Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/25UkVM0JnA6TW0ckODrNReYNDU0.roa
File: 25UkVM0JnA6TW0ckODrNReYNDU0.roa (raw, json)
Hash identifier: Zonjblve/l0MvNWMPoqIWP5LMx3bYbmX/UAZrinCK4I=
Subject key identifier: DB:95:24:54:CD:09:9C:0E:93:5B:47:24:38:3A:CD:45:E6:0D:0D:4D
Certificate issuer: /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Certificate serial: 018CC870465463DD097A5C1D966AA9195B39
Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/25UkVM0JnA6TW0ckODrNReYNDU0.roa
Signing time: Tue 02 Jan 2024 04:30:50 +0000
ROA not before: Tue 02 Jan 2024 04:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42465
IP address blocks: 86.111.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:46:54:63:dd:09:7a:5c:1d:96:6a:a9:19:5b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Validity
Not Before: Jan 2 04:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db952454cd099c0e935b4724383acd45e60d0d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:ee:bc:84:32:ca:2f:45:d3:b7:f3:bb:45:
b8:22:53:55:57:57:ad:20:a6:89:77:39:30:96:45:
f6:a9:c7:12:d9:1b:04:a3:85:93:4b:76:c9:d3:f2:
af:f3:84:05:2b:f0:ff:d5:68:e2:84:67:28:52:3c:
b4:a1:fb:c0:b1:0c:a4:fe:32:2e:62:e2:da:31:63:
23:ae:8a:63:ff:e4:08:9e:97:8c:88:cd:67:2d:4c:
7e:ef:d9:d0:d5:c1:02:7a:69:40:0f:4f:94:c8:fe:
af:ee:56:57:47:a6:3d:48:3b:78:af:da:1b:a2:5b:
3b:e2:51:13:3b:2a:53:80:f4:27:f1:81:9d:be:78:
ea:15:69:01:db:19:73:62:72:58:f7:dc:1e:14:c9:
a5:3d:45:f7:fb:66:7d:b1:17:48:46:1f:4b:13:d8:
2b:e7:7e:68:b1:44:af:61:19:78:51:2e:79:ef:34:
b0:67:13:46:31:ce:9b:63:97:08:86:19:dd:2a:05:
c6:de:84:65:1b:10:31:90:e2:81:57:7a:31:df:47:
a6:fb:be:a6:a3:69:13:55:aa:13:fe:2e:71:47:b5:
52:0b:9b:59:74:e9:8a:41:ed:8c:4f:68:76:5a:87:
4a:0f:82:ae:3d:16:12:00:21:82:07:6e:cf:7e:9a:
53:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:95:24:54:CD:09:9C:0E:93:5B:47:24:38:3A:CD:45:E6:0D:0D:4D
X509v3 Authority Key Identifier:
keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/25UkVM0JnA6TW0ckODrNReYNDU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.216.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:41:6f:0c:a5:5b:cf:90:1d:f2:fa:1c:56:94:89:1e:a7:7d:
26:1a:b5:5c:08:09:ea:28:39:91:1f:04:17:63:9a:80:d7:c3:
ac:9d:fd:35:5c:ed:48:a5:37:d7:71:3c:ef:32:86:ba:cc:61:
6f:fd:f8:10:b9:b7:5d:bb:f5:8b:2c:8a:66:bf:15:0e:7c:0b:
a0:5c:50:17:43:40:88:7c:63:d8:c3:1b:b5:2e:6c:c8:be:7e:
35:ad:bc:78:4f:a7:95:39:7d:2e:f7:f1:e9:dc:92:11:26:1a:
b5:9c:e7:ee:a2:2b:44:61:78:12:94:5b:0f:67:f1:4a:7b:2b:
8c:51:19:04:02:74:45:42:d0:12:5d:44:4d:e8:67:25:a5:8f:
74:5c:ec:b8:0f:60:c5:12:38:97:22:31:35:ea:9f:ee:8b:b2:
ac:cc:11:f1:10:23:80:ff:78:87:6d:00:62:fa:6f:b6:65:99:
fe:3b:30:b8:62:6e:77:a6:2a:79:1e:79:35:40:8d:8d:8c:b7:
72:28:2a:97:2c:7d:90:dc:69:39:7c:78:42:6e:25:76:ec:ff:
af:c0:42:01:bf:ee:3c:48:ce:63:86:d8:10:c1:0c:b5:cb:82:
5d:53:61:e2:dc:ec:7f:31:65:48:ef:17:e9:40:fe:ab:4b:1a:
25:d2:46:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIcEZUY90JelwdlmqpGVs5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZGQ5YzIzYWY2OWVjMmNkYjZmZTJiOTkzNmViNDk0Y2Zk
MTYyMWYwHhcNMjQwMTAyMDQzMDUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjk1MjQ1NGNkMDk5YzBlOTM1YjQ3MjQzODNhY2Q0NWU2MGQwZDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtHuvIQyyi9F07fzu0W4IlNVV1et
IKaJdzkwlkX2qccS2RsEo4WTS3bJ0/Kv84QFK/D/1WjihGcoUjy0ofvAsQyk/jIu
YuLaMWMjropj/+QInpeMiM1nLUx+79nQ1cECemlAD0+UyP6v7lZXR6Y9SDt4r9ob
ols74lETOypTgPQn8YGdvnjqFWkB2xlzYnJY99weFMmlPUX3+2Z9sRdIRh9LE9gr
535osUSvYRl4US557zSwZxNGMc6bY5cIhhndKgXG3oRlGxAxkOKBV3ox30em+76m
o2kTVaoT/i5xR7VSC5tZdOmKQe2MT2h2WodKD4KuPRYSACGCB27PfppT+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNuVJFTNCZwOk1tHJDg6zUXmDQ1NMB8GA1UdIwQY
MBaAFBfdnCOvaews22/iuZNutJTP0WIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjkyY0k2OXA3Q3piYi1LNWsyNjBsTV9SWWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni84MzU3ZTItYTEwNi00NGFlLWI4NjYt
OGZhN2I0YzUzMDczLzEvMjVVa1ZNMEpuQTZUVzBja09Eck5SZVlORFUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni84MzU3ZTItYTEwNi00NGFlLWI4NjYtOGZhN2I0YzUzMDcz
LzEvRjkyY0k2OXA3Q3piYi1LNWsyNjBsTV9SWWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm/YMA0G
CSqGSIb3DQEBCwUAA4IBAQBqQW8MpVvPkB3y+hxWlIkep30mGrVcCAnqKDmRHwQX
Y5qA18Osnf01XO1IpTfXcTzvMoa6zGFv/fgQubddu/WLLIpmvxUOfAugXFAXQ0CI
fGPYwxu1LmzIvn41rbx4T6eVOX0u9/Hp3JIRJhq1nOfuoitEYXgSlFsPZ/FKeyuM
URkEAnRFQtASXURN6GclpY90XOy4D2DFEjiXIjE16p/ui7KszBHxECOA/3iHbQBi
+m+2ZZn+OzC4Ym53pip5Hnk1QI2NjLdyKCqXLH2Q3Gk5fHhCbiV27P+vwEIBv+48
SM5jhtgQwQy1y4JdU2Hi3Ox/MWVI7xfpQP6rSxol0kYH
-----END CERTIFICATE-----
Generated at Sat Jun 1 18:25:01 2024 by rpki-client on console-ams.rpki-client.org