:a0:64:6f:11:eb:2c:7d:44:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Validity
Not Before: Jan 1 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f96712223394d14c0e03da4b586132b774bd2ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:35:93:b4:b2:7b:3c:76:74:69:f9:90:1a:
c6:50:c6:af:a0:34:6a:02:73:c8:ee:01:fe:ab:4b:
9f:c7:a5:28:f2:b4:05:25:4d:76:1f:0a:91:44:fb:
5a:f2:18:0a:28:07:98:89:71:68:b5:0b:29:d1:c4:
3f:a2:72:76:31:6c:4d:c5:05:f8:b2:93:86:3d:8d:
2b:e3:b8:90:ab:fd:94:b9:74:59:a2:78:69:ab:ae:
fc:3a:72:8d:0c:bd:62:ce:b7:10:42:27:01:b1:0c:
9c:f3:ce:8f:9d:d0:ab:a1:ab:94:f9:44:26:83:6e:
6f:c5:0a:67:17:01:49:d3:c1:79:2c:6d:59:9b:d3:
60:26:ab:08:cb:87:c1:71:b9:23:ea:61:17:eb:19:
1a:3f:b9:fe:18:cc:ad:f4:fb:1d:75:ce:28:41:01:
ca:4f:a5:4a:2a:c4:14:e1:0b:ad:2c:cc:84:b7:4e:
33:89:07:3f:0a:06:81:89:fe:e2:94:e4:07:92:d7:
93:5f:61:92:9a:a8:40:bb:7c:19:be:c8:62:ea:d1:
5c:92:ae:5c:d4:ad:a7:2d:c2:69:64:7c:a4:53:2a:
a2:72:69:b6:e3:bf:2b:a1:8c:53:6b:70:2e:c6:bb:
f4:ff:b5:3a:96:4b:5c:ab:b3:8b:87:a6:69:6d:53:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:67:12:22:33:94:D1:4C:0E:03:DA:4B:58:61:32:B7:74:BD:2A:B3
X509v3 Authority Key Identifier:
keyid:A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/1-WcSIjOU0UwOA9pLWGEyt3S9KrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.172.0/23
Signature Algorithm: sha256WithRSAEncryption
58:3f:3c:b2:eb:42:30:8c:a7:ba:6a:21:0d:be:75:de:11:ba:
6a:01:0a:b3:57:62:13:0b:25:24:a9:79:7a:07:ce:ef:68:7a:
c7:ee:cf:49:12:7d:00:98:1a:cc:eb:82:87:d9:9b:92:af:64:
32:15:ab:3c:4b:46:1e:fe:fc:9b:77:bd:62:fa:e5:97:9a:29:
27:8e:91:16:d8:c7:56:07:2c:28:fb:26:23:5a:0c:e4:49:92:
19:e6:03:8d:1b:6f:d7:3f:bf:79:5a:55:86:b5:c8:97:01:d2:
53:53:00:a3:04:da:4e:dc:81:7c:68:3c:1e:8f:5f:a3:9b:c5:
1e:dd:9c:8a:6a:c1:cc:5b:a9:1f:83:5f:ea:d8:ca:1a:bb:41:
c4:f7:d2:33:05:bb:a0:02:5e:e1:fe:52:b0:ae:8e:1f:2a:ee:
af:f8:fd:72:41:fc:8f:3e:2b:db:fe:b9:53:b3:61:ba:76:83:
76:c6:b9:3d:95:11:47:b5:da:0a:08:11:e7:1a:8c:9e:52:0e:
29:dc:29:87:9e:6d:1e:f0:80:22:cd:f5:86:c1:2d:70:c2:b7:
6d:69:0a:73:28:57:3e:8b:a4:d4:c6:9c:82:d4:19:c1:02:3f:
75:95:72:fe:a6:00:a8:c9:c8:05:74:fd:d3:2f:61:ff:c3:7e:
ec:2f:29:48
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzCbPJ28vKWoGRvEessfUQNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MTAzNTZkYzBhNTIxODk1Y2U2MWY4NTQ5NWUwNmRhZjdh
MTJiM2IwHhcNMjQwMTAxMDAyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTY3MTIyMjMzOTRkMTRjMGUwM2RhNGI1ODYxMzJiNzc0YmQyYWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD01k7Syezx2dGn5kBrGUMavoDRq
AnPI7gH+q0ufx6Uo8rQFJU12HwqRRPta8hgKKAeYiXFotQsp0cQ/onJ2MWxNxQX4
spOGPY0r47iQq/2UuXRZonhpq678OnKNDL1izrcQQicBsQyc886PndCroauU+UQm
g25vxQpnFwFJ08F5LG1Zm9NgJqsIy4fBcbkj6mEX6xkaP7n+GMyt9Psddc4oQQHK
T6VKKsQU4QutLMyEt04ziQc/CgaBif7ilOQHkteTX2GSmqhAu3wZvshi6tFckq5c
1K2nLcJpZHykUyqicmm2478roYxTa3Auxrv0/7U6lktcq7OLh6ZpbVPEFwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPlnEiIzlNFMDgPaS1hhMrd0vSqzMB8GA1UdIwQY
MBaAFKUQNW3ApSGJXOYfhUleBtr3oSs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFJBMWJjQ2xJWWxjNWgtRlNWNEcydmVoS3pzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zYzdjN2MtNDMyNi00MTg0LTgzNTYt
MDExODJmODQwNzg5LzEvMS1XY1NJak9VMFV3T0E5cExXR0V5dDNTOUtyTS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMjkvM2M3YzdjLTQzMjYtNDE4NC04MzU2LTAxMTgyZjg0MDc4
OS8xL3BSQTFiY0NsSVlsYzVoLUZTVjRHMnZlaEt6cy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbm9rDAN
BgkqhkiG9w0BAQsFAAOCAQEAWD88sutCMIynumohDb513hG6agEKs1diEwslJKl5
egfO72h6x+7PSRJ9AJgazOuCh9mbkq9kMhWrPEtGHv78m3e9Yvrll5opJ46RFtjH
VgcsKPsmI1oM5EmSGeYDjRtv1z+/eVpVhrXIlwHSU1MAowTaTtyBfGg8Ho9fo5vF
Ht2cimrBzFupH4Nf6tjKGrtBxPfSMwW7oAJe4f5SsK6OHyrur/j9ckH8jz4r2/65
U7NhunaDdsa5PZURR7XaCggR5xqMnlIOKdwph55tHvCAIs31hsEtcMK3bWkKcyhX
Pouk1MacgtQZwQI/dZVy/qYAqMnIBXT90y9h/8N+7C8pSA==
-----END CERTIFICATE-----
Generated at Mon May 20 13:19:50 2024 by rpki-client on console-fra.rpki-client.org