Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/1-yIb5Y-KQzGsN7oezVVmC07zK-U.roa
File: 1-yIb5Y-KQzGsN7oezVVmC07zK-U.roa (raw, json)
Hash identifier: J2jFXHvhqSuGoEcBHS794Wq19fAaIHA+WL8TTc5aP+I=
Subject key identifier: FB:22:1B:E5:8F:8A:43:31:AC:37:BA:1E:CD:55:66:0B:4E:F3:2B:E5
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 0190D9882E84B4151B333E2485188CDD5142
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/1-yIb5Y-KQzGsN7oezVVmC07zK-U.roa
Signing time: Mon 22 Jul 2024 08:21:39 +0000
ROA not before: Mon 22 Jul 2024 08:21:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 185.255.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d9:88:2e:84:b4:15:1b:33:3e:24:85:18:8c:dd:51:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jul 22 08:21:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb221be58f8a4331ac37ba1ecd55660b4ef32be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2a:e1:b4:63:2e:be:da:a1:15:f8:c5:a1:32:
e0:ed:fe:ae:a4:86:15:5b:b8:80:8d:45:b9:b4:48:
7c:b2:8a:4f:41:22:c3:4c:a7:2c:69:96:1a:33:53:
ed:38:12:9d:0d:28:60:35:43:b4:10:ed:19:84:1b:
97:65:94:02:31:e6:b7:b6:60:c2:b5:5d:45:90:7e:
24:97:45:8b:0e:30:e6:3c:77:7a:80:fb:4c:03:a0:
08:ed:78:16:21:03:47:78:5f:76:39:7e:da:fe:1a:
6b:9b:2d:c2:fa:9d:59:7b:e8:0f:36:ab:07:35:af:
21:d3:61:b7:21:f1:c6:0b:c5:16:fb:dd:cb:65:39:
ee:3c:a7:37:cb:b1:b3:75:21:3e:47:c7:b8:e0:7b:
4b:5e:fb:15:cd:1f:de:3d:aa:c0:23:ff:d2:e5:93:
19:e5:34:e4:f9:5e:ac:f9:e6:a6:03:8a:9a:ca:99:
57:9f:46:fe:aa:5c:36:54:8b:70:96:bf:9d:69:77:
70:8b:16:b0:35:32:56:12:91:15:6d:97:d6:ac:f5:
a4:f2:fc:a4:84:c0:d3:dd:2f:cc:51:93:d0:fc:57:
93:b9:e7:fa:df:21:23:3d:94:22:06:00:9c:b1:6e:
02:98:b8:b8:80:a9:69:9e:3e:a2:a8:55:2a:29:02:
66:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:22:1B:E5:8F:8A:43:31:AC:37:BA:1E:CD:55:66:0B:4E:F3:2B:E5
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/1-yIb5Y-KQzGsN7oezVVmC07zK-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.196.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ba:7d:c0:8b:08:c2:b4:bc:b8:65:24:bc:3f:df:54:4b:8e:
2d:20:21:7f:c2:9b:c3:a9:73:04:42:bd:18:40:4b:aa:30:4e:
9c:12:8d:33:a1:ba:6c:8c:7f:f2:0a:f7:42:ec:0f:c0:55:b4:
31:e9:a5:75:07:08:95:83:e0:8d:1f:c2:7b:68:d1:50:63:7c:
70:9f:28:83:39:40:fe:51:9b:a1:99:d5:d9:97:84:a0:d2:1a:
7e:34:98:39:26:72:91:9b:ec:07:ee:d1:ae:78:1e:8f:40:7e:
b3:26:4f:41:61:73:72:af:15:13:81:42:11:43:73:ae:37:5f:
f0:fc:51:34:2f:2f:06:28:b4:43:42:f5:97:a1:47:71:47:c9:
27:09:22:ba:d0:3e:92:72:b1:ef:f4:cd:39:3f:81:18:0e:50:
2f:fb:f2:28:89:99:a9:6b:75:0f:c9:68:8d:de:45:2f:cd:e5:
40:90:25:a9:2d:fe:fb:c9:c1:29:6d:70:8d:04:e5:92:30:35:
33:34:15:4e:fc:9d:e2:ea:78:10:a9:e3:22:ee:52:0a:1b:88:
c3:51:d1:ab:0e:6a:6a:b9:f3:8e:36:90:ed:8c:b4:df:81:9d:
c7:91:8c:8c:12:06:7a:b2:68:7a:03:40:7b:94:f4:47:7a:7e:
cf:e1:6c:8a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZDZiC6EtBUbMz4khRiM3VFCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl
ZGQ2YWEwHhcNMjQwNzIyMDgyMTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjIyMWJlNThmOGE0MzMxYWMzN2JhMWVjZDU1NjYwYjRlZjMyYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CrhtGMuvtqhFfjFoTLg7f6upIYV
W7iAjUW5tEh8sopPQSLDTKcsaZYaM1PtOBKdDShgNUO0EO0ZhBuXZZQCMea3tmDC
tV1FkH4kl0WLDjDmPHd6gPtMA6AI7XgWIQNHeF92OX7a/hprmy3C+p1Ze+gPNqsH
Na8h02G3IfHGC8UW+93LZTnuPKc3y7GzdSE+R8e44HtLXvsVzR/eParAI//S5ZMZ
5TTk+V6s+eamA4qayplXn0b+qlw2VItwlr+daXdwixawNTJWEpEVbZfWrPWk8vyk
hMDT3S/MUZPQ/FeTuef63yEjPZQiBgCcsW4CmLi4gKlpnj6iqFUqKQJm3wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPsiG+WPikMxrDe6Hs1VZgtO8yvlMB8GA1UdIwQY
MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt
Zjc5Y2NjM2Y0ZWFmLzEvMS15SWI1WS1LUXpHc043b2V6VlZtQzA3ekstVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjYvNWRmMTE5LWIxZGYtNGNlYi1iZDRmLWY3OWNjYzNmNGVh
Zi8xL1dBYmFXbGtsRW5YT3NZYVU0WFFWTlNydDFxby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn/xDAN
BgkqhkiG9w0BAQsFAAOCAQEAlbp9wIsIwrS8uGUkvD/fVEuOLSAhf8Kbw6lzBEK9
GEBLqjBOnBKNM6G6bIx/8gr3QuwPwFW0MemldQcIlYPgjR/Ce2jRUGN8cJ8ogzlA
/lGboZnV2ZeEoNIafjSYOSZykZvsB+7Rrngej0B+syZPQWFzcq8VE4FCEUNzrjdf
8PxRNC8vBii0Q0L1l6FHcUfJJwkiutA+knKx7/TNOT+BGA5QL/vyKImZqWt1D8lo
jd5FL83lQJAlqS3++8nBKW1wjQTlkjA1MzQVTvyd4up4EKnjIu5SChuIw1HRqw5q
arnzjjaQ7Yy034Gdx5GMjBIGerJoegNAe5T0R3p+z+Fsig==
-----END CERTIFICATE-----
Generated at Mon Nov 25 00:04:58 2024 by rpki-client on console-fra.rpki-client.org