Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/2F6OxsbAH_YS0klwuMO87bpHYc0.roa
File: 2F6OxsbAH_YS0klwuMO87bpHYc0.roa (raw, json)
Hash identifier: isvt1I8yTB9/HYzg9EuGn9UdWTxjhs1upaicszBVo/k=
Subject key identifier: D8:5E:8E:C6:C6:C0:1F:F6:12:D2:49:70:B8:C3:BC:ED:BA:47:61:CD
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B940634285233796ADC531811F88DF
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/2F6OxsbAH_YS0klwuMO87bpHYc0.roa
Signing time: Mon 01 Jan 2024 20:31:18 +0000
ROA not before: Mon 01 Jan 2024 20:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200475
IP address blocks: 185.255.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:40:63:42:85:23:37:96:ad:c5:31:81:1f:88:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d85e8ec6c6c01ff612d24970b8c3bcedba4761cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:12:af:e6:1b:3a:fe:b7:ad:8f:f3:6f:ce:89:
b1:72:8c:16:32:4e:63:dc:bb:19:b8:45:b1:46:9a:
73:9c:5a:83:e6:14:39:26:9e:c3:14:5c:fe:7e:12:
4d:2a:14:5a:94:d0:4c:50:a9:63:a2:a2:03:a4:d0:
92:c5:07:6b:c3:0f:b1:0b:e4:13:4d:65:6f:c6:93:
67:b4:89:54:d9:86:3c:5c:93:31:d1:6d:14:7d:9b:
35:e7:01:40:dd:9f:d5:ed:c7:1f:4a:f2:8b:7e:69:
22:20:77:e7:f9:41:00:27:ec:6a:98:27:27:e7:8b:
37:14:a0:71:2b:42:ca:05:17:f2:34:12:3c:2f:b2:
a4:c6:7c:ef:de:3f:f8:51:54:1d:c8:53:9a:ca:c2:
df:81:7b:95:55:7a:b5:8f:f3:70:d6:c0:20:8d:61:
b6:7e:eb:0c:8d:6a:37:89:ec:9b:5b:08:30:42:78:
1c:bb:f3:c5:08:e0:d5:a4:a3:0f:11:88:fd:f8:ab:
d0:33:0f:f8:76:b3:63:95:36:d1:bf:b7:1c:de:41:
47:fd:2d:3e:6d:f6:cb:2e:64:50:e2:6e:39:ae:0a:
fe:4f:3a:5c:a8:8d:fa:44:0d:bc:a3:c6:75:cb:de:
b4:bc:21:b7:1d:da:e4:fe:49:f4:bf:27:74:41:95:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5E:8E:C6:C6:C0:1F:F6:12:D2:49:70:B8:C3:BC:ED:BA:47:61:CD
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/2F6OxsbAH_YS0klwuMO87bpHYc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.212.0/22
Signature Algorithm: sha256WithRSAEncryption
15:26:d0:f9:3a:6f:16:db:5b:27:b1:2b:a9:1d:40:86:71:82:
3e:1a:f0:47:63:63:21:7a:d3:35:35:9b:cf:4d:ab:5d:bb:24:
ff:4c:51:ac:49:09:a4:a4:d8:39:65:0c:1c:f7:55:b8:81:fe:
2a:3e:6d:65:7b:3a:fd:34:6a:4d:4a:f1:d5:49:04:54:31:07:
3d:54:18:b6:6c:aa:ec:f3:90:c2:a0:b8:9f:9c:23:31:88:60:
17:ab:df:17:27:a9:7e:cb:bd:cd:5a:dc:5e:2b:d7:7f:28:54:
46:b1:ab:ca:6c:9e:b3:3c:ca:0c:1b:c4:b4:04:a7:39:5b:ab:
b4:8a:58:4d:31:16:a7:5b:60:40:9d:cc:50:d0:a6:5b:67:01:
d0:8d:b3:52:f1:bb:41:8f:91:db:48:99:81:49:c2:15:7f:cb:
7f:5b:89:46:a2:84:87:e1:a9:2e:0a:23:f7:d9:b9:13:35:46:
26:08:cb:03:e3:e2:7e:74:46:07:d2:fe:b5:d1:b9:be:b9:35:
ac:80:e4:2a:2b:54:fe:cd:00:96:01:f9:62:77:7e:58:08:13:
2e:60:0e:85:85:c9:d7:8d:52:4e:3b:75:6b:40:4a:27:e8:47:
b2:1a:a9:b5:c7:e7:ec:22:8d:db:9b:90:a1:d1:d7:d7:ed:28:
54:0d:cd:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuUBjQoUjN5atxTGBH4jfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjQwMTAxMjAzMTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODVlOGVjNmM2YzAxZmY2MTJkMjQ5NzBiOGMzYmNlZGJhNDc2MWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxKv5hs6/retj/NvzomxcowWMk5j
3LsZuEWxRppznFqD5hQ5Jp7DFFz+fhJNKhRalNBMUKljoqIDpNCSxQdrww+xC+QT
TWVvxpNntIlU2YY8XJMx0W0UfZs15wFA3Z/V7ccfSvKLfmkiIHfn+UEAJ+xqmCcn
54s3FKBxK0LKBRfyNBI8L7Kkxnzv3j/4UVQdyFOaysLfgXuVVXq1j/Nw1sAgjWG2
fusMjWo3ieybWwgwQngcu/PFCODVpKMPEYj9+KvQMw/4drNjlTbRv7cc3kFH/S0+
bfbLLmRQ4m45rgr+TzpcqI36RA28o8Z1y960vCG3Hdrk/kn0vyd0QZU6BwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNhejsbGwB/2EtJJcLjDvO26R2HNMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvMkY2T3hzYkFIX1lTMGtsd3VNTzg3YnBIWWMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuf/UMA0G
CSqGSIb3DQEBCwUAA4IBAQAVJtD5Om8W21snsSupHUCGcYI+GvBHY2MhetM1NZvP
TatduyT/TFGsSQmkpNg5ZQwc91W4gf4qPm1lezr9NGpNSvHVSQRUMQc9VBi2bKrs
85DCoLifnCMxiGAXq98XJ6l+y73NWtxeK9d/KFRGsavKbJ6zPMoMG8S0BKc5W6u0
ilhNMRanW2BAncxQ0KZbZwHQjbNS8btBj5HbSJmBScIVf8t/W4lGooSH4akuCiP3
2bkTNUYmCMsD4+J+dEYH0v610bm+uTWsgOQqK1T+zQCWAflid35YCBMuYA6FhcnX
jVJOO3VrQEon6EeyGqm1x+fsIo3bm5Ch0dfX7ShUDc0v
-----END CERTIFICATE-----
Generated at Fri Jun 7 17:43:42 2024 by rpki-client on console-ams.rpki-client.org