Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/0IZRQEs3LEA822_-gOqo5Mc4CKI.roa
File: 0IZRQEs3LEA822_-gOqo5Mc4CKI.roa (raw, json)
Hash identifier: x5rJYXEamNEBGdJUJ/jsscLeOYcRh5f/e9JgMDT7n60=
Subject key identifier: D0:86:51:40:4B:37:2C:40:3C:DB:6F:FE:80:EA:A8:E4:C7:38:08:A2
Certificate issuer: /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Certificate serial: 018E74CA665C899797A863644571C3B86544
Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/0IZRQEs3LEA822_-gOqo5Mc4CKI.roa
Signing time: Mon 25 Mar 2024 08:46:45 +0000
ROA not before: Mon 25 Mar 2024 08:46:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204912
IP address blocks: 185.225.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:ca:66:5c:89:97:97:a8:63:64:45:71:c3:b8:65:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Validity
Not Before: Mar 25 08:46:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d08651404b372c403cdb6ffe80eaa8e4c73808a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b1:5e:81:eb:1e:14:99:b2:eb:2e:bd:94:09:
55:00:e4:e0:8d:31:fc:57:2f:90:1f:86:b4:65:59:
d3:7a:35:4b:79:3c:3b:29:73:ae:13:a2:88:97:96:
a2:37:7b:be:46:c9:d3:c6:21:fc:cf:31:e8:e3:7e:
e8:3a:d8:6d:36:94:e1:1c:36:4e:b4:15:47:9d:8a:
9e:fb:80:bd:fa:d4:50:52:63:4b:1e:02:8e:47:b4:
a6:5f:fe:c7:43:9b:ca:71:b9:b4:72:39:06:cf:fe:
6c:ee:f5:30:07:40:26:3c:d1:1d:29:7b:c0:b0:d2:
a0:01:c5:90:22:03:a0:f5:d8:d6:fe:5d:a3:b0:9c:
ea:57:87:2b:71:b7:62:ab:69:f7:81:b9:69:ef:00:
63:e1:93:91:c4:e3:cd:c0:b4:07:8c:71:b0:1a:75:
7c:20:1e:91:25:aa:04:de:54:1a:f5:1b:52:70:1e:
68:8a:91:ad:e4:f3:93:84:2c:eb:7a:ba:8a:49:11:
ca:e1:45:5b:44:93:3c:16:0a:fa:33:b7:61:6f:81:
ca:7c:27:73:e2:ae:5a:5a:4f:93:36:9b:a2:5b:de:
df:36:26:9b:d3:fd:58:99:fc:1c:0d:23:d4:d6:63:
ef:71:fc:79:a4:a7:ba:ba:7f:0a:30:84:8c:3f:da:
ad:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:86:51:40:4B:37:2C:40:3C:DB:6F:FE:80:EA:A8:E4:C7:38:08:A2
X509v3 Authority Key Identifier:
keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/0IZRQEs3LEA822_-gOqo5Mc4CKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.167.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a2:8c:8a:c1:05:16:0c:62:f1:e3:dc:41:a1:77:95:08:58:
83:db:3a:7e:f2:95:8f:9c:ce:2d:8f:7d:4d:38:de:43:78:91:
98:4c:bb:fb:94:1c:87:fe:f3:29:4c:4c:2d:18:cc:d9:d6:e6:
06:23:09:70:45:08:ab:df:c8:37:83:c3:40:b2:ed:86:ac:35:
36:54:6b:34:bb:c2:a8:19:40:1e:ea:b7:92:27:1b:f8:91:bc:
99:20:31:f6:e4:72:a3:4c:6c:16:37:c2:07:24:6a:7f:4d:1c:
f9:72:df:80:16:fe:33:8f:8b:02:6d:83:d1:9c:36:a0:34:7d:
43:2b:4b:54:90:36:51:ba:16:9a:03:5d:ca:ee:87:ce:c7:5e:
b4:6b:cf:1d:90:00:6f:b6:ed:92:ad:fb:46:b0:46:2e:9b:2e:
2a:e6:0a:4c:3a:92:8e:c0:0c:7f:f2:12:c9:b0:9f:43:c9:cc:
c8:e2:fc:4e:af:e3:fa:be:45:73:ae:52:66:30:78:35:f4:5c:
41:a5:08:ad:2d:74:a3:d8:ef:a5:dc:98:15:55:34:22:47:dc:
37:ce:aa:8b:03:35:6d:99:db:9b:aa:bd:2c:e1:5e:d3:9f:b6:
c3:29:58:88:3f:db:5b:d4:e5:53:c0:26:72:76:2a:ce:92:7a:
ce:d5:44:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY50ymZciZeXqGNkRXHDuGVEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NGJmNTgxMTljZmU5OWYxNzQ5YmNkOWJkMTI0NzAyYmE5
Y2I3MTMwHhcNMjQwMzI1MDg0NjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDg2NTE0MDRiMzcyYzQwM2NkYjZmZmU4MGVhYThlNGM3MzgwOGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrFegeseFJmy6y69lAlVAOTgjTH8
Vy+QH4a0ZVnTejVLeTw7KXOuE6KIl5aiN3u+RsnTxiH8zzHo437oOthtNpThHDZO
tBVHnYqe+4C9+tRQUmNLHgKOR7SmX/7HQ5vKcbm0cjkGz/5s7vUwB0AmPNEdKXvA
sNKgAcWQIgOg9djW/l2jsJzqV4crcbdiq2n3gblp7wBj4ZORxOPNwLQHjHGwGnV8
IB6RJaoE3lQa9RtScB5oipGt5POThCzrerqKSRHK4UVbRJM8Fgr6M7dhb4HKfCdz
4q5aWk+TNpuiW97fNiab0/1YmfwcDSPU1mPvcfx5pKe6un8KMISMP9qtoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNCGUUBLNyxAPNtv/oDqqOTHOAiiMB8GA1UdIwQY
MBaAFEVL9YEZz+mfF0m82b0SRwK6nLcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlV2MWdSblA2WjhYU2J6WnZSSkhBcnFjdHhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jNmQwOTItY2M2MC00YTUxLWIwMTAt
MGE2ZTZkZmJkMmUzLzEvMElaUlFFczNMRUE4MjJfLWdPcW81TWM0Q0tJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jNmQwOTItY2M2MC00YTUxLWIwMTAtMGE2ZTZkZmJkMmUz
LzEvUlV2MWdSblA2WjhYU2J6WnZSSkhBcnFjdHhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueGnMA0G
CSqGSIb3DQEBCwUAA4IBAQAkooyKwQUWDGLx49xBoXeVCFiD2zp+8pWPnM4tj31N
ON5DeJGYTLv7lByH/vMpTEwtGMzZ1uYGIwlwRQir38g3g8NAsu2GrDU2VGs0u8Ko
GUAe6reSJxv4kbyZIDH25HKjTGwWN8IHJGp/TRz5ct+AFv4zj4sCbYPRnDagNH1D
K0tUkDZRuhaaA13K7ofOx160a88dkABvtu2SrftGsEYumy4q5gpMOpKOwAx/8hLJ
sJ9DyczI4vxOr+P6vkVzrlJmMHg19FxBpQitLXSj2O+l3JgVVTQiR9w3zqqLAzVt
mdubqr0s4V7Tn7bDKViIP9tb1OVTwCZydirOknrO1UR/
-----END CERTIFICATE-----
Generated at Wed Jun 26 03:35:21 2024 by rpki-client on console-fra.rpki-client.org