Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/aRJHTMl7b3B3myknXCXzXNJVj-0.roa
File: aRJHTMl7b3B3myknXCXzXNJVj-0.roa (raw, json)
Hash identifier: DBizTHqgjgCok7B0ROhAi/+azefmC7Rl8i5iHlodNFU=
Subject key identifier: 69:12:47:4C:C9:7B:6F:70:77:9B:29:27:5C:25:F3:5C:D2:55:8F:ED
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018CC493824D078BE1C500779509701C0747
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/aRJHTMl7b3B3myknXCXzXNJVj-0.roa
Signing time: Mon 01 Jan 2024 10:30:50 +0000
ROA not before: Mon 01 Jan 2024 10:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6079
IP address blocks: 185.52.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:82:4d:07:8b:e1:c5:00:77:95:09:70:1c:07:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 1 10:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6912474cc97b6f70779b29275c25f35cd2558fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:bc:e2:e7:85:5f:82:31:aa:da:c2:d4:1c:
d0:9f:6b:af:7a:e8:af:b0:96:41:be:a1:b8:dd:81:
84:d3:ac:36:bc:16:ae:02:e4:a7:36:13:11:dc:0b:
13:29:d2:3f:d1:bb:cf:03:09:3a:23:f6:be:f8:bb:
31:bf:9b:1f:30:7b:fd:6b:bc:0c:f4:b3:36:8f:11:
2f:7e:5b:0c:a5:d1:93:f0:37:53:4d:78:55:98:69:
b1:b6:3a:75:90:65:11:00:07:f6:b3:f3:69:30:e4:
18:df:7d:f9:49:b3:f1:32:8a:67:80:15:f2:58:89:
16:33:0a:c9:b7:c1:0d:80:b0:8e:9a:38:2a:5e:4c:
a6:bd:19:e3:0e:19:3e:d7:fb:57:b7:3c:d9:27:42:
d2:3a:22:fb:d7:21:36:84:9a:f5:96:b8:10:28:a2:
44:35:4a:1e:94:1a:9c:7a:28:41:f8:98:a0:f7:f7:
1a:ec:d6:66:0e:b9:de:64:ed:ce:74:6e:b9:43:9f:
a4:27:fa:e8:4d:0f:8c:c2:86:0a:44:78:13:86:36:
5b:4a:27:50:68:bf:c5:42:1f:90:aa:12:ac:b4:99:
cc:1b:e8:c5:71:03:03:1a:98:9d:81:81:10:40:37:
d1:cd:9b:bc:29:f4:11:63:13:26:54:df:0f:63:54:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:12:47:4C:C9:7B:6F:70:77:9B:29:27:5C:25:F3:5C:D2:55:8F:ED
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/aRJHTMl7b3B3myknXCXzXNJVj-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.136.0/24
Signature Algorithm: sha256WithRSAEncryption
15:91:58:8e:ab:44:49:c8:c0:15:0c:a2:13:3b:de:f0:e7:97:
37:91:23:bb:7b:c0:ff:6c:3f:a6:d2:32:6b:f7:13:c5:ce:f6:
b8:4c:8a:21:84:f7:49:78:09:e9:f5:c8:47:40:f5:de:fc:da:
04:af:6b:6d:9c:d1:b4:d1:0a:e8:42:b5:52:83:56:95:e7:71:
bf:8b:c4:64:56:5b:38:ec:9b:ed:21:26:80:3c:9a:42:ee:69:
06:5c:1a:3f:1b:a2:5d:0d:3f:e7:5a:e3:b2:e5:1e:5b:b7:ae:
0d:89:48:56:79:d9:34:03:f2:89:b8:8b:ce:c9:ba:4e:dd:a2:
26:76:18:b1:8f:3f:ac:6b:7a:ff:36:ec:b4:3b:32:a5:d1:69:
fa:17:2d:b6:c4:da:97:63:61:63:73:06:41:cc:82:75:ea:fd:
64:6f:14:0b:c8:63:4b:43:d5:f1:98:a2:4a:e9:3f:f3:d0:c7:
c9:d1:2e:1c:e9:89:97:d8:51:28:7d:97:0f:7f:73:36:26:22:
f5:7a:25:4e:a4:5c:9e:2b:90:ac:76:95:a6:c3:ab:8f:72:16:
5b:fa:31:04:18:4a:23:d7:40:c0:b3:66:18:b7:96:f2:6f:69:
ea:18:03:ad:b5:9d:dd:80:bc:1d:ab:bf:fc:29:b8:0f:33:fd:
f5:68:a0:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk4JNB4vhxQB3lQlwHAdHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjQwMTAxMTAzMDUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTEyNDc0Y2M5N2I2ZjcwNzc5YjI5Mjc1YzI1ZjM1Y2QyNTU4ZmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMm84ueFX4IxqtrC1BzQn2uveuiv
sJZBvqG43YGE06w2vBauAuSnNhMR3AsTKdI/0bvPAwk6I/a++Lsxv5sfMHv9a7wM
9LM2jxEvflsMpdGT8DdTTXhVmGmxtjp1kGURAAf2s/NpMOQY3335SbPxMopngBXy
WIkWMwrJt8ENgLCOmjgqXkymvRnjDhk+1/tXtzzZJ0LSOiL71yE2hJr1lrgQKKJE
NUoelBqceihB+Jig9/ca7NZmDrneZO3OdG65Q5+kJ/roTQ+MwoYKRHgThjZbSidQ
aL/FQh+QqhKstJnMG+jFcQMDGpidgYEQQDfRzZu8KfQRYxMmVN8PY1T9XwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGkSR0zJe29wd5spJ1wl81zSVY/tMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvYVJKSFRNbDdiM0IzbXlrblhDWHpYTkpWai0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTSIMA0G
CSqGSIb3DQEBCwUAA4IBAQAVkViOq0RJyMAVDKITO97w55c3kSO7e8D/bD+m0jJr
9xPFzva4TIohhPdJeAnp9chHQPXe/NoEr2ttnNG00QroQrVSg1aV53G/i8RkVls4
7JvtISaAPJpC7mkGXBo/G6JdDT/nWuOy5R5bt64NiUhWedk0A/KJuIvOybpO3aIm
dhixjz+sa3r/Nuy0OzKl0Wn6Fy22xNqXY2FjcwZBzIJ16v1kbxQLyGNLQ9XxmKJK
6T/z0MfJ0S4c6YmX2FEofZcPf3M2JiL1eiVOpFyeK5CsdpWmw6uPchZb+jEEGEoj
10DAs2YYt5byb2nqGAOttZ3dgLwdq7/8KbgPM/31aKCs
-----END CERTIFICATE-----
Generated at Thu May 30 10:32:22 2024 by rpki-client on console-fra.rpki-client.org