Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/X8yDvbv4EH-LWpeQbiDqBT_ruHw.roa
File: X8yDvbv4EH-LWpeQbiDqBT_ruHw.roa (raw, json)
Hash identifier: TtEgA9jbqVTMP/p4z81bj6KaVYQYxF+iTo0BsvZV2Vc=
Subject key identifier: 5F:CC:83:BD:BB:F8:10:7F:8B:5A:97:90:6E:20:EA:05:3F:EB:B8:7C
Certificate issuer: /CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Certificate serial: 018CC26D6308779BA1AEDE0736A8ED42DC2C
Authority key identifier: 25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/X8yDvbv4EH-LWpeQbiDqBT_ruHw.roa
Signing time: Mon 01 Jan 2024 00:29:57 +0000
ROA not before: Mon 01 Jan 2024 00:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8255
IP address blocks: 145.226.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:63:08:77:9b:a1:ae:de:07:36:a8:ed:42:dc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Validity
Not Before: Jan 1 00:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fcc83bdbbf8107f8b5a97906e20ea053febb87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:66:de:84:64:9e:53:e4:25:77:13:eb:65:f9:
87:2f:db:41:9b:0b:19:d5:1f:84:5a:83:ee:99:a4:
ef:52:c3:a5:5b:47:c2:c6:cd:1e:8f:06:7d:18:ed:
fd:e8:1e:56:a6:1b:ee:c3:2d:9e:43:ce:b4:20:9f:
0d:3c:25:ba:d4:4d:ac:30:40:26:b7:bd:40:34:6b:
8b:8f:b0:20:51:2b:1e:98:04:08:70:a1:0f:32:01:
a7:3b:75:d4:8d:a4:fd:92:3b:09:23:ce:e7:72:c0:
85:9f:c0:ef:d6:e9:65:e2:44:2c:4e:6c:8f:75:25:
23:73:4d:8b:a8:ba:7d:4c:79:7c:fe:a4:5b:a0:ab:
4c:e7:e8:e5:7c:14:ee:86:5d:7a:15:61:12:94:2a:
5b:a5:0b:2d:34:f5:3c:c6:87:66:c7:a2:f2:2c:35:
2b:85:89:0a:d7:1d:b2:35:ed:38:c8:66:96:f8:bb:
16:bd:57:0d:c1:06:1f:29:2f:a2:69:44:10:ad:30:
ed:0e:bf:dc:ef:af:2b:1b:7f:fd:35:9b:65:42:47:
fe:65:e9:5c:b0:9d:05:9b:0a:d9:74:78:ae:95:0b:
eb:ff:75:81:ca:ba:10:31:e9:d3:f3:6a:bb:fd:e2:
ff:68:e7:08:04:77:1e:84:b9:45:f6:4e:79:f1:aa:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CC:83:BD:BB:F8:10:7F:8B:5A:97:90:6E:20:EA:05:3F:EB:B8:7C
X509v3 Authority Key Identifier:
keyid:25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/X8yDvbv4EH-LWpeQbiDqBT_ruHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.226.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:5e:46:65:ff:a0:a4:73:f2:77:2c:c4:cb:23:71:c5:7a:f7:
9f:39:7b:01:b3:c3:0c:0e:cb:52:56:b0:55:f6:48:e1:67:82:
b6:d0:75:e3:20:09:86:03:fd:1a:67:5b:e6:1f:30:38:92:32:
ab:c5:ad:78:54:1e:c4:63:14:e3:6c:bc:bc:c6:85:6c:23:0b:
3a:b2:c2:a1:72:fd:b7:9c:0f:cc:25:da:72:a4:77:58:14:53:
fd:e8:04:90:82:04:be:8b:b8:2d:84:79:e5:d8:79:1a:14:56:
15:a3:0a:c4:06:35:2a:81:6a:9b:db:61:65:1b:88:3c:6b:52:
5f:ac:ea:76:b7:fc:2b:62:04:fa:d3:b0:22:82:6b:fa:a8:54:
3c:fd:aa:09:ab:5f:84:8a:c3:2e:a4:50:50:3c:42:cd:e0:73:
91:5f:a9:84:5d:be:00:65:71:b3:b0:78:a1:2d:9e:fd:f9:bd:
53:4a:ce:8e:54:42:ff:fd:c0:11:51:86:ff:f8:5d:3e:6d:4e:
ad:d9:b6:02:d6:12:58:d9:54:d2:bd:f3:1a:85:b6:35:66:10:
17:46:fc:61:83:d4:d8:dd:2a:43:73:ce:8d:e6:02:87:31:ce:
97:5a:a2:93:cf:7f:e4:5b:f5:cb:1f:4f:67:88:ad:f8:32:76:
9c:31:44:16
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYzCbWMId5uhrt4HNqjtQtwsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1OGY1YThlMjk1YWQxZDdiNDhhMWUxMTk1ODc5MDA1MmI1
N2EyNTMwHhcNMjQwMTAxMDAyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmNjODNiZGJiZjgxMDdmOGI1YTk3OTA2ZTIwZWEwNTNmZWJiODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmbehGSeU+QldxPrZfmHL9tBmwsZ
1R+EWoPumaTvUsOlW0fCxs0ejwZ9GO396B5Wphvuwy2eQ860IJ8NPCW61E2sMEAm
t71ANGuLj7AgUSsemAQIcKEPMgGnO3XUjaT9kjsJI87ncsCFn8Dv1ull4kQsTmyP
dSUjc02LqLp9THl8/qRboKtM5+jlfBTuhl16FWESlCpbpQstNPU8xodmx6LyLDUr
hYkK1x2yNe04yGaW+LsWvVcNwQYfKS+iaUQQrTDtDr/c768rG3/9NZtlQkf+Zelc
sJ0FmwrZdHiulQvr/3WByroQMenT82q7/eL/aOcIBHcehLlF9k558arOWQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFF/Mg727+BB/i1qXkG4g6gU/67h8MB8GA1UdIwQY
MBaAFCWPWo4pWtHXtIoeEZWHkAUrV6JTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlk5YWppbGEwZGUwaWg0UmxZZVFCU3RYb2xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zNzE5ZjMtMjJlMS00MzQ0LTlhMzkt
NDU4YTI3MzYxNTdhLzEvWDh5RHZidjRFSC1MV3BlUWJpRHFCVF9ydUh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8zNzE5ZjMtMjJlMS00MzQ0LTlhMzktNDU4YTI3MzYxNTdh
LzEvSlk5YWppbGEwZGUwaWg0UmxZZVFCU3RYb2xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkeIwDQYJ
KoZIhvcNAQELBQADggEBAG5eRmX/oKRz8ncsxMsjccV69585ewGzwwwOy1JWsFX2
SOFngrbQdeMgCYYD/RpnW+YfMDiSMqvFrXhUHsRjFONsvLzGhWwjCzqywqFy/bec
D8wl2nKkd1gUU/3oBJCCBL6LuC2EeeXYeRoUVhWjCsQGNSqBapvbYWUbiDxrUl+s
6na3/CtiBPrTsCKCa/qoVDz9qgmrX4SKwy6kUFA8Qs3gc5FfqYRdvgBlcbOweKEt
nv35vVNKzo5UQv/9wBFRhv/4XT5tTq3ZtgLWEljZVNK98xqFtjVmEBdG/GGD1Njd
KkNzzo3mAocxzpdaopPPf+Rb9csfT2eIrfgydpwxRBY=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:18:06 2024 by rpki-client on console-fra.rpki-client.org