Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/V-g3LbOj_UbC65nDbmxSTZRJmzE.roa
File: V-g3LbOj_UbC65nDbmxSTZRJmzE.roa (raw, json)
Hash identifier: 8ikq2bXxjqygwdJ7YlOhnqhZ9H7rVR904gHfg2C3B9M=
Subject key identifier: 57:E8:37:2D:B3:A3:FD:46:C2:EB:99:C3:6E:6C:52:4D:94:49:9B:31
Certificate issuer: /CN=97a23bb0aca9d226d05adfac08554181c48ef82e
Certificate serial: 018CC8DE556E664E0F5AA27CEAAD1EAEFA14
Authority key identifier: 97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/V-g3LbOj_UbC65nDbmxSTZRJmzE.roa
Signing time: Tue 02 Jan 2024 06:31:03 +0000
ROA not before: Tue 02 Jan 2024 06:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205243
IP address blocks: 185.215.200.0/22 maxlen: 22
185.224.200.0/22 maxlen: 22
2a0d:3c00::/29 maxlen: 29
2a0b:adc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:55:6e:66:4e:0f:5a:a2:7c:ea:ad:1e:ae:fa:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97a23bb0aca9d226d05adfac08554181c48ef82e
Validity
Not Before: Jan 2 06:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57e8372db3a3fd46c2eb99c36e6c524d94499b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bf:e7:99:2f:3b:07:63:1d:1a:ca:c0:cd:f0:
1d:1a:a3:80:d3:7d:e6:f1:4b:44:c8:cf:43:43:21:
44:c4:16:38:e3:bb:3a:5e:62:7b:dd:f3:f1:47:67:
83:72:06:7a:18:f3:a2:a7:00:b2:76:6b:b0:15:34:
90:e0:76:21:e4:a9:3f:a7:ff:51:ab:50:fd:47:70:
3b:4c:33:40:b6:8d:f1:8d:c1:92:3b:81:5f:cc:e4:
56:be:2b:ce:0f:b0:a4:6e:b6:ac:4c:4c:a9:8a:de:
53:56:6d:34:40:24:d6:bc:d3:ae:18:41:8e:2e:71:
12:96:76:04:7c:4d:9d:a9:9f:67:7c:04:ed:cd:56:
e8:0e:eb:80:f1:94:ba:9f:97:56:8a:dc:9d:09:54:
c1:0c:57:b1:89:ce:39:7b:da:14:fa:df:a0:47:a5:
8e:37:01:a4:75:77:00:e4:a0:c5:4b:e7:e6:28:37:
96:51:06:88:90:73:ff:5f:b1:29:81:c6:81:cf:a0:
6a:b9:37:ed:cc:bc:ae:2c:93:46:f2:04:43:99:d9:
51:0a:73:dd:eb:66:17:37:9d:ef:89:39:9c:4d:44:
ed:cb:93:9c:07:01:c4:53:15:cf:99:70:2e:9b:99:
ad:65:f5:a9:48:55:e6:97:41:43:55:2c:a5:ac:be:
13:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E8:37:2D:B3:A3:FD:46:C2:EB:99:C3:6E:6C:52:4D:94:49:9B:31
X509v3 Authority Key Identifier:
keyid:97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/V-g3LbOj_UbC65nDbmxSTZRJmzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.200.0/22
185.224.200.0/22
IPv6:
2a0b:adc0::/29
2a0d:3c00::/29
Signature Algorithm: sha256WithRSAEncryption
1a:c2:94:f0:2a:b6:7c:8c:45:a9:7a:aa:31:60:fa:ca:06:22:
6b:41:2c:b4:cd:7a:24:15:82:67:2d:4e:67:82:65:0b:31:43:
d1:2f:ad:c0:4c:ee:e7:95:d6:28:7b:99:a0:75:d0:47:ab:67:
61:1f:1b:31:24:c3:da:ae:e2:0c:80:a4:9f:cf:11:c5:13:99:
c2:68:87:c3:d5:51:be:82:45:87:ec:76:5c:23:d6:1d:8f:a6:
5f:88:94:54:ce:e1:18:c6:a7:6f:a1:76:ca:fd:07:8a:4a:34:
a9:13:c9:20:61:7d:b5:c4:b1:f1:5e:d4:1e:f0:c8:99:43:f5:
8c:4c:cb:66:62:06:c8:c1:c0:2e:6b:1a:2f:e3:0d:31:07:c5:
12:ac:b8:ac:c9:63:b2:ac:d0:43:aa:ed:44:2f:65:a5:55:f4:
46:df:55:7d:1b:c8:05:71:d6:88:19:50:b0:c7:06:3a:73:b3:
62:38:c4:a0:a9:4c:e2:3c:42:05:20:bf:97:f4:0c:6e:fe:fa:
2f:00:f9:3d:e5:a8:78:e7:a8:3d:c6:51:00:b9:f3:1f:ca:f6:
1a:17:bc:37:37:f0:d1:9d:af:85:dd:42:65:10:d6:32:b0:60:
78:1e:c8:39:60:09:e5:f2:b1:0a:b1:81:f6:7b:02:cb:b7:cb:
92:32:5b:62
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYzI3lVuZk4PWqJ86q0ervoUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YTIzYmIwYWNhOWQyMjZkMDVhZGZhYzA4NTU0MTgxYzQ4
ZWY4MmUwHhcNMjQwMTAyMDYzMTAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2U4MzcyZGIzYTNmZDQ2YzJlYjk5YzM2ZTZjNTI0ZDk0NDk5YjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27/nmS87B2MdGsrAzfAdGqOA033m
8UtEyM9DQyFExBY447s6XmJ73fPxR2eDcgZ6GPOipwCydmuwFTSQ4HYh5Kk/p/9R
q1D9R3A7TDNAto3xjcGSO4FfzORWvivOD7CkbrasTEypit5TVm00QCTWvNOuGEGO
LnESlnYEfE2dqZ9nfATtzVboDuuA8ZS6n5dWitydCVTBDFexic45e9oU+t+gR6WO
NwGkdXcA5KDFS+fmKDeWUQaIkHP/X7EpgcaBz6BquTftzLyuLJNG8gRDmdlRCnPd
62YXN53viTmcTUTty5OcBwHEUxXPmXAum5mtZfWpSFXml0FDVSylrL4TEQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFfoNy2zo/1GwuuZw25sUk2USZsxMB8GA1UdIwQY
MBaAFJeiO7CsqdIm0FrfrAhVQYHEjvguMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDZJN3NLeXAwaWJRV3Qtc0NGVkJnY1NPLUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jNTg2NzEtM2Q0ZS00Nzc1LWFmMjEt
MjBhZjNkMWI4ZWY5LzEvVi1nM0xiT2pfVWJDNjVuRGJteFNUWlJKbXpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jNTg2NzEtM2Q0ZS00Nzc1LWFmMjEtMjBhZjNkMWI4ZWY5
LzEvbDZJN3NLeXAwaWJRV3Qtc0NGVkJnY1NPLUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCudfIAwQC
ueDIMBQEAgACMA4DBQMqC63AAwUDKg08ADANBgkqhkiG9w0BAQsFAAOCAQEAGsKU
8Cq2fIxFqXqqMWD6ygYia0EstM16JBWCZy1OZ4JlCzFD0S+twEzu55XWKHuZoHXQ
R6tnYR8bMSTD2q7iDICkn88RxROZwmiHw9VRvoJFh+x2XCPWHY+mX4iUVM7hGMan
b6F2yv0Hiko0qRPJIGF9tcSx8V7UHvDImUP1jEzLZmIGyMHALmsaL+MNMQfFEqy4
rMljsqzQQ6rtRC9lpVX0Rt9VfRvIBXHWiBlQsMcGOnOzYjjEoKlM4jxCBSC/l/QM
bv76LwD5PeWoeOeoPcZRALnzH8r2Ghe8Nzfw0Z2vhd1CZRDWMrBgeB7IOWAJ5fKx
CrGB9nsCy7fLkjJbYg==
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:40:40 2024 by rpki-client on console-fra.rpki-client.org