Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/18GFSfVDvqQuZheKb96BDaq3jP4.roa
File: 18GFSfVDvqQuZheKb96BDaq3jP4.roa (raw, json)
Hash identifier: xENSuwYUl2OB7NBM0STzwtRhv0QHOBt0poeVLnBlCnc=
Subject key identifier: D7:C1:85:49:F5:43:BE:A4:2E:66:17:8A:6F:DE:81:0D:AA:B7:8C:FE
Certificate issuer: /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial: 018CCA2A0293BB5B82B3B71C7D11B49ED617
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/18GFSfVDvqQuZheKb96BDaq3jP4.roa
Signing time: Tue 02 Jan 2024 12:33:19 +0000
ROA not before: Tue 02 Jan 2024 12:33:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58152
IP address blocks: 185.187.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:02:93:bb:5b:82:b3:b7:1c:7d:11:b4:9e:d6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Validity
Not Before: Jan 2 12:33:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7c18549f543bea42e66178a6fde810daab78cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:73:02:2d:62:16:0b:46:d3:f4:15:ff:98:12:
72:87:9f:5f:a7:09:a4:1b:97:44:f7:57:0b:88:fd:
c3:4e:52:e0:34:96:68:86:15:4c:fe:78:28:0f:56:
e0:9f:eb:b6:6d:48:ed:ef:4c:9b:ee:1e:8d:bc:49:
5d:a8:0b:84:76:07:48:f5:af:85:bb:f5:34:d7:1f:
ae:90:02:b7:d1:56:be:a8:58:89:11:fb:78:d5:3e:
ab:c8:38:c2:58:f3:74:02:4a:da:a5:25:6c:15:a9:
20:49:d4:1c:a3:af:e3:7f:e0:55:8c:47:6c:02:13:
b1:01:2c:1b:cc:0c:c0:e8:aa:39:79:57:a7:31:0f:
83:2a:cd:ad:24:f9:32:6d:4b:7a:87:a7:da:ae:de:
63:24:c7:3d:33:eb:9b:e4:95:04:d3:40:ab:e2:28:
61:21:c3:21:a6:cb:9a:56:d8:fa:ba:ad:93:1b:72:
56:cc:91:3f:8c:19:ec:f8:97:54:1b:aa:1f:c8:1f:
99:31:98:14:57:fe:5c:e9:19:ae:a2:f6:23:a1:f5:
b4:fb:6f:2f:99:76:c3:cd:ea:fc:81:47:9e:4d:f6:
36:07:b5:04:73:2d:7b:03:ad:12:84:dc:10:00:d1:
ae:8e:b6:ce:a7:d6:4a:ac:ac:97:3f:3b:4a:f5:cf:
43:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C1:85:49:F5:43:BE:A4:2E:66:17:8A:6F:DE:81:0D:AA:B7:8C:FE
X509v3 Authority Key Identifier:
keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/18GFSfVDvqQuZheKb96BDaq3jP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.50.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:49:29:4e:25:fa:3e:d6:51:03:8d:ee:43:ce:f6:1a:88:08:
c7:54:43:7b:3c:e8:c0:d7:73:d9:ff:07:c4:52:32:5c:18:40:
cd:bb:89:81:6d:7b:8d:b6:6a:be:14:53:9e:ea:4c:3c:0e:9e:
ff:d0:1a:e8:5e:4d:2d:01:ea:0a:22:50:49:bf:a0:8b:13:28:
c5:b4:df:71:c4:74:1f:f9:f1:7c:45:31:de:6e:86:77:fe:7b:
ed:92:13:b1:43:07:e8:94:21:0b:fe:d6:fb:ee:b4:da:92:e5:
33:64:f2:96:49:04:f6:b3:6a:a8:48:6c:84:25:6b:fc:3c:c7:
c6:1b:84:dc:f1:e1:f6:25:ce:70:ed:21:49:c7:34:8e:65:a2:
f5:c1:f0:6f:e1:7f:71:a7:dc:a2:55:07:06:e5:26:8f:3e:bb:
df:e2:3e:5f:15:a5:d1:fc:11:ab:22:d3:1b:2d:24:72:5c:77:
3b:c7:b9:d5:ab:c9:0a:d0:16:82:33:63:66:c5:b7:5c:39:19:
5d:dc:58:c0:ab:79:0e:03:a6:c8:56:e7:16:55:35:c9:ca:c0:
c0:9e:61:83:26:b6:b3:2b:8c:33:a7:10:b3:dc:7c:17:37:41:
37:e7:45:55:c6:03:08:9c:b6:e7:57:f8:b2:21:51:85:7f:c1:
d4:e1:89:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKgKTu1uCs7ccfRG0ntYXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ODhkOGI0YzdhYTQ1YTliMmNkNzM3YzYxNDg3MWViNzE4
MWJhYmUwHhcNMjQwMTAyMTIzMzE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2MxODU0OWY1NDNiZWE0MmU2NjE3OGE2ZmRlODEwZGFhYjc4Y2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3MCLWIWC0bT9BX/mBJyh59fpwmk
G5dE91cLiP3DTlLgNJZohhVM/ngoD1bgn+u2bUjt70yb7h6NvEldqAuEdgdI9a+F
u/U01x+ukAK30Va+qFiJEft41T6ryDjCWPN0AkrapSVsFakgSdQco6/jf+BVjEds
AhOxASwbzAzA6Ko5eVenMQ+DKs2tJPkybUt6h6fart5jJMc9M+ub5JUE00Cr4ihh
IcMhpsuaVtj6uq2TG3JWzJE/jBns+JdUG6ofyB+ZMZgUV/5c6RmuovYjofW0+28v
mXbDzer8gUeeTfY2B7UEcy17A60ShNwQANGujrbOp9ZKrKyXPztK9c9D3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNfBhUn1Q76kLmYXim/egQ2qt4z+MB8GA1UdIwQY
MBaAFJWI2LTHqkWpss1zfGFIcetxgbq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFlqWXRNZXFSYW15elhOOFlVaHg2M0dCdXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wMGMzYWItNGE3Zi00Zjc0LWI1NTYt
YTQ4OGJkNDIwMjRmLzEvMThHRlNmVkR2cVF1WmhlS2I5NkJEYXEzalA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wMGMzYWItNGE3Zi00Zjc0LWI1NTYtYTQ4OGJkNDIwMjRm
LzEvbFlqWXRNZXFSYW15elhOOFlVaHg2M0dCdXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubsyMA0G
CSqGSIb3DQEBCwUAA4IBAQCuSSlOJfo+1lEDje5DzvYaiAjHVEN7POjA13PZ/wfE
UjJcGEDNu4mBbXuNtmq+FFOe6kw8Dp7/0BroXk0tAeoKIlBJv6CLEyjFtN9xxHQf
+fF8RTHeboZ3/nvtkhOxQwfolCEL/tb77rTakuUzZPKWSQT2s2qoSGyEJWv8PMfG
G4Tc8eH2Jc5w7SFJxzSOZaL1wfBv4X9xp9yiVQcG5SaPPrvf4j5fFaXR/BGrItMb
LSRyXHc7x7nVq8kK0BaCM2NmxbdcORld3FjAq3kOA6bIVucWVTXJysDAnmGDJraz
K4wzpxCz3HwXN0E350VVxgMInLbnV/iyIVGFf8HU4YlP
-----END CERTIFICATE-----
Generated at Sat Jun 1 17:14:10 2024 by rpki-client on console-fra.rpki-client.org