Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/RSX63BjJyqBQfcSpzlJBIX1Z9Ts.roa
File: RSX63BjJyqBQfcSpzlJBIX1Z9Ts.roa (raw, json)
Hash identifier: TJkLDKZ70AtS1IDjPWPHEVucYhvi1Fv+HRhS1BRNtgU=
Subject key identifier: 45:25:FA:DC:18:C9:CA:A0:50:7D:C4:A9:CE:52:41:21:7D:59:F5:3B
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 01905441D58017A33ECD202095BE0B78DE79
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/RSX63BjJyqBQfcSpzlJBIX1Z9Ts.roa
Signing time: Wed 26 Jun 2024 11:15:18 +0000
ROA not before: Wed 26 Jun 2024 11:15:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 185.200.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:54:41:d5:80:17:a3:3e:cd:20:20:95:be:0b:78:de:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Jun 26 11:15:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4525fadc18c9caa0507dc4a9ce5241217d59f53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:59:18:50:00:8e:4c:4e:32:25:64:ee:ef:
1e:05:38:44:0a:90:03:be:04:dc:22:81:06:64:72:
18:e8:c1:f8:93:89:6d:29:ca:49:82:2b:71:66:88:
89:f1:72:e5:7b:6a:d9:61:93:46:aa:78:28:81:9e:
3f:11:a5:08:f0:78:70:10:12:fa:75:e8:6b:1f:d6:
b1:76:45:cb:28:d5:4c:88:1e:6e:26:fc:0d:f4:02:
5f:a4:2e:c9:fa:72:e0:d7:a8:6e:a5:ea:26:ad:ca:
5c:72:6d:45:61:00:ef:5b:1a:79:ed:e0:a7:55:4b:
b4:67:ce:8a:84:dc:a4:ba:49:f3:fd:89:bd:59:36:
bd:3f:51:23:fa:e5:7b:d9:ea:64:af:ce:56:f6:bd:
f3:ca:26:41:c6:ea:48:03:bd:b6:3d:62:56:36:92:
66:56:67:6d:e1:3d:e9:18:fd:78:87:3e:34:27:40:
ba:ec:e9:1a:5e:0b:cf:f3:2f:53:19:fc:e2:c0:3a:
86:95:e1:2f:c9:df:6e:69:39:4e:32:d8:b2:79:b3:
bf:02:d6:c0:16:55:51:4e:a7:2d:e3:d5:3a:5d:dd:
1e:61:85:d7:46:d2:6d:04:f6:9e:69:aa:20:cc:2d:
18:f5:49:80:68:71:7a:4d:89:b1:65:c8:01:40:af:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:25:FA:DC:18:C9:CA:A0:50:7D:C4:A9:CE:52:41:21:7D:59:F5:3B
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/RSX63BjJyqBQfcSpzlJBIX1Z9Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.244.0/24
Signature Algorithm: sha256WithRSAEncryption
76:9a:05:8f:8f:19:8d:96:e4:4f:2b:54:d1:6d:dc:12:2d:cc:
36:15:20:16:56:2d:ae:93:2f:f1:60:dc:8b:64:f0:75:17:13:
8b:2a:53:7d:ec:03:7d:8f:68:ae:e9:8a:91:51:8f:6f:35:45:
08:92:84:75:45:70:39:24:11:d6:08:81:9e:7e:f7:54:fe:64:
45:42:5c:13:b4:8d:2e:34:55:33:1c:aa:e6:59:87:d9:b8:03:
f6:4c:b5:22:0f:de:1d:76:46:d9:b2:46:27:56:3c:6f:f8:09:
9e:93:74:d3:81:b8:94:42:88:4f:32:a0:ee:7f:c0:c8:ca:50:
3c:b8:00:52:fb:09:7d:51:41:ca:64:a3:8d:c5:91:8f:c6:da:
58:ef:0b:1b:06:52:fb:fd:f1:61:b1:a9:50:ef:7c:7c:88:00:
62:14:53:63:9e:1d:80:9e:33:b9:95:62:06:e8:72:1e:f9:81:
04:80:96:dc:df:bb:89:e3:50:db:73:6a:8b:75:1f:64:ff:eb:
45:41:6e:b3:be:53:c8:b7:10:d9:c7:0f:ba:e9:4e:a3:4c:4e:
13:e7:5b:13:96:40:18:55:15:35:52:30:30:7a:11:f9:f9:b3:
76:d7:07:00:85:a0:3f:be:52:50:d2:0c:29:6c:ca:25:66:ce:
84:89:50:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBUQdWAF6M+zSAglb4LeN55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZGU0YjNiODJmMjA5YjcwMWFlMzQwY2Y1M2I5NzQwNzhm
MTZhOWYwHhcNMjQwNjI2MTExNTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTI1ZmFkYzE4YzljYWEwNTA3ZGM0YTljZTUyNDEyMTdkNTlmNTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhdZGFAAjkxOMiVk7u8eBThECpAD
vgTcIoEGZHIY6MH4k4ltKcpJgitxZoiJ8XLle2rZYZNGqngogZ4/EaUI8HhwEBL6
dehrH9axdkXLKNVMiB5uJvwN9AJfpC7J+nLg16hupeomrcpccm1FYQDvWxp57eCn
VUu0Z86KhNykuknz/Ym9WTa9P1Ej+uV72epkr85W9r3zyiZBxupIA722PWJWNpJm
Vmdt4T3pGP14hz40J0C67OkaXgvP8y9TGfziwDqGleEvyd9uaTlOMtiyebO/AtbA
FlVRTqct49U6Xd0eYYXXRtJtBPaeaaogzC0Y9UmAaHF6TYmxZcgBQK9RewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEUl+twYycqgUH3Eqc5SQSF9WfU7MB8GA1UdIwQY
MBaAFF3eSzuC8gm3Aa40DPU7l0B48WqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMmJkZjAtYmYyOS00ZGFlLWIxOWIt
ODZhNTUxOGUyZDUyLzEvUlNYNjNCakp5cUJRZmNTcHpsSkJJWDFaOVRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wMmJkZjAtYmYyOS00ZGFlLWIxOWItODZhNTUxOGUyZDUy
LzEvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucj0MA0G
CSqGSIb3DQEBCwUAA4IBAQB2mgWPjxmNluRPK1TRbdwSLcw2FSAWVi2uky/xYNyL
ZPB1FxOLKlN97AN9j2iu6YqRUY9vNUUIkoR1RXA5JBHWCIGefvdU/mRFQlwTtI0u
NFUzHKrmWYfZuAP2TLUiD94ddkbZskYnVjxv+Amek3TTgbiUQohPMqDuf8DIylA8
uABS+wl9UUHKZKONxZGPxtpY7wsbBlL7/fFhsalQ73x8iABiFFNjnh2AnjO5lWIG
6HIe+YEEgJbc37uJ41Dbc2qLdR9k/+tFQW6zvlPItxDZxw+66U6jTE4T51sTlkAY
VRU1UjAwehH5+bN21wcAhaA/vlJQ0gwpbMolZs6EiVDn
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:58:03 2024 by rpki-client on console-ams.rpki-client.org