Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/1-RJuc0eSTm_afw6pfSV7BOZTvuU.roa
File: 1-RJuc0eSTm_afw6pfSV7BOZTvuU.roa (raw, json)
Hash identifier: ktfQKlaTO/jEWroJ82M0JVfDxKn0PeJwvnYKRrvuACY=
Subject key identifier: F9:12:6E:73:47:92:4E:6F:DA:7F:0E:A9:7D:25:7B:04:E6:53:BE:E5
Certificate issuer: /CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Certificate serial: 018CC26D158BAB5421192A332D1F64DE949B
Authority key identifier: AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/1-RJuc0eSTm_afw6pfSV7BOZTvuU.roa
Signing time: Mon 01 Jan 2024 00:29:38 +0000
ROA not before: Mon 01 Jan 2024 00:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204499
IP address blocks: 185.251.76.0/22 maxlen: 24
185.219.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:15:8b:ab:54:21:19:2a:33:2d:1f:64:de:94:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9126e7347924e6fda7f0ea97d257b04e653bee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:df:13:e8:13:db:cd:5b:18:8a:df:e8:e4:76:
33:cd:a7:74:58:f3:7c:46:e0:f9:17:18:b0:4d:d3:
62:a0:ad:ed:92:59:49:72:25:cd:fd:d7:4d:1a:e0:
b2:a1:1b:f9:dc:6f:e1:92:92:99:9b:c0:18:9a:8b:
38:c9:5b:02:a2:a0:80:de:1a:1c:ab:5a:bc:9f:83:
fc:72:26:82:5a:3b:04:2b:e8:87:ca:e8:08:d4:8d:
ec:87:09:fd:3d:c6:e3:75:e1:6a:4a:a3:5f:f9:4c:
58:cd:ae:97:3c:d6:f1:cd:5b:e6:75:0a:d4:d4:de:
fb:6c:5e:7c:88:10:46:e0:8b:62:1f:6c:2a:d7:18:
bc:39:95:c4:99:a3:b5:72:a1:5c:fa:14:32:cb:ec:
63:80:78:98:91:47:58:0d:46:b7:a4:34:4a:86:45:
69:51:6b:9e:91:a3:9d:11:1d:23:bf:f1:c4:98:79:
12:fb:f0:ee:b4:c1:a7:a7:b4:36:66:09:02:2b:64:
5d:a7:d2:ba:5a:09:e0:84:b3:ac:11:8c:29:92:7c:
59:3b:c6:ae:01:4b:e7:57:40:34:8a:2c:d8:43:76:
ae:e0:47:0c:ae:0e:32:17:87:a6:f7:4b:ea:7d:a8:
41:c5:22:46:7d:21:ae:f3:5f:ac:30:12:01:05:26:
d9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:12:6E:73:47:92:4E:6F:DA:7F:0E:A9:7D:25:7B:04:E6:53:BE:E5
X509v3 Authority Key Identifier:
keyid:AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/1-RJuc0eSTm_afw6pfSV7BOZTvuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.112.0/22
185.251.76.0/22
Signature Algorithm: sha256WithRSAEncryption
09:60:8a:19:73:0a:b2:79:7d:d7:a6:4e:a2:c2:09:9f:e9:7e:
c4:cc:bf:59:28:68:15:81:aa:ce:ce:96:a1:ea:4d:1c:e3:62:
ac:a6:70:b2:68:3f:f9:3a:29:f7:10:fa:75:28:d0:7d:d7:58:
b7:99:9d:63:9c:13:b2:6b:27:17:9b:40:5c:c3:5a:39:9a:56:
21:a5:4f:64:19:59:42:7d:6e:9a:11:dc:1f:73:14:e4:35:e3:
37:05:24:76:1a:b5:e3:32:48:e4:62:70:d6:b6:31:08:31:01:
ea:4b:4e:d5:0f:ec:c7:17:ad:7d:5c:95:51:4f:32:c9:a1:b3:
20:2b:2a:06:76:e4:9d:4a:ff:33:d8:8c:b9:02:e9:e0:a3:b6:
8b:0a:4e:33:b2:fe:86:85:0c:58:08:32:c6:80:54:2a:9d:2d:
62:c6:7d:ea:73:11:5b:84:59:1c:08:af:36:74:10:88:11:2e:
c7:9d:81:5b:48:f2:58:19:8c:66:d0:5a:8d:ba:12:f6:bb:54:
5f:fc:63:57:4b:aa:32:10:6a:6a:3f:42:18:f4:58:05:c3:b7:
fa:53:79:54:49:ae:3e:0e:2b:5e:ce:9c:5c:8b:a5:e8:10:06:
f9:40:b2:9d:fc:d2:e0:33:c6:a3:da:ce:7f:5b:c2:e0:5b:c5:
2e:37:f4:06
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAYzCbRWLq1QhGSozLR9k3pSbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZWI5OTc0ODk5OWFiOGUwMjE4ZjdjOGRiZGNjNTY5OGQ2
NjlkMzkwHhcNMjQwMTAxMDAyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTEyNmU3MzQ3OTI0ZTZmZGE3ZjBlYTk3ZDI1N2IwNGU2NTNiZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt8T6BPbzVsYit/o5HYzzad0WPN8
RuD5FxiwTdNioK3tkllJciXN/ddNGuCyoRv53G/hkpKZm8AYmos4yVsCoqCA3hoc
q1q8n4P8ciaCWjsEK+iHyugI1I3shwn9PcbjdeFqSqNf+UxYza6XPNbxzVvmdQrU
1N77bF58iBBG4ItiH2wq1xi8OZXEmaO1cqFc+hQyy+xjgHiYkUdYDUa3pDRKhkVp
UWuekaOdER0jv/HEmHkS+/DutMGnp7Q2ZgkCK2Rdp9K6WgnghLOsEYwpknxZO8au
AUvnV0A0iizYQ3au4EcMrg4yF4em90vqfahBxSJGfSGu81+sMBIBBSbZdQIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPkSbnNHkk5v2n8OqX0lewTmU77lMB8GA1UdIwQY
MBaAFKzrmXSJmauOAhj3yNvcxWmNZp05MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck91WmRJbVpxNDRDR1BmSTI5ekZhWTFtblRrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mNjAxMzQtNmQ2ZC00ZGMxLTkyYTkt
NjU5YWU4MjE5OTFjLzEvMS1SSnVjMGVTVG1fYWZ3NnBmU1Y3Qk9aVHZ1VS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvM2MvZjYwMTM0LTZkNmQtNGRjMS05MmE5LTY1OWFlODIxOTkx
Yy8xL3JPdVpkSW1acTQ0Q0dQZkkyOXpGYVkxbW5Uay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArnbcAME
Arn7TDANBgkqhkiG9w0BAQsFAAOCAQEACWCKGXMKsnl916ZOosIJn+l+xMy/WSho
FYGqzs6WoepNHONirKZwsmg/+Top9xD6dSjQfddYt5mdY5wTsmsnF5tAXMNaOZpW
IaVPZBlZQn1umhHcH3MU5DXjNwUkdhq14zJI5GJw1rYxCDEB6ktO1Q/sxxetfVyV
UU8yyaGzICsqBnbknUr/M9iMuQLp4KO2iwpOM7L+hoUMWAgyxoBUKp0tYsZ96nMR
W4RZHAivNnQQiBEux52BW0jyWBmMZtBajboS9rtUX/xjV0uqMhBqaj9CGPRYBcO3
+lN5VEmuPg4rXs6cXIul6BAG+UCynfzS4DPGo9rOf1vC4FvFLjf0Bg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:41:08 2024 by rpki-client on console-ams.rpki-client.org