Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/6sk2OJhPEnOZW0GRzaUcINd0QDg.roa
File: 6sk2OJhPEnOZW0GRzaUcINd0QDg.roa (raw, json)
Hash identifier: ySCfqUj3PzutAnGYMbFl6WMDMiz1+PO9goMXVg60lPA=
Subject key identifier: EA:C9:36:38:98:4F:12:73:99:5B:41:91:CD:A5:1C:20:D7:74:40:38
Certificate issuer: /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial: 018CC26D7F169074E27E259026DC157DE9AB
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/6sk2OJhPEnOZW0GRzaUcINd0QDg.roa
Signing time: Mon 01 Jan 2024 00:30:05 +0000
ROA not before: Mon 01 Jan 2024 00:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 185.14.239.0/24 maxlen: 24
185.14.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:7f:16:90:74:e2:7e:25:90:26:dc:15:7d:e9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Validity
Not Before: Jan 1 00:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eac93638984f1273995b4191cda51c20d7744038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:23:fc:04:82:b5:ee:87:4a:6c:3f:78:ea:
e8:b7:9e:d6:df:90:00:5e:11:55:10:68:80:3a:cf:
fe:61:00:c2:81:cf:5c:fe:cd:0e:55:4d:3c:fe:05:
fa:67:75:25:77:41:15:f3:b7:85:48:5f:21:30:09:
ac:90:ef:2d:9b:6b:2b:b7:0a:01:f0:ff:43:40:12:
6d:66:f1:92:29:3c:35:04:d7:59:5b:f4:40:da:9b:
de:13:ae:e9:91:3d:9e:3d:35:f8:46:38:e9:09:d3:
91:a1:00:dd:36:d4:d3:e6:c3:31:74:ec:57:43:74:
08:33:6c:ce:ce:46:6b:19:9f:a2:30:e8:25:86:5c:
79:da:53:c0:a3:ef:81:03:56:ca:77:7d:c8:72:95:
16:3d:a4:0d:b8:e9:34:f8:41:d6:3b:07:b3:b0:55:
04:3e:d0:a1:42:ba:c2:41:63:8c:dc:56:4b:21:55:
d3:8a:7f:28:fb:09:32:8a:09:44:e6:db:64:61:b1:
49:81:3b:61:b9:08:a9:b6:32:95:b3:10:4d:d4:65:
fc:79:fe:fd:e5:8f:64:83:6c:98:19:1e:a8:25:33:
b4:0e:d2:1b:5f:5a:3a:c7:95:05:b5:a7:07:ad:c8:
af:df:24:5a:4a:16:e4:f9:0c:99:26:06:fe:68:bc:
8a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C9:36:38:98:4F:12:73:99:5B:41:91:CD:A5:1C:20:D7:74:40:38
X509v3 Authority Key Identifier:
keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/6sk2OJhPEnOZW0GRzaUcINd0QDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.237.0/24
185.14.239.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:3c:f5:bb:8d:c1:72:8e:6e:34:75:fd:51:c2:34:5c:c6:2d:
6c:81:72:cb:a6:8a:7f:25:3e:0b:21:df:48:d1:eb:6c:b3:57:
81:c2:d1:d1:ec:ad:4b:ab:67:66:8e:56:c9:3c:6d:2c:bc:9b:
21:43:42:db:80:34:dc:54:4b:ab:25:8f:c1:a5:ff:ae:de:35:
29:0c:3b:02:b6:51:e1:f5:b6:06:18:6c:ff:23:e7:34:ca:1c:
e0:8c:20:01:66:85:6e:59:eb:ea:30:23:29:d1:0b:ff:a9:96:
ec:20:1e:8e:f3:6b:9d:e5:85:8f:ac:37:ab:36:06:d2:35:d3:
26:2d:66:3a:8c:af:01:6f:6d:c4:a8:b9:7d:dc:e4:a3:17:cb:
43:3a:00:1a:b4:0e:9a:f0:e5:8f:39:18:48:f8:a8:4d:d9:16:
6e:f0:f6:39:87:d6:4c:19:75:04:db:00:7e:88:57:22:cd:0c:
df:bc:f4:29:5e:fa:bb:e3:24:5a:a3:3e:30:47:f7:88:bc:5a:
e5:7f:06:2e:43:ee:e2:87:42:0c:61:83:0b:87:5c:ab:3b:6b:
78:1e:9c:cd:97:71:8f:43:74:8b:ee:e9:c8:1e:cb:98:30:20:
81:64:2a:51:9c:fb:4a:7d:be:63:c1:65:92:69:a7:cc:81:17:
a2:9f:55:db
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzCbX8WkHTifiWQJtwVfemrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkYzgxZDI0YzQ1ZGRhYTM0NWY5MDY0ZGUyOWZiY2E3YjEy
OWE1MmMwHhcNMjQwMTAxMDAzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWM5MzYzODk4NGYxMjczOTk1YjQxOTFjZGE1MWMyMGQ3NzQ0MDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfEj/ASCte6HSmw/eOrot57W35AA
XhFVEGiAOs/+YQDCgc9c/s0OVU08/gX6Z3Uld0EV87eFSF8hMAmskO8tm2srtwoB
8P9DQBJtZvGSKTw1BNdZW/RA2pveE67pkT2ePTX4RjjpCdORoQDdNtTT5sMxdOxX
Q3QIM2zOzkZrGZ+iMOglhlx52lPAo++BA1bKd33IcpUWPaQNuOk0+EHWOwezsFUE
PtChQrrCQWOM3FZLIVXTin8o+wkyiglE5ttkYbFJgTthuQiptjKVsxBN1GX8ef79
5Y9kg2yYGR6oJTO0DtIbX1o6x5UFtacHrciv3yRaShbk+QyZJgb+aLyKKwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOrJNjiYTxJzmVtBkc2lHCDXdEA4MB8GA1UdIwQY
MBaAFC3IHSTEXdqjRfkGTeKfvKexKaUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iZjNkYjUtYTMzZi00MzExLWFjZDkt
MmZjYzBiNzQ5YjMyLzEvNnNrMk9KaFBFbk9aVzBHUnphVWNJTmQwUURnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iZjNkYjUtYTMzZi00MzExLWFjZDktMmZjYzBiNzQ5YjMy
LzEvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuQ7tAwQA
uQ7vMA0GCSqGSIb3DQEBCwUAA4IBAQAdPPW7jcFyjm40df1RwjRcxi1sgXLLpop/
JT4LId9I0etss1eBwtHR7K1Lq2dmjlbJPG0svJshQ0LbgDTcVEurJY/Bpf+u3jUp
DDsCtlHh9bYGGGz/I+c0yhzgjCABZoVuWevqMCMp0Qv/qZbsIB6O82ud5YWPrDer
NgbSNdMmLWY6jK8Bb23EqLl93OSjF8tDOgAatA6a8OWPORhI+KhN2RZu8PY5h9ZM
GXUE2wB+iFcizQzfvPQpXvq74yRaoz4wR/eIvFrlfwYuQ+7ih0IMYYMLh1yrO2t4
HpzNl3GPQ3SL7unIHsuYMCCBZCpRnPtKfb5jwWWSaafMgRein1Xb
-----END CERTIFICATE-----
Generated at Sat May 4 13:53:22 2024 by rpki-client on console-ams.rpki-client.org