Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/86ixkR6LNf2SLqVf7QVYvBXAPqY.roa
File: 86ixkR6LNf2SLqVf7QVYvBXAPqY.roa (raw, json)
Hash identifier: VJuceZf3N3+HRKLDBpxx4Asg8X/VD8bBZobeUNd+0Wg=
Subject key identifier: F3:A8:B1:91:1E:8B:35:FD:92:2E:A5:5F:ED:05:58:BC:15:C0:3E:A6
Certificate issuer: /CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Certificate serial: 018CC727735C169729373F71BEDB5821501E
Authority key identifier: E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/86ixkR6LNf2SLqVf7QVYvBXAPqY.roa
Signing time: Mon 01 Jan 2024 22:31:40 +0000
ROA not before: Mon 01 Jan 2024 22:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202211
IP address blocks: 185.69.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:73:5c:16:97:29:37:3f:71:be:db:58:21:50:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Validity
Not Before: Jan 1 22:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3a8b1911e8b35fd922ea55fed0558bc15c03ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:f9:49:48:8f:b2:17:43:04:17:75:a5:a0:
47:46:8b:0f:e5:95:c0:48:5a:bc:03:13:58:8f:cf:
58:a4:44:8a:25:4c:2f:43:fc:a7:53:c9:a2:7b:07:
6f:d9:b2:4c:47:3b:0c:87:ef:74:95:cb:86:2c:38:
a5:6f:99:00:39:a0:7b:55:e7:38:d5:1a:7e:e5:aa:
65:3d:26:67:d2:a6:9a:f2:e9:bc:e2:ef:a7:e4:5e:
ef:7b:62:16:01:6e:98:23:98:71:49:bc:03:d1:1f:
63:2e:9d:08:05:e9:0f:99:a7:7b:67:e7:a1:77:43:
29:c4:ab:51:74:61:2b:bf:b5:cc:9c:2f:2b:87:9e:
b2:f3:20:da:c2:3e:3c:39:10:fb:77:61:99:16:b9:
e4:9c:e2:76:d5:ba:75:b9:ff:8f:9b:9c:88:8b:fd:
52:4d:98:2b:fc:e9:5c:e6:17:39:4d:dd:85:a9:0a:
06:6d:c1:55:24:4f:de:4b:f8:66:44:27:97:9c:ff:
ed:52:19:cb:22:0b:91:41:2f:34:c7:2c:ea:58:d5:
e6:e7:8f:f9:66:a8:a1:af:21:d4:14:d1:28:bc:c5:
6c:30:3f:a6:b2:0d:94:ed:fe:aa:54:30:f9:84:fb:
6f:ec:df:68:76:71:ab:59:e1:00:f6:f8:95:8d:bc:
90:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A8:B1:91:1E:8B:35:FD:92:2E:A5:5F:ED:05:58:BC:15:C0:3E:A6
X509v3 Authority Key Identifier:
keyid:E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/86ixkR6LNf2SLqVf7QVYvBXAPqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.252.0/22
Signature Algorithm: sha256WithRSAEncryption
56:e6:74:68:81:24:c4:b4:d3:d9:7a:65:89:49:9d:1f:1e:6e:
31:2b:bd:44:ad:76:c4:8c:c6:b9:8a:c4:29:5c:f1:b7:c8:01:
26:6c:a1:e3:d2:d4:83:34:ff:7d:1d:4d:b8:05:38:28:f2:6e:
72:cd:da:81:cc:dc:8b:8a:29:09:02:95:61:a5:7e:b3:8d:36:
02:2f:7b:d8:96:19:5a:ce:03:1a:a3:93:ec:05:0d:28:1a:ef:
f8:a8:20:ea:fc:98:37:51:52:5e:01:07:2d:5d:3f:29:dd:8c:
b4:a4:78:6f:43:a7:ac:1f:af:a6:9d:ff:ff:4f:9c:fb:d7:ab:
0e:ea:9b:ad:1e:53:48:b2:db:3d:40:17:a0:bb:72:a6:c5:a8:
72:6b:02:ab:43:58:b5:be:63:8e:e2:01:11:7d:83:6d:c8:eb:
70:0b:23:d2:dd:69:2c:32:51:6e:4d:49:74:3e:f2:e1:58:d7:
63:ef:9c:52:7e:b0:dc:f1:98:f2:33:42:ca:64:0d:3b:85:73:
c1:bb:78:e1:d2:b7:b8:3b:23:97:6a:26:21:67:96:b5:50:31:
e3:1d:aa:88:75:bf:51:0f:f8:db:76:da:c2:31:00:09:8e:77:
97:00:4f:30:85:bd:e3:ac:fa:95:6f:94:aa:08:3e:35:d1:2a:
a2:1e:53:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJ3NcFpcpNz9xvttYIVAeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZTEyYTI3OTViNmU0ZGYyNjVmNjVkZjBhMDBjYjdjN2U0
NWRlZWYwHhcNMjQwMTAxMjIzMTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2E4YjE5MTFlOGIzNWZkOTIyZWE1NWZlZDA1NThiYzE1YzAzZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyX5SUiPshdDBBd1paBHRosP5ZXA
SFq8AxNYj89YpESKJUwvQ/ynU8miewdv2bJMRzsMh+90lcuGLDilb5kAOaB7Vec4
1Rp+5aplPSZn0qaa8um84u+n5F7ve2IWAW6YI5hxSbwD0R9jLp0IBekPmad7Z+eh
d0MpxKtRdGErv7XMnC8rh56y8yDawj48ORD7d2GZFrnknOJ21bp1uf+Pm5yIi/1S
TZgr/Olc5hc5Td2FqQoGbcFVJE/eS/hmRCeXnP/tUhnLIguRQS80xyzqWNXm54/5
ZqihryHUFNEovMVsMD+msg2U7f6qVDD5hPtv7N9odnGrWeEA9viVjbyQtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPOosZEeizX9ki6lX+0FWLwVwD6mMB8GA1UdIwQY
MBaAFOHhKieVtuTfJl9l3woAy3x+Rd7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGVFcUo1VzI1TjhtWDJYZkNnRExmSDVGM3U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9kZDVjMTUtODE1ZC00MTFkLThhNTYt
ODJjNmNmMTRkZmUyLzEvODZpeGtSNkxOZjJTTHFWZjdRVll2QlhBUHFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9kZDVjMTUtODE1ZC00MTFkLThhNTYtODJjNmNmMTRkZmUy
LzEvNGVFcUo1VzI1TjhtWDJYZkNnRExmSDVGM3U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUX8MA0G
CSqGSIb3DQEBCwUAA4IBAQBW5nRogSTEtNPZemWJSZ0fHm4xK71ErXbEjMa5isQp
XPG3yAEmbKHj0tSDNP99HU24BTgo8m5yzdqBzNyLiikJApVhpX6zjTYCL3vYlhla
zgMao5PsBQ0oGu/4qCDq/Jg3UVJeAQctXT8p3Yy0pHhvQ6esH6+mnf//T5z716sO
6putHlNIsts9QBegu3KmxahyawKrQ1i1vmOO4gERfYNtyOtwCyPS3WksMlFuTUl0
PvLhWNdj75xSfrDc8ZjyM0LKZA07hXPBu3jh0re4OyOXaiYhZ5a1UDHjHaqIdb9R
D/jbdtrCMQAJjneXAE8whb3jrPqVb5SqCD410SqiHlO7
-----END CERTIFICATE-----
Generated at Mon May 27 12:14:35 2024 by rpki-client on console-ams.rpki-client.org