Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/X-rpLLCu-rLMirTfSWN1Jfqge8w.roa
File: X-rpLLCu-rLMirTfSWN1Jfqge8w.roa (raw, json)
Hash identifier: j5ioJov2yOKDFW+v6n+42LaBooMJrP7sFMnZsqND3eY=
Subject key identifier: 5F:EA:E9:2C:B0:AE:FA:B2:CC:8A:B4:DF:49:63:75:25:FA:A0:7B:CC
Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial: 018CC56EE9709D16F5FD830F5F15293FFD73
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/X-rpLLCu-rLMirTfSWN1Jfqge8w.roa
Signing time: Mon 01 Jan 2024 14:30:29 +0000
ROA not before: Mon 01 Jan 2024 14:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 185.250.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e9:70:9d:16:f5:fd:83:0f:5f:15:29:3f:fd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Validity
Not Before: Jan 1 14:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5feae92cb0aefab2cc8ab4df49637525faa07bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:da:67:e3:3c:44:cb:c4:79:1d:26:f4:0a:39:
27:30:9c:36:ad:69:ed:0c:0d:93:7a:a1:6a:94:33:
c4:7a:de:96:b1:e5:b8:b5:d2:f1:b8:08:40:19:c6:
5c:a0:39:59:8e:11:fc:0d:2b:05:c7:8b:35:4f:35:
aa:2e:68:a1:33:d3:03:2e:00:8e:04:eb:93:54:2f:
4a:b6:d7:0b:c1:35:3f:87:99:ee:78:dc:3a:79:f9:
38:29:f1:3e:b5:57:47:ec:a1:c9:83:bb:c5:0e:87:
b9:3a:4d:06:d4:9a:fe:f1:de:73:f4:2f:b5:98:00:
22:5b:c9:e2:d7:8b:ae:76:58:a0:b8:e8:a7:bc:15:
6e:e0:a0:cb:f6:4c:6d:f3:23:d2:0b:55:5e:41:60:
67:73:55:e8:4f:ec:ef:4b:1d:14:4b:11:55:29:a1:
5c:a9:a7:0c:8e:ba:cc:cf:26:c6:f5:0d:7c:c8:f4:
45:7f:ca:bf:00:02:e5:de:5b:ee:12:a0:62:3e:3c:
12:d9:5a:d0:55:74:f1:f5:71:e9:46:08:1a:2f:a4:
99:13:1a:c0:c5:c4:04:7f:84:b3:c5:6f:7b:23:bb:
f2:1e:7d:07:92:b9:8b:de:8e:bc:81:7d:2a:68:16:
d5:d0:42:42:1d:91:f3:53:3f:99:98:5e:1e:57:e9:
9f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EA:E9:2C:B0:AE:FA:B2:CC:8A:B4:DF:49:63:75:25:FA:A0:7B:CC
X509v3 Authority Key Identifier:
keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/X-rpLLCu-rLMirTfSWN1Jfqge8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.241.0/24
Signature Algorithm: sha256WithRSAEncryption
14:35:fa:b0:a7:4f:48:4e:9f:9b:07:f4:09:c8:bb:01:0a:1f:
22:ab:1a:29:96:23:5d:aa:3a:ab:60:31:69:08:a9:0f:5e:b9:
34:b9:f4:4d:4e:93:74:3b:5c:a2:81:da:05:a4:40:fc:0d:33:
9a:d5:f3:b8:26:25:fb:43:81:0b:66:38:d3:9e:3e:1e:ab:c4:
e4:bc:a1:07:25:9e:94:25:21:64:92:ae:02:d1:64:39:0a:ba:
7a:80:9b:f3:11:79:09:e3:d1:f5:a5:21:8b:8f:a7:b9:b5:a3:
cb:3b:37:a1:e9:f4:97:e2:16:37:ba:a6:35:60:b0:45:e7:dc:
42:16:7f:00:34:9c:cb:2f:11:18:c9:3c:28:21:41:ea:71:14:
82:64:c7:8f:dc:c0:5f:0b:01:5f:7c:35:f4:4e:b5:d9:ac:c4:
0e:71:8a:11:ea:bb:ed:78:d9:bc:08:df:15:d8:a4:0a:54:f9:
bb:df:3d:26:e6:1c:6e:d7:a9:de:ea:5e:9a:19:d0:e2:46:8e:
8c:42:30:1c:c5:62:60:6e:4b:dd:ed:10:bf:04:49:0c:03:bb:
ea:cf:96:8c:35:92:65:ec:0c:1a:c4:0f:79:38:d9:ec:da:c6:
af:a3:07:2a:d0:2c:0a:db:35:c0:63:77:24:0e:65:92:07:97:
d9:a8:6f:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbulwnRb1/YMPXxUpP/1zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDJhYzFkN2M5ZWNjZjU2NThiODhmMTZmNjEzZDdiM2U4
ZThjNzIwHhcNMjQwMTAxMTQzMDI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmVhZTkyY2IwYWVmYWIyY2M4YWI0ZGY0OTYzNzUyNWZhYTA3YmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNpn4zxEy8R5HSb0CjknMJw2rWnt
DA2TeqFqlDPEet6WseW4tdLxuAhAGcZcoDlZjhH8DSsFx4s1TzWqLmihM9MDLgCO
BOuTVC9KttcLwTU/h5nueNw6efk4KfE+tVdH7KHJg7vFDoe5Ok0G1Jr+8d5z9C+1
mAAiW8ni14uudliguOinvBVu4KDL9kxt8yPSC1VeQWBnc1XoT+zvSx0USxFVKaFc
qacMjrrMzybG9Q18yPRFf8q/AALl3lvuEqBiPjwS2VrQVXTx9XHpRggaL6SZExrA
xcQEf4SzxW97I7vyHn0HkrmL3o68gX0qaBbV0EJCHZHzUz+ZmF4eV+mfwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF/q6SywrvqyzIq030ljdSX6oHvMMB8GA1UdIwQY
MBaAFMLSrB18nsz1ZYuI8W9hPXs+joxyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RLc0hYeWV6UFZsaTRqeGIyRTllejZPakhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84YjFiYzItNTkyNi00YWNlLWIxNmYt
MTk3ZmU4MzY1NjQzLzEvWC1ycExMQ3UtckxNaXJUZlNXTjFKZnFnZTh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84YjFiYzItNTkyNi00YWNlLWIxNmYtMTk3ZmU4MzY1NjQz
LzEvd3RLc0hYeWV6UFZsaTRqeGIyRTllejZPakhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufrxMA0G
CSqGSIb3DQEBCwUAA4IBAQAUNfqwp09ITp+bB/QJyLsBCh8iqxopliNdqjqrYDFp
CKkPXrk0ufRNTpN0O1yigdoFpED8DTOa1fO4JiX7Q4ELZjjTnj4eq8TkvKEHJZ6U
JSFkkq4C0WQ5Crp6gJvzEXkJ49H1pSGLj6e5taPLOzeh6fSX4hY3uqY1YLBF59xC
Fn8ANJzLLxEYyTwoIUHqcRSCZMeP3MBfCwFffDX0TrXZrMQOcYoR6rvteNm8CN8V
2KQKVPm73z0m5hxu16ne6l6aGdDiRo6MQjAcxWJgbkvd7RC/BEkMA7vqz5aMNZJl
7AwaxA95ONns2savowcq0CwK2zXAY3ckDmWSB5fZqG9+
-----END CERTIFICATE-----
Generated at Thu May 2 06:35:13 2024 by rpki-client on console-fra.rpki-client.org