Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/uS0kBl6Tjvat_NlIBkZoPoX-d80.roa
File: uS0kBl6Tjvat_NlIBkZoPoX-d80.roa (raw, json)
Hash identifier: BX/0xHMNqtkKRxUzNj4aD1nv8NfFWuN7xwFZZDKfAsQ=
Subject key identifier: B9:2D:24:06:5E:93:8E:F6:AD:FC:D9:48:06:46:68:3E:85:FE:77:CD
Certificate issuer: /CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Certificate serial: 018CCA2A5080640A3E5A7EFA38F014376877
Authority key identifier: 2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/uS0kBl6Tjvat_NlIBkZoPoX-d80.roa
Signing time: Tue 02 Jan 2024 12:33:39 +0000
ROA not before: Tue 02 Jan 2024 12:33:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29267
IP address blocks: 195.85.211.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:50:80:64:0a:3e:5a:7e:fa:38:f0:14:37:68:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Validity
Not Before: Jan 2 12:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b92d24065e938ef6adfcd9480646683e85fe77cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0b:2a:a3:74:6c:2d:d9:25:91:7d:f6:ee:0d:
af:9d:a1:f3:14:08:43:0d:c8:46:fd:62:73:66:b9:
86:cf:08:fb:33:d7:e3:54:bc:27:ef:56:3c:f8:d7:
e4:34:4c:bd:4c:c2:7a:93:35:05:2d:26:3a:35:55:
d7:63:bd:33:40:db:79:64:63:37:c6:d5:a6:8f:bb:
7e:30:98:c2:1d:94:7a:2e:92:58:bc:75:6b:aa:dc:
d0:12:12:93:48:42:58:0f:cf:11:7d:7a:ac:71:12:
4d:8c:49:b3:01:97:b2:1c:ff:63:97:b4:99:e8:46:
37:1c:7b:1b:fa:df:ef:a5:83:9c:5b:0c:5e:35:ac:
ba:c7:00:cf:7e:8c:68:44:58:c8:27:d3:5e:19:a7:
b5:c1:b2:db:65:dd:47:8b:8a:b2:00:43:e2:63:1b:
b2:79:fd:72:35:2c:a5:a5:d1:9c:e6:c1:74:4c:f9:
3a:f2:e6:b6:c2:19:a6:52:51:d7:b1:36:c1:88:fd:
58:23:5b:4e:35:64:a0:3e:35:3c:e3:97:1b:14:b3:
1a:bb:da:cd:14:3a:4b:cb:00:16:54:12:2e:e8:9b:
09:de:80:60:73:ac:97:f9:2d:ad:2d:13:39:27:28:
b1:62:53:21:e2:e0:f4:e2:4d:42:3b:8c:4c:d2:b9:
75:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2D:24:06:5E:93:8E:F6:AD:FC:D9:48:06:46:68:3E:85:FE:77:CD
X509v3 Authority Key Identifier:
keyid:2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/uS0kBl6Tjvat_NlIBkZoPoX-d80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.211.0/24
Signature Algorithm: sha256WithRSAEncryption
33:48:a3:05:30:13:36:c4:d5:3e:a2:05:0e:0d:6c:98:8d:b1:
6a:20:d9:67:ca:bc:fe:2a:c1:fe:ea:0a:4e:70:3e:5c:9a:40:
fe:28:2f:8a:53:8e:73:5f:bb:ef:3b:0c:ee:41:b0:c7:28:95:
3e:b9:99:01:19:a6:01:ac:f6:36:ae:46:3a:c7:1c:95:dd:9f:
78:07:d1:7c:a9:7c:ba:d4:e3:36:ba:08:a4:58:d7:2a:fd:6a:
54:5e:73:6f:86:b4:89:88:e4:1a:a4:8a:c2:33:23:0d:83:d2:
da:79:ea:82:c4:fc:58:81:18:09:fd:1b:a6:7d:f9:1b:fe:9b:
c0:69:3a:5d:ac:e8:76:71:48:21:ff:2a:af:a3:40:83:6b:21:
91:c1:3b:bf:b0:39:6b:8b:ff:d0:bc:5c:07:f6:d1:85:2c:6a:
fd:5d:60:42:ef:68:9c:af:22:bd:78:fd:8a:8b:61:41:56:0d:
cb:01:9f:4d:cf:3d:bd:b9:e0:fe:2b:c3:24:89:e9:19:23:c6:
54:48:e1:c4:45:82:79:8e:a3:fd:eb:44:9f:2d:61:25:6b:93:
3e:fc:f8:13:86:24:9a:47:bc:ff:11:77:84:8d:ca:4b:4f:91:
dc:72:f6:d2:e4:ef:21:95:a2:3d:77:95:15:78:a7:90:5d:f3:
35:6e:fe:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKlCAZAo+Wn76OPAUN2h3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZTI5OTUwNThiM2RlOWFlZDIzYTYxZjdmYjdiNWI3YjE5
Mzk4NGEwHhcNMjQwMTAyMTIzMzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTJkMjQwNjVlOTM4ZWY2YWRmY2Q5NDgwNjQ2NjgzZTg1ZmU3N2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQsqo3RsLdklkX327g2vnaHzFAhD
DchG/WJzZrmGzwj7M9fjVLwn71Y8+NfkNEy9TMJ6kzUFLSY6NVXXY70zQNt5ZGM3
xtWmj7t+MJjCHZR6LpJYvHVrqtzQEhKTSEJYD88RfXqscRJNjEmzAZeyHP9jl7SZ
6EY3HHsb+t/vpYOcWwxeNay6xwDPfoxoRFjIJ9NeGae1wbLbZd1Hi4qyAEPiYxuy
ef1yNSylpdGc5sF0TPk68ua2whmmUlHXsTbBiP1YI1tONWSgPjU845cbFLMau9rN
FDpLywAWVBIu6JsJ3oBgc6yX+S2tLRM5JyixYlMh4uD04k1CO4xM0rl1mwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLktJAZek472rfzZSAZGaD6F/nfNMB8GA1UdIwQY
MBaAFCzimVBYs96a7SOmH3+3tbexk5hKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE9LWlVGaXozcHJ0STZZZmY3ZTF0N0dUbUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9kNTIwZGItYmRmOC00ZjI3LThkZmYt
OGMxMzBlNjg0MWRiLzEvdVMwa0JsNlRqdmF0X05sSUJrWm9Qb1gtZDgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9kNTIwZGItYmRmOC00ZjI3LThkZmYtOGMxMzBlNjg0MWRi
LzEvTE9LWlVGaXozcHJ0STZZZmY3ZTF0N0dUbUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1XTMA0G
CSqGSIb3DQEBCwUAA4IBAQAzSKMFMBM2xNU+ogUODWyYjbFqINlnyrz+KsH+6gpO
cD5cmkD+KC+KU45zX7vvOwzuQbDHKJU+uZkBGaYBrPY2rkY6xxyV3Z94B9F8qXy6
1OM2ugikWNcq/WpUXnNvhrSJiOQapIrCMyMNg9LaeeqCxPxYgRgJ/Rumffkb/pvA
aTpdrOh2cUgh/yqvo0CDayGRwTu/sDlri//QvFwH9tGFLGr9XWBC72icryK9eP2K
i2FBVg3LAZ9Nzz29ueD+K8MkiekZI8ZUSOHERYJ5jqP960SfLWEla5M+/PgThiSa
R7z/EXeEjcpLT5HccvbS5O8hlaI9d5UVeKeQXfM1bv5x
-----END CERTIFICATE-----
Generated at Sat Jun 8 06:37:32 2024 by rpki-client on console-ams.rpki-client.org