Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/r2MSTStgobVTudLKCUUVN1wy5oc.roa
File: r2MSTStgobVTudLKCUUVN1wy5oc.roa (raw, json)
Hash identifier: 6BhuTrSyoeWyADZdmMDkVOb/lYPXTDCIRl/5gx9AxOM=
Subject key identifier: AF:63:12:4D:2B:60:A1:B5:53:B9:D2:CA:09:45:15:37:5C:32:E6:87
Certificate issuer: /CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c
Certificate serial: 018CC8015025277EA71733DC1D4976797FEB
Authority key identifier: 11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/r2MSTStgobVTudLKCUUVN1wy5oc.roa
Signing time: Tue 02 Jan 2024 02:29:38 +0000
ROA not before: Tue 02 Jan 2024 02:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 185.152.21.0/24 maxlen: 24
185.152.22.0/24 maxlen: 24
185.152.23.0/24 maxlen: 24
185.152.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 10:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:50:25:27:7e:a7:17:33:dc:1d:49:76:79:7f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c
Validity
Not Before: Jan 2 02:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af63124d2b60a1b553b9d2ca094515375c32e687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d8:3f:f7:62:59:09:bf:3a:01:e8:6a:7e:98:
fa:b9:ad:41:61:c8:ee:e7:44:7f:d7:a0:4c:92:a3:
9c:9d:ba:39:74:bb:cc:45:a6:e9:ce:d2:d8:bc:c9:
f6:67:13:b1:98:7b:75:d9:a9:40:ea:ac:6c:db:fa:
9b:6a:c1:93:50:7e:31:59:c1:b1:10:1c:db:c2:cb:
3e:64:d4:56:d0:e5:af:0e:eb:ae:9e:1c:d9:b6:a5:
af:af:da:26:48:6e:6c:b2:bd:27:b7:6e:6e:e6:42:
49:e0:20:18:0f:aa:43:b9:9d:48:6c:db:63:cd:94:
d2:56:38:10:41:ac:1a:5e:aa:fb:ef:cb:39:68:c8:
1e:4d:0e:1a:fe:5d:e0:b4:44:2f:2f:83:89:29:f3:
35:20:3e:24:0f:ba:93:b9:af:84:32:7d:77:bb:e0:
a7:84:c2:c1:3d:18:c0:0c:51:ea:24:26:8b:be:68:
e6:4c:05:f1:44:b3:a8:44:8d:bb:e3:65:9a:91:14:
49:fb:79:ad:a8:0b:22:f6:4f:65:89:d1:78:13:fb:
55:2f:96:cd:e5:c0:8d:67:a4:5c:0e:5b:d6:4c:86:
45:c2:37:1c:3c:da:92:4d:40:42:21:76:d0:32:de:
e8:a1:d1:5e:f4:83:aa:c0:9f:e9:1d:18:e7:58:25:
89:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:63:12:4D:2B:60:A1:B5:53:B9:D2:CA:09:45:15:37:5C:32:E6:87
X509v3 Authority Key Identifier:
keyid:11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/r2MSTStgobVTudLKCUUVN1wy5oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.20.0/22
Signature Algorithm: sha256WithRSAEncryption
41:93:78:17:cf:1a:07:54:ad:e1:86:7c:a2:a7:b8:ad:b9:fb:
3c:de:49:72:cb:29:b6:15:89:7e:b2:f2:2f:82:ec:5f:06:a2:
95:81:d1:ab:a4:a0:87:71:04:68:bd:14:cb:cf:8a:c0:fb:44:
f9:f1:7e:7a:ff:76:80:3d:5c:ef:37:9a:0c:46:db:f8:23:b3:
b3:2e:6a:fd:75:f9:58:2b:e6:6a:2c:4f:4a:21:d9:f9:7c:ab:
2e:d9:88:d9:f4:ba:91:22:ca:57:32:c7:dc:31:25:2f:34:dc:
c0:1a:d8:7b:a9:c1:4c:49:47:bf:cb:f2:a7:8f:7e:19:30:e0:
73:74:31:d3:b2:da:a2:c5:8a:c6:32:f6:a9:59:9d:82:3a:a2:
70:b7:cd:6c:5c:b9:35:90:f0:28:5d:cc:31:19:25:e7:e8:b0:
bf:b8:b1:82:64:f5:3b:c3:7b:11:5a:04:ff:9a:94:b6:4d:cb:
ed:3c:a4:d8:1d:3e:a6:ca:05:e2:73:a9:46:da:bd:61:75:f8:
46:5d:91:42:d2:8f:2f:a4:62:9a:1f:5d:8d:fb:8f:07:62:1d:
b4:80:69:a6:93:79:45:cb:c8:c2:37:d4:32:a1:a1:17:0b:16:
a7:82:6a:f2:a1:b8:09:10:47:e7:bd:2a:a3:4a:c2:17:e0:ec:
b3:a9:dc:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAVAlJ36nFzPcHUl2eX/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZWZkYmQ3MjdmYjViZDUzY2VjNjk1N2EyOWI0N2MyYzM0
YTgzNGMwHhcNMjQwMTAyMDIyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjYzMTI0ZDJiNjBhMWI1NTNiOWQyY2EwOTQ1MTUzNzVjMzJlNjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19g/92JZCb86Aehqfpj6ua1BYcju
50R/16BMkqOcnbo5dLvMRabpztLYvMn2ZxOxmHt12alA6qxs2/qbasGTUH4xWcGx
EBzbwss+ZNRW0OWvDuuunhzZtqWvr9omSG5ssr0nt25u5kJJ4CAYD6pDuZ1IbNtj
zZTSVjgQQawaXqr778s5aMgeTQ4a/l3gtEQvL4OJKfM1ID4kD7qTua+EMn13u+Cn
hMLBPRjADFHqJCaLvmjmTAXxRLOoRI2742WakRRJ+3mtqAsi9k9lidF4E/tVL5bN
5cCNZ6RcDlvWTIZFwjccPNqSTUBCIXbQMt7oodFe9IOqwJ/pHRjnWCWJbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK9jEk0rYKG1U7nSyglFFTdcMuaHMB8GA1UdIwQY
MBaAFBHv29cn+1vVPOxpV6KbR8LDSoNMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWVfYjF5ZjdXOVU4N0dsWG9wdEh3c05LZzB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wNDdjZTQtNDRhZS00MjczLTk0ZmEt
ZGM2MzRlOGFhMmEzLzEvcjJNU1RTdGdvYlZUdWRMS0NVVVZOMXd5NW9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wNDdjZTQtNDRhZS00MjczLTk0ZmEtZGM2MzRlOGFhMmEz
LzEvRWVfYjF5ZjdXOVU4N0dsWG9wdEh3c05LZzB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZgUMA0G
CSqGSIb3DQEBCwUAA4IBAQBBk3gXzxoHVK3hhnyip7itufs83klyyym2FYl+svIv
guxfBqKVgdGrpKCHcQRovRTLz4rA+0T58X56/3aAPVzvN5oMRtv4I7OzLmr9dflY
K+ZqLE9KIdn5fKsu2YjZ9LqRIspXMsfcMSUvNNzAGth7qcFMSUe/y/Knj34ZMOBz
dDHTstqixYrGMvapWZ2COqJwt81sXLk1kPAoXcwxGSXn6LC/uLGCZPU7w3sRWgT/
mpS2TcvtPKTYHT6mygXic6lG2r1hdfhGXZFC0o8vpGKaH12N+48HYh20gGmmk3lF
y8jCN9QyoaEXCxangmryobgJEEfnvSqjSsIX4Oyzqdz+
-----END CERTIFICATE-----
Generated at Mon Jun 17 12:38:08 2024 by rpki-client on console-ams.rpki-client.org