Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/cB9tliPfNMYonQxxjZiVKv-b-CE.roa
File: cB9tliPfNMYonQxxjZiVKv-b-CE.roa (raw, json)
Hash identifier: ABPxGohicNLRBHZFt9gaeq4iRFuKcy+Nfm5hhXYFtRg=
Subject key identifier: 70:1F:6D:96:23:DF:34:C6:28:9D:0C:71:8D:98:95:2A:FF:9B:F8:21
Certificate issuer: /CN=25a3f511d0095606a525084ae460836dc5d24397
Certificate serial: 018CC7276E1F66F5AC00086FDA7EC2E5C08D
Authority key identifier: 25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/cB9tliPfNMYonQxxjZiVKv-b-CE.roa
Signing time: Mon 01 Jan 2024 22:31:39 +0000
ROA not before: Mon 01 Jan 2024 22:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60608
IP address blocks: 185.28.122.0/24 maxlen: 24
185.28.121.0/24 maxlen: 24
185.28.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6e:1f:66:f5:ac:00:08:6f:da:7e:c2:e5:c0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a3f511d0095606a525084ae460836dc5d24397
Validity
Not Before: Jan 1 22:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=701f6d9623df34c6289d0c718d98952aff9bf821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:cb:f9:d8:35:c5:91:07:17:26:2c:fd:07:
1f:d8:d2:a5:e2:fd:e6:71:80:40:11:8e:8e:4c:b7:
1d:ec:42:5e:29:51:d2:f3:84:3f:48:b2:05:67:31:
d9:b2:af:9f:10:99:b7:9f:8a:05:be:8c:39:df:44:
92:40:30:35:93:f6:09:3a:3f:6a:21:37:0c:d9:d7:
22:75:26:11:94:50:c4:6d:e8:2a:0c:c3:27:f9:9d:
3a:13:de:e3:9a:c3:b6:07:ec:61:8f:a9:81:ed:27:
4a:61:11:86:59:a6:55:20:e7:42:3a:a1:bd:49:2e:
61:c9:04:b2:ed:28:f8:70:ec:44:11:3c:0a:b5:fc:
c4:c0:c5:de:b5:20:07:6c:46:ce:67:01:f7:05:52:
ff:a5:89:77:6c:60:79:7d:e8:2d:05:51:29:41:6d:
39:8b:0a:23:2f:8e:24:88:35:94:c9:e9:70:59:b3:
a1:91:b1:30:8e:6a:17:a6:80:95:05:81:01:cb:dc:
a1:e3:af:c7:36:bc:61:0e:8e:c4:78:82:1d:7b:77:
4b:65:f7:d7:c3:02:37:80:47:ca:c2:3a:9b:25:c8:
81:25:64:91:c5:69:25:f7:8f:32:79:98:cf:45:02:
b8:99:a9:0f:37:d2:35:84:8a:04:e8:44:c4:89:6c:
5c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1F:6D:96:23:DF:34:C6:28:9D:0C:71:8D:98:95:2A:FF:9B:F8:21
X509v3 Authority Key Identifier:
keyid:25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/cB9tliPfNMYonQxxjZiVKv-b-CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.120.0-185.28.122.255
Signature Algorithm: sha256WithRSAEncryption
9c:42:c8:19:24:94:f4:54:5f:98:4d:f8:84:98:12:83:0b:f8:
02:0d:76:28:94:85:53:62:2e:e0:fd:ed:f1:2f:d8:f1:dc:82:
35:3f:6f:a9:77:f3:c0:33:ef:b5:e6:55:4b:c4:46:19:55:90:
f6:4b:83:5a:81:21:aa:d3:65:a5:0d:59:9d:79:85:04:1e:d8:
79:f0:1d:e0:5a:95:2f:67:4b:06:3b:90:d0:a5:e9:12:76:4e:
7c:13:c0:53:f0:51:d6:75:77:68:e0:10:65:fb:2e:23:83:5a:
b3:83:89:d8:32:1d:0d:05:17:77:7f:7f:50:c0:3c:7b:79:c6:
fb:24:ea:15:6e:0e:6a:d4:22:17:2b:43:89:f7:81:6f:f1:5c:
11:03:3d:4d:e5:d1:53:33:fc:26:80:e0:5f:a3:a3:ac:cf:c6:
21:de:f5:f6:1c:b9:84:f1:fb:b3:8d:5b:6f:3e:9d:41:3f:81:
31:af:4b:23:2a:29:d1:6e:a9:84:78:f8:42:66:da:38:35:0e:
ae:a5:d7:c5:3c:74:c6:9e:0c:f6:9b:d5:d7:31:f6:25:79:e4:
37:b4:28:16:b2:ce:18:66:d1:be:eb:fa:c3:ce:62:87:9b:ea:
ff:b9:09:26:3f:e1:a9:56:a0:b5:6d:69:0d:13:84:69:4c:2e:
34:85:1f:bc
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzHJ24fZvWsAAhv2n7C5cCNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YTNmNTExZDAwOTU2MDZhNTI1MDg0YWU0NjA4MzZkYzVk
MjQzOTcwHhcNMjQwMTAxMjIzMTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDFmNmQ5NjIzZGYzNGM2Mjg5ZDBjNzE4ZDk4OTUyYWZmOWJmODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8TL+dg1xZEHFyYs/Qcf2NKl4v3m
cYBAEY6OTLcd7EJeKVHS84Q/SLIFZzHZsq+fEJm3n4oFvow530SSQDA1k/YJOj9q
ITcM2dcidSYRlFDEbegqDMMn+Z06E97jmsO2B+xhj6mB7SdKYRGGWaZVIOdCOqG9
SS5hyQSy7Sj4cOxEETwKtfzEwMXetSAHbEbOZwH3BVL/pYl3bGB5fegtBVEpQW05
iwojL44kiDWUyelwWbOhkbEwjmoXpoCVBYEBy9yh46/HNrxhDo7EeIIde3dLZffX
wwI3gEfKwjqbJciBJWSRxWkl948yeZjPRQK4makPN9I1hIoE6ETEiWxcswIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHAfbZYj3zTGKJ0McY2YlSr/m/ghMB8GA1UdIwQY
MBaAFCWj9RHQCVYGpSUISuRgg23F0kOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmFQMUVkQUpWZ2FsSlFoSzVHQ0RiY1hTUTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kOGIwMDktZDkyMy00YmZmLWE4MmYt
ZThiNzBhYTQ0MmZkLzEvY0I5dGxpUGZOTVlvblF4eGpaaVZLdi1iLUNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9kOGIwMDktZDkyMy00YmZmLWE4MmYtZThiNzBhYTQ0MmZk
LzEvSmFQMUVkQUpWZ2FsSlFoSzVHQ0RiY1hTUTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO5HHgD
BAC5HHowDQYJKoZIhvcNAQELBQADggEBAJxCyBkklPRUX5hN+ISYEoML+AINdiiU
hVNiLuD97fEv2PHcgjU/b6l388Az77XmVUvERhlVkPZLg1qBIarTZaUNWZ15hQQe
2HnwHeBalS9nSwY7kNCl6RJ2TnwTwFPwUdZ1d2jgEGX7LiODWrODidgyHQ0FF3d/
f1DAPHt5xvsk6hVuDmrUIhcrQ4n3gW/xXBEDPU3l0VMz/CaA4F+jo6zPxiHe9fYc
uYTx+7ONW28+nUE/gTGvSyMqKdFuqYR4+EJm2jg1Dq6l18U8dMaeDPab1dcx9iV5
5De0KBayzhhm0b7r+sPOYoeb6v+5CSY/4alWoLVtaQ0ThGlMLjSFH7w=
-----END CERTIFICATE-----
Generated at Tue Jun 25 23:51:06 2024 by rpki-client on console-fra.rpki-client.org