Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/biRr1nBVb1l73p8VH29kCumDrYg.roa
File: biRr1nBVb1l73p8VH29kCumDrYg.roa (raw, json)
Hash identifier: sxTrUaQnDN/cDyMLI6RfUjFhJJpMZI5NuezhUjmCZMI=
Subject key identifier: 6E:24:6B:D6:70:55:6F:59:7B:DE:9F:15:1F:6F:64:0A:E9:83:AD:88
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 018CC56E1F76F7B57B4E446F62B080BB46CD
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/biRr1nBVb1l73p8VH29kCumDrYg.roa
Signing time: Mon 01 Jan 2024 14:29:37 +0000
ROA not before: Mon 01 Jan 2024 14:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213261
IP address blocks: 185.20.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:1f:76:f7:b5:7b:4e:44:6f:62:b0:80:bb:46:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: Jan 1 14:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e246bd670556f597bde9f151f6f640ae983ad88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d4:d3:46:ea:99:fa:bb:b7:c6:f3:25:05:fa:
ed:77:35:40:a8:b5:ec:a9:dc:1f:ee:4b:2b:21:8f:
48:96:b7:7c:69:eb:c0:c3:27:f6:92:34:d8:cb:38:
95:66:19:f5:45:7b:2b:c1:7f:18:8f:6a:a0:98:eb:
b0:13:be:3b:29:34:5e:d7:b1:5e:10:c8:ad:38:c9:
b8:85:9c:c5:5d:71:c1:9d:f3:42:70:4d:e9:22:56:
4c:b1:3c:b1:04:6f:7e:4d:b5:2a:59:73:8f:e7:28:
fa:5c:72:32:8e:f7:09:ea:d7:b9:c8:20:6c:56:77:
fd:b7:0b:4b:85:5c:23:c6:c6:b4:1b:2d:0e:e6:54:
08:35:28:cb:bd:0d:fc:3a:dd:57:a4:fd:a4:3b:39:
35:31:f4:1e:d8:2f:37:4c:21:4d:16:7d:78:87:2c:
4b:5a:a7:19:a2:43:47:d6:2d:2f:57:4c:49:2e:3a:
0a:02:48:08:dd:43:33:78:a6:1e:d5:f1:29:bb:c4:
28:20:bf:a0:98:bd:35:c3:0c:3b:18:65:c3:48:9b:
35:f6:cf:2c:c3:1d:b4:2c:03:b5:b9:ba:65:fc:25:
eb:64:69:99:3f:4d:b2:8e:40:4f:0b:8e:4a:6b:3a:
5e:d4:5c:b9:05:1e:82:86:4b:3d:e0:1c:c4:ca:a8:
c7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:24:6B:D6:70:55:6F:59:7B:DE:9F:15:1F:6F:64:0A:E9:83:AD:88
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/biRr1nBVb1l73p8VH29kCumDrYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.6.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:26:13:ab:fa:77:be:da:52:26:09:de:e8:03:c7:48:40:46:
a8:c1:bd:91:f1:b6:a5:b2:94:76:8d:ee:61:7b:bf:a6:64:0c:
3b:ec:44:32:34:e6:d5:79:3d:20:46:bc:44:04:9f:78:05:cf:
a9:05:58:f4:eb:0c:bf:bc:1a:aa:e0:4d:c9:4b:4b:f7:66:2e:
52:52:53:69:e3:f4:d4:28:37:be:22:77:8d:07:09:51:73:07:
ba:10:c2:fe:81:c9:d6:82:b3:94:94:dd:f5:61:03:70:06:d1:
bc:f9:d0:40:27:da:4e:51:ea:88:a4:09:1a:4b:b4:45:23:93:
f6:15:f3:bd:9d:d9:d8:8d:23:d5:b9:9a:ea:ee:0d:6e:ce:50:
89:d5:2c:3e:23:67:10:c5:14:2c:8d:b3:9f:3b:86:37:8b:07:
a6:97:63:e5:5f:d5:b6:f0:83:28:97:c7:48:e3:50:82:ba:15:
f5:24:7f:b4:f8:92:fd:2a:9f:2b:81:90:cf:04:00:67:1b:4c:
f0:86:cd:c5:91:c2:4c:b5:31:34:1e:cd:be:7d:b7:bb:1c:ae:
e1:73:f4:19:d2:bd:3f:53:33:44:94:25:d3:ff:90:15:02:78:
0a:76:2e:a3:28:1f:fc:9d:6d:63:2c:85:91:0e:2e:b5:c6:84:
4a:5a:d6:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbh9297V7TkRvYrCAu0bNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMDVmZmE1Y2QyOGNiZDAwZDAyNjg0NDJjNzg4OGZiMmFh
M2E1ZjgwHhcNMjQwMTAxMTQyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTI0NmJkNjcwNTU2ZjU5N2JkZTlmMTUxZjZmNjQwYWU5ODNhZDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNTTRuqZ+ru3xvMlBfrtdzVAqLXs
qdwf7ksrIY9Ilrd8aevAwyf2kjTYyziVZhn1RXsrwX8Yj2qgmOuwE747KTRe17Fe
EMitOMm4hZzFXXHBnfNCcE3pIlZMsTyxBG9+TbUqWXOP5yj6XHIyjvcJ6te5yCBs
Vnf9twtLhVwjxsa0Gy0O5lQINSjLvQ38Ot1XpP2kOzk1MfQe2C83TCFNFn14hyxL
WqcZokNH1i0vV0xJLjoKAkgI3UMzeKYe1fEpu8QoIL+gmL01www7GGXDSJs19s8s
wx20LAO1ubpl/CXrZGmZP02yjkBPC45Kazpe1Fy5BR6Chks94BzEyqjHwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG4ka9ZwVW9Ze96fFR9vZArpg62IMB8GA1UdIwQY
MBaAFCwF/6XNKMvQDQJoRCx4iPsqo6X4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEFYX3BjMG95OUFOQW1oRUxIaUkteXFqcGZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85MmU3NGYtMTE1OS00ZTg5LWIxNWMt
NzYzNzc5M2Y4ZjNlLzEvYmlScjFuQlZiMWw3M3A4VkgyOWtDdW1EcllnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC85MmU3NGYtMTE1OS00ZTg5LWIxNWMtNzYzNzc5M2Y4ZjNl
LzEvTEFYX3BjMG95OUFOQW1oRUxIaUkteXFqcGZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRQGMA0G
CSqGSIb3DQEBCwUAA4IBAQBbJhOr+ne+2lImCd7oA8dIQEaowb2R8balspR2je5h
e7+mZAw77EQyNObVeT0gRrxEBJ94Bc+pBVj06wy/vBqq4E3JS0v3Zi5SUlNp4/TU
KDe+IneNBwlRcwe6EML+gcnWgrOUlN31YQNwBtG8+dBAJ9pOUeqIpAkaS7RFI5P2
FfO9ndnYjSPVuZrq7g1uzlCJ1Sw+I2cQxRQsjbOfO4Y3iweml2PlX9W28IMol8dI
41CCuhX1JH+0+JL9Kp8rgZDPBABnG0zwhs3FkcJMtTE0Hs2+fbe7HK7hc/QZ0r0/
UzNElCXT/5AVAngKdi6jKB/8nW1jLIWRDi61xoRKWtaf
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:11:55 2024 by rpki-client on console-ams.rpki-client.org