Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/AJslpwTQJ3Iuuq1s5l-5UCGfaVs.roa
File: AJslpwTQJ3Iuuq1s5l-5UCGfaVs.roa (raw, json)
Hash identifier: XD+zKIqb3sH5fGMHIqZwA0m9hx/eHacaGSph9LRF+1E=
Subject key identifier: 00:9B:25:A7:04:D0:27:72:2E:BA:AD:6C:E6:5F:B9:50:21:9F:69:5B
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018CC8DFAC4F2FEAA32C83E9906ED564FE00
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/AJslpwTQJ3Iuuq1s5l-5UCGfaVs.roa
Signing time: Tue 02 Jan 2024 06:32:30 +0000
ROA not before: Tue 02 Jan 2024 06:32:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212836
IP address blocks: 185.233.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:ac:4f:2f:ea:a3:2c:83:e9:90:6e:d5:64:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 06:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=009b25a704d027722ebaad6ce65fb950219f695b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:38:f1:3f:16:19:71:9b:8b:a9:42:06:15:
ce:e2:eb:fc:e9:d7:72:0d:23:f3:03:9b:4b:9b:03:
31:69:ca:aa:4d:e2:ea:e8:8b:fd:cb:dc:a9:a2:ca:
1f:2b:0e:7a:7d:3f:dc:01:dd:a7:1b:80:a6:86:c5:
82:57:43:d9:a8:63:10:2b:a8:b8:20:b5:d0:97:36:
b4:12:e2:ac:b0:85:9b:37:9d:83:fb:db:cc:f2:54:
84:e4:c7:9d:c1:8e:a0:7d:59:c5:4b:2a:89:fd:03:
3f:ad:e4:eb:b7:fd:ac:91:e7:f2:76:f1:9b:fd:07:
1d:09:a1:7b:82:40:c0:ce:d2:73:68:90:fb:e3:69:
9e:40:ed:8d:7d:f5:42:67:24:28:7e:5e:21:a1:de:
d6:13:cd:b5:96:c3:18:bc:f6:31:0c:c9:15:78:c5:
44:50:5b:fa:65:e8:5a:0c:6d:41:71:d0:86:2c:5e:
f4:7a:49:3b:d4:17:44:cf:d2:9f:f0:e1:21:5a:b0:
9e:58:5a:07:85:1b:d4:8b:0c:24:9b:e8:6e:d3:a2:
51:37:ce:d5:17:6a:7f:87:07:96:07:58:80:cf:58:
9e:b1:31:fd:29:a3:03:69:35:75:d5:ba:16:85:b7:
03:f1:5b:d4:2f:65:e2:c5:33:68:ff:d7:92:d5:5f:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9B:25:A7:04:D0:27:72:2E:BA:AD:6C:E6:5F:B9:50:21:9F:69:5B
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/AJslpwTQJ3Iuuq1s5l-5UCGfaVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.16.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:53:75:89:c1:c7:2a:7c:e7:e1:10:86:f5:22:70:50:a2:36:
95:15:c1:c7:99:25:21:02:9d:ff:ff:42:0e:98:1a:d9:e3:24:
5e:d0:07:cb:9c:89:55:38:c1:dd:3c:9c:84:44:4e:43:b1:b5:
c0:10:2c:5a:18:ce:57:e4:49:78:7b:99:9f:79:ba:7b:a3:00:
bf:fb:dc:77:6c:1d:aa:ed:98:2b:c8:cb:33:02:22:29:8c:d4:
30:41:78:29:28:34:3d:27:d2:2f:0a:45:94:92:38:fd:6c:26:
45:c4:05:75:be:48:90:e4:c7:41:4b:4e:9d:0f:9e:22:fa:5e:
55:a2:3f:19:04:b3:67:bc:ad:fb:4d:45:1d:e6:13:29:83:5e:
f4:42:a2:4b:d5:c8:12:3f:6a:c5:64:f1:22:80:4b:f4:ad:19:
42:80:79:b4:2e:78:c8:7f:1a:d6:f5:69:04:11:79:fa:38:d0:
c9:06:8d:75:77:68:51:6f:ae:af:eb:6c:c6:2d:ba:18:12:aa:
08:a1:9d:3b:f5:5d:49:94:83:59:df:44:be:d2:5e:bf:b7:88:
a7:09:1e:16:60:7d:b5:8b:a7:2e:53:5f:ae:54:60:09:dc:39:
4d:c2:73:5b:0b:26:cb:05:5c:74:68:08:04:da:56:86:ea:82:
17:17:6a:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI36xPL+qjLIPpkG7VZP4AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjQwMTAyMDYzMjMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDliMjVhNzA0ZDAyNzcyMmViYWFkNmNlNjVmYjk1MDIxOWY2OTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU448T8WGXGbi6lCBhXO4uv86ddy
DSPzA5tLmwMxacqqTeLq6Iv9y9yposofKw56fT/cAd2nG4CmhsWCV0PZqGMQK6i4
ILXQlza0EuKssIWbN52D+9vM8lSE5MedwY6gfVnFSyqJ/QM/reTrt/2skefydvGb
/QcdCaF7gkDAztJzaJD742meQO2NffVCZyQofl4hod7WE821lsMYvPYxDMkVeMVE
UFv6ZehaDG1BcdCGLF70ekk71BdEz9Kf8OEhWrCeWFoHhRvUiwwkm+hu06JRN87V
F2p/hweWB1iAz1iesTH9KaMDaTV11boWhbcD8VvUL2XixTNo/9eS1V90CQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFACbJacE0CdyLrqtbOZfuVAhn2lbMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvQUpzbHB3VFFKM0l1dXExczVsLTVVQ0dmYVZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuekQMA0G
CSqGSIb3DQEBCwUAA4IBAQBuU3WJwccqfOfhEIb1InBQojaVFcHHmSUhAp3//0IO
mBrZ4yRe0AfLnIlVOMHdPJyERE5DsbXAECxaGM5X5El4e5mfebp7owC/+9x3bB2q
7ZgryMszAiIpjNQwQXgpKDQ9J9IvCkWUkjj9bCZFxAV1vkiQ5MdBS06dD54i+l5V
oj8ZBLNnvK37TUUd5hMpg170QqJL1cgSP2rFZPEigEv0rRlCgHm0LnjIfxrW9WkE
EXn6ONDJBo11d2hRb66v62zGLboYEqoIoZ079V1JlINZ30S+0l6/t4inCR4WYH21
i6cuU1+uVGAJ3DlNwnNbCybLBVx0aAgE2laG6oIXF2pn
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:48:05 2024 by rpki-client on console-ams.rpki-client.org