Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/7eO25AG3VvSbqWCwbhJU_DDLXm8.roa
File: 7eO25AG3VvSbqWCwbhJU_DDLXm8.roa (raw, json)
Hash identifier: 5YiT1v8XrXFMAo3jSyyaPJo/smfsHfkGjzCtTXvQlAo=
Subject key identifier: ED:E3:B6:E4:01:B7:56:F4:9B:A9:60:B0:6E:12:54:FC:30:CB:5E:6F
Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f
Certificate serial: 018CC9BCAECEA5FC3708B8AF92F0EBFD8DB1
Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/7eO25AG3VvSbqWCwbhJU_DDLXm8.roa
Signing time: Tue 02 Jan 2024 10:33:55 +0000
ROA not before: Tue 02 Jan 2024 10:33:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 185.206.123.0/24 maxlen: 24
2a10:ca00:4::/48 maxlen: 48
2a10:ca00:2::/48 maxlen: 48
2a10:ca00:3::/48 maxlen: 48
2a10:ca00:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ae:ce:a5:fc:37:08:b8:af:92:f0:eb:fd:8d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f
Validity
Not Before: Jan 2 10:33:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ede3b6e401b756f49ba960b06e1254fc30cb5e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:07:df:41:10:79:cc:83:55:3e:1f:b8:48:ba:
97:e1:41:17:a9:0d:1e:fb:4d:a9:3f:75:9a:de:f2:
72:46:f4:c8:50:84:be:7f:43:37:e9:7a:34:b2:d5:
53:23:35:4c:30:0e:bd:88:6c:90:f1:dd:28:29:8a:
72:88:5e:fe:e1:6b:99:13:e1:48:bc:d3:67:62:7a:
14:28:78:fd:34:68:69:0d:76:7b:0f:29:93:8d:d3:
57:4f:38:e9:a6:62:57:33:96:9a:32:54:6c:60:14:
0f:d1:d3:11:57:f6:39:78:39:98:b2:92:c5:9e:58:
ea:fa:f9:df:b5:b2:57:73:8e:0c:83:bc:e7:de:16:
7e:e4:b1:8a:71:25:61:47:2f:bc:b5:98:e4:0a:08:
aa:ec:8a:98:e7:df:da:fe:89:6c:3f:0c:a6:7a:3a:
12:45:a2:d6:4a:f0:ba:ee:6e:65:10:d5:91:d4:ae:
0b:fe:d0:30:5f:22:85:83:21:fc:98:5c:e8:f0:12:
22:f4:82:39:fa:5d:95:5b:d5:f2:59:32:2b:a9:c3:
0a:ce:44:d6:0d:21:c7:46:58:ea:aa:9e:d5:78:77:
9d:5c:f4:fa:4f:c7:cd:e5:e6:22:c0:02:a5:d0:1c:
63:9f:97:8b:71:fe:2b:bc:25:af:e7:a1:e4:ec:1c:
bf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E3:B6:E4:01:B7:56:F4:9B:A9:60:B0:6E:12:54:FC:30:CB:5E:6F
X509v3 Authority Key Identifier:
keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/7eO25AG3VvSbqWCwbhJU_DDLXm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.123.0/24
IPv6:
2a10:ca00:1::-2a10:ca00:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
40:4e:3e:96:9e:05:7f:85:74:63:3f:d7:c6:14:b9:55:0f:bb:
01:47:61:d9:fc:fd:51:f9:4f:ba:f5:e7:09:29:1e:bd:06:fc:
42:e2:4b:dc:d1:a2:84:92:66:a7:c3:56:cd:32:ec:cb:de:34:
8e:1f:90:b4:bf:b3:43:75:e6:ee:0b:47:e4:4f:f2:dc:aa:33:
b9:da:03:7c:bb:61:87:18:5c:a7:51:e4:1d:f0:78:20:03:ee:
44:38:38:1e:fe:c8:94:63:dd:24:72:49:a4:44:ff:64:e0:87:
3f:79:42:90:6e:a3:3a:cd:18:12:6b:34:d7:1c:d9:6f:67:45:
c8:68:a1:52:ab:97:e3:f1:66:d0:f7:8e:9f:5a:6a:04:10:eb:
5d:b8:c7:80:e2:83:e6:1a:3a:19:01:8b:55:ed:fd:8e:8a:72:
30:43:0e:96:45:3d:6a:63:d4:19:8e:cb:e9:78:fe:ce:02:28:
24:4f:09:f9:2d:aa:fb:ab:32:d8:41:30:3d:08:43:61:90:f6:
c8:97:56:b0:55:ee:94:09:70:34:ed:43:da:22:e8:2a:b1:66:
5b:51:c5:b4:81:31:dc:fa:89:4a:57:87:6f:34:a4:a7:5c:5a:
8c:76:09:5c:c1:57:85:fc:56:5b:0f:e6:e2:42:ef:9b:74:d6:
3e:11:81:a8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYzJvK7Opfw3CLivkvDr/Y2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YjU1ZmIzNGQyOWY5NjI1NDUxMzJhMDI1YjUyNjQ0ZmRm
ZmJmNmYwHhcNMjQwMTAyMTAzMzU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGUzYjZlNDAxYjc1NmY0OWJhOTYwYjA2ZTEyNTRmYzMwY2I1ZTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgffQRB5zINVPh+4SLqX4UEXqQ0e
+02pP3Wa3vJyRvTIUIS+f0M36Xo0stVTIzVMMA69iGyQ8d0oKYpyiF7+4WuZE+FI
vNNnYnoUKHj9NGhpDXZ7DymTjdNXTzjppmJXM5aaMlRsYBQP0dMRV/Y5eDmYspLF
nljq+vnftbJXc44Mg7zn3hZ+5LGKcSVhRy+8tZjkCgiq7IqY59/a/olsPwymejoS
RaLWSvC67m5lENWR1K4L/tAwXyKFgyH8mFzo8BIi9II5+l2VW9XyWTIrqcMKzkTW
DSHHRljqqp7VeHedXPT6T8fN5eYiwAKl0Bxjn5eLcf4rvCWv56Hk7By/cQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFO3jtuQBt1b0m6lgsG4SVPwwy15vMB8GA1UdIwQY
MBaAFDa1X7NNKfliVFEyoCW1JkT9/79vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2Ut
ZjEwZjczYTllY2IzLzEvN2VPMjVBRzNWdlNicVdDd2JoSlVfRERMWG04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2UtZjEwZjczYTllY2Iz
LzEvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAuc57MBoE
AgACMBQwEgMHACoQygAAAQMHACoQygAABDANBgkqhkiG9w0BAQsFAAOCAQEAQE4+
lp4Ff4V0Yz/XxhS5VQ+7AUdh2fz9UflPuvXnCSkevQb8QuJL3NGihJJmp8NWzTLs
y940jh+QtL+zQ3Xm7gtH5E/y3KozudoDfLthhxhcp1HkHfB4IAPuRDg4Hv7IlGPd
JHJJpET/ZOCHP3lCkG6jOs0YEms01xzZb2dFyGihUquX4/Fm0PeOn1pqBBDrXbjH
gOKD5ho6GQGLVe39jopyMEMOlkU9amPUGY7L6Xj+zgIoJE8J+S2q+6sy2EEwPQhD
YZD2yJdWsFXulAlwNO1D2iLoKrFmW1HFtIEx3PqJSleHbzSkp1xajHYJXMFXhfxW
Ww/m4kLvm3TWPhGBqA==
-----END CERTIFICATE-----
Generated at Thu May 2 10:40:00 2024 by rpki-client on console-ams.rpki-client.org