Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IpfAav3uWZ-hbwOSyZD3U4mecZ4.roa
File: IpfAav3uWZ-hbwOSyZD3U4mecZ4.roa (raw, json)
Hash identifier: I9UkuxQ/fRzMmzUi84ZKpBLN7a4YjfIM5kCHWvI6kwk=
Subject key identifier: 22:97:C0:6A:FD:EE:59:9F:A1:6F:03:92:C9:90:F7:53:89:9E:71:9E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8028FE728A02377718F8E977FDF3A10
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IpfAav3uWZ-hbwOSyZD3U4mecZ4.roa
Signing time: Tue 02 Jan 2024 02:31:00 +0000
ROA not before: Tue 02 Jan 2024 02:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209336
IP address blocks: 185.246.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:8f:e7:28:a0:23:77:71:8f:8e:97:7f:df:3a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2297c06afdee599fa16f0392c990f753899e719e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:27:8d:3e:39:11:bc:a9:08:af:87:e6:92:d3:
0b:4d:e3:0f:00:79:9d:73:d0:1b:6c:40:fd:a9:e7:
77:c2:07:64:22:73:3d:4d:b3:4d:3a:dc:23:e4:37:
17:ea:2d:fe:d0:fa:03:38:50:38:b0:bf:16:34:9a:
fd:5a:d9:d7:73:6c:4f:f9:d4:5c:32:bd:86:f1:52:
de:32:50:f8:53:ea:5c:05:49:24:31:0b:59:c9:e6:
a9:2d:da:38:97:7e:63:6b:a7:8a:00:90:87:c3:a4:
87:98:69:25:e9:ff:e2:42:a0:6d:55:b2:58:c9:87:
18:58:b5:4c:64:80:d5:7c:58:95:2d:0f:cd:69:4e:
46:55:e5:36:46:4d:b9:e5:13:fb:5e:85:5b:ff:f5:
08:19:85:75:a1:61:6c:44:86:a8:ae:ff:de:67:4b:
87:5a:26:2e:52:64:02:83:7d:4a:31:f9:8f:ce:ea:
8b:8e:7d:a4:a2:27:32:cf:92:26:92:7f:5d:6a:40:
ac:e9:76:0c:89:84:da:de:90:9f:c6:71:42:4a:5f:
ae:d2:56:79:02:2d:2c:27:53:22:f8:a5:0d:a6:2d:
d2:30:b4:f8:84:28:cd:ff:af:08:18:45:53:93:f5:
20:1e:20:9e:21:98:e8:43:aa:f2:7e:f1:13:cb:bd:
ff:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:97:C0:6A:FD:EE:59:9F:A1:6F:03:92:C9:90:F7:53:89:9E:71:9E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IpfAav3uWZ-hbwOSyZD3U4mecZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.114.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:d3:e6:64:99:94:f7:d8:e5:1b:e0:3a:11:33:fc:5e:1c:57:
72:5e:d0:45:df:da:b8:97:4c:73:be:7a:64:b5:bf:e9:bb:18:
79:a0:05:ae:a4:ad:33:c1:dd:85:e3:7e:51:74:4f:9c:6d:01:
4f:37:3e:a8:9e:48:a6:b1:ed:cd:b6:7e:30:44:cc:d2:31:ac:
66:3d:c8:a6:b0:00:da:d3:d5:48:b8:61:f6:13:32:9b:0e:18:
37:31:c0:6e:3c:1a:9a:06:ab:a1:57:b5:47:c3:81:39:7b:1b:
92:39:88:d0:ae:7d:4a:1f:af:77:9e:57:e2:38:ed:04:41:92:
3f:99:5c:fd:4f:06:49:6f:33:b4:6a:80:26:8c:4b:a3:25:bc:
02:91:bb:d2:ce:ac:5c:45:d5:3b:7b:2f:ae:ad:32:d4:7b:8b:
f3:19:1e:06:de:47:c5:97:0b:18:0d:69:a0:bd:d6:32:80:37:
90:8b:94:59:46:6c:cf:dd:54:b1:e2:d1:2a:cf:43:49:ef:e7:
b0:f6:68:55:40:c7:45:27:dc:c0:ef:f5:a9:6a:ba:b6:63:0e:
58:36:46:72:33:85:a3:a7:72:8c:c4:f6:d3:76:f0:7f:58:d1:
4b:cd:31:35:5b:9b:ff:2b:31:07:4f:de:0f:12:6f:f1:2b:e3:
53:6a:bb:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAo/nKKAjd3GPjpd/3zoQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwMTAyMDIzMTAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjk3YzA2YWZkZWU1OTlmYTE2ZjAzOTJjOTkwZjc1Mzg5OWU3MTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCeNPjkRvKkIr4fmktMLTeMPAHmd
c9AbbED9qed3wgdkInM9TbNNOtwj5DcX6i3+0PoDOFA4sL8WNJr9WtnXc2xP+dRc
Mr2G8VLeMlD4U+pcBUkkMQtZyeapLdo4l35ja6eKAJCHw6SHmGkl6f/iQqBtVbJY
yYcYWLVMZIDVfFiVLQ/NaU5GVeU2Rk255RP7XoVb//UIGYV1oWFsRIaorv/eZ0uH
WiYuUmQCg31KMfmPzuqLjn2koicyz5Imkn9dakCs6XYMiYTa3pCfxnFCSl+u0lZ5
Ai0sJ1Mi+KUNpi3SMLT4hCjN/68IGEVTk/UgHiCeIZjoQ6ryfvETy73/qwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCKXwGr97lmfoW8DksmQ91OJnnGeMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvSXBmQWF2M3VXWi1oYndPU3laRDNVNG1lY1o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufZyMA0G
CSqGSIb3DQEBCwUAA4IBAQCm0+ZkmZT32OUb4DoRM/xeHFdyXtBF39q4l0xzvnpk
tb/puxh5oAWupK0zwd2F435RdE+cbQFPNz6onkimse3Ntn4wRMzSMaxmPcimsADa
09VIuGH2EzKbDhg3McBuPBqaBquhV7VHw4E5exuSOYjQrn1KH693nlfiOO0EQZI/
mVz9TwZJbzO0aoAmjEujJbwCkbvSzqxcRdU7ey+urTLUe4vzGR4G3kfFlwsYDWmg
vdYygDeQi5RZRmzP3VSx4tEqz0NJ7+ew9mhVQMdFJ9zA7/Wparq2Yw5YNkZyM4Wj
p3KMxPbTdvB/WNFLzTE1W5v/KzEHT94PEm/xK+NTarua
-----END CERTIFICATE-----
Generated at Sat May 4 09:57:19 2024 by rpki-client on console-fra.rpki-client.org