Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/A1PJcUftbfoIirh9GfK304o01Cg.roa
File: A1PJcUftbfoIirh9GfK304o01Cg.roa (raw, json)
Hash identifier: mMZWlmk+kwQEl2yLYCSN+KWkyMHutHDZz0ydvU6ueiw=
Subject key identifier: 03:53:C9:71:47:ED:6D:FA:08:8A:B8:7D:19:F2:B7:D3:8A:34:D4:28
Certificate issuer: /CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Certificate serial: 018CC26D7C40D3D7181CB7D0F4932D9D4FC5
Authority key identifier: 93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/A1PJcUftbfoIirh9GfK304o01Cg.roa
Signing time: Mon 01 Jan 2024 00:30:04 +0000
ROA not before: Mon 01 Jan 2024 00:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205660
IP address blocks: 185.188.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:7c:40:d3:d7:18:1c:b7:d0:f4:93:2d:9d:4f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Validity
Not Before: Jan 1 00:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0353c97147ed6dfa088ab87d19f2b7d38a34d428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:81:6f:c1:30:1e:73:18:a7:3c:28:cb:95:
0a:b1:1b:d1:e2:a6:d8:e9:5d:41:1d:6d:e7:10:00:
5d:02:d1:6a:cc:e7:cf:24:fb:2d:ad:40:c8:85:a7:
7a:e7:72:ce:da:8b:5c:00:96:01:c3:7b:ba:8c:ed:
8e:8f:2b:c9:7c:56:3f:a8:ea:22:47:67:04:91:f1:
2a:fb:9d:65:72:9e:0f:d9:63:16:74:ca:84:b7:a6:
6e:c8:83:51:8a:dd:08:49:1b:97:70:59:1e:1e:94:
53:03:7f:b9:1c:13:4c:41:d3:e7:b6:94:d6:9d:6d:
34:e6:63:84:2c:28:b8:86:24:25:bc:fd:e4:56:04:
9a:98:6a:e9:76:11:9b:18:82:79:c8:be:b0:af:f6:
b4:3c:43:53:a3:1b:04:02:ed:fc:67:fa:9d:05:34:
13:a4:45:e5:33:29:17:5f:89:7f:13:8e:c2:10:d0:
58:49:f5:de:5d:cf:03:bc:f1:b7:4b:74:bb:9d:75:
46:46:bc:5a:53:15:df:ff:44:b2:ba:2f:ed:0f:0a:
ee:ce:7d:39:2f:44:a0:73:98:dc:ca:51:8b:4a:89:
73:19:70:2b:c0:74:60:17:85:ef:6a:32:72:5f:02:
5c:86:76:5c:2d:84:4a:95:2d:66:e7:98:d9:a4:02:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:53:C9:71:47:ED:6D:FA:08:8A:B8:7D:19:F2:B7:D3:8A:34:D4:28
X509v3 Authority Key Identifier:
keyid:93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/A1PJcUftbfoIirh9GfK304o01Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.2.0/23
Signature Algorithm: sha256WithRSAEncryption
71:70:a2:94:fe:39:81:2f:50:96:f3:83:1c:7c:22:94:08:f0:
81:f2:a9:75:d5:de:1c:c3:46:37:3c:9e:b9:27:a8:ec:a6:0c:
d3:07:66:a8:9b:d4:48:1d:31:1f:50:fb:9b:50:1a:f4:4a:05:
3b:b4:04:a0:0a:c1:53:75:3b:4b:b5:bb:74:25:9c:38:22:4e:
e7:61:2e:f1:51:8f:6d:7b:9a:6f:c0:11:16:81:0d:44:aa:53:
ba:06:03:59:9a:bd:1d:0c:81:bf:98:a2:8c:65:a6:57:ac:02:
11:66:a4:c3:a2:0f:96:69:2f:17:10:ae:eb:6d:ae:4e:83:c7:
05:a0:c3:bb:b3:10:ae:af:ad:d0:9a:83:94:eb:7c:cd:ad:a2:
c2:d4:f1:3c:1d:0b:25:1e:89:ad:2f:c8:b5:55:21:ca:ee:b7:
17:30:f9:0e:0b:d5:4e:39:89:72:1d:23:46:cf:8c:e0:8c:2f:
0d:51:02:ac:21:14:1b:9c:46:fc:3b:2f:ab:84:ec:8e:63:f7:
f4:3c:71:85:0e:32:94:65:14:1a:ad:da:16:93:e8:d3:a7:ad:
66:b0:6e:cc:bd:c1:ce:63:9b:8b:d2:7f:db:7c:85:16:c1:31:
f0:31:78:a3:e5:37:36:f5:d2:c5:12:9f:2b:f0:8d:67:6d:53:
8b:c4:96:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbXxA09cYHLfQ9JMtnU/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZGM0NWZmZTEzZjg0MWYxODhhZjc0M2JkN2RjMzRlZDU0
ODA1ZDQwHhcNMjQwMTAxMDAzMDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzUzYzk3MTQ3ZWQ2ZGZhMDg4YWI4N2QxOWYyYjdkMzhhMzRkNDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHmBb8EwHnMYpzwoy5UKsRvR4qbY
6V1BHW3nEABdAtFqzOfPJPstrUDIhad653LO2otcAJYBw3u6jO2OjyvJfFY/qOoi
R2cEkfEq+51lcp4P2WMWdMqEt6ZuyINRit0ISRuXcFkeHpRTA3+5HBNMQdPntpTW
nW005mOELCi4hiQlvP3kVgSamGrpdhGbGIJ5yL6wr/a0PENToxsEAu38Z/qdBTQT
pEXlMykXX4l/E47CENBYSfXeXc8DvPG3S3S7nXVGRrxaUxXf/0Syui/tDwruzn05
L0Sgc5jcylGLSolzGXArwHRgF4XvajJyXwJchnZcLYRKlS1m55jZpAKQvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFANTyXFH7W36CIq4fRnyt9OKNNQoMB8GA1UdIwQY
MBaAFJPcRf/hP4QfGIr3Q719w07VSAXUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yZDBiMTktMGFmZi00MTJmLWEyZmQt
MjE4OTU3MjhiYTRlLzEvQTFQSmNVZnRiZm9JaXJoOUdmSzMwNG8wMUNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yZDBiMTktMGFmZi00MTJmLWEyZmQtMjE4OTU3MjhiYTRl
LzEvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBubwCMA0G
CSqGSIb3DQEBCwUAA4IBAQBxcKKU/jmBL1CW84McfCKUCPCB8ql11d4cw0Y3PJ65
J6jspgzTB2aom9RIHTEfUPubUBr0SgU7tASgCsFTdTtLtbt0JZw4Ik7nYS7xUY9t
e5pvwBEWgQ1EqlO6BgNZmr0dDIG/mKKMZaZXrAIRZqTDog+WaS8XEK7rba5Og8cF
oMO7sxCur63QmoOU63zNraLC1PE8HQslHomtL8i1VSHK7rcXMPkOC9VOOYlyHSNG
z4zgjC8NUQKsIRQbnEb8Oy+rhOyOY/f0PHGFDjKUZRQardoWk+jTp61msG7MvcHO
Y5uL0n/bfIUWwTHwMXij5Tc29dLFEp8r8I1nbVOLxJbZ
-----END CERTIFICATE-----
Generated at Fri Jun 7 13:42:46 2024 by rpki-client on console-fra.rpki-client.org