Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/bv3rK-ybzW7aeB2daGeN09zQHAQ.roa
File: bv3rK-ybzW7aeB2daGeN09zQHAQ.roa (raw, json)
Hash identifier: J+a+LJfOuUQK807xhDda3T5f94z/f3ZsLmCD32s/z4w=
Subject key identifier: 6E:FD:EB:2B:EC:9B:CD:6E:DA:78:1D:9D:68:67:8D:D3:DC:D0:1C:04
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019294CFFEA791CAB3EBE96F1405F70C4E0B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/bv3rK-ybzW7aeB2daGeN09zQHAQ.roa
Signing time: Wed 16 Oct 2024 10:11:52 +0000
ROA not before: Wed 16 Oct 2024 10:11:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206264
IP address blocks: 185.251.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:cf:fe:a7:91:ca:b3:eb:e9:6f:14:05:f7:0c:4e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 16 10:11:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6efdeb2bec9bcd6eda781d9d68678dd3dcd01c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:35:bf:6e:24:f8:eb:14:6d:70:97:e4:5b:06:
0c:2f:f2:aa:34:72:13:2b:6b:56:a1:99:e2:fc:ae:
22:8d:f7:6f:53:3d:28:3f:b1:fe:35:75:22:35:49:
c8:38:d1:0c:c6:37:8c:cb:6d:49:19:44:ae:94:52:
29:f8:b6:76:74:69:b9:91:7e:86:e8:30:2d:21:4c:
6b:3b:4c:82:af:52:4c:22:71:25:3d:44:45:d9:28:
6a:d7:77:0d:19:01:02:f9:88:f5:c3:f3:c2:29:a2:
fe:c5:4c:00:86:f8:f7:75:c3:ef:a1:67:ca:91:09:
b1:39:78:63:2c:19:25:a3:c3:5c:d7:35:fc:54:ef:
60:f6:7f:41:41:61:d1:0c:8d:95:d0:19:58:00:79:
3d:a8:96:43:41:22:01:25:3d:d0:84:d4:9e:50:4a:
b6:ea:19:1c:d9:0a:08:8e:28:e4:56:30:18:3c:e1:
6a:71:9f:de:75:69:31:56:fc:b4:6a:8b:92:8b:af:
4c:2b:6c:2c:c4:01:7a:0e:21:3b:ad:e2:31:1f:5e:
9c:d5:a1:95:d5:fc:18:c0:eb:58:38:59:18:e5:1e:
f6:1f:db:cc:15:70:67:95:5a:a9:5a:d5:53:22:0f:
ec:2f:f8:16:a1:00:5a:a7:97:f8:83:14:a0:46:1e:
cd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FD:EB:2B:EC:9B:CD:6E:DA:78:1D:9D:68:67:8D:D3:DC:D0:1C:04
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/bv3rK-ybzW7aeB2daGeN09zQHAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.229.0/24
Signature Algorithm: sha256WithRSAEncryption
42:56:00:d1:5c:86:75:e3:ec:6b:23:a2:dc:04:68:76:5f:28:
39:5e:52:9b:41:76:e8:a5:3b:6c:d5:f2:b3:f2:ac:3b:89:1e:
65:03:31:57:0f:19:96:b0:12:42:e3:d5:40:40:0e:f9:1c:28:
3f:0b:f1:59:1c:b5:4f:28:9d:c3:19:c8:15:3f:38:82:57:4d:
7b:be:e1:a6:a1:7e:38:bc:36:4d:33:82:5b:8a:02:0a:e6:91:
f7:b4:15:7c:2c:46:96:50:e9:90:b2:25:0b:6b:e1:27:7e:ed:
90:6f:98:be:b1:8e:77:1d:c2:13:b8:78:e1:0f:22:c6:ef:7b:
c2:82:ed:68:9a:23:1c:da:c4:fe:3e:cf:91:2d:d9:a3:48:bf:
d7:50:af:4e:53:5e:cc:8b:17:a0:37:2f:d4:52:3f:61:bd:53:
89:36:eb:5c:14:00:c9:c4:5a:f7:97:e2:53:d9:84:f3:48:ae:
f1:3e:b3:15:d0:2c:88:b9:22:f4:f0:a6:d9:40:f0:d2:c2:b3:
57:ee:7c:b9:bc:2d:00:54:d7:c8:61:75:61:a5:03:19:54:bf:
09:80:93:07:ed:84:bc:7c:65:1b:fd:28:8b:67:30:5d:e2:c5:
1e:95:c0:ba:c5:9e:a9:02:e3:29:c9:69:a8:82:ca:4a:4d:00:
66:af:9b:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKUz/6nkcqz6+lvFAX3DE4LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQxMDE2MTAxMTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWZkZWIyYmVjOWJjZDZlZGE3ODFkOWQ2ODY3OGRkM2RjZDAxYzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jW/biT46xRtcJfkWwYML/KqNHIT
K2tWoZni/K4ijfdvUz0oP7H+NXUiNUnIONEMxjeMy21JGUSulFIp+LZ2dGm5kX6G
6DAtIUxrO0yCr1JMInElPURF2Shq13cNGQEC+Yj1w/PCKaL+xUwAhvj3dcPvoWfK
kQmxOXhjLBklo8Nc1zX8VO9g9n9BQWHRDI2V0BlYAHk9qJZDQSIBJT3QhNSeUEq2
6hkc2QoIjijkVjAYPOFqcZ/edWkxVvy0aouSi69MK2wsxAF6DiE7reIxH16c1aGV
1fwYwOtYOFkY5R72H9vMFXBnlVqpWtVTIg/sL/gWoQBap5f4gxSgRh7NiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG796yvsm81u2ngdnWhnjdPc0BwEMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvYnYzcksteWJ6VzdhZUIyZGFHZU4wOXpRSEFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufvlMA0G
CSqGSIb3DQEBCwUAA4IBAQBCVgDRXIZ14+xrI6LcBGh2Xyg5XlKbQXbopTts1fKz
8qw7iR5lAzFXDxmWsBJC49VAQA75HCg/C/FZHLVPKJ3DGcgVPziCV017vuGmoX44
vDZNM4JbigIK5pH3tBV8LEaWUOmQsiULa+Enfu2Qb5i+sY53HcITuHjhDyLG73vC
gu1omiMc2sT+Ps+RLdmjSL/XUK9OU17MixegNy/UUj9hvVOJNutcFADJxFr3l+JT
2YTzSK7xPrMV0CyIuSL08KbZQPDSwrNX7ny5vC0AVNfIYXVhpQMZVL8JgJMH7YS8
fGUb/SiLZzBd4sUelcC6xZ6pAuMpyWmogspKTQBmr5sl
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:05:35 2024 by rpki-client on console-fra.rpki-client.org