Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/lsJoaDy-TocvYk8sgrwetYQ8ZK0.roa
File: lsJoaDy-TocvYk8sgrwetYQ8ZK0.roa (raw, json)
Hash identifier: XQeyp3uixEDFIBl8yqvRFdQ40aISPeTbe/5dttUA4+k=
Subject key identifier: 96:C2:68:68:3C:BE:4E:87:2F:62:4F:2C:82:BC:1E:B5:84:3C:64:AD
Certificate issuer: /CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Certificate serial: 018CC64B59E952C3052DCD7D72A548B42553
Authority key identifier: B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/lsJoaDy-TocvYk8sgrwetYQ8ZK0.roa
Signing time: Mon 01 Jan 2024 18:31:16 +0000
ROA not before: Mon 01 Jan 2024 18:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8455
IP address blocks: 185.31.144.0/22 maxlen: 22
2a00:bd20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:59:e9:52:c3:05:2d:cd:7d:72:a5:48:b4:25:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Validity
Not Before: Jan 1 18:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96c268683cbe4e872f624f2c82bc1eb5843c64ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:94:b4:e1:9c:2c:a6:cd:5f:41:39:5c:9d:
8f:df:a4:c2:94:ed:9a:51:ba:98:33:ce:68:25:7e:
c8:74:a7:5f:da:31:78:ca:15:87:42:f4:15:ff:47:
53:d6:2d:0f:3b:58:63:7e:22:c0:8e:63:dc:c4:b2:
20:69:66:d8:8d:ec:e8:b1:1b:8b:a6:88:7f:f1:cb:
db:da:80:ac:ca:55:d9:4f:3c:e1:15:05:56:a6:7a:
fb:2a:92:58:dd:cd:9b:05:d7:a3:20:ee:b5:a1:d1:
29:88:9d:21:bc:d9:7c:c3:ee:39:b6:a8:80:06:0c:
68:d4:bd:5e:4b:c4:93:a8:da:83:26:4f:20:25:f7:
75:86:7c:c3:15:06:a2:56:05:d7:a5:37:ea:fe:72:
61:74:e2:27:4a:95:c8:1f:64:df:c1:20:4e:dc:60:
32:d2:a6:c3:98:b1:66:89:36:a9:53:58:ce:99:38:
8b:37:98:8f:fb:33:e8:9a:75:d3:3a:3d:50:2d:55:
fc:9b:bc:02:73:5c:3e:da:94:a9:a2:ad:20:6a:f6:
42:35:0d:95:08:f6:87:2b:d7:e1:43:32:87:75:ea:
a0:00:13:1b:8b:30:be:da:c3:c9:bb:20:a0:70:93:
07:e3:4d:21:3b:d2:80:be:f5:68:a5:7f:44:ec:80:
10:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C2:68:68:3C:BE:4E:87:2F:62:4F:2C:82:BC:1E:B5:84:3C:64:AD
X509v3 Authority Key Identifier:
keyid:B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/lsJoaDy-TocvYk8sgrwetYQ8ZK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.144.0/22
IPv6:
2a00:bd20::/32
Signature Algorithm: sha256WithRSAEncryption
23:dd:6b:57:a3:eb:62:c0:c1:cb:05:45:65:4e:b4:33:2b:d6:
40:69:25:ad:0a:da:88:88:20:c9:b1:a6:db:4e:7e:af:b5:66:
3b:5b:72:ea:b5:d6:db:c5:71:a0:84:18:07:0c:9d:58:2e:fd:
b9:b6:e3:22:20:22:74:3d:7e:48:ed:ca:f2:fb:23:ff:bf:a3:
82:0f:16:57:1c:67:bc:99:c5:e5:de:6c:2f:54:2c:0a:9f:b1:
a4:6b:7e:91:7a:75:81:f6:ad:51:d4:9a:83:61:a9:4c:71:d5:
5a:51:cd:c6:6c:5d:e5:8d:d9:79:73:a1:af:cb:2f:fe:2b:ed:
21:6e:07:47:71:68:a9:e7:a4:93:a4:6a:4d:6c:be:8c:ee:50:
2c:66:d4:44:3e:98:df:46:02:f9:77:50:5e:7d:f2:db:1d:cc:
2d:d4:7b:11:84:d5:01:26:74:e5:70:61:82:01:52:85:fd:1e:
2a:06:05:b9:71:18:c8:5e:c9:66:62:b6:6e:18:e8:ea:6f:dd:
24:aa:36:81:cc:ce:c4:eb:89:44:63:5e:06:67:3e:ae:47:6b:
74:80:92:2c:cf:78:8c:b7:48:31:89:f2:58:9d:28:91:75:64:
f5:6c:50:8d:0d:96:8d:67:97:cc:0b:28:30:48:82:d5:e5:ab:
c5:3a:a9:55
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzGS1npUsMFLc19cqVItCVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NzJkYTBmOWM2YzU2ODZhM2RiOWVlMTI0YTk5MDQyYjBh
ODgyZDEwHhcNMjQwMTAxMTgzMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmMyNjg2ODNjYmU0ZTg3MmY2MjRmMmM4MmJjMWViNTg0M2M2NGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/CUtOGcLKbNX0E5XJ2P36TClO2a
UbqYM85oJX7IdKdf2jF4yhWHQvQV/0dT1i0PO1hjfiLAjmPcxLIgaWbYjezosRuL
poh/8cvb2oCsylXZTzzhFQVWpnr7KpJY3c2bBdejIO61odEpiJ0hvNl8w+45tqiA
Bgxo1L1eS8STqNqDJk8gJfd1hnzDFQaiVgXXpTfq/nJhdOInSpXIH2TfwSBO3GAy
0qbDmLFmiTapU1jOmTiLN5iP+zPomnXTOj1QLVX8m7wCc1w+2pSpoq0gavZCNQ2V
CPaHK9fhQzKHdeqgABMbizC+2sPJuyCgcJMH400hO9KAvvVopX9E7IAQpQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJbCaGg8vk6HL2JPLIK8HrWEPGStMB8GA1UdIwQY
MBaAFLhy2g+cbFaGo9ue4SSpkEKwqILRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUhMYUQ1eHNWb2FqMjU3aEpLbVFRckNvZ3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yNzE2ZWMtNTY1Ny00ZjU2LThmNDMt
ZTIzMTAzYTg4MDUyLzEvbHNKb2FEeS1Ub2N2WWs4c2dyd2V0WVE4WkswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yNzE2ZWMtNTY1Ny00ZjU2LThmNDMtZTIzMTAzYTg4MDUy
LzEvdUhMYUQ1eHNWb2FqMjU3aEpLbVFRckNvZ3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuR+QMA0E
AgACMAcDBQAqAL0gMA0GCSqGSIb3DQEBCwUAA4IBAQAj3WtXo+tiwMHLBUVlTrQz
K9ZAaSWtCtqIiCDJsabbTn6vtWY7W3LqtdbbxXGghBgHDJ1YLv25tuMiICJ0PX5I
7cry+yP/v6OCDxZXHGe8mcXl3mwvVCwKn7Gka36RenWB9q1R1JqDYalMcdVaUc3G
bF3ljdl5c6Gvyy/+K+0hbgdHcWip56STpGpNbL6M7lAsZtREPpjfRgL5d1BeffLb
Hcwt1HsRhNUBJnTlcGGCAVKF/R4qBgW5cRjIXslmYrZuGOjqb90kqjaBzM7E64lE
Y14GZz6uR2t0gJIsz3iMt0gxifJYnSiRdWT1bFCNDZaNZ5fMCygwSILV5avFOqlV
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:36 2024 by rpki-client on console-fra.rpki-client.org