Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/DJlUiycmS-0IantNfOzNnCZlD28.roa
File: DJlUiycmS-0IantNfOzNnCZlD28.roa (raw, json)
Hash identifier: TKq2bXe/6SUBA9m0rqK21H6RcIkKC3fKHIWiDdgoNDw=
Subject key identifier: 0C:99:54:8B:27:26:4B:ED:08:6A:7B:4D:7C:EC:CD:9C:26:65:0F:6F
Certificate issuer: /CN=52e02224ffb971172e4935ed7dd965d1155089b6
Certificate serial: 018CC26CFECEDBE582147FADCE4F3D6D0098
Authority key identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/DJlUiycmS-0IantNfOzNnCZlD28.roa
Signing time: Mon 01 Jan 2024 00:29:32 +0000
ROA not before: Mon 01 Jan 2024 00:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5413
IP address blocks: 185.121.16.0/24 maxlen: 24
185.121.16.0/22 maxlen: 22
185.121.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:fe:ce:db:e5:82:14:7f:ad:ce:4f:3d:6d:00:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e02224ffb971172e4935ed7dd965d1155089b6
Validity
Not Before: Jan 1 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c99548b27264bed086a7b4d7ceccd9c26650f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:aa:ba:5a:b7:f8:6a:92:0b:2b:0a:a1:da:
85:ff:90:1f:27:6a:8b:bc:4e:11:2a:58:67:16:4d:
be:27:32:75:ce:0c:ac:86:d9:95:fe:58:2c:8b:54:
bd:1a:c3:b3:b7:3b:3c:cd:7f:0c:0e:21:5b:af:f3:
67:a3:95:9b:f1:5c:3b:1b:8e:70:9b:42:fe:3a:ba:
bb:34:a7:ea:89:a7:a0:42:c1:15:c5:0b:71:fc:0f:
86:65:2d:32:dc:40:29:f9:49:5e:74:71:01:dd:3d:
f2:f1:66:35:d6:a4:48:32:5c:39:92:bb:4b:46:03:
cf:85:af:ec:1e:c3:dc:01:a7:30:85:1d:94:0c:37:
54:34:ce:bf:77:91:4f:50:43:62:a6:ad:70:64:7b:
65:9e:18:01:7f:44:e2:d5:49:aa:a0:2c:f0:aa:7e:
5d:24:8b:a9:7f:0c:9e:0d:6b:54:7b:7f:ff:b9:0b:
25:71:e9:59:49:ee:e6:db:92:99:7a:3c:d6:32:a8:
04:ac:ef:1b:19:a7:a4:17:6e:ad:cf:c1:4f:1b:a7:
e8:a7:ba:51:6b:22:78:96:03:46:f8:d6:32:54:63:
0b:f4:50:fb:2d:f0:63:10:e5:7c:96:d3:cc:de:d8:
2c:28:c1:92:a9:e5:72:0e:9c:5c:4d:40:05:71:ed:
39:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:99:54:8B:27:26:4B:ED:08:6A:7B:4D:7C:EC:CD:9C:26:65:0F:6F
X509v3 Authority Key Identifier:
keyid:52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/DJlUiycmS-0IantNfOzNnCZlD28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.16.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:6f:5a:5d:50:8f:4b:26:dc:b7:7a:9d:ca:44:8d:49:d4:a9:
0d:76:95:11:60:4d:78:e8:4d:15:71:53:96:6b:69:c4:e2:b2:
5b:cc:b8:7c:4e:6b:f8:e8:da:b8:e9:7b:31:33:e3:3a:c7:f8:
97:9c:a1:93:a7:ab:e9:91:ee:15:b9:5f:d0:8f:0d:79:28:0c:
d0:94:e7:9d:92:bf:62:b7:3d:cd:7b:5b:86:14:fc:05:0d:c0:
ca:50:c8:b8:41:31:f7:0d:0e:b2:ed:fa:45:db:94:36:af:65:
ea:39:97:90:7e:d3:76:30:aa:a1:95:91:9f:d1:7c:0b:c5:f6:
b7:22:1b:76:6f:00:be:26:63:14:77:e1:83:5d:ca:c3:a9:da:
b1:52:2d:c9:f2:43:08:5d:fe:08:c4:44:e9:37:49:f4:fe:e7:
99:49:18:af:be:d8:26:5d:a5:0a:34:c4:87:16:62:7d:d7:19:
66:48:5d:3c:b6:35:f9:70:09:6d:7a:81:57:35:8b:d3:5b:6a:
49:a6:2a:f6:4d:19:50:9d:45:57:f9:9c:76:aa:29:21:0e:08:
1b:a3:c2:be:8c:84:fe:ae:02:1f:d4:f4:7d:84:bf:47:14:02:
75:fc:ee:ea:c9:f5:ad:b9:98:02:05:6c:51:3b:fe:6f:b5:b0:
f0:18:17:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbP7O2+WCFH+tzk89bQCYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZTAyMjI0ZmZiOTcxMTcyZTQ5MzVlZDdkZDk2NWQxMTU1
MDg5YjYwHhcNMjQwMTAxMDAyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzk5NTQ4YjI3MjY0YmVkMDg2YTdiNGQ3Y2VjY2Q5YzI2NjUwZjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfiqulq3+GqSCysKodqF/5AfJ2qL
vE4RKlhnFk2+JzJ1zgyshtmV/lgsi1S9GsOztzs8zX8MDiFbr/Nno5Wb8Vw7G45w
m0L+Orq7NKfqiaegQsEVxQtx/A+GZS0y3EAp+UledHEB3T3y8WY11qRIMlw5krtL
RgPPha/sHsPcAacwhR2UDDdUNM6/d5FPUENipq1wZHtlnhgBf0Ti1UmqoCzwqn5d
JIupfwyeDWtUe3//uQslcelZSe7m25KZejzWMqgErO8bGaekF26tz8FPG6fop7pR
ayJ4lgNG+NYyVGML9FD7LfBjEOV8ltPM3tgsKMGSqeVyDpxcTUAFce05JQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAyZVIsnJkvtCGp7TXzszZwmZQ9vMB8GA1UdIwQY
MBaAFFLgIiT/uXEXLkk17X3ZZdEVUIm2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVBaUpQLTVjUmN1U1RYdGZkbGwwUlZRaWJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zMTFiYzUtM2YzNi00ZDVlLWFiZGUt
YjhkYTg5NDA2YmVkLzEvREpsVWl5Y21TLTBJYW50TmZPek5uQ1psRDI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zMTFiYzUtM2YzNi00ZDVlLWFiZGUtYjhkYTg5NDA2YmVk
LzEvVXVBaUpQLTVjUmN1U1RYdGZkbGwwUlZRaWJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXkQMA0G
CSqGSIb3DQEBCwUAA4IBAQBNb1pdUI9LJty3ep3KRI1J1KkNdpURYE146E0VcVOW
a2nE4rJbzLh8Tmv46Nq46XsxM+M6x/iXnKGTp6vpke4VuV/Qjw15KAzQlOedkr9i
tz3Ne1uGFPwFDcDKUMi4QTH3DQ6y7fpF25Q2r2XqOZeQftN2MKqhlZGf0XwLxfa3
Iht2bwC+JmMUd+GDXcrDqdqxUi3J8kMIXf4IxETpN0n0/ueZSRivvtgmXaUKNMSH
FmJ91xlmSF08tjX5cAlteoFXNYvTW2pJpir2TRlQnUVX+Zx2qikhDggbo8K+jIT+
rgIf1PR9hL9HFAJ1/O7qyfWtuZgCBWxRO/5vtbDwGBf0
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:29:09 2024 by rpki-client on console-fra.rpki-client.org