Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/Ii2KONkSvjEDSADOkDvUUCy1Udg.roa
File: Ii2KONkSvjEDSADOkDvUUCy1Udg.roa (raw, json)
Hash identifier: U9a+hMVNY0eevxLMs7ErjZx3u8JYYLPQyE9+GnNmwzc=
Subject key identifier: 22:2D:8A:38:D9:12:BE:31:03:48:00:CE:90:3B:D4:50:2C:B5:51:D8
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 018CC5011169FA707633EF7C7770EF0390BA
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/Ii2KONkSvjEDSADOkDvUUCy1Udg.roa
Signing time: Mon 01 Jan 2024 12:30:30 +0000
ROA not before: Mon 01 Jan 2024 12:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211440
IP address blocks: 185.255.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 May 2024 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:11:69:fa:70:76:33:ef:7c:77:70:ef:03:90:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 1 12:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=222d8a38d912be31034800ce903bd4502cb551d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:47:30:3a:08:5d:e2:9a:e4:30:88:74:d6:58:
93:36:37:e5:8d:79:f4:1a:f5:3d:76:ea:56:52:f4:
3f:f9:6a:81:d5:2a:64:d4:5e:ed:9e:2b:7d:8a:5a:
1e:c0:64:59:e0:24:ce:00:5f:2f:50:15:bf:db:a6:
a9:38:0b:1e:52:d7:dc:ff:77:db:13:84:4a:cc:f0:
d3:87:8f:a7:e5:b9:79:10:96:d9:74:72:c2:7a:23:
08:92:b0:f4:d1:81:a2:ca:45:40:86:c7:11:2f:20:
97:fd:e5:99:9e:ed:1e:64:d0:a2:18:3f:62:ff:5d:
6e:03:2a:3e:a7:69:84:4c:30:7c:c7:84:4d:8f:a2:
41:6b:37:49:e7:75:8b:41:0b:2a:3c:fd:3c:08:47:
89:54:41:a6:89:6a:a7:73:a7:7e:62:6d:2e:57:5d:
91:ca:9b:05:4b:83:b5:2e:77:43:27:33:73:2f:af:
ea:1f:a0:74:00:90:d1:75:62:9c:6f:5e:2b:70:2d:
f3:60:d7:6c:24:a6:de:47:c5:51:a9:df:d7:00:7c:
8c:5d:56:41:fc:3e:a9:7a:73:96:94:fa:7d:1c:0a:
a2:09:80:f5:5b:12:ac:28:64:81:49:1d:43:f6:86:
ac:3b:6d:8c:3a:56:f4:fb:ed:30:a3:fb:3c:6e:74:
be:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2D:8A:38:D9:12:BE:31:03:48:00:CE:90:3B:D4:50:2C:B5:51:D8
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/Ii2KONkSvjEDSADOkDvUUCy1Udg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.6.0/24
Signature Algorithm: sha256WithRSAEncryption
63:dc:48:1c:e6:4e:df:9d:28:c2:a7:cc:f4:40:78:4f:53:bf:
6c:96:1e:e4:5a:b6:30:c6:6e:be:8f:89:1f:46:a5:89:6a:e3:
ad:50:2c:ff:c3:56:ca:72:64:cc:c0:4d:51:08:0d:0e:59:71:
ed:a7:a8:e2:86:09:c9:e8:9c:63:7a:c3:5b:af:88:27:d8:63:
27:99:54:7c:56:b3:78:85:99:84:52:0f:56:89:ab:3d:f7:74:
81:e0:32:4f:11:71:29:13:23:14:c5:79:10:a6:de:60:6f:d9:
03:fe:aa:ac:91:6e:b0:bf:a6:e0:bb:82:09:72:f4:20:51:fd:
48:fb:8c:10:76:7f:d2:a0:f5:a5:bc:47:a0:5f:5d:6c:04:08:
ee:73:04:98:03:8a:f9:c9:e8:a7:a1:30:3e:b8:ad:fe:83:75:
30:77:7b:c2:5e:85:15:44:cf:97:e9:33:e3:7e:f2:e4:8e:7c:
26:3b:62:bc:d8:76:43:59:73:51:dd:4a:e3:c0:ee:2c:0e:60:
97:ee:ee:96:5b:1b:8b:34:e6:d0:35:d0:85:b6:b1:f2:03:9c:
fb:3a:01:e4:23:ee:f1:d5:db:2d:39:b9:34:21:59:70:29:e9:
26:1b:42:38:07:da:56:a6:28:47:b2:f8:5c:38:d7:1d:b8:c2:
75:74:6c:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFARFp+nB2M+98d3DvA5C6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl
ZWFmMzgwHhcNMjQwMTAxMTIzMDMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjJkOGEzOGQ5MTJiZTMxMDM0ODAwY2U5MDNiZDQ1MDJjYjU1MWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UcwOghd4prkMIh01liTNjfljXn0
GvU9dupWUvQ/+WqB1Spk1F7tnit9iloewGRZ4CTOAF8vUBW/26apOAseUtfc/3fb
E4RKzPDTh4+n5bl5EJbZdHLCeiMIkrD00YGiykVAhscRLyCX/eWZnu0eZNCiGD9i
/11uAyo+p2mETDB8x4RNj6JBazdJ53WLQQsqPP08CEeJVEGmiWqnc6d+Ym0uV12R
ypsFS4O1LndDJzNzL6/qH6B0AJDRdWKcb14rcC3zYNdsJKbeR8VRqd/XAHyMXVZB
/D6penOWlPp9HAqiCYD1WxKsKGSBSR1D9oasO22MOlb0++0wo/s8bnS+VwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCItijjZEr4xA0gAzpA71FAstVHYMB8GA1UdIwQY
MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct
NjJiYjZkNjNlNTlkLzEvSWkyS09Oa1N2akVEU0FET2tEdlVVQ3kxVWRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk
LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf8GMA0G
CSqGSIb3DQEBCwUAA4IBAQBj3Egc5k7fnSjCp8z0QHhPU79slh7kWrYwxm6+j4kf
RqWJauOtUCz/w1bKcmTMwE1RCA0OWXHtp6jihgnJ6JxjesNbr4gn2GMnmVR8VrN4
hZmEUg9Wias993SB4DJPEXEpEyMUxXkQpt5gb9kD/qqskW6wv6bgu4IJcvQgUf1I
+4wQdn/SoPWlvEegX11sBAjucwSYA4r5yeinoTA+uK3+g3Uwd3vCXoUVRM+X6TPj
fvLkjnwmO2K82HZDWXNR3UrjwO4sDmCX7u6WWxuLNObQNdCFtrHyA5z7OgHkI+7x
1dstObk0IVlwKekmG0I4B9pWpihHsvhcONcduMJ1dGzZ
-----END CERTIFICATE-----
Generated at Fri May 24 19:57:45 2024 by rpki-client on console-ams.rpki-client.org