Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/EsOgOUCt9qTwIfQYYkKxRGilRvs.roa
File: EsOgOUCt9qTwIfQYYkKxRGilRvs.roa (raw, json)
Hash identifier: WDvULFM3E+fAnGjO0b9z69rYlLFkAI2+xKq+FoYlEMw=
Subject key identifier: 12:C3:A0:39:40:AD:F6:A4:F0:21:F4:18:62:42:B1:44:68:A5:46:FB
Certificate issuer: /CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Certificate serial: 018CC726FFA956ACCA40CDE9AE603EF796F1
Authority key identifier: 00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/EsOgOUCt9qTwIfQYYkKxRGilRvs.roa
Signing time: Mon 01 Jan 2024 22:31:10 +0000
ROA not before: Mon 01 Jan 2024 22:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52054
IP address blocks: 185.156.192.0/23 maxlen: 23
185.156.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:ff:a9:56:ac:ca:40:cd:e9:ae:60:3e:f7:96:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Validity
Not Before: Jan 1 22:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12c3a03940adf6a4f021f4186242b14468a546fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f3:45:10:51:61:8f:33:eb:8a:ed:88:64:ae:
69:f9:31:9d:bc:52:cb:89:9f:20:c9:00:13:9b:99:
bd:79:eb:fa:7d:bb:cd:a4:1a:0e:f1:e4:ae:4a:11:
dd:10:10:94:a5:6f:31:d4:71:01:56:3d:90:e8:e4:
1d:36:6d:b9:9d:5c:59:a5:9c:d5:26:1b:62:29:91:
04:bd:5a:57:f7:b7:e3:2f:88:e9:a4:85:68:1a:c2:
49:8f:37:24:5a:a4:bf:90:8e:c4:f9:4d:e6:f1:18:
fd:d0:a2:90:44:1f:e5:a2:b3:66:fb:3c:fc:91:38:
f4:c5:1f:29:70:2e:75:58:db:a8:2f:ac:52:0d:31:
1e:cf:de:54:ed:df:08:89:d2:e1:98:57:98:c0:cc:
6f:e0:20:86:40:06:0e:83:50:e8:06:02:5a:88:0e:
04:c7:38:39:29:2d:44:19:31:62:e9:35:fe:37:01:
9b:34:15:05:ac:44:e2:0a:28:93:34:78:fd:b6:c3:
a7:65:10:14:78:16:e6:79:3e:2b:3c:b3:fa:54:c2:
7d:3d:3f:c6:74:8f:55:4f:06:61:c4:b1:0b:d7:16:
8d:fa:ab:f0:b8:23:03:29:b7:a0:be:52:ad:fe:db:
2d:23:70:2e:3a:b4:29:77:63:e4:31:97:93:27:cb:
27:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C3:A0:39:40:AD:F6:A4:F0:21:F4:18:62:42:B1:44:68:A5:46:FB
X509v3 Authority Key Identifier:
keyid:00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/EsOgOUCt9qTwIfQYYkKxRGilRvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.192.0-185.156.194.255
Signature Algorithm: sha256WithRSAEncryption
0f:a7:2b:a2:e0:f5:08:81:b0:42:b8:af:ac:40:a2:a3:6a:74:
1c:f0:c9:d2:01:aa:ad:9f:e5:8d:be:57:de:a5:0a:fd:57:28:
9a:dc:da:84:36:aa:3c:08:d9:bb:6c:02:03:04:7f:e4:aa:f9:
9e:7e:d8:7d:d2:b0:2f:82:07:24:d0:aa:d6:d0:b4:83:78:53:
8c:fa:8a:15:8a:50:c8:3d:56:12:47:65:b1:30:6f:fc:48:e0:
7c:9c:d9:f8:d3:71:9a:67:c3:85:6c:7b:a6:c6:d0:08:48:27:
ab:19:2c:29:b6:18:f4:c7:6b:6d:66:fe:2b:6f:c3:f4:71:61:
1f:1d:8a:27:35:e6:2c:cc:ea:dc:13:9e:0a:31:df:44:a6:66:
fa:04:7f:c3:71:8f:be:f1:fd:d2:aa:fb:4c:3a:89:24:e2:b2:
d7:d1:11:d0:5d:bd:7a:62:0b:a6:eb:2b:61:ea:7c:1b:05:36:
d6:bf:5e:fc:01:d4:53:b4:7e:df:e5:6a:f3:a8:00:f5:c5:dc:
e0:86:e3:f2:4a:1d:0d:8e:87:2a:38:32:17:6f:e4:bf:fa:c7:
71:85:15:cc:e5:60:55:1b:3a:a6:5c:3f:89:54:2d:97:e2:05:
a0:30:30:10:8a:46:71:06:f9:26:83:9e:26:99:ba:90:60:06:
5a:74:2b:34
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzHJv+pVqzKQM3prmA+95bxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMGI0ZmFhYzc5YmIxOTY5MGMzYWY1YTA3OGM2Y2IxNGE5
MWFkNDIwHhcNMjQwMTAxMjIzMTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmMzYTAzOTQwYWRmNmE0ZjAyMWY0MTg2MjQyYjE0NDY4YTU0NmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPNFEFFhjzPriu2IZK5p+TGdvFLL
iZ8gyQATm5m9eev6fbvNpBoO8eSuShHdEBCUpW8x1HEBVj2Q6OQdNm25nVxZpZzV
JhtiKZEEvVpX97fjL4jppIVoGsJJjzckWqS/kI7E+U3m8Rj90KKQRB/lorNm+zz8
kTj0xR8pcC51WNuoL6xSDTEez95U7d8IidLhmFeYwMxv4CCGQAYOg1DoBgJaiA4E
xzg5KS1EGTFi6TX+NwGbNBUFrETiCiiTNHj9tsOnZRAUeBbmeT4rPLP6VMJ9PT/G
dI9VTwZhxLEL1xaN+qvwuCMDKbegvlKt/tstI3AuOrQpd2PkMZeTJ8snOQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFBLDoDlArfak8CH0GGJCsURopUb7MB8GA1UdIwQY
MBaAFAALT6rHm7GWkMOvWgeMbLFKka1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUF0UHFzZWJzWmFRdzY5YUI0eHNzVXFSclVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS85OTBiYjUtZmU0Mi00OTg1LTljYWYt
YTA5NmVlY2RhNzkzLzEvRXNPZ09VQ3Q5cVR3SWZRWVlrS3hSR2lsUnZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS85OTBiYjUtZmU0Mi00OTg1LTljYWYtYTA5NmVlY2RhNzkz
LzEvQUF0UHFzZWJzWmFRdzY5YUI0eHNzVXFSclVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAa5nMAD
BAC5nMIwDQYJKoZIhvcNAQELBQADggEBAA+nK6Lg9QiBsEK4r6xAoqNqdBzwydIB
qq2f5Y2+V96lCv1XKJrc2oQ2qjwI2btsAgMEf+Sq+Z5+2H3SsC+CByTQqtbQtIN4
U4z6ihWKUMg9VhJHZbEwb/xI4Hyc2fjTcZpnw4Vse6bG0AhIJ6sZLCm2GPTHa21m
/itvw/RxYR8diic15izM6twTngox30SmZvoEf8Nxj77x/dKq+0w6iSTistfREdBd
vXpiC6brK2HqfBsFNta/XvwB1FO0ft/lavOoAPXF3OCG4/JKHQ2Ohyo4Mhdv5L/6
x3GFFczlYFUbOqZcP4lULZfiBaAwMBCKRnEG+SaDniaZupBgBlp0KzQ=
-----END CERTIFICATE-----
Generated at Sat Jun 8 05:16:46 2024 by rpki-client on console-fra.rpki-client.org