Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ApKGM-duQkOfQfvCjsD6TpURDeY.roa
File: ApKGM-duQkOfQfvCjsD6TpURDeY.roa (raw, json)
Hash identifier: oohS93UQX5pC1om+DU7MHlD83rOc1vkTdhKXYSoPijQ=
Subject key identifier: 02:92:86:33:E7:6E:42:43:9F:41:FB:C2:8E:C0:FA:4E:95:11:0D:E6
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018D3FE33697BA1FCBC38B50C0570479B753
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ApKGM-duQkOfQfvCjsD6TpURDeY.roa
Signing time: Thu 25 Jan 2024 09:11:11 +0000
ROA not before: Thu 25 Jan 2024 09:11:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215646
IP address blocks: 185.114.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3f:e3:36:97:ba:1f:cb:c3:8b:50:c0:57:04:79:b7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 25 09:11:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02928633e76e42439f41fbc28ec0fa4e95110de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:62:c6:9a:f5:b7:a8:d5:fe:4d:d9:60:52:35:
c8:ef:da:ca:72:85:81:68:d4:7c:d7:00:ae:1d:f4:
5b:ba:d1:92:d3:e9:1f:75:f1:a4:35:05:1f:b5:4f:
d8:17:72:d4:1f:c1:66:24:97:30:66:2c:d4:b3:cb:
f4:7f:41:4b:46:f6:d2:3d:58:ce:41:36:9a:0c:fe:
7c:03:31:4a:8c:f4:0b:f8:84:01:66:e9:24:c0:23:
a7:65:d7:c1:3c:ca:e6:05:a1:5f:a3:80:5b:80:9b:
89:6a:9d:b5:58:3e:61:72:23:a3:2a:8e:ad:a0:18:
ba:8a:34:cb:2f:7d:36:c6:0c:e5:58:ce:20:d3:1b:
53:dc:c4:c0:e6:0f:38:8b:73:14:33:a9:98:29:b5:
41:6e:38:81:99:8d:3a:08:74:e1:50:41:92:30:30:
96:da:ff:44:4b:45:92:4a:da:c9:bf:dd:5b:4b:03:
c9:0d:96:bd:cc:8d:69:57:e0:fc:94:cf:ce:c6:6c:
ba:53:18:98:8f:68:b5:f0:a3:7e:b2:10:c0:81:af:
08:15:49:46:0d:a0:0c:a2:49:6f:91:91:2b:14:b5:
72:4b:2c:b1:74:31:63:23:69:8f:ce:a0:75:37:08:
31:36:b6:19:2c:33:eb:31:2d:62:85:47:35:f8:6a:
30:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:92:86:33:E7:6E:42:43:9F:41:FB:C2:8E:C0:FA:4E:95:11:0D:E6
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ApKGM-duQkOfQfvCjsD6TpURDeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.75.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e8:5a:10:62:ac:a5:67:61:20:df:3e:a0:a3:cc:da:d7:1f:
92:71:67:d1:f5:67:0b:cb:ca:5b:a2:ce:25:c2:dd:b3:f7:07:
84:36:70:94:1c:9c:f6:27:43:04:85:ef:b0:64:10:85:d3:f3:
1d:67:4e:b4:0e:95:8d:e8:77:cd:7f:d0:b7:14:48:18:bc:d5:
65:79:bb:4f:05:c5:48:bc:de:6b:1a:d2:c0:05:e7:c3:b1:cd:
d3:a0:48:8e:39:76:d4:b6:d8:aa:02:dd:ea:b8:a7:08:fa:9c:
ee:11:a3:3d:5f:8e:52:a9:a2:1a:fb:09:43:8b:e2:08:3d:2e:
0c:a9:ce:9b:40:a6:06:9c:0b:7a:e4:0a:db:42:e2:ae:22:0c:
23:75:72:c5:9b:a0:ad:84:18:5c:c3:19:3d:d8:f6:68:c9:87:
7f:3f:87:0e:24:17:fa:5c:65:4d:12:a1:d7:81:d5:6f:2a:75:
da:81:4e:b0:bb:05:20:da:28:f8:6b:f2:54:c2:2a:a6:46:7a:
cd:a5:55:d8:af:c3:13:92:86:7e:81:52:20:c5:36:34:6e:b5:
a5:c1:f1:77:9a:30:f8:2d:7b:be:31:11:00:b9:a4:df:a1:fb:
98:35:c4:b6:9b:d5:4f:8f:02:e7:ea:a7:5a:d9:49:b9:d8:2e:
db:bf:df:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0/4zaXuh/Lw4tQwFcEebdTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjQwMTI1MDkxMTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjkyODYzM2U3NmU0MjQzOWY0MWZiYzI4ZWMwZmE0ZTk1MTEwZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGLGmvW3qNX+TdlgUjXI79rKcoWB
aNR81wCuHfRbutGS0+kfdfGkNQUftU/YF3LUH8FmJJcwZizUs8v0f0FLRvbSPVjO
QTaaDP58AzFKjPQL+IQBZukkwCOnZdfBPMrmBaFfo4BbgJuJap21WD5hciOjKo6t
oBi6ijTLL302xgzlWM4g0xtT3MTA5g84i3MUM6mYKbVBbjiBmY06CHThUEGSMDCW
2v9ES0WSStrJv91bSwPJDZa9zI1pV+D8lM/Oxmy6UxiYj2i18KN+shDAga8IFUlG
DaAMoklvkZErFLVySyyxdDFjI2mPzqB1NwgxNrYZLDPrMS1ihUc1+GowNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAKShjPnbkJDn0H7wo7A+k6VEQ3mMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvQXBLR00tZHVRa09mUWZ2Q2pzRDZUcFVSRGVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXJLMA0G
CSqGSIb3DQEBCwUAA4IBAQAF6FoQYqylZ2Eg3z6go8za1x+ScWfR9WcLy8pbos4l
wt2z9weENnCUHJz2J0MEhe+wZBCF0/MdZ060DpWN6HfNf9C3FEgYvNVlebtPBcVI
vN5rGtLABefDsc3ToEiOOXbUttiqAt3quKcI+pzuEaM9X45SqaIa+wlDi+IIPS4M
qc6bQKYGnAt65ArbQuKuIgwjdXLFm6CthBhcwxk92PZoyYd/P4cOJBf6XGVNEqHX
gdVvKnXagU6wuwUg2ij4a/JUwiqmRnrNpVXYr8MTkoZ+gVIgxTY0brWlwfF3mjD4
LXu+MREAuaTfofuYNcS2m9VPjwLn6qda2Um52C7bv9+i
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:08:52 2024 by rpki-client on console-fra.rpki-client.org