Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/sDkAfqlfMdk2N1cpSMoG3DqCjOg.roa
File: sDkAfqlfMdk2N1cpSMoG3DqCjOg.roa (raw, json)
Hash identifier: dPOT9z9eh8cXXnReszfexsvS+dHT4zVWN5nTvrTp1TQ=
Subject key identifier: B0:39:00:7E:A9:5F:31:D9:36:37:57:29:48:CA:06:DC:3A:82:8C:E8
Certificate issuer: /CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Certificate serial: 018CC94E4C653645F4255BDB09AEF55CC3E2
Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/sDkAfqlfMdk2N1cpSMoG3DqCjOg.roa
Signing time: Tue 02 Jan 2024 08:33:20 +0000
ROA not before: Tue 02 Jan 2024 08:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210477
IP address blocks: 185.216.191.0/24 maxlen: 24
185.18.151.0/24 maxlen: 24
146.19.17.0/24 maxlen: 24
2a12:b500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:4c:65:36:45:f4:25:5b:db:09:ae:f5:5c:c3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Validity
Not Before: Jan 2 08:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b039007ea95f31d93637572948ca06dc3a828ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ea:0a:ca:b6:54:dd:3e:1b:1e:64:65:d6:7f:
d9:1a:f7:85:6c:3b:2e:18:cb:08:e5:68:03:23:62:
fa:db:fc:70:20:a0:c8:05:98:d3:de:ce:62:54:02:
f3:60:87:82:49:19:f1:9e:e4:be:69:1c:ac:f1:19:
8a:27:d7:ac:bb:17:3d:8b:4f:e3:e8:73:53:6b:b4:
10:91:ce:78:28:17:16:09:78:eb:16:6e:b8:5e:fb:
0b:c8:c8:89:df:ec:ef:18:4d:7d:a7:4d:30:63:68:
4b:c3:fd:01:5b:c1:b6:cd:5f:d6:d0:e1:f8:a0:4c:
b4:20:4d:47:2f:a6:84:9d:96:9c:56:c6:2a:c9:db:
8c:0b:d3:00:0c:03:f3:a6:4e:31:68:17:c2:62:c5:
95:eb:60:98:f4:b1:20:ed:d4:7b:e2:61:5e:ef:84:
e2:b7:aa:d0:7e:c7:36:7c:f4:33:ea:83:86:b7:10:
ab:17:93:f3:a7:8d:35:70:8c:92:63:7c:11:78:e3:
89:34:78:4f:8c:26:53:a2:b2:67:85:71:ab:47:8e:
80:22:51:57:38:e9:4e:dd:11:80:87:eb:29:55:f0:
a1:02:b0:0f:60:94:cf:1d:d8:5d:c9:eb:18:d0:f7:
66:7c:9a:70:8d:82:ff:5a:35:f0:ea:11:fc:01:fc:
e4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:39:00:7E:A9:5F:31:D9:36:37:57:29:48:CA:06:DC:3A:82:8C:E8
X509v3 Authority Key Identifier:
keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/sDkAfqlfMdk2N1cpSMoG3DqCjOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.17.0/24
185.18.151.0/24
185.216.191.0/24
IPv6:
2a12:b500::/32
Signature Algorithm: sha256WithRSAEncryption
0b:44:06:14:e4:db:c5:dd:2f:22:c1:9b:9e:54:dd:d8:cd:e8:
89:a4:39:88:f7:7b:1d:d3:d6:48:7d:cc:ee:27:15:3c:db:2f:
ef:aa:87:17:a1:35:fe:f1:7e:7f:7d:c1:bd:b8:91:19:09:ed:
2c:3f:43:34:54:b0:e8:01:7b:29:89:b7:44:3b:2f:75:eb:d9:
47:41:5d:08:39:4c:0b:e1:d9:e3:e0:1b:bc:4f:58:22:0b:17:
69:91:05:17:ad:04:14:a7:06:b6:26:b9:ec:ce:13:70:a9:3b:
b5:5f:75:14:67:72:41:7a:e9:ae:ca:6b:41:ec:2e:b5:8e:81:
91:93:3d:dc:ae:af:b3:e7:b7:df:86:ef:be:71:b5:f0:90:c2:
60:69:08:a2:af:04:b0:77:ea:94:e7:54:50:23:d3:fd:7e:40:
9d:27:23:0b:fd:ab:e0:e3:48:c0:ef:08:92:ff:f2:bc:24:b3:
e0:6b:70:69:f6:2c:50:1e:37:65:63:a0:25:04:7f:dc:f2:7a:
25:6b:4c:c0:a0:ff:fc:91:d7:22:53:55:5d:e7:ad:0c:79:48:
08:c2:13:2e:4a:f6:bc:78:01:9c:55:59:68:38:2f:28:55:f7:
ce:05:8d:c6:ab:cd:33:b2:cd:b8:a7:2d:ab:cf:44:53:d9:cc:
0b:b0:30:56
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzJTkxlNkX0JVvbCa71XMPiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTE4OTBjMzA1YjBmMmRhNDIwYjAxNjk3ZTNiZjIzZDQ4
NWFiNjQwHhcNMjQwMTAyMDgzMzIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDM5MDA3ZWE5NWYzMWQ5MzYzNzU3Mjk0OGNhMDZkYzNhODI4Y2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+oKyrZU3T4bHmRl1n/ZGveFbDsu
GMsI5WgDI2L62/xwIKDIBZjT3s5iVALzYIeCSRnxnuS+aRys8RmKJ9esuxc9i0/j
6HNTa7QQkc54KBcWCXjrFm64XvsLyMiJ3+zvGE19p00wY2hLw/0BW8G2zV/W0OH4
oEy0IE1HL6aEnZacVsYqyduMC9MADAPzpk4xaBfCYsWV62CY9LEg7dR74mFe74Ti
t6rQfsc2fPQz6oOGtxCrF5Pzp401cIySY3wReOOJNHhPjCZTorJnhXGrR46AIlFX
OOlO3RGAh+spVfChArAPYJTPHdhdyesY0PdmfJpwjYL/WjXw6hH8Afzk2QIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFLA5AH6pXzHZNjdXKUjKBtw6gozoMB8GA1UdIwQY
MBaAFL6hiQwwWw8tpCCwFpfjvyPUhatkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFHSkREQmJEeTJrSUxBV2wtT19JOVNGcTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYWE3N2ItOWEwOS00ZjBhLWE4ODUt
MzE3NmYwOTk5ZGRhLzEvc0RrQWZxbGZNZGsyTjFjcFNNb0czRHFDak9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYWE3N2ItOWEwOS00ZjBhLWE4ODUtMzE3NmYwOTk5ZGRh
LzEvdnFHSkREQmJEeTJrSUxBV2wtT19JOVNGcTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAkhMRAwQA
uRKXAwQAudi/MA0EAgACMAcDBQAqErUAMA0GCSqGSIb3DQEBCwUAA4IBAQALRAYU
5NvF3S8iwZueVN3YzeiJpDmI93sd09ZIfczuJxU82y/vqocXoTX+8X5/fcG9uJEZ
Ce0sP0M0VLDoAXspibdEOy9169lHQV0IOUwL4dnj4Bu8T1giCxdpkQUXrQQUpwa2
JrnszhNwqTu1X3UUZ3JBeumuymtB7C61joGRkz3crq+z57ffhu++cbXwkMJgaQii
rwSwd+qU51RQI9P9fkCdJyML/avg40jA7wiS//K8JLPga3Bp9ixQHjdlY6AlBH/c
8nola0zAoP/8kdciU1Vd560MeUgIwhMuSva8eAGcVVloOC8oVffOBY3Gq80zss24
py2rz0RT2cwLsDBW
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:24:27 2024 by rpki-client on console-fra.rpki-client.org