Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/v9dBFxfzqu6-YrGwMEVqJjSdrgk.roa
File: v9dBFxfzqu6-YrGwMEVqJjSdrgk.roa (raw, json)
Hash identifier: 5K/TcV+skBYr+FyqwDIGNNh0+adDapyIJUS7C0Wto0c=
Subject key identifier: BF:D7:41:17:17:F3:AA:EE:BE:62:B1:B0:30:45:6A:26:34:9D:AE:09
Certificate issuer: /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial: 018D5F6F82EA4FF8F82FFC6ECC9BF8C18DAC
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/v9dBFxfzqu6-YrGwMEVqJjSdrgk.roa
Signing time: Wed 31 Jan 2024 12:12:39 +0000
ROA not before: Wed 31 Jan 2024 12:12:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201234
IP address blocks: 185.62.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5f:6f:82:ea:4f:f8:f8:2f:fc:6e:cc:9b:f8:c1:8d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
Validity
Not Before: Jan 31 12:12:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfd7411717f3aaeebe62b1b030456a26349dae09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ac:57:23:ad:e1:cd:73:75:d3:20:5b:54:2d:
95:2f:6c:1f:c5:ba:8a:c0:d1:81:76:bd:35:9b:37:
7f:4c:2f:31:5c:dd:c1:45:96:a3:98:95:d9:b2:92:
f4:e5:50:d0:00:d9:8e:ed:92:6b:22:8a:6d:d1:a0:
e7:f4:9c:b6:7c:4b:f6:47:6b:db:9b:90:58:39:6b:
88:d1:8c:84:e9:9a:38:bf:f6:34:6e:c6:c1:d6:0c:
e2:87:1e:4d:6e:1c:3f:cf:c8:46:96:5c:c1:a3:6a:
37:55:32:95:64:b3:70:92:59:2c:b3:89:27:44:5d:
67:b8:83:bd:44:f0:c9:95:ce:94:90:48:c9:a2:28:
08:07:53:2b:bb:e2:21:a4:93:82:cb:0c:18:c0:cf:
39:58:af:9b:34:0a:11:29:0c:13:45:e1:97:73:d5:
77:63:bd:85:3e:eb:34:72:0c:0a:a4:6f:03:be:73:
30:26:53:c6:55:0f:2c:4d:87:39:c6:8f:68:02:da:
31:67:a7:fc:4d:f4:cb:c3:ac:f5:3e:09:5a:af:61:
a0:e7:6d:28:63:4c:ad:34:8f:9a:b1:2a:cf:64:73:
6e:6d:18:1d:9c:30:8a:50:7f:10:99:ce:75:d4:01:
44:75:55:31:a7:4a:cc:7f:43:eb:eb:8b:ba:57:ff:
95:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D7:41:17:17:F3:AA:EE:BE:62:B1:B0:30:45:6A:26:34:9D:AE:09
X509v3 Authority Key Identifier:
keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/v9dBFxfzqu6-YrGwMEVqJjSdrgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.22.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:21:0f:80:73:db:a7:ba:fc:11:22:87:1f:21:b3:a1:72:63:
da:a1:24:9f:f2:a4:81:c0:ec:bd:7b:62:54:8f:0b:55:b2:ac:
d6:a1:99:af:e7:1e:a9:b2:7f:a7:1e:82:60:78:f0:f3:52:cb:
09:d8:d5:0e:aa:ff:7e:32:ce:78:e7:29:b5:03:8c:3d:28:b1:
3b:60:62:c2:4c:06:be:82:0f:1f:c4:c8:d9:bc:7a:07:8b:e3:
cc:c6:07:c7:17:a5:ce:7e:af:57:b2:92:1e:b9:17:ca:2c:92:
87:b8:64:f7:1e:42:ad:c9:7f:7d:7b:d5:1d:00:4c:4d:9d:56:
8d:5b:a4:3b:7d:cf:ae:c0:90:a2:44:4f:93:e2:14:ea:f3:b8:
1a:99:c1:61:0e:73:23:ae:4d:dc:c7:89:d4:ec:71:ba:48:33:
ef:17:61:a8:e4:95:95:43:dc:c9:37:d2:cc:e1:f7:ab:e6:23:
ac:fc:64:e6:11:7c:5c:c9:12:78:9b:bb:01:d7:22:ab:d4:bb:
5c:d7:96:aa:51:c3:28:fd:fb:86:3a:17:2c:94:a3:5a:43:60:
b6:e6:2c:e2:8d:82:d6:cc:07:6a:cb:84:93:45:5b:56:e5:1c:
46:85:ad:dd:d6:22:a6:6f:79:3e:dd:ac:c2:cf:20:6f:88:0a:
29:81:26:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1fb4LqT/j4L/xuzJv4wY2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNmE0NDA5ZWE5MWY1MDZkNjMzODcxYzZjMzU1NDBkNDYw
MzM3ZDEwHhcNMjQwMTMxMTIxMjM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmQ3NDExNzE3ZjNhYWVlYmU2MmIxYjAzMDQ1NmEyNjM0OWRhZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKxXI63hzXN10yBbVC2VL2wfxbqK
wNGBdr01mzd/TC8xXN3BRZajmJXZspL05VDQANmO7ZJrIopt0aDn9Jy2fEv2R2vb
m5BYOWuI0YyE6Zo4v/Y0bsbB1gzihx5Nbhw/z8hGllzBo2o3VTKVZLNwklkss4kn
RF1nuIO9RPDJlc6UkEjJoigIB1Mru+IhpJOCywwYwM85WK+bNAoRKQwTReGXc9V3
Y72FPus0cgwKpG8DvnMwJlPGVQ8sTYc5xo9oAtoxZ6f8TfTLw6z1Pglar2Gg520o
Y0ytNI+asSrPZHNubRgdnDCKUH8Qmc511AFEdVUxp0rMf0Pr64u6V/+VRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL/XQRcX86ruvmKxsDBFaiY0na4JMB8GA1UdIwQY
MBaAFNJqRAnqkfUG1jOHHGw1VA1GAzfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1wRUNlcVI5UWJXTTRjY2JEVlVEVVlETjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mNDEwNTEtMDgxMC00M2ZmLWIxOTYt
Y2ZlZmRmZGZiZTZiLzEvdjlkQkZ4ZnpxdTYtWXJHd01FVnFKalNkcmdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9mNDEwNTEtMDgxMC00M2ZmLWIxOTYtY2ZlZmRmZGZiZTZi
LzEvMG1wRUNlcVI5UWJXTTRjY2JEVlVEVVlETjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuT4WMA0G
CSqGSIb3DQEBCwUAA4IBAQA9IQ+Ac9unuvwRIocfIbOhcmPaoSSf8qSBwOy9e2JU
jwtVsqzWoZmv5x6psn+nHoJgePDzUssJ2NUOqv9+Ms545ym1A4w9KLE7YGLCTAa+
gg8fxMjZvHoHi+PMxgfHF6XOfq9XspIeuRfKLJKHuGT3HkKtyX99e9UdAExNnVaN
W6Q7fc+uwJCiRE+T4hTq87gamcFhDnMjrk3cx4nU7HG6SDPvF2Go5JWVQ9zJN9LM
4fer5iOs/GTmEXxcyRJ4m7sB1yKr1Ltc15aqUcMo/fuGOhcslKNaQ2C25izijYLW
zAdqy4STRVtW5RxGha3d1iKmb3k+3azCzyBviAopgSbR
-----END CERTIFICATE-----
Generated at Tue May 28 20:04:28 2024 by rpki-client on console-fra.rpki-client.org