Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/PsKLxhOECc0IYoZchPsSRwatrew.roa
File: PsKLxhOECc0IYoZchPsSRwatrew.roa (raw, json)
Hash identifier: XNdX84RyK64P1iGabXlXbbQgfIluTOOSzNKCPCKMOdw=
Subject key identifier: 3E:C2:8B:C6:13:84:09:CD:08:62:86:5C:84:FB:12:47:06:AD:AD:EC
Certificate issuer: /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Certificate serial: 018CC94E51B1283AF7C06B0DA41BA0B0ECF1
Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/PsKLxhOECc0IYoZchPsSRwatrew.roa
Signing time: Tue 02 Jan 2024 08:33:22 +0000
ROA not before: Tue 02 Jan 2024 08:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 11342
IP address blocks: 185.156.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:51:b1:28:3a:f7:c0:6b:0d:a4:1b:a0:b0:ec:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Validity
Not Before: Jan 2 08:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ec28bc6138409cd0862865c84fb124706adadec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:07:5f:b0:2c:9f:4b:c6:d0:74:96:21:3f:8a:
36:a1:d0:18:cc:b5:5d:aa:0c:3b:ef:ba:0e:a8:62:
ea:5a:7d:71:63:51:f2:75:97:00:7a:f6:a8:59:28:
9a:a0:02:19:de:53:9a:3e:99:4d:0e:af:63:03:42:
e4:f7:1e:e3:eb:da:82:6b:f6:b1:19:f3:a9:bb:fa:
30:af:bb:82:e1:5d:62:82:ed:b1:4f:4a:81:83:87:
fe:57:42:fd:87:f7:95:70:d5:33:b9:fa:34:33:b4:
a6:42:1e:98:50:97:9c:0b:24:e8:b4:e4:72:fa:b0:
58:d6:4f:fb:b0:18:8e:17:19:5e:b2:bc:f3:15:be:
ee:f9:b0:3b:77:62:a0:3e:14:09:30:c4:66:88:35:
b8:ce:fb:04:4a:5e:80:21:6c:aa:e1:15:00:81:f3:
f8:59:b4:db:a5:47:92:d4:29:6c:7b:ea:3b:e9:2b:
62:31:d5:b3:ec:a0:0b:c7:73:3a:52:17:3d:26:05:
a0:2c:cb:d6:a8:f7:8e:25:10:bf:81:1f:8c:f6:fd:
d5:42:96:3e:a9:69:af:df:59:18:e0:e3:3e:eb:d1:
d5:2f:f1:e9:8d:d6:eb:ff:de:cd:20:e2:64:7b:93:
60:52:0f:79:6e:b9:ef:f2:11:c2:c7:b3:b7:d3:a6:
ff:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C2:8B:C6:13:84:09:CD:08:62:86:5C:84:FB:12:47:06:AD:AD:EC
X509v3 Authority Key Identifier:
keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/PsKLxhOECc0IYoZchPsSRwatrew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.184.0/22
Signature Algorithm: sha256WithRSAEncryption
80:05:91:46:08:a5:44:2e:12:0a:92:9a:66:36:71:55:93:56:
48:68:18:8c:6a:ea:0e:af:22:36:ad:f5:c6:22:c4:8b:63:07:
3c:ec:e0:05:48:99:a8:f3:a1:76:b5:7d:80:2d:e0:1b:78:db:
1a:a8:ad:22:13:e7:55:b5:6a:6f:4c:3f:ad:cd:55:aa:87:3f:
b6:16:c5:9a:30:40:5a:88:b4:dc:0c:18:b1:15:70:53:21:cb:
d9:c9:7d:22:3f:d0:9f:e5:e0:4e:7a:86:3c:61:94:c1:6f:81:
0b:f1:44:9f:ff:20:f8:b7:02:b0:1a:cf:bb:09:bb:77:7a:0e:
95:a3:89:1a:a6:70:b1:a3:da:8a:af:4e:f3:3c:29:69:be:d9:
79:a7:64:6f:0e:f1:87:86:89:3e:c8:d3:fb:17:bf:31:6a:36:
c1:12:69:d2:23:0e:b8:91:ed:30:78:03:7e:8e:d7:90:cf:da:
62:21:d8:54:27:2f:be:da:39:61:87:4c:c1:ab:91:3e:13:88:
92:35:fc:0f:ea:7f:c6:69:7b:2d:67:65:5c:bc:ef:65:94:21:
51:d7:17:d6:98:14:15:1c:d4:50:f3:7f:b4:73:0f:4f:0a:39:
9a:bb:82:90:98:0e:95:22:2f:86:5d:5a:d9:75:df:c5:c4:67:
24:eb:b8:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTlGxKDr3wGsNpBugsOzxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZWZiNTNmMjY2ZTExZTZlZDVhMTNlYjNlOTdmNGI5NjAx
ZGQ2ZTAwHhcNMjQwMTAyMDgzMzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWMyOGJjNjEzODQwOWNkMDg2Mjg2NWM4NGZiMTI0NzA2YWRhZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwdfsCyfS8bQdJYhP4o2odAYzLVd
qgw777oOqGLqWn1xY1HydZcAevaoWSiaoAIZ3lOaPplNDq9jA0Lk9x7j69qCa/ax
GfOpu/owr7uC4V1igu2xT0qBg4f+V0L9h/eVcNUzufo0M7SmQh6YUJecCyTotORy
+rBY1k/7sBiOFxlesrzzFb7u+bA7d2KgPhQJMMRmiDW4zvsESl6AIWyq4RUAgfP4
WbTbpUeS1Clse+o76StiMdWz7KALx3M6Uhc9JgWgLMvWqPeOJRC/gR+M9v3VQpY+
qWmv31kY4OM+69HVL/Hpjdbr/97NIOJke5NgUg95brnv8hHCx7O306b/QwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD7Ci8YThAnNCGKGXIT7EkcGra3sMB8GA1UdIwQY
MBaAFEbvtT8mbhHm7VoT6z6X9LlgHdbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnUtMVB5WnVFZWJ0V2hQclBwZjB1V0FkMXVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny83YmZiMTEtYmUyNi00YzRlLTljMzUt
ZDdjNjcwODQxNGZhLzEvUHNLTHhoT0VDYzBJWW9aY2hQc1NSd2F0cmV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny83YmZiMTEtYmUyNi00YzRlLTljMzUtZDdjNjcwODQxNGZh
LzEvUnUtMVB5WnVFZWJ0V2hQclBwZjB1V0FkMXVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZy4MA0G
CSqGSIb3DQEBCwUAA4IBAQCABZFGCKVELhIKkppmNnFVk1ZIaBiMauoOryI2rfXG
IsSLYwc87OAFSJmo86F2tX2ALeAbeNsaqK0iE+dVtWpvTD+tzVWqhz+2FsWaMEBa
iLTcDBixFXBTIcvZyX0iP9Cf5eBOeoY8YZTBb4EL8USf/yD4twKwGs+7Cbt3eg6V
o4kapnCxo9qKr07zPClpvtl5p2RvDvGHhok+yNP7F78xajbBEmnSIw64ke0weAN+
jteQz9piIdhUJy++2jlhh0zBq5E+E4iSNfwP6n/GaXstZ2VcvO9llCFR1xfWmBQV
HNRQ83+0cw9PCjmau4KQmA6VIi+GXVrZdd/FxGck67jh
-----END CERTIFICATE-----
Generated at Fri Jun 7 22:48:43 2024 by rpki-client on console-ams.rpki-client.org