Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/IxODhtfDnfXN5BznWe93ikHAlSk.roa
File: IxODhtfDnfXN5BznWe93ikHAlSk.roa (raw, json)
Hash identifier: Qfj2pNsYdrBzICom9H4UA1NwL+bSI5hCYoXUwSX6k3s=
Subject key identifier: 23:13:83:86:D7:C3:9D:F5:CD:E4:1C:E7:59:EF:77:8A:41:C0:95:29
Certificate issuer: /CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
Certificate serial: 0192BD5ACA9705FD2F0DDF431D06A0C8B379
Authority key identifier: 15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/IxODhtfDnfXN5BznWe93ikHAlSk.roa
Signing time: Thu 24 Oct 2024 07:08:16 +0000
ROA not before: Thu 24 Oct 2024 07:08:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.150.216.0/23 maxlen: 23
2a07:7c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bd:5a:ca:97:05:fd:2f:0d:df:43:1d:06:a0:c8:b3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
Validity
Not Before: Oct 24 07:08:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23138386d7c39df5cde41ce759ef778a41c09529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:27:e0:0f:e1:42:d6:8c:36:e0:fa:6c:9a:61:
16:2a:95:96:c3:e1:98:f9:8e:6d:77:8a:55:77:a1:
a6:fb:ed:28:52:8d:9a:d1:42:85:ab:cf:34:79:62:
9a:a2:73:44:8d:2f:ae:91:85:ec:0f:63:c0:b7:0f:
b3:af:b1:e3:41:34:55:fa:44:a3:2c:f7:ec:73:68:
74:94:4b:f2:6a:dd:82:e7:e1:f1:d0:fa:82:1b:2f:
9c:97:09:08:00:e1:cf:38:bc:41:c5:5d:54:04:17:
32:67:16:56:48:40:3c:4d:cd:74:d1:1c:80:3f:75:
57:d4:9f:57:6e:a1:af:b2:07:23:df:06:6e:5e:6d:
92:dc:1c:96:e6:6f:7f:47:e5:31:3e:de:f1:41:79:
10:37:54:af:47:71:d6:73:d8:1b:5c:a5:27:3d:57:
48:bb:a2:c9:14:ed:e4:06:12:46:e4:c3:3a:22:4b:
b3:81:1a:31:10:dc:40:f2:1a:30:03:21:17:62:a9:
1e:e8:78:5b:c9:3e:ae:22:ad:bc:89:2e:ba:0d:4f:
e7:b0:a3:b2:ea:2d:11:b4:ad:2b:d3:00:53:31:80:
5b:03:90:83:b9:23:7c:5f:78:26:29:16:f9:fb:65:
4f:b1:64:12:ea:36:11:30:1e:4e:27:73:c3:c1:0a:
00:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:13:83:86:D7:C3:9D:F5:CD:E4:1C:E7:59:EF:77:8A:41:C0:95:29
X509v3 Authority Key Identifier:
keyid:15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/IxODhtfDnfXN5BznWe93ikHAlSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.216.0/23
IPv6:
2a07:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
80:94:58:f7:ab:61:fb:7f:8f:72:8c:09:1a:bb:6c:af:b8:96:
02:ae:d4:2b:54:d4:91:9a:aa:22:7a:19:eb:a0:f2:07:50:47:
77:11:e6:a5:db:52:af:fc:a0:15:ea:5b:10:fb:ac:47:d1:38:
4c:32:71:fa:08:fd:b5:35:54:76:14:d9:ef:87:58:a9:8f:a7:
9b:1e:7e:a8:7d:97:09:42:a1:fa:20:19:80:dd:05:dd:75:4f:
37:bd:25:6a:f4:46:0c:70:86:24:61:1e:6a:dd:15:b4:12:a0:
b0:a2:e6:20:d7:5f:08:66:21:d2:a0:9b:c9:95:7e:b6:b9:ec:
20:73:fb:27:04:a2:a3:54:4a:35:67:ad:67:89:3d:90:e9:99:
df:d4:ef:e0:75:90:1f:14:3c:98:9d:de:84:45:e6:b0:bb:13:
68:be:0f:cb:e4:81:26:d6:96:8f:b2:b7:b0:48:40:66:a3:27:
fd:e2:49:51:dc:d9:53:17:be:b1:6f:d6:77:33:09:6a:24:df:
8b:2e:f0:d6:ee:72:c2:39:09:44:1b:89:a4:a7:c1:ef:74:17:
0b:85:f7:2b:28:95:d5:f6:c8:c3:6e:ce:13:34:aa:a6:b9:27:
3b:c6:d1:cd:67:f2:f0:36:19:01:30:fc:6c:a3:73:ff:ba:e2:
a2:0c:af:4c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZK9WsqXBf0vDd9DHQagyLN5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZDFmZjZiZWM5ZmJjYjg5ZTk1MGEzYTAxZWYyZDY4NmYw
ZTdhMzEwHhcNMjQxMDI0MDcwODE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzEzODM4NmQ3YzM5ZGY1Y2RlNDFjZTc1OWVmNzc4YTQxYzA5NTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ifgD+FC1ow24PpsmmEWKpWWw+GY
+Y5td4pVd6Gm++0oUo2a0UKFq880eWKaonNEjS+ukYXsD2PAtw+zr7HjQTRV+kSj
LPfsc2h0lEvyat2C5+Hx0PqCGy+clwkIAOHPOLxBxV1UBBcyZxZWSEA8Tc100RyA
P3VX1J9XbqGvsgcj3wZuXm2S3ByW5m9/R+UxPt7xQXkQN1SvR3HWc9gbXKUnPVdI
u6LJFO3kBhJG5MM6IkuzgRoxENxA8howAyEXYqke6HhbyT6uIq28iS66DU/nsKOy
6i0RtK0r0wBTMYBbA5CDuSN8X3gmKRb5+2VPsWQS6jYRMB5OJ3PDwQoA2QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCMTg4bXw531zeQc51nvd4pBwJUpMB8GA1UdIwQY
MBaAFBXR/2vsn7y4npUKOgHvLWhvDnoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmRIX2EteWZ2TGllbFFvNkFlOHRhRzhPZWpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9mNTAxZjYtMTcwMi00OGQzLTgwMjct
OTZiODY5MWY1MjYwLzEvSXhPRGh0ZkRuZlhONUJ6bldlOTNpa0hBbFNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9mNTAxZjYtMTcwMi00OGQzLTgwMjctOTZiODY5MWY1MjYw
LzEvRmRIX2EteWZ2TGllbFFvNkFlOHRhRzhPZWpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuZbYMA0E
AgACMAcDBQMqB3xAMA0GCSqGSIb3DQEBCwUAA4IBAQCAlFj3q2H7f49yjAkau2yv
uJYCrtQrVNSRmqoiehnroPIHUEd3Eeal21Kv/KAV6lsQ+6xH0ThMMnH6CP21NVR2
FNnvh1ipj6ebHn6ofZcJQqH6IBmA3QXddU83vSVq9EYMcIYkYR5q3RW0EqCwouYg
118IZiHSoJvJlX62uewgc/snBKKjVEo1Z61niT2Q6Znf1O/gdZAfFDyYnd6EReaw
uxNovg/L5IEm1paPsrewSEBmoyf94klR3NlTF76xb9Z3MwlqJN+LLvDW7nLCOQlE
G4mkp8HvdBcLhfcrKJXV9sjDbs4TNKqmuSc7xtHNZ/LwNhkBMPxso3P/uuKiDK9M
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:33:55 2024 by rpki-client on console-fra.rpki-client.org