Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/EtctoAIgpqnUW48RHHOqgCuw8HA.roa
File: EtctoAIgpqnUW48RHHOqgCuw8HA.roa (raw, json)
Hash identifier: Zey+uWojekg4lF171hKTTcffbfNfhBlsDDr4zfYw0pA=
Subject key identifier: 12:D7:2D:A0:02:20:A6:A9:D4:5B:8F:11:1C:73:AA:80:2B:B0:F0:70
Certificate issuer: /CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Certificate serial: 018CC9BCF755FE07D93B14CAE9174D31E1E4
Authority key identifier: 6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/EtctoAIgpqnUW48RHHOqgCuw8HA.roa
Signing time: Tue 02 Jan 2024 10:34:13 +0000
ROA not before: Tue 02 Jan 2024 10:34:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20643
IP address blocks: 185.112.28.0/22 maxlen: 22
2a06:6240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f7:55:fe:07:d9:3b:14:ca:e9:17:4d:31:e1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Validity
Not Before: Jan 2 10:34:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12d72da00220a6a9d45b8f111c73aa802bb0f070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:eb:29:8d:56:59:26:41:1f:a4:f4:ac:af:
fd:72:7d:61:72:05:4c:d2:af:c1:00:a4:73:ff:58:
f7:5d:4b:af:5a:73:3c:4c:1e:78:ec:34:3a:fd:7b:
99:5c:01:94:3c:dd:79:a9:86:37:da:55:dc:95:8c:
60:dd:cf:75:78:dd:d2:32:c7:ea:63:e1:18:ad:0a:
12:90:04:64:cf:ea:ee:4f:90:74:c5:a7:b1:18:9a:
a2:13:0d:b7:40:4c:ec:ed:be:77:6b:66:e2:82:5a:
cd:f5:cb:90:d1:b3:a6:b4:9b:2c:72:e5:5d:c1:f7:
15:3f:17:5b:cf:c6:13:aa:83:3c:a4:3d:f6:4e:ca:
c0:4b:a8:2e:32:21:5f:6d:e8:d9:92:12:69:5c:91:
55:76:4d:cc:7e:2b:cf:08:32:18:93:a9:6a:be:be:
7a:48:c7:48:9b:dd:a6:d6:59:b7:d7:15:32:77:e0:
a7:20:b1:89:81:8b:4d:2d:fa:a5:98:a2:df:13:41:
60:5b:00:05:a9:58:c9:66:99:40:df:de:3b:b8:aa:
8c:f8:0a:31:f3:a7:bf:bd:ff:2e:3e:2e:69:01:ae:
19:8f:c1:97:61:f0:c4:9b:c8:b6:9e:a8:81:38:df:
d9:a5:d7:2d:91:cd:d8:8e:09:51:aa:13:8c:e8:64:
4a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D7:2D:A0:02:20:A6:A9:D4:5B:8F:11:1C:73:AA:80:2B:B0:F0:70
X509v3 Authority Key Identifier:
keyid:6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/EtctoAIgpqnUW48RHHOqgCuw8HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.28.0/22
IPv6:
2a06:6240::/29
Signature Algorithm: sha256WithRSAEncryption
4b:25:cc:c7:73:1f:11:de:32:e8:63:5e:ca:5e:2a:48:31:38:
ab:2c:6b:9b:3d:43:85:cf:81:6f:d3:78:f8:98:91:52:fc:f7:
c9:5f:05:58:35:ca:bf:e6:77:4f:d5:ac:8e:c8:cf:6e:34:18:
05:90:3c:63:d5:6b:97:d0:7a:e9:2b:62:7e:6d:83:20:57:fc:
e8:8c:88:bb:76:5d:9c:98:5d:13:bd:ef:ed:00:5d:b2:f0:2d:
06:d2:9d:ae:f3:3c:a0:be:20:45:54:1a:22:45:69:e9:dc:08:
26:4a:4e:4a:65:32:c3:d3:1e:1e:69:a6:28:03:bf:cb:9d:97:
75:80:8d:77:f0:d8:88:45:ef:53:94:62:44:6f:b9:39:38:42:
6c:63:b4:29:f9:a3:81:2d:58:0a:03:90:ae:ac:3b:b3:dd:e4:
af:98:bf:44:02:76:84:60:cd:b7:94:f1:84:2d:be:8b:31:34:
3e:cf:e2:d1:83:9c:3d:ca:15:52:8f:39:f9:4e:25:49:24:2f:
6c:17:3c:e0:89:b9:22:fa:55:f5:3c:3c:8e:94:d7:a8:94:d6:
fe:d7:82:42:91:4b:71:c7:41:66:67:12:46:38:1c:3b:3f:8b:
22:55:2d:c8:0f:e3:3a:87:43:15:b9:1c:d5:14:8d:3c:3f:ef:
3e:c4:7d:04
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzJvPdV/gfZOxTK6RdNMeHkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmN2JlM2FkMWY3YzU5NTBjZDQ2ZDQ4YmIxZjdlYTc3NTBh
ZmE4MWUwHhcNMjQwMTAyMTAzNDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmQ3MmRhMDAyMjBhNmE5ZDQ1YjhmMTExYzczYWE4MDJiYjBmMDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXnrKY1WWSZBH6T0rK/9cn1hcgVM
0q/BAKRz/1j3XUuvWnM8TB547DQ6/XuZXAGUPN15qYY32lXclYxg3c91eN3SMsfq
Y+EYrQoSkARkz+ruT5B0xaexGJqiEw23QEzs7b53a2biglrN9cuQ0bOmtJsscuVd
wfcVPxdbz8YTqoM8pD32TsrAS6guMiFfbejZkhJpXJFVdk3MfivPCDIYk6lqvr56
SMdIm92m1lm31xUyd+CnILGJgYtNLfqlmKLfE0FgWwAFqVjJZplA3947uKqM+Aox
86e/vf8uPi5pAa4Zj8GXYfDEm8i2nqiBON/Zpdctkc3YjglRqhOM6GRKsQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBLXLaACIKap1FuPERxzqoArsPBwMB8GA1UdIwQY
MBaAFG97460ffFlQzUbUi7H36ndQr6geMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjN2anJSOThXVkROUnRTTHNmZnFkMUN2cUI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYzg2ZGEtY2RhYS00YWZjLThkNGEt
YmZhODcyYzJmMzkyLzEvRXRjdG9BSWdwcW5VVzQ4UkhIT3FnQ3V3OEhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYzg2ZGEtY2RhYS00YWZjLThkNGEtYmZhODcyYzJmMzky
LzEvYjN2anJSOThXVkROUnRTTHNmZnFkMUN2cUI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXAcMA0E
AgACMAcDBQMqBmJAMA0GCSqGSIb3DQEBCwUAA4IBAQBLJczHcx8R3jLoY17KXipI
MTirLGubPUOFz4Fv03j4mJFS/PfJXwVYNcq/5ndP1ayOyM9uNBgFkDxj1WuX0Hrp
K2J+bYMgV/zojIi7dl2cmF0Tve/tAF2y8C0G0p2u8zygviBFVBoiRWnp3AgmSk5K
ZTLD0x4eaaYoA7/LnZd1gI138NiIRe9TlGJEb7k5OEJsY7Qp+aOBLVgKA5CurDuz
3eSvmL9EAnaEYM23lPGELb6LMTQ+z+LRg5w9yhVSjzn5TiVJJC9sFzzgibki+lX1
PDyOlNeolNb+14JCkUtxx0FmZxJGOBw7P4siVS3ID+M6h0MVuRzVFI08P+8+xH0E
-----END CERTIFICATE-----
Generated at Tue Jun 18 12:07:52 2024 by rpki-client on console-fra.rpki-client.org