Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/sySU-0xWLmko2HWhMMogCrf15EE.roa
File: sySU-0xWLmko2HWhMMogCrf15EE.roa (raw, json)
Hash identifier: apST/4ITOa9++Ml5atci7+iro2TEjGcm0aADJi54yw4=
Subject key identifier: B3:24:94:FB:4C:56:2E:69:28:D8:75:A1:30:CA:20:0A:B7:F5:E4:41
Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial: 018D621937856B435F9C8425804BB5F9263E
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/sySU-0xWLmko2HWhMMogCrf15EE.roa
Signing time: Thu 01 Feb 2024 00:37:16 +0000
ROA not before: Thu 01 Feb 2024 00:37:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137443
IP address blocks: 185.241.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:62:19:37:85:6b:43:5f:9c:84:25:80:4b:b5:f9:26:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Validity
Not Before: Feb 1 00:37:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b32494fb4c562e6928d875a130ca200ab7f5e441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ec:af:56:70:11:1e:c0:af:08:42:5b:b7:89:
e6:2d:3d:fb:88:23:b2:8d:e6:2f:5c:67:36:9a:d7:
39:50:54:82:ba:6b:4f:9e:1f:90:87:87:71:84:33:
41:65:a4:1e:b5:e8:a0:0b:7c:28:bf:1e:62:8a:6b:
26:41:5c:37:a5:d3:c5:90:05:14:9d:96:47:06:13:
e9:4c:8a:88:ea:e0:82:5b:4e:98:77:59:7c:a2:32:
e9:9c:bc:3a:6e:7c:66:c3:28:1a:53:c7:14:84:23:
2c:ff:09:08:25:e8:d3:41:fa:a1:a0:79:6b:43:6b:
dd:50:08:8c:37:06:79:5a:12:fd:47:3d:8f:5a:ab:
90:66:0c:81:69:1b:f4:7f:91:07:92:85:30:73:7f:
f8:3c:ea:42:87:8b:e0:dd:e2:fd:e6:be:92:ce:a8:
6e:a2:9d:cd:42:dd:60:bc:f7:b7:ba:58:77:0e:86:
4c:d7:01:2c:3b:fe:af:08:30:1b:0f:f0:01:4f:ae:
3d:e8:13:a0:fc:f3:13:da:1c:1f:46:8a:f4:d6:d3:
3d:38:f4:26:8d:df:df:68:86:90:70:1a:3d:c3:70:
02:33:c6:a0:08:49:50:82:ee:5c:b5:ba:c5:2b:fe:
75:28:0e:02:0f:dd:9b:2e:c5:53:40:15:c1:45:f2:
d4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:24:94:FB:4C:56:2E:69:28:D8:75:A1:30:CA:20:0A:B7:F5:E4:41
X509v3 Authority Key Identifier:
keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/sySU-0xWLmko2HWhMMogCrf15EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.43.0/24
Signature Algorithm: sha256WithRSAEncryption
28:2d:f6:51:10:44:a4:9e:f7:05:0d:90:2c:1a:63:69:41:49:
48:68:8d:95:fe:bb:91:e0:6b:75:db:35:16:ac:88:e7:95:dd:
60:3f:55:0c:76:49:02:fe:bc:96:2d:a3:d7:c2:a1:69:b2:5c:
fc:4d:eb:b6:fe:b6:75:44:4f:45:bf:59:54:a1:8a:ee:bb:a0:
52:45:84:b1:6e:76:77:7c:e5:e5:8d:a8:73:9e:a6:d3:30:5f:
24:a3:5c:62:8b:9c:c5:56:b4:aa:20:ba:ba:91:66:04:73:87:
60:0a:1a:06:94:e5:c8:05:b7:fa:a7:e8:03:0b:1b:7e:30:9e:
25:d2:a0:af:a6:77:59:5b:38:47:27:6d:22:c7:d3:77:c8:cd:
23:ec:87:fc:9e:53:bd:26:d2:3a:15:0e:0d:2e:ce:52:c9:a9:
20:9a:4b:10:08:8d:c6:7b:e7:ac:d7:9d:f6:f2:89:8c:45:64:
67:53:e1:c4:6f:3e:77:c6:de:cc:48:5a:60:bc:0c:85:85:41:
fd:30:55:e8:28:25:fa:8d:96:9a:bf:bb:67:f3:4f:1e:5d:e2:
f7:96:c8:c0:19:bb:ae:5e:65:64:f8:a8:d3:2e:44:11:f6:14:
d6:1d:fa:8c:85:96:ae:5d:c4:02:84:3e:27:b9:62:d4:bc:fb:
d6:59:ec:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1iGTeFa0NfnIQlgEu1+SY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMGJmMThkNmJiZGIzM2RhODJmZTYxYTI4NjI0YmE3MmUy
MzUwNDAwHhcNMjQwMjAxMDAzNzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzI0OTRmYjRjNTYyZTY5MjhkODc1YTEzMGNhMjAwYWI3ZjVlNDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOyvVnARHsCvCEJbt4nmLT37iCOy
jeYvXGc2mtc5UFSCumtPnh+Qh4dxhDNBZaQeteigC3wovx5iimsmQVw3pdPFkAUU
nZZHBhPpTIqI6uCCW06Yd1l8ojLpnLw6bnxmwygaU8cUhCMs/wkIJejTQfqhoHlr
Q2vdUAiMNwZ5WhL9Rz2PWquQZgyBaRv0f5EHkoUwc3/4POpCh4vg3eL95r6Szqhu
op3NQt1gvPe3ulh3DoZM1wEsO/6vCDAbD/ABT6496BOg/PMT2hwfRor01tM9OPQm
jd/faIaQcBo9w3ACM8agCElQgu5ctbrFK/51KA4CD92bLsVTQBXBRfLUWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLMklPtMVi5pKNh1oTDKIAq39eRBMB8GA1UdIwQY
MBaAFDsL8Y1rvbM9qC/mGihiS6cuI1BAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81ZGRlZTktYzFjNC00YjU3LWI2Yjgt
ZDQ5OTE2YjVmMmI0LzEvc3lTVS0weFdMbWtvMkhXaE1Nb2dDcmYxNUVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS81ZGRlZTktYzFjNC00YjU3LWI2YjgtZDQ5OTE2YjVmMmI0
LzEvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufErMA0G
CSqGSIb3DQEBCwUAA4IBAQAoLfZREESknvcFDZAsGmNpQUlIaI2V/ruR4Gt12zUW
rIjnld1gP1UMdkkC/ryWLaPXwqFpslz8Teu2/rZ1RE9Fv1lUoYruu6BSRYSxbnZ3
fOXljahznqbTMF8ko1xii5zFVrSqILq6kWYEc4dgChoGlOXIBbf6p+gDCxt+MJ4l
0qCvpndZWzhHJ20ix9N3yM0j7If8nlO9JtI6FQ4NLs5SyakgmksQCI3Ge+es1532
8omMRWRnU+HEbz53xt7MSFpgvAyFhUH9MFXoKCX6jZaav7tn808eXeL3lsjAGbuu
XmVk+KjTLkQR9hTWHfqMhZauXcQChD4nuWLUvPvWWexJ
-----END CERTIFICATE-----
Generated at Thu May 2 13:02:07 2024 by rpki-client on console-ams.rpki-client.org