Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/3RbAy01VILxo9QHR8AnstyFkjZU.roa
File: 3RbAy01VILxo9QHR8AnstyFkjZU.roa (raw, json)
Hash identifier: V8W9B3qtzp8Pizr9iyJKHDkhVESMf8oY0ioovUmAd9E=
Subject key identifier: DD:16:C0:CB:4D:55:20:BC:68:F5:01:D1:F0:09:EC:B7:21:64:8D:95
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B94758B8DB4CBA699904494352D6F1
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/3RbAy01VILxo9QHR8AnstyFkjZU.roa
Signing time: Mon 01 Jan 2024 20:31:20 +0000
ROA not before: Mon 01 Jan 2024 20:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209518
IP address blocks: 85.187.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:47:58:b8:db:4c:ba:69:99:04:49:43:52:d6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd16c0cb4d5520bc68f501d1f009ecb721648d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6f:7d:60:f5:81:d5:1a:9a:7f:16:37:de:44:
2d:60:d3:34:5b:cb:1c:5f:f7:fb:f7:31:fa:bd:bd:
b7:4d:1f:06:f3:1b:e6:16:21:09:c6:ad:74:e1:52:
fc:83:84:cf:e6:9f:e9:92:ce:70:7f:fa:98:85:3a:
19:48:3a:7f:2b:b5:9f:d4:9f:69:6a:b0:4b:62:14:
70:a7:7c:7c:ea:a1:d1:c7:cf:ce:d8:15:7a:ee:79:
f4:46:6a:9c:d0:f8:40:3a:d1:86:be:5e:a9:e8:43:
99:eb:ba:d7:52:d5:2e:29:cc:43:df:8a:b2:d2:cd:
36:d5:b9:4b:b3:8b:17:56:f3:b7:a6:06:35:c9:eb:
a6:00:90:40:2f:de:4a:05:39:b7:e0:45:a6:46:d4:
26:b5:e7:7a:f4:96:ca:33:d3:e2:ee:2d:0f:9c:13:
2c:1e:ec:90:d8:9a:ac:5c:0e:b5:ff:9b:2a:be:c7:
bb:13:2d:cb:6e:a3:6a:b3:a0:6e:3c:f9:27:c3:cc:
fa:94:77:2e:46:f2:17:84:dd:dd:01:e0:b3:5e:89:
50:2e:4f:52:67:14:e9:cc:85:58:94:41:de:5d:7d:
9d:a1:93:1f:e3:75:7c:57:4a:cb:2c:a0:4f:2c:30:
67:37:b0:5d:f2:84:c4:91:01:81:55:e4:3a:61:c9:
44:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:16:C0:CB:4D:55:20:BC:68:F5:01:D1:F0:09:EC:B7:21:64:8D:95
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/3RbAy01VILxo9QHR8AnstyFkjZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.2.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:55:dc:0d:12:11:96:4a:5a:0d:92:f4:64:41:f7:ce:5e:02:
ab:28:46:4f:f8:85:ec:04:e5:68:88:70:b7:ed:55:56:6f:0c:
ee:85:5d:8e:d7:fb:35:e1:39:3c:a7:78:da:3a:5c:6e:55:12:
9f:14:81:50:c7:19:5d:81:dd:94:d7:68:5e:63:f5:10:92:27:
78:24:07:62:1e:47:50:25:51:de:92:74:56:9e:45:cd:e8:1f:
68:bd:7b:85:69:7d:cc:c7:b0:1e:0d:b1:bf:49:1f:29:7d:9f:
c9:2c:19:f2:b9:92:f6:61:c8:e1:af:a4:56:10:0f:70:a9:b6:
f8:5e:9b:c7:c1:32:af:81:3a:97:79:fd:c0:50:81:b3:15:2e:
7b:c0:62:02:ed:3f:90:56:b0:85:27:cc:12:ad:08:ac:fb:43:
37:a0:02:17:77:6f:48:13:9e:ff:32:06:d2:80:83:02:42:f3:
d8:35:f8:a1:42:a3:87:5d:c1:89:3e:f9:7e:be:0c:c0:7c:fd:
fd:1c:96:79:82:92:1e:d1:76:6f:0e:25:39:a6:77:9d:d9:5e:
9b:61:b4:14:84:f5:8f:23:2a:4a:1b:e2:7b:fb:cc:90:40:2c:
d0:99:51:09:7b:c8:2e:0e:8e:9d:68:2d:27:8e:ec:77:c0:01:
b3:09:8f:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuUdYuNtMummZBElDUtbxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjQwMTAxMjAzMTIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDE2YzBjYjRkNTUyMGJjNjhmNTAxZDFmMDA5ZWNiNzIxNjQ4ZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgm99YPWB1RqafxY33kQtYNM0W8sc
X/f79zH6vb23TR8G8xvmFiEJxq104VL8g4TP5p/pks5wf/qYhToZSDp/K7Wf1J9p
arBLYhRwp3x86qHRx8/O2BV67nn0Rmqc0PhAOtGGvl6p6EOZ67rXUtUuKcxD34qy
0s021blLs4sXVvO3pgY1yeumAJBAL95KBTm34EWmRtQmted69JbKM9Pi7i0PnBMs
HuyQ2JqsXA61/5sqvse7Ey3LbqNqs6BuPPknw8z6lHcuRvIXhN3dAeCzXolQLk9S
ZxTpzIVYlEHeXX2doZMf43V8V0rLLKBPLDBnN7Bd8oTEkQGBVeQ6YclEcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN0WwMtNVSC8aPUB0fAJ7LchZI2VMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvM1JiQXkwMVZJTHhvOVFIUjhBbnN0eUZralpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVbsCMA0G
CSqGSIb3DQEBCwUAA4IBAQBLVdwNEhGWSloNkvRkQffOXgKrKEZP+IXsBOVoiHC3
7VVWbwzuhV2O1/s14Tk8p3jaOlxuVRKfFIFQxxldgd2U12heY/UQkid4JAdiHkdQ
JVHeknRWnkXN6B9ovXuFaX3Mx7AeDbG/SR8pfZ/JLBnyuZL2Ycjhr6RWEA9wqbb4
XpvHwTKvgTqXef3AUIGzFS57wGIC7T+QVrCFJ8wSrQis+0M3oAIXd29IE57/MgbS
gIMCQvPYNfihQqOHXcGJPvl+vgzAfP39HJZ5gpIe0XZvDiU5pned2V6bYbQUhPWP
IypKG+J7+8yQQCzQmVEJe8guDo6daC0njux3wAGzCY/i
-----END CERTIFICATE-----
Generated at Sat Jun 1 17:20:01 2024 by rpki-client on console-fra.rpki-client.org