Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/rILfVK3WMy0yJqcBkB_FkQEeO_0.roa
File: rILfVK3WMy0yJqcBkB_FkQEeO_0.roa (raw, json)
Hash identifier: HcvmomCrFvx34SsziqL4OefXh8PbusZk7B4XECpYTB4=
Subject key identifier: AC:82:DF:54:AD:D6:33:2D:32:26:A7:01:90:1F:C5:91:01:1E:3B:FD
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018CC2DB322DC31F1CB35BEDB64D63B8AAC2
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/rILfVK3WMy0yJqcBkB_FkQEeO_0.roa
Signing time: Mon 01 Jan 2024 02:29:54 +0000
ROA not before: Mon 01 Jan 2024 02:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 185.83.200.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 14:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:32:2d:c3:1f:1c:b3:5b:ed:b6:4d:63:b8:aa:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac82df54add6332d3226a701901fc591011e3bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:84:32:69:df:eb:a9:4f:b3:8b:c5:95:e5:5b:
53:85:57:56:aa:b7:99:1a:4a:fa:09:d1:c8:a3:c7:
b3:dc:93:7e:59:04:73:4b:a0:b6:95:ae:33:17:ea:
57:c3:49:d7:e6:9a:76:f4:63:e1:1c:2a:60:4a:5b:
10:fd:31:9a:df:3a:8e:98:30:82:70:ef:f8:d2:f7:
3d:3b:aa:ce:d4:7d:95:5e:16:c7:8b:1f:7b:be:26:
04:05:bb:b7:87:c5:41:b0:fb:3d:5d:a8:28:84:6b:
a7:92:33:b9:62:41:8f:97:93:4c:ef:39:8f:2f:f1:
b8:fc:e2:be:a3:52:53:70:ca:d7:57:8c:f4:50:82:
47:b8:e7:1b:03:29:3b:f9:55:c5:6b:52:de:cb:94:
d1:3d:37:98:0b:81:30:9b:ca:6e:96:7a:73:ee:f0:
d8:da:5b:a7:ee:cf:6a:ff:7a:3c:57:11:c9:20:e2:
f4:0c:23:0f:fa:b1:7e:17:3d:9a:41:cc:4f:62:bc:
23:04:33:99:c1:6f:7e:5d:a1:a3:67:33:28:55:e6:
86:f0:d9:2e:1f:f1:3f:9c:4f:88:52:d3:e3:50:08:
c2:88:e6:5d:4b:db:c9:ae:33:19:5f:ae:37:f5:45:
21:5d:21:6c:81:96:82:27:af:b1:3d:d2:44:ad:0f:
78:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:82:DF:54:AD:D6:33:2D:32:26:A7:01:90:1F:C5:91:01:1E:3B:FD
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/rILfVK3WMy0yJqcBkB_FkQEeO_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.200.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:ae:54:18:7c:70:46:47:ee:24:f1:d8:e2:ac:40:7f:d7:14:
cc:37:a8:c6:eb:e8:5b:56:d5:9f:32:4b:64:97:21:98:c5:4c:
48:c7:9f:83:02:b1:6a:b8:63:1f:a2:04:e6:07:a9:d4:b6:ff:
42:4e:95:f1:bd:68:ff:cc:ca:4d:67:cb:b4:5c:4c:43:2c:b0:
97:b7:f0:a1:b7:07:36:33:25:98:96:13:7e:79:c7:63:b4:1f:
21:3c:46:1b:8d:15:5f:0a:76:be:8f:e5:ef:81:99:7e:5d:9c:
b8:1e:b8:15:0b:b1:8c:c8:f0:3f:e5:f0:d0:18:00:a6:b3:7a:
9d:06:44:69:bd:19:72:e5:eb:dc:b5:88:f4:1b:cd:2c:a9:ad:
08:66:c8:4e:ef:b9:04:69:b6:e9:e8:d3:59:76:24:ec:05:16:
95:39:bc:b0:36:86:65:f0:fd:36:d4:ef:a8:6e:9e:f1:42:35:
ae:1b:8d:a4:5b:24:90:e2:43:7e:08:95:c4:96:d9:6e:5d:49:
ab:2f:62:63:45:59:40:72:64:0e:06:dc:77:26:ed:3e:f9:cf:
b2:43:37:0b:d2:ca:dc:19:c7:c7:a6:dc:fb:0f:40:a5:7a:76:
f4:3c:7a:ce:92:ba:30:20:68:e3:fd:97:39:11:5e:63:93:af:
52:e6:44:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2zItwx8cs1vttk1juKrCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjQwMTAxMDIyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzgyZGY1NGFkZDYzMzJkMzIyNmE3MDE5MDFmYzU5MTAxMWUzYmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYQyad/rqU+zi8WV5VtThVdWqreZ
Gkr6CdHIo8ez3JN+WQRzS6C2la4zF+pXw0nX5pp29GPhHCpgSlsQ/TGa3zqOmDCC
cO/40vc9O6rO1H2VXhbHix97viYEBbu3h8VBsPs9XagohGunkjO5YkGPl5NM7zmP
L/G4/OK+o1JTcMrXV4z0UIJHuOcbAyk7+VXFa1Ley5TRPTeYC4Ewm8pulnpz7vDY
2lun7s9q/3o8VxHJIOL0DCMP+rF+Fz2aQcxPYrwjBDOZwW9+XaGjZzMoVeaG8Nku
H/E/nE+IUtPjUAjCiOZdS9vJrjMZX6439UUhXSFsgZaCJ6+xPdJErQ94swIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKyC31St1jMtMianAZAfxZEBHjv9MB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvcklMZlZLM1dNeTB5SnFjQmtCX0ZrUUVlT18wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuVPIMA0G
CSqGSIb3DQEBCwUAA4IBAQAdrlQYfHBGR+4k8djirEB/1xTMN6jG6+hbVtWfMktk
lyGYxUxIx5+DArFquGMfogTmB6nUtv9CTpXxvWj/zMpNZ8u0XExDLLCXt/Chtwc2
MyWYlhN+ecdjtB8hPEYbjRVfCna+j+XvgZl+XZy4HrgVC7GMyPA/5fDQGACms3qd
BkRpvRly5evctYj0G80sqa0IZshO77kEabbp6NNZdiTsBRaVObywNoZl8P021O+o
bp7xQjWuG42kWySQ4kN+CJXEltluXUmrL2JjRVlAcmQOBtx3Ju0++c+yQzcL0src
GcfHptz7D0Clenb0PHrOkrowIGjj/Zc5EV5jk69S5kQ8
-----END CERTIFICATE-----
Generated at Thu May 16 22:42:07 2024 by rpki-client on console-ams.rpki-client.org