Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/l5kSI7M8iPUiFHBl2dGfDl6soeo.roa
File: l5kSI7M8iPUiFHBl2dGfDl6soeo.roa (raw, json)
Hash identifier: J6rwexjrcSSQ2l5FZHhSs0F6JD0CaL7VZmItYMg2AcA=
Subject key identifier: 97:99:12:23:B3:3C:88:F5:22:14:70:65:D9:D1:9F:0E:5E:AC:A1:EA
Certificate issuer: /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Certificate serial: 018CC3B73B7833E3973A69E84D688DF830FD
Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/l5kSI7M8iPUiFHBl2dGfDl6soeo.roa
Signing time: Mon 01 Jan 2024 06:30:14 +0000
ROA not before: Mon 01 Jan 2024 06:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6730
IP address blocks: 185.207.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3b:78:33:e3:97:3a:69:e8:4d:68:8d:f8:30:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Validity
Not Before: Jan 1 06:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97991223b33c88f522147065d9d19f0e5eaca1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:b4:bf:4f:90:98:16:58:82:df:bf:fe:3f:
c8:1f:3b:4e:fc:88:a4:4d:f6:ba:db:84:07:d1:22:
86:e4:07:9c:19:59:42:dc:5c:49:c9:78:bf:13:e3:
1e:9c:cb:59:88:52:b9:58:8c:21:80:50:11:e7:0a:
15:7f:64:ed:b7:e9:64:3d:cc:0c:b7:a5:dc:c7:0e:
5c:f7:35:22:ac:d8:56:73:6f:8a:88:4b:98:2d:41:
fd:96:9e:ce:40:57:9c:45:c1:c4:62:56:33:73:de:
ab:3a:0c:e9:aa:53:ce:6f:cb:11:ff:9a:ba:05:25:
d1:8e:8d:25:91:4e:ee:c5:dc:c7:3f:79:f1:dd:f9:
18:8e:6f:73:52:07:8a:b8:30:d0:cf:04:d6:07:65:
07:c8:4b:cd:02:79:7d:64:0d:f6:a6:53:80:a5:7a:
a7:73:bf:c9:8e:9e:68:74:ee:d8:47:88:43:2d:48:
8c:a3:97:32:99:c8:74:77:94:5e:16:72:7f:9a:cb:
ed:74:5d:06:cf:66:29:22:e4:53:e1:0b:07:3d:1c:
00:56:72:00:f5:94:15:9f:d0:21:bf:48:d9:69:40:
e0:27:de:e2:d0:3d:dc:a8:c6:96:31:88:96:fc:15:
be:df:97:8a:ce:16:ea:5f:3e:e0:6b:56:97:54:6f:
0f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:99:12:23:B3:3C:88:F5:22:14:70:65:D9:D1:9F:0E:5E:AC:A1:EA
X509v3 Authority Key Identifier:
keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/l5kSI7M8iPUiFHBl2dGfDl6soeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.100.0/22
Signature Algorithm: sha256WithRSAEncryption
56:c4:78:da:cb:99:ed:fd:fb:a3:06:af:72:dc:89:8a:1c:fc:
22:f6:63:aa:f8:d6:79:4f:b4:9e:f9:0a:ff:fd:6b:d7:b1:69:
35:68:d4:3e:1c:4a:e3:b5:95:c5:48:96:89:13:79:b4:fd:75:
50:8b:c1:40:62:72:49:96:39:d7:31:87:29:45:f9:ae:70:94:
e1:dc:43:4b:84:36:9e:22:f9:56:b8:07:d3:a3:b0:b1:79:4a:
fc:b4:08:5a:54:ee:2a:8f:4f:8e:20:e6:50:2b:64:a6:a9:b3:
93:59:c1:84:51:b8:49:c8:d9:30:e1:22:73:1c:0a:b2:f7:8c:
b6:bd:7b:36:10:53:5d:fe:59:ba:97:b7:1c:e4:ad:61:30:f0:
ff:ba:bc:fa:18:6f:37:81:bd:dd:32:53:54:35:02:48:5a:87:
25:67:2b:a7:33:5c:7a:1e:3f:6a:27:aa:6a:00:9a:da:49:e1:
f1:d8:ac:01:66:ac:e1:f6:1d:96:5e:55:d8:66:58:1c:c0:ca:
0d:8c:7d:46:88:fa:1a:ec:84:90:db:3a:5a:d2:6f:98:07:2a:
86:71:43:5a:0c:5d:16:96:c6:a7:af:a1:0e:e2:44:63:13:65:
1d:b9:ac:6c:f6:4d:b0:c5:00:6a:3a:5c:e0:75:6b:56:14:3c:
f8:bc:88:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtzt4M+OXOmnoTWiN+DD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkODE5YzlkMmU1MmQ4NGFkZWEyZGU0YzJkZTY0Yjc3ODk4
NThlYjIwHhcNMjQwMTAxMDYzMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Nzk5MTIyM2IzM2M4OGY1MjIxNDcwNjVkOWQxOWYwZTVlYWNhMWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiS0v0+QmBZYgt+//j/IHztO/Iik
Tfa624QH0SKG5AecGVlC3FxJyXi/E+MenMtZiFK5WIwhgFAR5woVf2Ttt+lkPcwM
t6Xcxw5c9zUirNhWc2+KiEuYLUH9lp7OQFecRcHEYlYzc96rOgzpqlPOb8sR/5q6
BSXRjo0lkU7uxdzHP3nx3fkYjm9zUgeKuDDQzwTWB2UHyEvNAnl9ZA32plOApXqn
c7/Jjp5odO7YR4hDLUiMo5cymch0d5ReFnJ/msvtdF0Gz2YpIuRT4QsHPRwAVnIA
9ZQVn9Ahv0jZaUDgJ97i0D3cqMaWMYiW/BW+35eKzhbqXz7ga1aXVG8POQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJeZEiOzPIj1IhRwZdnRnw5erKHqMB8GA1UdIwQY
MBaAFA2BnJ0uUthK3qLeTC3mS3eJhY6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS84NzczNDItNzM0Yy00NzFiLWIzZjkt
MDJjMzdmZWI4YTllLzEvbDVrU0k3TThpUFVpRkhCbDJkR2ZEbDZzb2VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS84NzczNDItNzM0Yy00NzFiLWIzZjktMDJjMzdmZWI4YTll
LzEvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc9kMA0G
CSqGSIb3DQEBCwUAA4IBAQBWxHjay5nt/fujBq9y3ImKHPwi9mOq+NZ5T7Se+Qr/
/WvXsWk1aNQ+HErjtZXFSJaJE3m0/XVQi8FAYnJJljnXMYcpRfmucJTh3ENLhDae
IvlWuAfTo7CxeUr8tAhaVO4qj0+OIOZQK2SmqbOTWcGEUbhJyNkw4SJzHAqy94y2
vXs2EFNd/lm6l7cc5K1hMPD/urz6GG83gb3dMlNUNQJIWoclZyunM1x6Hj9qJ6pq
AJraSeHx2KwBZqzh9h2WXlXYZlgcwMoNjH1GiPoa7ISQ2zpa0m+YByqGcUNaDF0W
lsanr6EO4kRjE2Uduaxs9k2wxQBqOlzgdWtWFDz4vIih
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:35:57 2024 by rpki-client on console-fra.rpki-client.org