Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/s_fI44UV7la-CwqOXb2BgvQFSoY.roa
File: s_fI44UV7la-CwqOXb2BgvQFSoY.roa (raw, json)
Hash identifier: IlhhBynEaG/igEKH5utJmI5tWQvTKILg7EKhywotUp8=
Subject key identifier: B3:F7:C8:E3:85:15:EE:56:BE:0B:0A:8E:5D:BD:81:82:F4:05:4A:86
Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Certificate serial: 018DE68146C28B9B694036E1D40B7EE7734C
Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/s_fI44UV7la-CwqOXb2BgvQFSoY.roa
Signing time: Mon 26 Feb 2024 17:40:48 +0000
ROA not before: Mon 26 Feb 2024 17:40:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215550
IP address blocks: 185.20.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e6:81:46:c2:8b:9b:69:40:36:e1:d4:0b:7e:e7:73:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Validity
Not Before: Feb 26 17:40:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3f7c8e38515ee56be0b0a8e5dbd8182f4054a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:b4:d5:b0:aa:0b:58:15:ea:8c:25:da:d0:
c2:f8:56:63:6b:14:f0:f3:78:cb:5e:10:b4:85:75:
31:8a:d2:31:94:78:02:96:c7:25:cc:28:3d:f5:19:
a3:05:b0:62:94:a3:1f:c3:c0:95:ef:9e:80:ab:ae:
21:95:84:7e:24:94:15:8f:ae:9b:12:5c:59:ba:d5:
6e:b7:ef:17:dc:a7:a6:26:32:83:45:01:26:e5:53:
c6:6c:2d:7d:cb:a3:3d:67:25:88:18:c4:b2:43:35:
a7:40:8f:a1:1e:c3:9a:50:86:4a:bc:8d:d2:44:13:
54:47:c6:14:cd:4b:c2:f1:61:9f:59:27:29:b2:8d:
28:d0:3a:e9:a9:60:6e:52:2b:65:1c:f8:ad:01:e6:
ee:bd:72:18:4d:9a:95:66:92:57:25:34:9b:42:43:
41:3b:d2:60:dd:73:0a:a0:c8:4f:89:9c:78:00:6c:
66:2d:f6:d0:c9:b2:4e:a4:1d:ec:74:6b:55:7f:ec:
fb:83:72:e2:0d:4a:a4:b9:0b:5a:45:b4:da:76:18:
ad:20:2c:6e:2d:86:83:ca:95:7e:ed:e4:9f:72:eb:
8a:e3:3b:68:b6:9b:d1:e9:29:a4:5a:c9:f0:03:bc:
8b:8c:cc:0b:6f:8e:9b:73:4e:c4:a8:e6:cb:f6:e3:
a9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F7:C8:E3:85:15:EE:56:BE:0B:0A:8E:5D:BD:81:82:F4:05:4A:86
X509v3 Authority Key Identifier:
keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/s_fI44UV7la-CwqOXb2BgvQFSoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.7.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c1:6e:78:fe:ee:7d:dd:4c:d7:4b:8d:79:b1:19:38:a8:29:
ec:6b:7d:bd:3d:b6:38:30:6d:80:5c:91:63:c3:db:21:56:71:
f1:a3:b2:a1:0c:6d:91:dc:27:50:91:6e:05:62:71:71:b0:2f:
ea:b8:34:5c:df:76:62:3e:08:9c:58:70:2d:37:f3:00:38:2b:
5f:38:ec:06:58:86:c5:ab:b6:20:b3:24:02:09:1e:dc:a8:10:
ec:b9:5e:58:a3:17:7c:26:50:79:0b:98:eb:8e:ae:2f:03:0d:
f9:93:80:24:71:28:c3:08:5b:5d:85:5a:c1:a0:2a:25:d5:09:
e6:f4:6a:72:07:eb:11:a1:d9:1b:01:c1:ca:a5:12:30:1f:f2:
5c:34:c5:ef:4f:bf:43:0a:65:18:2b:9f:fc:c1:94:3c:a3:8f:
2b:5d:3e:d8:da:18:a9:9f:a5:a9:93:87:5d:ff:66:46:0f:f3:
02:7d:5c:37:65:62:74:05:75:1b:f1:5a:eb:df:b1:65:af:ac:
0a:4c:48:4f:e6:e9:f6:3a:83:fa:a9:09:8a:67:b5:03:a4:2f:
91:b8:67:fb:88:ee:a8:28:7f:6c:d1:9f:51:fa:ef:68:ff:c6:
66:ec:ff:de:5d:e7:0b:73:7e:9e:f1:5a:73:95:7c:46:81:17:
d2:b6:48:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3mgUbCi5tpQDbh1At+53NMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYzY5YzNkNzAzMGNlYzE5ZjhmYjY2ZTU0M2JkZTY1NTk1
NzA4YTIwHhcNMjQwMjI2MTc0MDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2Y3YzhlMzg1MTVlZTU2YmUwYjBhOGU1ZGJkODE4MmY0MDU0YTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvW01bCqC1gV6owl2tDC+FZjaxTw
83jLXhC0hXUxitIxlHgClsclzCg99RmjBbBilKMfw8CV756Aq64hlYR+JJQVj66b
ElxZutVut+8X3KemJjKDRQEm5VPGbC19y6M9ZyWIGMSyQzWnQI+hHsOaUIZKvI3S
RBNUR8YUzUvC8WGfWScpso0o0DrpqWBuUitlHPitAebuvXIYTZqVZpJXJTSbQkNB
O9Jg3XMKoMhPiZx4AGxmLfbQybJOpB3sdGtVf+z7g3LiDUqkuQtaRbTadhitICxu
LYaDypV+7eSfcuuK4ztotpvR6SmkWsnwA7yLjMwLb46bc07EqObL9uOpDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLP3yOOFFe5WvgsKjl29gYL0BUqGMB8GA1UdIwQY
MBaAFGzGnD1wMM7Bn4+2blQ73mVZVwiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk1hY1BYQXd6c0dmajdadVZEdmVaVmxYQ0tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85Y2E1OGUtOWUzMi00MjhmLTg0MTEt
MWFlYjZhNGU0NWFkLzEvc19mSTQ0VVY3bGEtQ3dxT1hiMkJndlFGU29ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85Y2E1OGUtOWUzMi00MjhmLTg0MTEtMWFlYjZhNGU0NWFk
LzEvYk1hY1BYQXd6c0dmajdadVZEdmVaVmxYQ0tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRQHMA0G
CSqGSIb3DQEBCwUAA4IBAQBwwW54/u593UzXS415sRk4qCnsa329PbY4MG2AXJFj
w9shVnHxo7KhDG2R3CdQkW4FYnFxsC/quDRc33ZiPgicWHAtN/MAOCtfOOwGWIbF
q7YgsyQCCR7cqBDsuV5Yoxd8JlB5C5jrjq4vAw35k4AkcSjDCFtdhVrBoCol1Qnm
9GpyB+sRodkbAcHKpRIwH/JcNMXvT79DCmUYK5/8wZQ8o48rXT7Y2hipn6Wpk4dd
/2ZGD/MCfVw3ZWJ0BXUb8Vrr37Flr6wKTEhP5un2OoP6qQmKZ7UDpC+RuGf7iO6o
KH9s0Z9R+u9o/8Zm7P/eXecLc36e8VpzlXxGgRfStkjO
-----END CERTIFICATE-----
Generated at Fri Jun 7 13:50:00 2024 by rpki-client on console-fra.rpki-client.org