Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0AswZ3Tbfx6jo8LorQHIRBDPFFk.roa
File: 0AswZ3Tbfx6jo8LorQHIRBDPFFk.roa (raw, json)
Hash identifier: xpEdcqYgnuxFBqxc3ai1xgbq9fUW0J5WR16bZxz0rQY=
Subject key identifier: D0:0B:30:67:74:DB:7F:1E:A3:A3:C2:E8:AD:01:C8:44:10:CF:14:59
Certificate issuer: /CN=d325fc508a7373256720a54d73fa9057d8a21c13
Certificate serial: 018CC26D729BFFB3EF45F541CF791F4BE2B5
Authority key identifier: D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0AswZ3Tbfx6jo8LorQHIRBDPFFk.roa
Signing time: Mon 01 Jan 2024 00:30:01 +0000
ROA not before: Mon 01 Jan 2024 00:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47123
IP address blocks: 185.133.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:72:9b:ff:b3:ef:45:f5:41:cf:79:1f:4b:e2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d325fc508a7373256720a54d73fa9057d8a21c13
Validity
Not Before: Jan 1 00:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d00b306774db7f1ea3a3c2e8ad01c84410cf1459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:79:1e:28:3b:31:81:12:18:ca:2a:90:76:f4:
7d:5a:f3:a2:64:3c:98:6b:0c:b8:04:d4:43:4b:ad:
66:e5:b1:81:32:f1:3e:8e:3c:76:77:7d:6b:f7:85:
15:47:a1:e6:ac:9f:4a:11:d0:6e:4d:e5:8d:e7:48:
bd:c1:92:25:e9:61:2e:43:bc:8a:12:31:1c:51:61:
bd:03:b2:58:b8:1d:04:a1:1c:ca:7b:68:06:64:70:
61:af:62:76:ad:36:c1:7d:8a:8c:9c:d0:65:95:7c:
2e:07:dd:24:f1:ad:92:5a:62:3e:e7:47:1a:5f:f0:
f3:87:1f:49:c9:62:27:4b:da:16:be:5c:38:32:24:
9d:84:91:65:2c:bf:4b:4f:cc:b3:6b:51:d7:0f:0c:
4f:dd:a7:5d:90:3f:ca:9a:0d:ef:06:f5:6e:76:b6:
e9:8d:72:0f:8e:01:71:2a:19:11:d0:14:bf:b6:7c:
9c:12:ba:95:3a:ff:c0:78:39:7d:b8:58:98:3d:78:
e2:00:75:e3:e1:62:f1:16:2f:ac:69:89:6c:d2:da:
6b:8f:58:6f:ff:38:c1:b0:05:93:4e:f1:7c:3c:9f:
cd:1f:85:0d:f7:29:b6:b1:4a:a0:b5:05:bb:f2:ce:
d7:0b:0d:f0:b6:ea:53:90:3a:61:b9:c4:d0:ca:9e:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0B:30:67:74:DB:7F:1E:A3:A3:C2:E8:AD:01:C8:44:10:CF:14:59
X509v3 Authority Key Identifier:
keyid:D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0AswZ3Tbfx6jo8LorQHIRBDPFFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.254.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:d5:44:c2:49:5d:5d:2e:03:67:61:3e:5d:a1:a8:a6:6a:3c:
17:4f:45:ea:cf:9b:d6:3a:50:18:21:ff:4e:a7:a3:f2:b9:2e:
aa:b3:e1:25:3e:57:b6:98:e3:d9:18:64:4a:93:5f:39:64:ce:
90:d8:d8:1e:de:e8:60:a1:e0:fc:7a:2f:c0:b3:f4:98:a5:88:
22:84:f8:d6:e7:2e:04:fd:93:6e:06:8a:5f:9d:08:18:e3:57:
2b:34:1d:65:30:ed:b7:fb:6b:3c:4b:60:b4:e5:fd:32:d8:0a:
c1:f8:56:93:c5:20:23:28:14:e6:59:45:68:52:26:59:97:e8:
12:98:a4:0f:eb:a9:33:dd:e0:4d:09:22:32:9c:b8:b8:2b:e3:
07:4b:69:da:2a:c2:a8:8b:2b:b1:2e:35:de:2f:1b:37:db:b8:
c8:9e:1d:f8:8a:b2:fd:a7:8a:30:70:94:8d:80:c9:e9:77:07:
94:24:a5:2f:90:34:84:d8:e9:17:94:ce:27:a6:40:70:4b:b1:
bf:6c:24:a8:16:79:d7:50:aa:89:ff:f0:65:61:9a:8c:e5:46:
f5:07:38:6e:f3:d9:c3:4a:04:1d:c4:8f:9e:92:04:43:d5:fc:
83:db:4b:f4:48:d7:e4:c3:03:26:62:00:c8:40:a4:82:1b:55:
c5:07:b3:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbXKb/7PvRfVBz3kfS+K1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMjVmYzUwOGE3MzczMjU2NzIwYTU0ZDczZmE5MDU3ZDhh
MjFjMTMwHhcNMjQwMTAxMDAzMDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDBiMzA2Nzc0ZGI3ZjFlYTNhM2MyZThhZDAxYzg0NDEwY2YxNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHkeKDsxgRIYyiqQdvR9WvOiZDyY
awy4BNRDS61m5bGBMvE+jjx2d31r94UVR6HmrJ9KEdBuTeWN50i9wZIl6WEuQ7yK
EjEcUWG9A7JYuB0EoRzKe2gGZHBhr2J2rTbBfYqMnNBllXwuB90k8a2SWmI+50ca
X/Dzhx9JyWInS9oWvlw4MiSdhJFlLL9LT8yza1HXDwxP3addkD/Kmg3vBvVudrbp
jXIPjgFxKhkR0BS/tnycErqVOv/AeDl9uFiYPXjiAHXj4WLxFi+saYls0tprj1hv
/zjBsAWTTvF8PJ/NH4UN9ym2sUqgtQW78s7XCw3wtupTkDphucTQyp7pEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNALMGd0238eo6PC6K0ByEQQzxRZMB8GA1UdIwQY
MBaAFNMl/FCKc3MlZyClTXP6kFfYohwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHlYOFVJcHpjeVZuSUtWTmNfcVFWOWlpSEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kYzE3MjQtMzE2NS00N2VmLWE2ZmUt
MWM2YWExZjZiNzBiLzEvMEFzd1ozVGJmeDZqbzhMb3JRSElSQkRQRkZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9kYzE3MjQtMzE2NS00N2VmLWE2ZmUtMWM2YWExZjZiNzBi
LzEvMHlYOFVJcHpjeVZuSUtWTmNfcVFWOWlpSEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYX+MA0G
CSqGSIb3DQEBCwUAA4IBAQCt1UTCSV1dLgNnYT5doaimajwXT0Xqz5vWOlAYIf9O
p6PyuS6qs+ElPle2mOPZGGRKk185ZM6Q2Nge3uhgoeD8ei/As/SYpYgihPjW5y4E
/ZNuBopfnQgY41crNB1lMO23+2s8S2C05f0y2ArB+FaTxSAjKBTmWUVoUiZZl+gS
mKQP66kz3eBNCSIynLi4K+MHS2naKsKoiyuxLjXeLxs327jInh34irL9p4owcJSN
gMnpdweUJKUvkDSE2OkXlM4npkBwS7G/bCSoFnnXUKqJ//BlYZqM5Ub1Bzhu89nD
SgQdxI+ekgRD1fyD20v0SNfkwwMmYgDIQKSCG1XFB7Nr
-----END CERTIFICATE-----
Generated at Wed May 15 17:03:24 2024 by rpki-client on console-ams.rpki-client.org