Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/9dcm_Y_0A80dzvtWFaU2F6GXTRk.roa
File: 9dcm_Y_0A80dzvtWFaU2F6GXTRk.roa (raw, json)
Hash identifier: 1aqf+aJnHIXbqbothZD1M2CCvVROhoIRRp2RURS122I=
Subject key identifier: F5:D7:26:FD:8F:F4:03:CD:1D:CE:FB:56:15:A5:36:17:A1:97:4D:19
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B93CBDAF3333E553DDB45EB5663561
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/9dcm_Y_0A80dzvtWFaU2F6GXTRk.roa
Signing time: Mon 01 Jan 2024 20:31:17 +0000
ROA not before: Mon 01 Jan 2024 20:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61370
IP address blocks: 85.187.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3c:bd:af:33:33:e5:53:dd:b4:5e:b5:66:35:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5d726fd8ff403cd1dcefb5615a53617a1974d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:a3:5f:b7:fb:bb:35:ec:c7:6f:94:a0:c7:
df:24:d0:60:16:22:95:47:28:89:bd:ee:5e:c6:fb:
80:8d:8a:29:d8:3f:1b:02:49:26:8f:5a:7e:6f:c9:
17:e7:56:a8:43:b0:d5:80:8e:e0:91:9e:fb:f2:8b:
14:9a:dc:d3:b6:f2:f6:66:cc:4d:95:c7:bf:02:87:
75:e2:58:ee:96:f5:cb:06:d4:1e:b7:cb:f9:8f:af:
d4:04:13:c9:8d:50:f9:d0:c8:39:d8:e7:da:9f:6a:
ad:fd:02:0c:32:cd:bd:26:ac:5b:08:31:0c:3f:10:
cc:79:84:6c:ff:5e:91:cc:ce:55:ff:fc:96:05:ee:
fd:27:48:e4:54:2b:57:81:4f:8e:91:5e:c2:63:fc:
34:b4:4c:40:c8:05:9e:74:af:bb:d6:70:7b:d2:03:
e1:6f:6a:b0:68:e4:eb:cd:1e:47:1f:46:38:82:28:
4e:84:58:95:8d:2a:41:a6:93:f8:45:f1:0b:53:a3:
3a:e8:0b:05:2e:0b:ba:a0:5b:25:3c:0a:6f:ae:b8:
2d:6b:91:35:ad:1a:7a:19:16:6c:6a:8c:2d:41:4a:
7e:0d:b6:29:24:da:fd:e7:06:51:7e:3b:79:19:4f:
64:2b:58:f9:19:bd:ef:ca:9e:06:7d:cf:c8:4c:8b:
25:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D7:26:FD:8F:F4:03:CD:1D:CE:FB:56:15:A5:36:17:A1:97:4D:19
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/9dcm_Y_0A80dzvtWFaU2F6GXTRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.191.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:e7:b1:35:f3:89:4d:44:56:61:47:7f:e8:fc:87:df:ca:a4:
e8:dc:bc:de:e0:67:6b:6a:85:06:d5:2a:50:dd:6d:7d:8d:dc:
73:6d:bf:ce:db:b8:64:92:1a:b5:75:fa:36:11:48:d3:31:56:
f2:5f:0a:04:77:d7:ad:50:5b:67:ca:0b:64:d7:0e:f5:ad:ac:
29:23:c9:c8:ee:b1:8f:ff:7a:02:f7:d5:29:88:c6:e6:3c:12:
0c:83:4a:10:81:92:7d:0d:30:69:2c:c8:e9:c5:c4:f0:32:82:
8a:99:24:7d:9c:bc:96:2e:ba:e6:33:b6:20:3a:8f:35:d1:c3:
72:f4:5b:1f:fd:79:19:3a:5b:aa:39:7e:d1:06:4c:5b:f1:37:
e8:c1:09:45:ca:26:03:a8:2a:02:a8:10:cc:47:5e:1f:62:63:
8f:77:9b:dd:b8:92:19:cd:01:29:09:e1:d6:81:20:4c:8d:ef:
f6:00:67:00:ec:28:39:4f:47:31:77:aa:a7:d1:36:1e:2e:52:
da:28:a9:ce:51:fa:de:9a:d8:0b:62:54:52:b3:77:18:ab:88:
17:9a:71:e7:bd:22:80:ec:96:ca:35:14:d0:5d:dd:e0:43:c2:
b6:88:5c:77:4b:ca:21:8c:0d:0b:e8:1f:88:4a:f8:a0:c4:c7:
97:c4:3a:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuTy9rzMz5VPdtF61ZjVhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjQwMTAxMjAzMTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWQ3MjZmZDhmZjQwM2NkMWRjZWZiNTYxNWE1MzYxN2ExOTc0ZDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnmjX7f7uzXsx2+UoMffJNBgFiKV
RyiJve5exvuAjYop2D8bAkkmj1p+b8kX51aoQ7DVgI7gkZ778osUmtzTtvL2ZsxN
lce/Aod14ljulvXLBtQet8v5j6/UBBPJjVD50Mg52Ofan2qt/QIMMs29JqxbCDEM
PxDMeYRs/16RzM5V//yWBe79J0jkVCtXgU+OkV7CY/w0tExAyAWedK+71nB70gPh
b2qwaOTrzR5HH0Y4gihOhFiVjSpBppP4RfELU6M66AsFLgu6oFslPApvrrgta5E1
rRp6GRZsaowtQUp+DbYpJNr95wZRfjt5GU9kK1j5Gb3vyp4Gfc/ITIslTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPXXJv2P9APNHc77VhWlNhehl00ZMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvOWRjbV9ZXzBBODBkenZ0V0ZhVTJGNkdYVFJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVbu/MA0G
CSqGSIb3DQEBCwUAA4IBAQDN57E184lNRFZhR3/o/IffyqTo3Lze4GdraoUG1SpQ
3W19jdxzbb/O27hkkhq1dfo2EUjTMVbyXwoEd9etUFtnygtk1w71rawpI8nI7rGP
/3oC99UpiMbmPBIMg0oQgZJ9DTBpLMjpxcTwMoKKmSR9nLyWLrrmM7YgOo810cNy
9Fsf/XkZOluqOX7RBkxb8TfowQlFyiYDqCoCqBDMR14fYmOPd5vduJIZzQEpCeHW
gSBMje/2AGcA7Cg5T0cxd6qn0TYeLlLaKKnOUfremtgLYlRSs3cYq4gXmnHnvSKA
7JbKNRTQXd3gQ8K2iFx3S8ohjA0L6B+ISvigxMeXxDrn
-----END CERTIFICATE-----
Generated at Sat Jun 8 05:58:59 2024 by rpki-client on console-fra.rpki-client.org