Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/kL9QonV4wN-kpc9dHdgV56YtQl4.roa
File: kL9QonV4wN-kpc9dHdgV56YtQl4.roa (raw, json)
Hash identifier: wDwu1ONeglr5+9PFg3ggzb7lNzthhjoc891qfzymJV4=
Subject key identifier: 90:BF:50:A2:75:78:C0:DF:A4:A5:CF:5D:1D:D8:15:E7:A6:2D:42:5E
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 018CC870B34BFE272A418AB3849BC70BB3D7
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/kL9QonV4wN-kpc9dHdgV56YtQl4.roa
Signing time: Tue 02 Jan 2024 04:31:18 +0000
ROA not before: Tue 02 Jan 2024 04:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199527
IP address blocks: 85.208.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:b3:4b:fe:27:2a:41:8a:b3:84:9b:c7:0b:b3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Jan 2 04:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90bf50a27578c0dfa4a5cf5d1dd815e7a62d425e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:68:75:6a:e3:3e:a9:2f:52:eb:a2:c8:c9:23:
e2:8a:f1:96:a2:3d:de:76:81:c1:db:9f:5e:ca:ea:
45:3c:91:e8:7d:13:cd:27:4a:5e:c2:b0:1f:d8:61:
60:43:e6:0f:97:c0:86:6f:9d:5e:29:58:a4:93:43:
63:ba:b3:03:54:59:30:25:4e:25:5d:24:d5:fe:3e:
10:0a:af:c1:ef:f7:00:be:78:a7:88:93:4f:ad:3e:
d1:c8:f4:5f:b0:ea:72:52:b6:a7:45:c6:3c:0e:16:
f6:3e:66:5d:92:96:57:a5:fe:3f:bd:26:84:af:ab:
53:a1:99:81:3b:6a:59:6f:c4:29:9b:4a:8f:8d:46:
56:2d:bc:1e:67:02:bf:06:66:0f:1e:a0:ca:17:02:
45:5d:a1:71:9f:a7:3b:15:63:3c:4e:8e:a8:0b:5e:
2b:8e:5c:df:bc:49:24:59:38:a0:cb:90:2a:8f:cb:
a3:7e:13:be:a8:1d:76:ea:9e:b8:6d:ac:d9:cc:60:
7b:1b:f4:28:32:26:31:cd:ef:e5:d2:68:46:27:e5:
3b:fc:89:3a:55:b7:5a:13:b5:92:73:83:85:f7:ef:
f9:59:75:2d:a0:3d:3c:03:29:ab:e3:e1:68:c9:cf:
56:a7:ce:49:eb:4b:a3:ca:65:65:4f:ed:e1:3a:cc:
f6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BF:50:A2:75:78:C0:DF:A4:A5:CF:5D:1D:D8:15:E7:A6:2D:42:5E
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/kL9QonV4wN-kpc9dHdgV56YtQl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.224.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:8d:8d:e5:4e:ce:33:fc:2e:98:35:a9:a5:cf:40:bb:9a:0b:
e8:58:f3:7d:06:e8:7c:fa:58:31:78:ab:db:cc:8b:30:16:78:
51:d1:f7:47:22:ba:39:ff:5e:b1:57:df:38:27:23:c4:37:21:
01:ea:d7:a4:03:2d:cf:61:5d:b6:2b:77:d6:a7:74:f2:36:81:
aa:ee:93:d4:67:e4:0f:64:e1:6c:e9:cc:9a:82:f1:37:43:4b:
be:8f:f8:5b:d2:34:98:1f:f8:d8:27:f1:41:2b:5c:05:66:3c:
69:44:d1:05:dd:49:da:e3:ef:d5:27:59:39:f7:ae:4b:f7:54:
55:8e:5f:cb:ed:d2:37:c1:4c:71:49:15:bd:3a:c1:5a:e1:88:
38:08:91:4c:cd:8c:b7:b5:68:82:01:33:57:ba:ca:eb:85:d9:
1f:e2:b6:f8:96:d8:a6:2e:3f:31:7e:75:87:a3:95:19:d2:4e:
1d:b9:66:37:b9:6e:85:3c:47:65:c1:05:49:e2:d0:35:bf:6b:
38:db:b4:2b:a1:81:b0:c3:a9:8e:38:d2:a9:6f:73:a6:9f:0b:
6c:c0:31:d5:32:b4:68:34:a3:1c:40:2c:c0:fb:7c:31:9a:a7:
cc:f6:ca:9b:db:a6:fc:d8:8c:5c:16:82:0d:41:ce:7e:1b:fc:
ea:38:55:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIcLNL/icqQYqzhJvHC7PXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2
OWYyYTAwHhcNMjQwMTAyMDQzMTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGJmNTBhMjc1NzhjMGRmYTRhNWNmNWQxZGQ4MTVlN2E2MmQ0MjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGh1auM+qS9S66LIySPiivGWoj3e
doHB259eyupFPJHofRPNJ0pewrAf2GFgQ+YPl8CGb51eKVikk0NjurMDVFkwJU4l
XSTV/j4QCq/B7/cAvniniJNPrT7RyPRfsOpyUranRcY8Dhb2PmZdkpZXpf4/vSaE
r6tToZmBO2pZb8Qpm0qPjUZWLbweZwK/BmYPHqDKFwJFXaFxn6c7FWM8To6oC14r
jlzfvEkkWTigy5Aqj8ujfhO+qB126p64bazZzGB7G/QoMiYxze/l0mhGJ+U7/Ik6
VbdaE7WSc4OF9+/5WXUtoD08Aymr4+Foyc9Wp85J60ujymVlT+3hOsz2mwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJC/UKJ1eMDfpKXPXR3YFeemLUJeMB8GA1UdIwQY
MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt
NDI4NTk5ODM5MmQzLzEva0w5UW9uVjR3Ti1rcGM5ZEhkZ1Y1Nll0UWw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz
LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVdDgMA0G
CSqGSIb3DQEBCwUAA4IBAQAdjY3lTs4z/C6YNamlz0C7mgvoWPN9Buh8+lgxeKvb
zIswFnhR0fdHIro5/16xV984JyPENyEB6tekAy3PYV22K3fWp3TyNoGq7pPUZ+QP
ZOFs6cyagvE3Q0u+j/hb0jSYH/jYJ/FBK1wFZjxpRNEF3Una4+/VJ1k5965L91RV
jl/L7dI3wUxxSRW9OsFa4Yg4CJFMzYy3tWiCATNXusrrhdkf4rb4ltimLj8xfnWH
o5UZ0k4duWY3uW6FPEdlwQVJ4tA1v2s427QroYGww6mOONKpb3OmnwtswDHVMrRo
NKMcQCzA+3wxmqfM9sqb26b82IxcFoINQc5+G/zqOFWF
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:59:03 2024 by rpki-client on console-ams.rpki-client.org