Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/aaCdn93Y64k27mlDUvlocSMvZmE.roa
File: aaCdn93Y64k27mlDUvlocSMvZmE.roa (raw, json)
Hash identifier: p/T0RYnZtT/x3MviEcxVOp2sicS5YOmPnZU/wGRyEEE=
Subject key identifier: 69:A0:9D:9F:DD:D8:EB:89:36:EE:69:43:52:F9:68:71:23:2F:66:61
Certificate issuer: /CN=e684b451793f62418617bc934f5e82513fc36a89
Certificate serial: 018CC56EAC65D9674426AE7362E314C29D4E
Authority key identifier: E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/aaCdn93Y64k27mlDUvlocSMvZmE.roa
Signing time: Mon 01 Jan 2024 14:30:13 +0000
ROA not before: Mon 01 Jan 2024 14:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204734
IP address blocks: 185.205.20.0/22 maxlen: 22
2a0c:1400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ac:65:d9:67:44:26:ae:73:62:e3:14:c2:9d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e684b451793f62418617bc934f5e82513fc36a89
Validity
Not Before: Jan 1 14:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69a09d9fddd8eb8936ee694352f96871232f6661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ef:02:18:53:ae:b4:c1:d5:3f:a4:c7:50:b1:
6c:5a:75:67:2c:d4:ed:52:02:10:e0:7a:c1:b2:46:
17:18:43:bf:f9:f6:38:d6:fd:23:9b:16:39:59:63:
27:5b:3e:f1:c8:ec:cb:5a:90:81:56:93:f0:ec:dc:
db:02:89:49:1a:65:c8:18:df:d5:11:98:9c:26:64:
0d:e8:3b:d8:3d:c6:12:e0:7b:db:a5:c8:df:ce:e4:
1e:5a:82:16:68:10:53:e4:aa:34:83:d6:2f:3d:04:
5d:bc:db:c6:5b:0d:74:db:f6:63:01:0e:f8:25:36:
a5:6d:bf:58:3f:ed:da:8c:54:a2:d5:37:ed:d9:bb:
eb:0c:57:65:0f:b9:90:ae:49:ed:66:ee:db:b5:cc:
e1:fa:78:86:1c:ef:fc:7e:aa:76:d1:ed:23:5c:cb:
6f:f3:a7:bc:e1:2c:21:4c:b0:3f:3d:c7:32:47:dc:
6b:02:2b:40:ed:ad:09:90:5e:e9:3f:6c:ec:9c:a8:
ff:5d:31:3f:a3:b7:07:fa:82:29:c4:79:49:e3:13:
58:df:f1:60:56:38:b2:00:94:a2:41:c8:77:f2:2a:
48:e8:5f:f7:6e:dd:35:d1:c1:92:c5:d3:9c:6c:0c:
31:c5:e4:e7:82:19:b0:18:43:f0:d0:f8:ec:a0:28:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A0:9D:9F:DD:D8:EB:89:36:EE:69:43:52:F9:68:71:23:2F:66:61
X509v3 Authority Key Identifier:
keyid:E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/aaCdn93Y64k27mlDUvlocSMvZmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.20.0/22
IPv6:
2a0c:1400::/29
Signature Algorithm: sha256WithRSAEncryption
05:66:c1:07:68:8d:7d:d8:e7:e4:22:a8:e0:c9:fb:f4:9a:8f:
e7:95:57:b1:f5:c5:ab:3c:be:cc:55:80:cf:9b:51:e4:4a:36:
00:47:1a:d5:7a:d0:15:17:9b:46:2d:92:a0:fe:51:15:1f:78:
5b:ca:89:de:b3:21:a8:d3:1b:ab:d1:ce:e6:ee:13:40:77:b9:
cb:cc:ac:81:ec:24:c5:78:49:ac:59:69:a1:34:b0:63:80:28:
b9:d4:79:1d:47:0f:a8:17:22:43:0f:50:8d:66:95:46:3f:b8:
97:f7:05:70:d4:05:39:bd:6b:b6:00:09:c2:f8:44:61:36:01:
96:53:ec:50:8d:08:14:14:26:46:bc:89:74:25:c1:0f:2c:2e:
f8:d7:3b:02:1c:3d:55:c5:e5:0f:55:f0:dc:b8:06:7b:12:36:
67:63:ac:da:bb:9c:07:ea:96:7c:b8:46:ce:5f:b0:bf:a0:76:
2d:56:44:6f:85:99:83:79:07:97:5b:c6:f2:50:75:c5:30:e2:
cb:73:18:78:08:64:8c:df:67:6f:11:7f:7e:0a:6c:73:40:3f:
f4:be:a6:e3:27:4f:4e:77:fb:22:c3:65:51:5c:8d:f2:38:2d:
75:5b:be:92:03:5b:d5:36:3a:d9:af:e8:36:1e:c8:4f:d9:a7:
68:9c:9c:ba
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzFbqxl2WdEJq5zYuMUwp1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ODRiNDUxNzkzZjYyNDE4NjE3YmM5MzRmNWU4MjUxM2Zj
MzZhODkwHhcNMjQwMTAxMTQzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWEwOWQ5ZmRkZDhlYjg5MzZlZTY5NDM1MmY5Njg3MTIzMmY2NjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO8CGFOutMHVP6THULFsWnVnLNTt
UgIQ4HrBskYXGEO/+fY41v0jmxY5WWMnWz7xyOzLWpCBVpPw7NzbAolJGmXIGN/V
EZicJmQN6DvYPcYS4HvbpcjfzuQeWoIWaBBT5Ko0g9YvPQRdvNvGWw102/ZjAQ74
JTalbb9YP+3ajFSi1Tft2bvrDFdlD7mQrkntZu7btczh+niGHO/8fqp20e0jXMtv
86e84SwhTLA/PccyR9xrAitA7a0JkF7pP2zsnKj/XTE/o7cH+oIpxHlJ4xNY3/Fg
VjiyAJSiQch38ipI6F/3bt010cGSxdOcbAwxxeTnghmwGEPw0PjsoCinewIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGmgnZ/d2OuJNu5pQ1L5aHEjL2ZhMB8GA1UdIwQY
MBaAFOaEtFF5P2JBhhe8k09eglE/w2qJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW9TMFVYa19Za0dHRjd5VFQxNkNVVF9EYW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jNTRmMzItMjU4ZS00YmIzLWI4ZDUt
NzFiNzA5ZWY1ZjViLzEvYWFDZG45M1k2NGsyN21sRFV2bG9jU012Wm1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jNTRmMzItMjU4ZS00YmIzLWI4ZDUtNzFiNzA5ZWY1ZjVi
LzEvNW9TMFVYa19Za0dHRjd5VFQxNkNVVF9EYW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuc0UMA0E
AgACMAcDBQMqDBQAMA0GCSqGSIb3DQEBCwUAA4IBAQAFZsEHaI192OfkIqjgyfv0
mo/nlVex9cWrPL7MVYDPm1HkSjYARxrVetAVF5tGLZKg/lEVH3hbyonesyGo0xur
0c7m7hNAd7nLzKyB7CTFeEmsWWmhNLBjgCi51HkdRw+oFyJDD1CNZpVGP7iX9wVw
1AU5vWu2AAnC+ERhNgGWU+xQjQgUFCZGvIl0JcEPLC741zsCHD1VxeUPVfDcuAZ7
EjZnY6zau5wH6pZ8uEbOX7C/oHYtVkRvhZmDeQeXW8byUHXFMOLLcxh4CGSM32dv
EX9+CmxzQD/0vqbjJ09Od/siw2VRXI3yOC11W76SA1vVNjrZr+g2HshP2adonJy6
-----END CERTIFICATE-----
Generated at Thu May 23 04:35:53 2024 by rpki-client on console-ams.rpki-client.org