Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/a9UcdRfYuJCfnQ2wEaXjuC4W5yw.roa
File: a9UcdRfYuJCfnQ2wEaXjuC4W5yw.roa (raw, json)
Hash identifier: +981/7o9ffBcnaf3fvktEJERgOBkGWp+KQXG39WwpRY=
Subject key identifier: 6B:D5:1C:75:17:D8:B8:90:9F:9D:0D:B0:11:A5:E3:B8:2E:16:E7:2C
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DFA0C523D093E2E20CEA757CA0C70C
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/a9UcdRfYuJCfnQ2wEaXjuC4W5yw.roa
Signing time: Tue 02 Jan 2024 06:32:28 +0000
ROA not before: Tue 02 Jan 2024 06:32:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198338
IP address blocks: 185.103.254.0/23 maxlen: 23
185.105.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Jun 2024 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a0:c5:23:d0:93:e2:e2:0c:ea:75:7c:a0:c7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6bd51c7517d8b8909f9d0db011a5e3b82e16e72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:45:e5:18:0d:83:6b:1e:f2:fa:1c:6f:26:50:
99:6f:1e:ec:d0:51:8e:c5:3c:a2:36:e8:6a:13:28:
5d:86:21:52:56:6d:d7:c0:7e:9c:49:b6:c7:b2:0a:
ac:2a:8f:4a:6e:d3:8f:b2:81:d0:3d:5b:b3:45:15:
ba:eb:2f:5b:5c:57:d4:ca:d5:b2:89:02:83:31:e9:
43:1d:ce:44:2a:7e:02:b8:61:9a:8b:c4:07:33:d7:
3d:22:87:d9:6f:57:05:4b:07:8b:93:e9:27:85:ba:
61:56:17:fc:fb:2c:dc:5b:b5:12:c2:2f:0a:82:00:
83:a7:66:12:4d:99:16:cd:cd:06:60:be:ff:17:ee:
65:ca:94:38:c2:b3:74:e8:11:76:aa:c2:d9:28:2f:
9e:7b:63:85:9d:61:b7:8f:b4:c4:54:f4:b1:49:48:
5f:00:cf:1a:81:4a:c5:a4:65:3c:25:7c:d3:29:ac:
42:f7:78:c9:d7:04:e6:4a:21:58:ca:98:ba:dc:ce:
13:07:9d:1e:fb:0a:c5:2b:16:40:9a:c2:09:b6:9a:
8a:19:83:e0:1e:38:a9:76:2d:17:ea:a1:46:f5:82:
17:33:e6:7c:c4:b5:b0:ce:09:3a:72:19:09:5d:f5:
cb:c1:d6:b4:ca:d7:99:28:0f:db:da:10:ad:09:e3:
f7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D5:1C:75:17:D8:B8:90:9F:9D:0D:B0:11:A5:E3:B8:2E:16:E7:2C
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/a9UcdRfYuJCfnQ2wEaXjuC4W5yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.254.0/23
185.105.116.0/22
Signature Algorithm: sha256WithRSAEncryption
86:81:ae:52:f1:e7:25:6a:cb:7d:07:6f:d2:23:5e:36:26:b4:
f2:1b:fd:cb:19:1a:00:85:67:b2:1f:02:08:d9:9f:58:14:d6:
8c:8f:a4:35:34:b3:94:9e:ed:62:3d:77:63:86:79:27:51:74:
06:d9:35:d5:24:04:d5:2a:d2:ab:29:0b:d7:20:8c:9d:e0:75:
f7:af:5e:6e:3f:ed:2c:73:d7:1e:d4:c1:81:29:b1:6b:5e:c1:
2a:d0:94:76:70:8d:d8:60:c7:b7:40:3f:bb:2f:d4:89:79:7f:
20:86:15:2c:42:37:23:b9:93:fc:19:26:b7:47:31:9c:8c:d3:
e4:e7:e2:81:86:4b:03:73:9c:88:48:f2:a4:db:94:a7:39:7c:
a4:13:99:47:aa:ed:e3:39:dc:0d:e4:be:5b:2f:cd:06:f1:29:
eb:4a:34:ab:bc:ec:f9:f7:90:7c:46:a3:98:81:f6:62:dd:36:
48:2e:c3:33:8b:03:e1:ed:3b:ce:ec:e2:62:ea:39:c4:9d:d2:
be:b7:f0:36:7c:ce:40:e5:b6:74:95:b5:ee:14:55:f2:7b:09:
90:98:51:39:b3:3c:4c:c6:73:cd:0b:ee:5b:04:c4:65:39:53:
bd:51:39:ad:08:a4:b9:0f:91:e3:8a:7c:15:ee:57:3f:2c:34:
74:45:ca:3f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzI36DFI9CT4uIM6nV8oMcMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjQwMTAyMDYzMjI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmQ1MWM3NTE3ZDhiODkwOWY5ZDBkYjAxMWE1ZTNiODJlMTZlNzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEXlGA2Dax7y+hxvJlCZbx7s0FGO
xTyiNuhqEyhdhiFSVm3XwH6cSbbHsgqsKo9KbtOPsoHQPVuzRRW66y9bXFfUytWy
iQKDMelDHc5EKn4CuGGai8QHM9c9IofZb1cFSweLk+knhbphVhf8+yzcW7USwi8K
ggCDp2YSTZkWzc0GYL7/F+5lypQ4wrN06BF2qsLZKC+ee2OFnWG3j7TEVPSxSUhf
AM8agUrFpGU8JXzTKaxC93jJ1wTmSiFYypi63M4TB50e+wrFKxZAmsIJtpqKGYPg
Hjipdi0X6qFG9YIXM+Z8xLWwzgk6chkJXfXLwda0yteZKA/b2hCtCeP3LQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGvVHHUX2LiQn50NsBGl47guFucsMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvYTlVY2RSZll1SkNmblEyd0VhWGp1QzRXNXl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuWf+AwQC
uWl0MA0GCSqGSIb3DQEBCwUAA4IBAQCGga5S8eclast9B2/SI142JrTyG/3LGRoA
hWeyHwII2Z9YFNaMj6Q1NLOUnu1iPXdjhnknUXQG2TXVJATVKtKrKQvXIIyd4HX3
r15uP+0sc9ce1MGBKbFrXsEq0JR2cI3YYMe3QD+7L9SJeX8ghhUsQjcjuZP8GSa3
RzGcjNPk5+KBhksDc5yISPKk25SnOXykE5lHqu3jOdwN5L5bL80G8SnrSjSrvOz5
95B8RqOYgfZi3TZILsMziwPh7TvO7OJi6jnEndK+t/A2fM5A5bZ0lbXuFFXyewmQ
mFE5szxMxnPNC+5bBMRlOVO9UTmtCKS5D5HjinwV7lc/LDR0Rco/
-----END CERTIFICATE-----
Generated at Tue Jun 11 12:46:35 2024 by rpki-client on console-fra.rpki-client.org