Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/AJydNPItEaXITGqm5SXvlro4rqA.roa
File: AJydNPItEaXITGqm5SXvlro4rqA.roa (raw, json)
Hash identifier: mXQTld5E3ujK1c2SY3bBKYHIpkfPVmxiuGm1zg51ovY=
Subject key identifier: 00:9C:9D:34:F2:2D:11:A5:C8:4C:6A:A6:E5:25:EF:96:BA:38:AE:A0
Certificate issuer: /CN=69fdfe8249f943aabad1881fca5836613a6a67bc
Certificate serial: 018CC7932DC98E15EDCB1C4FD24AB0BA4ACC
Authority key identifier: 69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/AJydNPItEaXITGqm5SXvlro4rqA.roa
Signing time: Tue 02 Jan 2024 00:29:20 +0000
ROA not before: Tue 02 Jan 2024 00:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39242
IP address blocks: 185.159.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:2d:c9:8e:15:ed:cb:1c:4f:d2:4a:b0:ba:4a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fdfe8249f943aabad1881fca5836613a6a67bc
Validity
Not Before: Jan 2 00:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=009c9d34f22d11a5c84c6aa6e525ef96ba38aea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3b:89:e9:d1:50:d1:f3:e2:6f:ec:32:2e:a9:
9f:e1:42:19:e3:06:ee:dd:7b:15:0c:90:f3:19:89:
f3:20:32:11:28:62:2a:d3:e1:ad:14:53:4f:1a:6f:
c0:5b:9a:89:04:25:bd:0f:04:01:24:25:af:da:f4:
9c:cd:22:26:fb:74:67:43:38:d9:0f:fd:f5:69:ca:
eb:2b:15:c1:bc:1e:10:6d:62:72:00:e8:51:cc:d8:
29:67:4a:08:8d:0f:84:49:17:0d:c9:cc:ca:f0:fa:
ad:0c:1d:ea:e8:f7:5b:dd:ef:53:ad:3f:d0:9e:c7:
45:57:91:1c:46:df:bf:3c:17:d8:11:82:a5:89:5a:
e7:25:96:fd:ad:7e:9e:57:f3:f4:3e:21:04:43:27:
ab:61:89:9d:ee:45:14:a1:f1:85:72:d0:96:4b:e5:
bc:a5:63:4b:14:ee:f5:cb:67:ff:6b:88:00:25:85:
20:f1:d2:1d:bd:17:36:c4:c2:5d:d4:76:1f:9e:60:
49:98:fe:4b:2c:37:31:65:25:af:06:44:96:e1:fe:
a1:46:8a:66:38:e7:da:fb:93:27:95:8e:74:14:eb:
15:dd:b2:0f:6f:9c:68:6d:be:56:39:2a:96:3e:ca:
28:8f:c4:4d:9c:96:ea:4e:f7:8d:bb:62:28:d9:90:
fa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9C:9D:34:F2:2D:11:A5:C8:4C:6A:A6:E5:25:EF:96:BA:38:AE:A0
X509v3 Authority Key Identifier:
keyid:69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/AJydNPItEaXITGqm5SXvlro4rqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.236.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:54:17:67:33:7b:6d:f9:81:0a:e3:17:a9:e8:a0:94:b6:ba:
9e:af:40:37:05:7a:60:0f:59:42:83:ee:75:a1:3e:05:9d:b8:
a6:fe:7b:66:ae:a8:25:4f:19:96:b1:a2:f2:4e:81:10:f9:5f:
bd:ff:de:54:2e:7d:32:12:e9:5e:d4:a1:a0:33:be:c8:54:8d:
96:10:63:fd:30:a6:cf:92:a4:c6:02:09:8e:c4:be:fa:ec:fd:
a0:2e:04:83:be:9f:56:ed:fc:9f:39:2d:4a:95:8a:09:25:5a:
f1:8b:04:b5:1c:2c:ec:f1:94:de:f4:a7:99:cf:1d:93:4a:29:
45:90:c6:ac:fd:6e:7e:a7:59:7b:00:47:80:2e:1a:21:dc:9c:
52:fc:23:5a:06:91:fa:1f:ab:22:27:18:41:1e:bb:39:75:d2:
e7:2f:7b:1b:41:08:02:3b:f0:74:73:f3:43:ce:04:f8:14:7f:
cc:55:7f:d6:5c:fe:c8:b9:fa:4f:cc:fe:aa:3a:be:db:70:c0:
f0:8b:ed:5a:0a:f9:32:e7:58:e0:b7:c5:1d:d9:20:ac:fb:10:
25:54:14:9a:b4:e2:74:3a:a4:eb:ad:fd:4c:c8:6d:93:ec:77:
af:d3:01:a5:f4:c4:5e:7b:65:9f:0a:c2:60:fa:aa:82:17:17:
1f:1b:74:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHky3JjhXtyxxP0kqwukrMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZmRmZTgyNDlmOTQzYWFiYWQxODgxZmNhNTgzNjYxM2E2
YTY3YmMwHhcNMjQwMTAyMDAyOTIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDljOWQzNGYyMmQxMWE1Yzg0YzZhYTZlNTI1ZWY5NmJhMzhhZWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzuJ6dFQ0fPib+wyLqmf4UIZ4wbu
3XsVDJDzGYnzIDIRKGIq0+GtFFNPGm/AW5qJBCW9DwQBJCWv2vSczSIm+3RnQzjZ
D/31acrrKxXBvB4QbWJyAOhRzNgpZ0oIjQ+ESRcNyczK8PqtDB3q6Pdb3e9TrT/Q
nsdFV5EcRt+/PBfYEYKliVrnJZb9rX6eV/P0PiEEQyerYYmd7kUUofGFctCWS+W8
pWNLFO71y2f/a4gAJYUg8dIdvRc2xMJd1HYfnmBJmP5LLDcxZSWvBkSW4f6hRopm
OOfa+5MnlY50FOsV3bIPb5xobb5WOSqWPsooj8RNnJbqTveNu2Io2ZD6BQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFACcnTTyLRGlyExqpuUl75a6OK6gMB8GA1UdIwQY
MBaAFGn9/oJJ+UOqutGIH8pYNmE6ame8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWYzLWdrbjVRNnE2MFlnZnlsZzJZVHBxWjd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jY2Y3NzctOTQ2NS00YTJlLTgxMTIt
NzFkOGI4ODUwODUzLzEvQUp5ZE5QSXRFYVhJVEdxbTVTWHZscm80cnFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9jY2Y3NzctOTQ2NS00YTJlLTgxMTItNzFkOGI4ODUwODUz
LzEvYWYzLWdrbjVRNnE2MFlnZnlsZzJZVHBxWjd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ/sMA0G
CSqGSIb3DQEBCwUAA4IBAQA8VBdnM3tt+YEK4xep6KCUtrqer0A3BXpgD1lCg+51
oT4Fnbim/ntmrqglTxmWsaLyToEQ+V+9/95ULn0yEule1KGgM77IVI2WEGP9MKbP
kqTGAgmOxL767P2gLgSDvp9W7fyfOS1KlYoJJVrxiwS1HCzs8ZTe9KeZzx2TSilF
kMas/W5+p1l7AEeALhoh3JxS/CNaBpH6H6siJxhBHrs5ddLnL3sbQQgCO/B0c/ND
zgT4FH/MVX/WXP7IufpPzP6qOr7bcMDwi+1aCvky51jgt8Ud2SCs+xAlVBSatOJ0
OqTrrf1MyG2T7Hev0wGl9MRee2WfCsJg+qqCFxcfG3TW
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:54:06 2024 by rpki-client on console-fra.rpki-client.org