Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/j0LyHwrHXe9mWHnzvu49wBc_v_k.roa
File: j0LyHwrHXe9mWHnzvu49wBc_v_k.roa (raw, json)
Hash identifier: H/Pf66KowOMol/3eJ4uTTBhZEXVs4WRTJkkP9ds1ZLw=
Subject key identifier: 8F:42:F2:1F:0A:C7:5D:EF:66:58:79:F3:BE:EE:3D:C0:17:3F:BF:F9
Certificate issuer: /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Certificate serial: 018CC64B00541B46749FC0BD1F4A4BC1C803
Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/j0LyHwrHXe9mWHnzvu49wBc_v_k.roa
Signing time: Mon 01 Jan 2024 18:30:53 +0000
ROA not before: Mon 01 Jan 2024 18:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210839
IP address blocks: 185.224.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:00:54:1b:46:74:9f:c0:bd:1f:4a:4b:c1:c8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Validity
Not Before: Jan 1 18:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f42f21f0ac75def665879f3beee3dc0173fbff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:20:5b:21:4f:95:c5:e1:6d:31:16:49:6a:dd:
0c:ba:e8:2a:aa:93:57:f8:a6:54:9e:78:e0:84:99:
fa:86:63:15:b0:24:dd:d4:93:18:ff:ea:cb:88:6a:
aa:aa:97:1f:b9:ea:82:e2:aa:42:da:a0:19:10:d7:
62:bc:69:fb:71:41:a3:31:fb:66:8c:3b:6c:3b:aa:
ea:6d:ee:4c:90:d4:35:ac:f5:1d:81:f0:1a:14:88:
93:84:1d:9a:57:3b:8a:29:24:10:8d:5c:ac:57:b1:
4e:b1:55:05:8e:28:38:04:ad:82:8f:83:30:3f:2e:
83:59:a5:97:bf:bc:b4:9f:6f:50:18:c8:f9:7c:8e:
cf:f8:37:0f:fd:1c:50:33:f0:5d:e1:7c:1c:4d:ee:
32:49:fa:f2:38:49:7f:5d:46:6a:c3:6e:91:f7:14:
f5:e9:e0:01:5f:cc:71:46:73:4c:d5:1f:82:01:08:
9e:59:e5:7e:7b:77:1e:f1:55:bf:f0:8e:a2:b6:16:
55:b2:0c:30:0b:b3:d2:42:aa:50:ff:a0:37:18:00:
58:b2:a6:f4:79:d0:a5:b6:e5:00:64:34:78:5e:75:
f5:d5:b4:52:12:8c:07:ee:0b:01:72:6a:09:24:9d:
e6:fa:fb:3a:75:0d:a7:66:69:68:50:95:48:db:7b:
e5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:42:F2:1F:0A:C7:5D:EF:66:58:79:F3:BE:EE:3D:C0:17:3F:BF:F9
X509v3 Authority Key Identifier:
keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/j0LyHwrHXe9mWHnzvu49wBc_v_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.172.0/24
Signature Algorithm: sha256WithRSAEncryption
66:9a:9d:40:1b:8d:01:73:dd:61:e1:21:59:05:61:ed:47:aa:
e6:c8:62:79:16:35:0f:a3:2a:60:1e:bb:e3:f5:2d:25:6f:90:
41:e6:bf:c9:ad:40:2b:7d:be:ab:f5:94:cf:f1:98:d7:42:ad:
0f:d8:1f:a1:bc:98:69:0a:fa:47:c5:1a:4a:a1:f3:5c:ea:a3:
55:ca:6e:1b:9c:bf:fe:0e:e4:be:ea:1d:92:51:49:8f:fc:2b:
98:a3:2e:8e:36:29:cc:af:5d:9e:75:e7:19:93:5e:c5:02:45:
eb:13:85:83:45:0c:21:8e:09:a0:f6:4b:1a:e7:7b:e1:ae:31:
a1:82:2e:04:a5:22:64:b7:8e:38:55:de:aa:d4:8a:95:3c:69:
54:54:7a:c5:b9:43:ae:d2:7f:43:a7:84:7d:d1:e1:b4:59:eb:
de:7c:51:9a:32:94:4a:f9:ba:90:c7:39:35:78:a7:a7:02:2b:
73:0c:84:44:c2:4e:f7:ef:6b:79:53:e6:fc:5d:20:6c:85:23:
97:33:11:30:05:d8:5a:f6:8e:f7:a2:3f:8a:7a:7b:98:f7:15:
88:00:f9:45:de:27:48:85:8e:81:6a:51:a8:d4:f1:ab:2f:63:
c4:63:4e:c9:2b:2f:38:1a:c5:46:31:a8:91:31:f3:3c:38:b8:
3d:eb:73:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSwBUG0Z0n8C9H0pLwcgDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYmJmOWJlZTUzMWYzZGVlMmQwM2JiZjRlNjllZjgyZWVk
Yjk5YWYwHhcNMjQwMTAxMTgzMDUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjQyZjIxZjBhYzc1ZGVmNjY1ODc5ZjNiZWVlM2RjMDE3M2ZiZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSBbIU+VxeFtMRZJat0MuugqqpNX
+KZUnnjghJn6hmMVsCTd1JMY/+rLiGqqqpcfueqC4qpC2qAZENdivGn7cUGjMftm
jDtsO6rqbe5MkNQ1rPUdgfAaFIiThB2aVzuKKSQQjVysV7FOsVUFjig4BK2Cj4Mw
Py6DWaWXv7y0n29QGMj5fI7P+DcP/RxQM/Bd4XwcTe4ySfryOEl/XUZqw26R9xT1
6eABX8xxRnNM1R+CAQieWeV+e3ce8VW/8I6ithZVsgwwC7PSQqpQ/6A3GABYsqb0
edCltuUAZDR4XnX11bRSEowH7gsBcmoJJJ3m+vs6dQ2nZmloUJVI23vliQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI9C8h8Kx13vZlh5877uPcAXP7/5MB8GA1UdIwQY
MBaAFPG7+b7lMfPe4tA7v05p74Lu25mvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGJ2NXZ1VXg4OTdpMER1X1RtbnZndTdibWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zZjExMGItZGVkYi00OTBmLTllNjYt
NmZhZDA4YWEyMGVlLzEvajBMeUh3ckhYZTltV0huenZ1NDl3QmNfdl9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8zZjExMGItZGVkYi00OTBmLTllNjYtNmZhZDA4YWEyMGVl
LzEvOGJ2NXZ1VXg4OTdpMER1X1RtbnZndTdibWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueCsMA0G
CSqGSIb3DQEBCwUAA4IBAQBmmp1AG40Bc91h4SFZBWHtR6rmyGJ5FjUPoypgHrvj
9S0lb5BB5r/JrUArfb6r9ZTP8ZjXQq0P2B+hvJhpCvpHxRpKofNc6qNVym4bnL/+
DuS+6h2SUUmP/CuYoy6ONinMr12edecZk17FAkXrE4WDRQwhjgmg9ksa53vhrjGh
gi4EpSJkt444Vd6q1IqVPGlUVHrFuUOu0n9Dp4R90eG0WevefFGaMpRK+bqQxzk1
eKenAitzDIREwk7372t5U+b8XSBshSOXMxEwBdha9o73oj+KenuY9xWIAPlF3idI
hY6BalGo1PGrL2PEY07JKy84GsVGMaiRMfM8OLg963Pj
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:23:33 2024 by rpki-client on console-ams.rpki-client.org