Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/K7U8pfx_m6P_2qcP0ABR_GE0hlI.roa
File: K7U8pfx_m6P_2qcP0ABR_GE0hlI.roa (raw, json)
Hash identifier: euzqHAFV6WFcRx/W0Fusx93wd3hEek1OnRNG+U7YM9s=
Subject key identifier: 2B:B5:3C:A5:FC:7F:9B:A3:FF:DA:A7:0F:D0:00:51:FC:61:34:86:52
Certificate issuer: /CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Certificate serial: 018CC4938F696616A35E67A66D852120D746
Authority key identifier: BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/K7U8pfx_m6P_2qcP0ABR_GE0hlI.roa
Signing time: Mon 01 Jan 2024 10:30:54 +0000
ROA not before: Mon 01 Jan 2024 10:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30848
IP address blocks: 185.210.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8f:69:66:16:a3:5e:67:a6:6d:85:21:20:d7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Validity
Not Before: Jan 1 10:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bb53ca5fc7f9ba3ffdaa70fd00051fc61348652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4b:79:a8:1b:2f:43:36:96:e0:2a:5d:e7:3c:
00:2a:fe:88:d2:5a:52:87:89:ad:ce:f7:75:37:0d:
3f:d5:41:e1:50:50:9a:f4:eb:7c:ad:5f:b6:45:c8:
89:13:76:f1:71:81:6c:5d:28:3c:93:c0:b6:bf:03:
d8:c8:b5:94:b6:38:a9:33:15:ca:8d:9f:82:97:a5:
56:f8:6e:e7:10:5b:23:65:58:03:66:b7:4a:3c:dd:
23:17:7f:ee:f4:2b:a4:b3:83:08:c8:e1:b8:d4:06:
f7:b3:07:16:c8:f5:b0:7c:2d:b3:d6:c0:e5:fd:a0:
ec:87:8b:99:9e:26:90:93:ef:f9:1f:f2:61:32:3c:
49:6a:9b:25:1f:84:4d:93:bb:cb:36:88:59:9c:7e:
35:00:12:2e:e8:cc:e4:fe:a0:73:02:d2:40:71:5f:
f1:b3:fe:96:b1:8b:72:f7:12:46:d1:c5:29:a6:b9:
01:4e:cd:36:be:0f:1a:8f:db:ba:4c:7b:23:4c:3f:
11:81:ce:e7:17:ff:0f:f0:c0:d0:01:3a:11:22:f5:
a5:1c:34:46:30:21:ad:80:4f:ee:33:2b:17:00:8c:
1f:c0:d6:75:79:4e:cb:0a:84:8e:3d:07:d1:18:ed:
24:fd:f8:fe:13:8f:12:e4:f8:e6:a7:cd:d3:32:ee:
86:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B5:3C:A5:FC:7F:9B:A3:FF:DA:A7:0F:D0:00:51:FC:61:34:86:52
X509v3 Authority Key Identifier:
keyid:BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/K7U8pfx_m6P_2qcP0ABR_GE0hlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.248.0/22
Signature Algorithm: sha256WithRSAEncryption
45:4e:3b:54:fc:ab:c7:8d:8e:5f:51:ac:04:a6:8a:45:69:7f:
42:a1:2a:6b:df:79:53:0c:e8:6e:56:c4:95:96:26:0c:28:7d:
32:ab:8d:33:b9:c8:1d:63:8d:7c:fc:03:56:24:2c:2a:9e:b9:
dc:be:a8:85:2a:e9:f0:1f:a8:67:ea:b9:fe:92:f9:5c:f4:1e:
0e:fd:a7:4f:d3:c0:4e:a3:a2:c1:86:6d:e4:5a:67:89:e3:b4:
3c:3d:a4:a5:8d:c1:03:b1:d8:5d:53:18:a1:06:d2:d3:82:74:
23:72:0e:9e:49:54:89:2c:0c:51:38:b6:58:1b:8b:63:b6:99:
fc:79:10:ae:92:03:7f:be:66:bf:c6:b9:32:7c:54:b1:54:b9:
bc:d8:b9:ac:5b:46:14:9a:ce:7f:ae:41:b1:69:12:90:87:53:
25:83:ae:87:13:a2:2e:aa:2a:9b:0b:60:78:a8:ac:9e:99:7b:
91:0f:fe:08:18:b5:91:d9:a3:cc:c3:46:25:bf:58:30:8b:e2:
0a:bb:c2:32:b6:cd:c1:0e:f4:a6:3c:d2:d0:f4:e0:f9:7e:a5:
fe:56:9b:6f:b8:7d:15:cf:f4:4f:cf:a6:06:58:5c:e1:0c:c7:
b0:b1:ea:00:e8:8e:27:f2:fe:97:2f:f5:7f:d6:e4:c2:bf:2e:
a9:b2:b7:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk49pZhajXmembYUhINdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMTE2ZDM1YjExYzkzODIzM2FjYmFkZjVkN2MyZDViMmM2
ZDAxNTQwHhcNMjQwMTAxMTAzMDU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmI1M2NhNWZjN2Y5YmEzZmZkYWE3MGZkMDAwNTFmYzYxMzQ4NjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ut5qBsvQzaW4Cpd5zwAKv6I0lpS
h4mtzvd1Nw0/1UHhUFCa9Ot8rV+2RciJE3bxcYFsXSg8k8C2vwPYyLWUtjipMxXK
jZ+Cl6VW+G7nEFsjZVgDZrdKPN0jF3/u9Cuks4MIyOG41Ab3swcWyPWwfC2z1sDl
/aDsh4uZniaQk+/5H/JhMjxJapslH4RNk7vLNohZnH41ABIu6Mzk/qBzAtJAcV/x
s/6WsYty9xJG0cUpprkBTs02vg8aj9u6THsjTD8Rgc7nF/8P8MDQAToRIvWlHDRG
MCGtgE/uMysXAIwfwNZ1eU7LCoSOPQfRGO0k/fj+E48S5Pjmp83TMu6GTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCu1PKX8f5uj/9qnD9AAUfxhNIZSMB8GA1UdIwQY
MBaAFL0RbTWxHJOCM6y63118LVssbQFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlJGdE5iRWNrNEl6ckxyZlhYd3RXeXh0QVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMzljNzQtM2M0My00MjUxLTlhODUt
OWJlODY5YTljNjBjLzEvSzdVOHBmeF9tNlBfMnFjUDBBQlJfR0UwaGxJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yMzljNzQtM2M0My00MjUxLTlhODUtOWJlODY5YTljNjBj
LzEvdlJGdE5iRWNrNEl6ckxyZlhYd3RXeXh0QVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudL4MA0G
CSqGSIb3DQEBCwUAA4IBAQBFTjtU/KvHjY5fUawEpopFaX9CoSpr33lTDOhuVsSV
liYMKH0yq40zucgdY418/ANWJCwqnrncvqiFKunwH6hn6rn+kvlc9B4O/adP08BO
o6LBhm3kWmeJ47Q8PaSljcEDsdhdUxihBtLTgnQjcg6eSVSJLAxROLZYG4tjtpn8
eRCukgN/vma/xrkyfFSxVLm82LmsW0YUms5/rkGxaRKQh1Mlg66HE6IuqiqbC2B4
qKyemXuRD/4IGLWR2aPMw0Ylv1gwi+IKu8Iyts3BDvSmPNLQ9OD5fqX+VptvuH0V
z/RPz6YGWFzhDMewseoA6I4n8v6XL/V/1uTCvy6psrcD
-----END CERTIFICATE-----
Generated at Sat Jun 1 18:31:06 2024 by rpki-client on console-ams.rpki-client.org