Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/3K5Ygla5KJ2aQIjxNsrZxuFK-bc.roa
File: 3K5Ygla5KJ2aQIjxNsrZxuFK-bc.roa (raw, json)
Hash identifier: AvjGRvXtZ8gH//fGiUQiwvQTVb2+GzrnEd5t9JJIaCo=
Subject key identifier: DC:AE:58:82:56:B9:28:9D:9A:40:88:F1:36:CA:D9:C6:E1:4A:F9:B7
Certificate issuer: /CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
Certificate serial: 018CC64A7EC8A2394F1BEB3F6F3FF8597DB5
Authority key identifier: 70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/3K5Ygla5KJ2aQIjxNsrZxuFK-bc.roa
Signing time: Mon 01 Jan 2024 18:30:20 +0000
ROA not before: Mon 01 Jan 2024 18:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56902
IP address blocks: 185.87.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:7e:c8:a2:39:4f:1b:eb:3f:6f:3f:f8:59:7d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
Validity
Not Before: Jan 1 18:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcae588256b9289d9a4088f136cad9c6e14af9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ac:64:ac:79:ba:64:5f:12:da:8e:23:89:8d:
cf:65:63:a4:ad:50:20:70:28:b3:ff:fc:77:3d:d2:
ae:84:54:b7:49:c7:1f:7c:44:b7:42:3e:e4:e4:7b:
ca:0d:c9:1e:b4:31:89:6c:eb:ab:00:02:1b:41:7b:
8a:bf:f8:d6:f9:1c:69:3e:a1:d3:6f:a3:b4:16:ad:
65:8d:77:60:af:00:f8:c6:db:93:29:93:e7:d7:ae:
58:c4:2a:ba:1a:f5:cf:f8:47:20:67:58:c2:1a:b9:
26:9d:19:00:24:36:7f:ed:a2:b1:5e:9a:89:83:65:
16:b9:6a:5d:e6:f8:da:90:f3:20:23:78:bc:08:c8:
29:5a:a7:34:9b:50:17:15:b0:73:d8:bf:5b:88:27:
e7:86:b1:b8:cc:f0:37:af:2b:6d:5a:12:7e:1c:73:
af:7f:42:b4:3d:4e:38:cc:1c:16:cc:dd:df:68:c4:
fc:fc:32:1b:6e:e9:1e:bb:df:e7:76:cf:09:12:dc:
d4:bd:47:0c:a2:28:1c:73:e4:b3:7a:f0:bf:39:4f:
fb:9d:11:2a:7c:9a:2b:aa:5e:c1:06:12:09:88:5c:
b3:a6:42:cd:dc:d5:5d:d4:cf:f6:73:50:93:6f:bd:
41:05:8b:2a:de:f9:76:2a:c9:56:db:0f:00:cd:7d:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AE:58:82:56:B9:28:9D:9A:40:88:F1:36:CA:D9:C6:E1:4A:F9:B7
X509v3 Authority Key Identifier:
keyid:70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/3K5Ygla5KJ2aQIjxNsrZxuFK-bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.171.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c3:36:ac:50:17:11:f2:b3:67:69:3f:2b:8e:0b:1d:16:44:
09:40:e0:12:53:80:89:71:57:be:17:50:0d:90:23:0a:78:ea:
08:69:40:8b:37:1b:d0:87:59:82:ec:23:65:f2:8d:03:2a:41:
51:fb:71:9d:44:e6:7d:9b:8e:fa:15:65:07:78:a9:7c:de:54:
ad:17:90:63:d7:53:86:41:ba:be:b8:48:16:65:78:a0:97:c7:
1c:1c:8c:f2:2e:4f:62:89:9d:5a:c5:d6:25:05:86:ad:07:55:
2e:21:26:b8:02:a7:9f:da:47:32:07:dc:90:ad:c4:c7:a1:9a:
75:f5:2f:a1:bb:10:6a:ee:36:9f:ba:88:cc:ab:b0:96:c0:47:
ec:28:4f:45:34:4f:b9:e6:a7:aa:df:83:eb:5f:96:be:6b:84:
38:c5:2e:f5:df:a5:4e:fb:c9:1b:59:82:d8:f0:49:16:95:88:
1a:d4:7c:a5:38:1c:26:c6:12:33:c3:55:09:73:0c:b9:ff:4f:
fd:98:af:e3:a3:83:2c:fd:82:4f:19:84:33:f1:3d:02:f5:66:
72:3a:08:e2:5b:be:b3:78:aa:09:16:03:34:19:b1:8c:3f:c3:
5c:15:c8:25:88:0d:49:e0:9b:4d:ed:f7:96:d9:78:d7:95:c4:
d4:cf:7b:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSn7IojlPG+s/bz/4WX21MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNmI3ZmVhOGFkMzUxMTFjYTY4N2E5Y2QwMGE0OWY5YTRm
MDQ1OWIwHhcNMjQwMTAxMTgzMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2FlNTg4MjU2YjkyODlkOWE0MDg4ZjEzNmNhZDljNmUxNGFmOWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56xkrHm6ZF8S2o4jiY3PZWOkrVAg
cCiz//x3PdKuhFS3SccffES3Qj7k5HvKDcketDGJbOurAAIbQXuKv/jW+RxpPqHT
b6O0Fq1ljXdgrwD4xtuTKZPn165YxCq6GvXP+EcgZ1jCGrkmnRkAJDZ/7aKxXpqJ
g2UWuWpd5vjakPMgI3i8CMgpWqc0m1AXFbBz2L9biCfnhrG4zPA3ryttWhJ+HHOv
f0K0PU44zBwWzN3faMT8/DIbbukeu9/nds8JEtzUvUcMoigcc+SzevC/OU/7nREq
fJorql7BBhIJiFyzpkLN3NVd1M/2c1CTb71BBYsq3vl2KslW2w8AzX0UnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNyuWIJWuSidmkCI8TbK2cbhSvm3MB8GA1UdIwQY
MBaAFHBrf+qK01ERymh6nNAKSfmk8EWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0d0XzZvclRVUkhLYUhxYzBBcEotYVR3UlpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kMjk3NGYtN2VmYS00NjExLTg4Mjct
MjYwYzM3N2EzMTRhLzEvM0s1WWdsYTVLSjJhUUlqeE5zclp4dUZLLWJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9kMjk3NGYtN2VmYS00NjExLTg4MjctMjYwYzM3N2EzMTRh
LzEvY0d0XzZvclRVUkhLYUhxYzBBcEotYVR3UlpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVerMA0G
CSqGSIb3DQEBCwUAA4IBAQAbwzasUBcR8rNnaT8rjgsdFkQJQOASU4CJcVe+F1AN
kCMKeOoIaUCLNxvQh1mC7CNl8o0DKkFR+3GdROZ9m476FWUHeKl83lStF5Bj11OG
Qbq+uEgWZXigl8ccHIzyLk9iiZ1axdYlBYatB1UuISa4Aqef2kcyB9yQrcTHoZp1
9S+huxBq7jafuojMq7CWwEfsKE9FNE+55qeq34PrX5a+a4Q4xS7136VO+8kbWYLY
8EkWlYga1HylOBwmxhIzw1UJcwy5/0/9mK/jo4Ms/YJPGYQz8T0C9WZyOgjiW76z
eKoJFgM0GbGMP8NcFcgliA1J4JtN7feW2XjXlcTUz3sL
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:40:56 2024 by rpki-client on console-ams.rpki-client.org