Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/1-utkbSuESXzjipC5RuSg8MwJNIA.roa
File: 1-utkbSuESXzjipC5RuSg8MwJNIA.roa (raw, json)
Hash identifier: SbUzzkQcw/mbAnyREOSU084cYTiUNMSz8NOn/2JQAa0=
Subject key identifier: FA:EB:64:6D:2B:84:49:7C:E3:8A:90:B9:46:E4:A0:F0:CC:09:34:80
Certificate issuer: /CN=99060e2deaffea7d622dd91580ff9015f255758b
Certificate serial: 018CC6B8999AFC8E578132F54DEA0BDCB28A
Authority key identifier: 99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/1-utkbSuESXzjipC5RuSg8MwJNIA.roa
Signing time: Mon 01 Jan 2024 20:30:35 +0000
ROA not before: Mon 01 Jan 2024 20:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215894
IP address blocks: 185.159.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:99:9a:fc:8e:57:81:32:f5:4d:ea:0b:dc:b2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99060e2deaffea7d622dd91580ff9015f255758b
Validity
Not Before: Jan 1 20:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faeb646d2b84497ce38a90b946e4a0f0cc093480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:2a:b4:b9:b6:0e:4b:7c:a0:22:aa:c9:8f:
d2:2c:b2:a8:1c:b4:ee:ad:02:a9:84:3a:1a:b0:fc:
b5:72:f9:10:2f:b7:7e:9b:ae:39:01:68:69:c9:80:
3f:d2:56:52:8e:52:e3:38:1b:8e:de:21:fb:17:2d:
ec:ea:d3:0b:2c:2b:8c:08:e0:b2:55:87:0c:f3:9a:
ec:a9:3b:e8:fd:04:09:00:f8:76:57:f4:b4:0d:cb:
8e:d9:f9:bc:45:ba:a0:95:8d:50:14:71:49:82:c2:
05:fc:3a:aa:cf:f6:f9:19:fe:e3:c0:e7:75:cf:e7:
84:32:9a:4c:4c:44:e0:23:16:48:7a:e3:9c:8b:93:
9d:74:bf:9b:7d:da:20:4a:bd:1b:4a:a8:18:b0:47:
0d:a0:8a:6e:ce:e5:67:51:21:55:b5:a8:0d:15:df:
63:e9:2f:26:15:64:1a:d3:1f:4b:5a:9b:b3:ac:e0:
cf:63:4d:89:d6:0b:66:88:ca:eb:67:9a:1d:38:4f:
8d:76:d9:b6:4f:2e:40:cc:e6:83:d6:d0:a1:f7:27:
a2:42:19:78:d9:b9:00:9b:f1:e3:94:20:59:d7:33:
21:b8:7e:31:1c:72:31:07:05:e7:6d:68:30:95:74:
b8:79:31:f3:94:5d:85:5b:5b:2f:67:7e:e9:48:88:
55:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EB:64:6D:2B:84:49:7C:E3:8A:90:B9:46:E4:A0:F0:CC:09:34:80
X509v3 Authority Key Identifier:
keyid:99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/1-utkbSuESXzjipC5RuSg8MwJNIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.246.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ff:0a:7d:e7:14:6b:97:5b:71:45:c9:7e:8d:ab:d1:7e:cc:
39:97:5b:c5:36:d8:5e:41:32:d5:46:4c:55:c7:38:8c:33:04:
af:87:77:2d:9e:ff:fe:f3:07:aa:1e:46:78:90:12:fb:8e:b8:
f3:7d:dd:3e:84:e8:14:39:73:6f:f2:64:da:de:01:18:f9:5d:
7d:c9:28:f0:ae:77:6f:62:fb:18:4f:25:3b:99:a6:5e:c4:74:
cd:84:e3:83:0c:06:f5:72:98:82:59:f1:1a:a8:92:1a:17:da:
bf:e4:9b:df:f6:56:90:5e:39:bf:82:04:b9:99:00:90:ae:40:
fc:31:29:7e:43:53:9e:7c:6e:51:ab:ec:97:2e:88:3d:3c:72:
25:c4:a8:b3:39:19:e2:16:26:60:7d:82:d7:de:ba:c7:be:48:
ea:74:f4:95:3b:5e:e3:3e:27:0f:d2:c2:74:b2:e3:6b:bf:9d:
ff:e0:2a:40:4a:93:29:35:6a:15:2a:e9:58:1e:7a:87:bc:a8:
1d:86:32:55:e1:1e:42:4f:d4:26:de:d3:19:d0:fd:c2:78:75:
67:34:6d:56:5d:db:b9:5f:43:bb:8b:44:ec:42:03:6f:d0:c2:
78:63:8a:51:99:b0:8d:e0:74:0b:d8:ff:60:ed:61:79:76:0a:
8f:0a:a6:e3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzGuJma/I5XgTL1TeoL3LKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MDYwZTJkZWFmZmVhN2Q2MjJkZDkxNTgwZmY5MDE1ZjI1
NTc1OGIwHhcNMjQwMTAxMjAzMDM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWViNjQ2ZDJiODQ0OTdjZTM4YTkwYjk0NmU0YTBmMGNjMDkzNDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjcqtLm2Dkt8oCKqyY/SLLKoHLTu
rQKphDoasPy1cvkQL7d+m645AWhpyYA/0lZSjlLjOBuO3iH7Fy3s6tMLLCuMCOCy
VYcM85rsqTvo/QQJAPh2V/S0DcuO2fm8RbqglY1QFHFJgsIF/Dqqz/b5Gf7jwOd1
z+eEMppMTETgIxZIeuOci5OddL+bfdogSr0bSqgYsEcNoIpuzuVnUSFVtagNFd9j
6S8mFWQa0x9LWpuzrODPY02J1gtmiMrrZ5odOE+Ndtm2Ty5AzOaD1tCh9yeiQhl4
2bkAm/HjlCBZ1zMhuH4xHHIxBwXnbWgwlXS4eTHzlF2FW1svZ37pSIhVGwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPrrZG0rhEl844qQuUbkoPDMCTSAMB8GA1UdIwQY
MBaAFJkGDi3q/+p9Yi3ZFYD/kBXyVXWLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVFZT0xlcl82bjFpTGRrVmdQLVFGZkpWZFlzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85OGU2NTAtMzM3Yi00ODNkLTlmNGMt
YTgzMzgzMDU5YzE4LzEvMS11dGtiU3VFU1h6amlwQzVSdVNnOE13Sk5JQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZDcvOThlNjUwLTMzN2ItNDgzZC05ZjRjLWE4MzM4MzA1OWMx
OC8xL21RWU9MZXJfNm4xaUxka1ZnUC1RRmZKVmRZcy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmf9jAN
BgkqhkiG9w0BAQsFAAOCAQEAcv8KfecUa5dbcUXJfo2r0X7MOZdbxTbYXkEy1UZM
Vcc4jDMEr4d3LZ7//vMHqh5GeJAS+464833dPoToFDlzb/Jk2t4BGPldfcko8K53
b2L7GE8lO5mmXsR0zYTjgwwG9XKYglnxGqiSGhfav+Sb3/ZWkF45v4IEuZkAkK5A
/DEpfkNTnnxuUavsly6IPTxyJcSoszkZ4hYmYH2C1966x75I6nT0lTte4z4nD9LC
dLLja7+d/+AqQEqTKTVqFSrpWB56h7yoHYYyVeEeQk/UJt7TGdD9wnh1ZzRtVl3b
uV9Du4tE7EIDb9DCeGOKUZmwjeB0C9j/YO1heXYKjwqm4w==
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:36:58 2024 by rpki-client on console-fra.rpki-client.org