Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/rSVmk2MkKTAEWLbQYFF7hpXHx7g.roa
File: rSVmk2MkKTAEWLbQYFF7hpXHx7g.roa (raw, json)
Hash identifier: 4wVDdHTde2CXd7XubFnG6UvyGcKJ4FGZ6/P+q8IUIzY=
Subject key identifier: AD:25:66:93:63:24:29:30:04:58:B6:D0:60:51:7B:86:95:C7:C7:B8
Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial: 018CC6B7E95935DBAECD75873763E96F8782
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/rSVmk2MkKTAEWLbQYFF7hpXHx7g.roa
Signing time: Mon 01 Jan 2024 20:29:50 +0000
ROA not before: Mon 01 Jan 2024 20:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207977
IP address blocks: 185.253.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:e9:59:35:db:ae:cd:75:87:37:63:e9:6f:87:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
Validity
Not Before: Jan 1 20:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad256693632429300458b6d060517b8695c7c7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f0:00:0e:b1:40:f4:a3:08:a8:fc:b3:80:61:
dd:79:e1:80:c7:35:f2:ee:a6:1a:a1:e5:58:46:56:
e7:46:d1:e2:8b:cd:58:76:94:63:b6:b5:5b:db:18:
31:fc:c3:2a:3f:5c:ef:a3:d6:a0:8a:00:e2:0b:cc:
d1:3c:5d:89:ab:a2:81:dc:60:f1:09:5d:ac:39:42:
f2:26:f3:97:41:31:fe:f8:72:23:06:22:d6:4f:b5:
ed:ce:ad:71:34:20:39:9b:2c:a7:9e:66:33:e4:3c:
6b:9c:7b:82:98:31:ce:68:b7:71:95:72:a2:17:a8:
fc:fb:ee:f3:48:61:64:a3:1a:20:f3:37:95:f5:8f:
35:b1:ae:81:86:37:57:60:ec:b4:8d:c0:e3:cb:1c:
b9:d7:6a:05:83:25:d4:2c:ef:3f:71:8e:0b:46:db:
21:d2:c4:50:4b:32:2a:49:7c:df:1a:16:ce:98:3e:
d0:5b:2f:74:a5:c7:6e:12:23:50:48:45:a7:b2:4b:
0b:a3:b0:da:d4:d4:b1:9b:7e:a7:1d:ad:5c:a1:6f:
61:4f:f5:1d:e3:e7:d9:fa:b1:65:e2:f2:63:4f:12:
82:54:cf:9e:76:3e:7b:ad:6c:e9:4a:4d:3c:4f:fa:
88:ce:58:72:3e:8b:c9:20:69:88:2b:26:4d:27:2e:
09:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:25:66:93:63:24:29:30:04:58:B6:D0:60:51:7B:86:95:C7:C7:B8
X509v3 Authority Key Identifier:
keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/rSVmk2MkKTAEWLbQYFF7hpXHx7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.139.0/24
Signature Algorithm: sha256WithRSAEncryption
30:55:42:c7:b9:a9:4f:1e:8d:b5:ab:33:eb:fb:56:b5:c6:95:
3b:b9:a1:0d:a0:f6:98:55:d8:ea:eb:67:b6:50:1a:05:72:85:
41:e4:96:e7:09:ee:e9:d2:70:c0:ae:53:cb:b2:5d:f5:f7:5a:
ff:e6:8c:0f:30:77:4b:07:05:a2:a1:ba:d0:ff:35:44:cd:74:
a7:a8:f7:19:55:4e:a1:90:3e:35:ca:c9:ca:a5:e8:6a:87:a3:
e6:38:46:02:eb:c5:b5:59:24:b1:bc:da:65:80:33:73:c3:3f:
7e:75:47:37:c8:af:5b:db:64:58:79:ad:20:a2:e2:ca:f2:6b:
26:fa:e5:f8:4b:5d:8f:51:57:76:f0:62:d1:15:84:5a:7c:5f:
70:ae:ca:ab:ce:a5:62:10:86:6d:64:ed:c7:09:1f:65:bf:22:
f9:77:8f:c2:2e:3e:fd:af:b5:98:e5:66:e3:f3:8c:cb:46:ea:
a0:18:da:38:2c:9e:25:15:a3:d8:20:11:f8:bc:d1:59:21:d6:
af:3c:71:ec:53:af:27:8d:1a:45:13:75:7e:ec:f7:60:3c:cd:
f8:ad:1b:62:50:c9:6c:72:5f:9f:97:3b:fb:88:a2:4e:62:79:
59:d3:b8:64:21:46:55:3b:3f:e3:f5:4f:fa:d2:94:76:49:db:
b4:fb:7b:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt+lZNduuzXWHN2Ppb4eCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNmM0OGNjY2NlMzIxZWMxODcwMjk1N2IzOTYzODFhMWYx
YTA0MTAwHhcNMjQwMTAxMjAyOTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDI1NjY5MzYzMjQyOTMwMDQ1OGI2ZDA2MDUxN2I4Njk1YzdjN2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/AADrFA9KMIqPyzgGHdeeGAxzXy
7qYaoeVYRlbnRtHii81YdpRjtrVb2xgx/MMqP1zvo9agigDiC8zRPF2Jq6KB3GDx
CV2sOULyJvOXQTH++HIjBiLWT7Xtzq1xNCA5myynnmYz5DxrnHuCmDHOaLdxlXKi
F6j8++7zSGFkoxog8zeV9Y81sa6BhjdXYOy0jcDjyxy512oFgyXULO8/cY4LRtsh
0sRQSzIqSXzfGhbOmD7QWy90pcduEiNQSEWnsksLo7Da1NSxm36nHa1coW9hT/Ud
4+fZ+rFl4vJjTxKCVM+edj57rWzpSk08T/qIzlhyPovJIGmIKyZNJy4JBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK0lZpNjJCkwBFi20GBRe4aVx8e4MB8GA1UdIwQY
MBaAFBxsSMzM4yHsGHApV7OWOBofGgQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84ZTRlNjgtYmQyYS00ZGMyLWFhZTYt
YTA1NjBhYzgyYmE3LzEvclNWbWsyTWtLVEFFV0xiUVlGRjdocFhIeDdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS84ZTRlNjgtYmQyYS00ZGMyLWFhZTYtYTA1NjBhYzgyYmE3
LzEvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf2LMA0G
CSqGSIb3DQEBCwUAA4IBAQAwVULHualPHo21qzPr+1a1xpU7uaENoPaYVdjq62e2
UBoFcoVB5JbnCe7p0nDArlPLsl3191r/5owPMHdLBwWiobrQ/zVEzXSnqPcZVU6h
kD41ysnKpehqh6PmOEYC68W1WSSxvNplgDNzwz9+dUc3yK9b22RYea0gouLK8msm
+uX4S12PUVd28GLRFYRafF9wrsqrzqViEIZtZO3HCR9lvyL5d4/CLj79r7WY5Wbj
84zLRuqgGNo4LJ4lFaPYIBH4vNFZIdavPHHsU68njRpFE3V+7PdgPM34rRtiUMls
cl+flzv7iKJOYnlZ07hkIUZVOz/j9U/60pR2Sdu0+3th
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:23:19 2024 by rpki-client on console-ams.rpki-client.org