Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/aQ6AAMUYyuo8fxRTfSaTfwI-Us8.roa
File: aQ6AAMUYyuo8fxRTfSaTfwI-Us8.roa (raw, json)
Hash identifier: sJAZY3r2T56mEc21Uu2dyrsmzYU4P51oZoAkGHVrDkk=
Subject key identifier: 69:0E:80:00:C5:18:CA:EA:3C:7F:14:53:7D:26:93:7F:02:3E:52:CF
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 018E3D1D776D30BE6932EEC91801FD70F6FE
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/aQ6AAMUYyuo8fxRTfSaTfwI-Us8.roa
Signing time: Thu 14 Mar 2024 13:18:45 +0000
ROA not before: Thu 14 Mar 2024 13:18:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 185.117.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 10:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:1d:77:6d:30:be:69:32:ee:c9:18:01:fd:70:f6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Mar 14 13:18:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=690e8000c518caea3c7f14537d26937f023e52cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:f8:7a:b3:9f:f9:65:d2:07:c3:de:6a:a4:
4c:6b:62:ff:04:ff:90:86:e0:5f:be:2b:48:28:fe:
44:c5:fb:5c:cb:70:95:04:b4:8c:84:89:7f:7e:c9:
19:37:f7:cd:85:c8:b2:15:d4:56:e3:51:c8:f0:8d:
6d:e0:88:7e:59:fb:25:ef:ad:d0:e6:6b:ef:07:4d:
1c:ef:4b:83:54:e2:00:92:c6:aa:5c:1b:8e:f8:30:
f4:09:65:cd:bb:61:f6:97:5e:e9:c1:18:6e:d6:da:
4c:0f:b2:1a:40:88:06:9e:e9:18:b4:4f:34:4a:e2:
d9:a8:5d:d3:a2:ba:f2:bc:e5:a4:48:7c:2e:92:4a:
d3:eb:e1:77:76:c7:bb:ab:7c:eb:22:1a:a1:91:50:
ce:cb:6a:f6:0a:45:39:da:0d:73:50:cf:9b:69:04:
5c:c0:11:e7:77:a1:67:99:3b:27:db:ef:cc:cc:e2:
ef:74:0b:74:ab:91:9b:be:5e:0f:22:96:dd:bb:ad:
3b:ba:7f:fd:cc:3d:0d:3c:f6:9d:67:4e:07:5a:58:
46:56:3c:8e:6c:03:da:a2:ad:a8:3b:2b:f2:be:6d:
fc:77:1f:e6:0b:49:3a:3d:0f:c0:a6:32:e6:57:02:
27:d6:2e:04:f4:8c:04:ac:30:7d:03:b8:07:ff:54:
2c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0E:80:00:C5:18:CA:EA:3C:7F:14:53:7D:26:93:7F:02:3E:52:CF
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/aQ6AAMUYyuo8fxRTfSaTfwI-Us8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.95.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:18:cb:26:c5:bb:48:f4:ae:bc:82:4a:af:ee:4f:3b:cc:f3:
cc:76:e2:c3:d6:56:1b:bf:f9:b0:b9:1c:6a:b6:fb:7a:cc:88:
e9:e7:79:3d:96:a2:86:9b:87:7a:c7:ab:f2:60:f9:82:67:b2:
8c:55:ae:28:75:0f:df:60:ab:3b:67:09:84:2d:c4:15:ac:ae:
e5:18:f4:44:59:44:d4:88:8d:8e:7e:89:cc:f5:58:1a:a5:6f:
12:29:44:87:85:34:f5:7c:10:d5:c9:43:28:e8:d6:fa:83:0d:
0a:1c:fd:d4:16:ea:20:39:1e:6e:c3:62:9e:e9:b1:18:07:90:
df:d4:5b:3c:ae:f5:53:84:db:24:fa:93:e7:5f:ea:5e:50:f2:
6d:67:d8:e4:35:fd:c9:c8:f9:9c:c2:d9:f1:71:41:8a:bc:64:
94:55:14:a9:bf:7a:87:84:db:27:98:b0:b3:a5:26:4a:84:8d:
a8:bd:9d:96:42:b7:b8:aa:5d:77:c0:a7:9d:03:d9:36:30:43:
b8:1a:87:57:70:51:6d:28:06:f0:4b:f9:00:a8:ab:05:90:15:
95:a5:f3:93:ca:6e:ca:9e:ef:d6:5e:13:df:b0:2a:a7:f2:12:
cc:50:a5:82:f1:38:6b:be:be:ab:40:58:35:9e:f5:f8:48:aa:
12:eb:c6:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY49HXdtML5pMu7JGAH9cPb+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiY2U1ZWM3MzYwOGUyNDg4NTI4M2U5MTBlYjg3YmYxZWY4
MjNhMDIwHhcNMjQwMzE0MTMxODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTBlODAwMGM1MThjYWVhM2M3ZjE0NTM3ZDI2OTM3ZjAyM2U1MmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZr4erOf+WXSB8PeaqRMa2L/BP+Q
huBfvitIKP5Exftcy3CVBLSMhIl/fskZN/fNhciyFdRW41HI8I1t4Ih+Wfsl763Q
5mvvB00c70uDVOIAksaqXBuO+DD0CWXNu2H2l17pwRhu1tpMD7IaQIgGnukYtE80
SuLZqF3TorryvOWkSHwukkrT6+F3dse7q3zrIhqhkVDOy2r2CkU52g1zUM+baQRc
wBHnd6FnmTsn2+/MzOLvdAt0q5Gbvl4PIpbdu607un/9zD0NPPadZ04HWlhGVjyO
bAPaoq2oOyvyvm38dx/mC0k6PQ/ApjLmVwIn1i4E9IwErDB9A7gH/1Qs7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGkOgADFGMrqPH8UU30mk38CPlLPMB8GA1UdIwQY
MBaAFDvOXsc2COJIhSg+kQ64e/HvgjoCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZmY1MTQtMWUwZS00OTNlLTllZTUt
NmU5OWI3OWRhNTIwLzEvYVE2QUFNVVl5dW84ZnhSVGZTYVRmd0ktVXM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9mZmY1MTQtMWUwZS00OTNlLTllZTUtNmU5OWI3OWRhNTIw
LzEvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXVfMA0G
CSqGSIb3DQEBCwUAA4IBAQCtGMsmxbtI9K68gkqv7k87zPPMduLD1lYbv/mwuRxq
tvt6zIjp53k9lqKGm4d6x6vyYPmCZ7KMVa4odQ/fYKs7ZwmELcQVrK7lGPREWUTU
iI2OfonM9VgapW8SKUSHhTT1fBDVyUMo6Nb6gw0KHP3UFuogOR5uw2Ke6bEYB5Df
1Fs8rvVThNsk+pPnX+peUPJtZ9jkNf3JyPmcwtnxcUGKvGSUVRSpv3qHhNsnmLCz
pSZKhI2ovZ2WQre4ql13wKedA9k2MEO4GodXcFFtKAbwS/kAqKsFkBWVpfOTym7K
nu/WXhPfsCqn8hLMUKWC8Thrvr6rQFg1nvX4SKoS68bF
-----END CERTIFICATE-----
Generated at Sun Jun 2 16:52:10 2024 by rpki-client on console-ams.rpki-client.org