Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/v3352m4m6XAGYoiaBUFoa_bLWn0.roa
File: v3352m4m6XAGYoiaBUFoa_bLWn0.roa (raw, json)
Hash identifier: dvpsWqvxPQcicc0Z93L6whIJ3F/9fxGwqpYrGlyLVu8=
Subject key identifier: BF:7D:F9:DA:6E:26:E9:70:06:62:88:9A:05:41:68:6B:F6:CB:5A:7D
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 018CC72750571BFAADC4D51C4BA076208303
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/v3352m4m6XAGYoiaBUFoa_bLWn0.roa
Signing time: Mon 01 Jan 2024 22:31:31 +0000
ROA not before: Mon 01 Jan 2024 22:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 185.199.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 10:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:50:57:1b:fa:ad:c4:d5:1c:4b:a0:76:20:83:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 1 22:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf7df9da6e26e9700662889a0541686bf6cb5a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3c:5a:88:2d:ff:ed:51:fa:0f:b8:93:6c:5c:
e4:5b:08:1e:57:96:93:7d:97:15:91:78:1a:a1:95:
21:ba:98:14:75:b2:b9:1e:11:ac:91:f0:5c:9f:8c:
40:a1:5d:6a:54:c4:66:ea:63:d2:73:f8:7a:44:25:
34:9b:bb:a1:3e:c9:4f:6b:55:64:77:d6:1b:4e:77:
77:85:b2:4c:6d:2f:17:65:fa:2a:66:02:b2:12:a8:
8a:a9:67:38:85:bd:37:b0:58:7b:e3:b8:75:db:80:
47:5d:1e:de:ea:26:4d:3e:21:4d:f7:14:9a:35:d9:
43:7b:a3:a2:fb:72:02:db:33:67:70:24:3b:9c:7f:
25:90:30:a8:e8:d9:15:9c:c5:f2:66:41:d2:3d:0c:
28:e5:ea:5c:25:4c:29:9e:fd:b2:77:83:f7:a9:eb:
7f:52:3c:c3:0e:55:bf:10:e5:c6:a3:16:6d:b7:45:
fa:e0:de:a6:70:a0:ef:30:d7:92:c4:22:52:41:7c:
04:9c:92:e6:3a:5c:68:ee:a0:29:eb:fe:7c:fa:ac:
cf:cd:4d:09:d4:00:29:89:75:04:23:24:45:ae:01:
a9:e4:d2:4d:68:1d:36:65:d1:84:00:19:a4:31:d5:
2f:d3:a2:d6:23:6b:30:e3:51:cb:f8:22:37:36:61:
01:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7D:F9:DA:6E:26:E9:70:06:62:88:9A:05:41:68:6B:F6:CB:5A:7D
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/v3352m4m6XAGYoiaBUFoa_bLWn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.227.0/24
Signature Algorithm: sha256WithRSAEncryption
11:eb:db:28:a7:7f:25:40:4a:91:61:51:21:de:bf:de:85:0e:
f1:41:21:90:01:fa:3c:2f:11:00:7c:ac:29:c9:cb:4e:91:e2:
f5:68:e1:9f:c7:71:15:0c:53:b2:a9:e9:a5:76:98:0f:19:c8:
92:78:ab:28:7e:24:a4:a8:7b:32:4f:2e:99:da:f6:ce:b7:88:
23:4b:58:3e:4f:00:1e:c4:a6:44:03:a9:98:a0:41:66:3d:55:
33:11:8d:f6:f0:27:2f:ff:df:93:22:11:63:c4:82:c8:cc:2e:
35:33:c0:a6:8a:78:fd:23:53:fe:ba:4f:d5:8c:8e:34:e8:30:
a8:d3:09:07:06:7a:d8:f7:42:a7:ef:93:bc:23:c7:d6:49:f9:
dc:19:f1:74:68:8e:64:60:63:e7:9d:bd:3d:25:7d:cd:b0:0c:
9a:80:44:56:f2:bf:13:a5:f6:a5:3a:bb:77:8f:fe:e6:7e:58:
4d:fe:38:d0:a4:32:53:73:78:ef:30:4c:35:34:d3:16:93:c4:
68:85:48:77:87:a3:16:f5:17:90:30:ff:b3:97:0c:7a:7e:21:
eb:92:af:a9:0e:40:e8:59:e6:fd:0b:0e:07:35:45:5f:02:d4:
c3:16:23:da:d7:6e:0e:c9:03:c5:23:28:7f:d9:ae:95:1a:b9:
19:29:b2:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJ1BXG/qtxNUcS6B2IIMDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYzhiNzNhYjdiZGViNzZmZjQ4YjJjYTA5OTYxNmVkYmU3
MWM0MjYwHhcNMjQwMTAxMjIzMTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjdkZjlkYTZlMjZlOTcwMDY2Mjg4OWEwNTQxNjg2YmY2Y2I1YTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTxaiC3/7VH6D7iTbFzkWwgeV5aT
fZcVkXgaoZUhupgUdbK5HhGskfBcn4xAoV1qVMRm6mPSc/h6RCU0m7uhPslPa1Vk
d9YbTnd3hbJMbS8XZfoqZgKyEqiKqWc4hb03sFh747h124BHXR7e6iZNPiFN9xSa
NdlDe6Oi+3IC2zNncCQ7nH8lkDCo6NkVnMXyZkHSPQwo5epcJUwpnv2yd4P3qet/
UjzDDlW/EOXGoxZtt0X64N6mcKDvMNeSxCJSQXwEnJLmOlxo7qAp6/58+qzPzU0J
1AApiXUEIyRFrgGp5NJNaB02ZdGEABmkMdUv06LWI2sw41HL+CI3NmEBWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL99+dpuJulwBmKImgVBaGv2y1p9MB8GA1UdIwQY
MBaAFIHItzq3vet2/0iyygmWFu2+ccQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt
ZDg0ODhiM2FiNDJmLzEvdjMzNTJtNG02WEFHWW9pYUJVRm9hX2JMV24wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm
LzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucfjMA0G
CSqGSIb3DQEBCwUAA4IBAQAR69sop38lQEqRYVEh3r/ehQ7xQSGQAfo8LxEAfKwp
yctOkeL1aOGfx3EVDFOyqemldpgPGciSeKsofiSkqHsyTy6Z2vbOt4gjS1g+TwAe
xKZEA6mYoEFmPVUzEY328Ccv/9+TIhFjxILIzC41M8Cminj9I1P+uk/VjI406DCo
0wkHBnrY90Kn75O8I8fWSfncGfF0aI5kYGPnnb09JX3NsAyagERW8r8TpfalOrt3
j/7mflhN/jjQpDJTc3jvMEw1NNMWk8RohUh3h6MW9ReQMP+zlwx6fiHrkq+pDkDo
Web9Cw4HNUVfAtTDFiPa124OyQPFIyh/2a6VGrkZKbLh
-----END CERTIFICATE-----
Generated at Mon May 6 18:19:08 2024 by rpki-client on console-ams.rpki-client.org