Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/_eUDzg0RJwetAIsupsf57gkXNCU.roa
File: _eUDzg0RJwetAIsupsf57gkXNCU.roa (raw, json)
Hash identifier: erjN++9Ic/DEvenjdsgYjYt2ndx/BN7iu5pwXHRVU7g=
Subject key identifier: FD:E5:03:CE:0D:11:27:07:AD:00:8B:2E:A6:C7:F9:EE:09:17:34:25
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 018CC7263E55C47AC16A7EDA621BBF2B2057
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/_eUDzg0RJwetAIsupsf57gkXNCU.roa
Signing time: Mon 01 Jan 2024 22:30:21 +0000
ROA not before: Mon 01 Jan 2024 22:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31708
IP address blocks: 185.199.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:3e:55:c4:7a:c1:6a:7e:da:62:1b:bf:2b:20:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Jan 1 22:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fde503ce0d112707ad008b2ea6c7f9ee09173425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:97:2d:8f:db:6f:ee:05:74:b3:01:45:c7:57:
be:d0:ea:2d:8a:a9:5d:44:fc:c0:d8:b1:01:4a:9c:
0b:c1:31:14:6c:ec:18:64:2c:16:2e:9c:04:a5:a6:
e2:b8:a9:91:21:b0:11:76:44:8d:f2:88:1f:73:1c:
65:f7:cc:63:d1:28:af:eb:e5:86:18:88:c3:36:71:
23:6a:a7:62:2c:bc:a4:5e:ab:87:16:33:24:ef:9f:
d3:db:db:c6:81:06:c5:8b:f0:a7:e2:3c:15:9b:09:
54:22:a5:23:d9:9a:ef:89:76:7a:9b:26:32:b3:7b:
22:8a:27:5d:23:1b:a6:d1:d5:69:87:7f:d1:00:11:
04:05:ab:e5:ad:aa:07:78:0d:f6:62:b1:a2:44:32:
6d:94:1b:8c:27:67:93:69:a9:d0:e1:b3:10:2b:3f:
31:31:5d:65:88:3b:04:c6:fb:54:89:ca:22:15:25:
01:c1:08:9a:9c:4d:1a:f3:86:d5:1e:00:1c:20:0e:
69:c8:a1:24:51:55:33:fe:03:af:68:d2:fb:38:9e:
56:51:21:96:51:0c:eb:db:ab:90:f5:9e:fe:b5:4d:
74:30:ed:6f:bd:b9:40:b9:36:3b:14:24:fc:c7:b4:
02:d4:4a:6f:26:4d:82:d6:eb:c3:b9:33:96:f3:09:
c1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E5:03:CE:0D:11:27:07:AD:00:8B:2E:A6:C7:F9:EE:09:17:34:25
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/_eUDzg0RJwetAIsupsf57gkXNCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.36.0/24
Signature Algorithm: sha256WithRSAEncryption
43:6d:f0:1a:04:96:df:62:c7:9f:2a:fb:5f:2f:dc:da:eb:ab:
a6:41:4a:42:d7:d8:8e:9c:ef:83:45:c6:c6:68:24:cc:05:82:
36:96:d0:86:64:72:4e:52:b1:1f:8b:2f:0e:0b:1a:fc:6d:9a:
53:5e:03:a2:3e:46:80:6f:64:d7:f6:2b:cb:92:64:ff:b7:67:
f6:3a:97:00:da:44:e3:b5:cc:f5:bd:f1:36:3f:21:49:25:a3:
83:f7:67:dd:a7:e6:f7:67:bb:87:1e:c3:c4:00:96:52:5b:82:
d8:a5:31:c2:5e:21:a8:a9:12:d3:93:e9:5b:c3:08:42:de:d4:
4c:8e:b6:b0:e9:bc:e8:2b:cd:d6:40:45:dd:67:78:73:3b:de:
ba:56:43:a0:d1:86:db:8f:18:28:bd:01:a7:33:39:50:61:a1:
7e:75:dd:1d:9e:72:b6:48:0b:29:40:d5:5b:ae:95:ed:cc:07:
d9:3e:ee:8c:ba:49:e2:cc:c3:af:76:af:63:00:2e:e2:25:21:
2f:4e:a7:8e:7f:39:b9:3e:de:e3:ec:26:37:2a:1a:00:77:f4:
2e:1e:db:d3:5b:04:4d:b9:ac:f2:fd:1c:aa:b7:2a:6a:a8:d5:
ad:98:9e:1e:7e:76:60:56:25:54:ee:a6:ba:36:48:ba:23:59:
ae:e2:e6:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJj5VxHrBan7aYhu/KyBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MGExMGEyNTY3MjhmMTFhNGJiYWFkYzMyMDRiN2YwYTM1
YTUwMDAwHhcNMjQwMTAxMjIzMDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGU1MDNjZTBkMTEyNzA3YWQwMDhiMmVhNmM3ZjllZTA5MTczNDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5ctj9tv7gV0swFFx1e+0Ootiqld
RPzA2LEBSpwLwTEUbOwYZCwWLpwEpabiuKmRIbARdkSN8ogfcxxl98xj0Siv6+WG
GIjDNnEjaqdiLLykXquHFjMk75/T29vGgQbFi/Cn4jwVmwlUIqUj2ZrviXZ6myYy
s3siiiddIxum0dVph3/RABEEBavlraoHeA32YrGiRDJtlBuMJ2eTaanQ4bMQKz8x
MV1liDsExvtUicoiFSUBwQianE0a84bVHgAcIA5pyKEkUVUz/gOvaNL7OJ5WUSGW
UQzr26uQ9Z7+tU10MO1vvblAuTY7FCT8x7QC1EpvJk2C1uvDuTOW8wnB/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP3lA84NEScHrQCLLqbH+e4JFzQlMB8GA1UdIwQY
MBaAFJQKEKJWco8RpLuq3DIEt/CjWlAAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYt
ZGNlNmQ2OTA5MjQ3LzEvX2VVRHpnMFJKd2V0QUlzdXBzZjU3Z2tYTkNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYtZGNlNmQ2OTA5MjQ3
LzEvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucckMA0G
CSqGSIb3DQEBCwUAA4IBAQBDbfAaBJbfYsefKvtfL9za66umQUpC19iOnO+DRcbG
aCTMBYI2ltCGZHJOUrEfiy8OCxr8bZpTXgOiPkaAb2TX9ivLkmT/t2f2OpcA2kTj
tcz1vfE2PyFJJaOD92fdp+b3Z7uHHsPEAJZSW4LYpTHCXiGoqRLTk+lbwwhC3tRM
jraw6bzoK83WQEXdZ3hzO966VkOg0YbbjxgovQGnMzlQYaF+dd0dnnK2SAspQNVb
rpXtzAfZPu6MuknizMOvdq9jAC7iJSEvTqeOfzm5Pt7j7CY3KhoAd/QuHtvTWwRN
uazy/RyqtypqqNWtmJ4efnZgViVU7qa6Nki6I1mu4uZe
-----END CERTIFICATE-----
Generated at Fri Jun 7 16:36:56 2024 by rpki-client on console-fra.rpki-client.org