Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/IuUciGFBdrJpqculS-Vw8dxaxrI.roa
File: IuUciGFBdrJpqculS-Vw8dxaxrI.roa (raw, json)
Hash identifier: e/VDRG/ahlY4NN7pDeTBQyVxCZ2T5MwLgUxFX8M4cqw=
Subject key identifier: 22:E5:1C:88:61:41:76:B2:69:A9:CB:A5:4B:E5:70:F1:DC:5A:C6:B2
Certificate issuer: /CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Certificate serial: 01918FA8FF16A14F8169967FC26C21021E68
Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/IuUciGFBdrJpqculS-Vw8dxaxrI.roa
Signing time: Mon 26 Aug 2024 17:08:22 +0000
ROA not before: Mon 26 Aug 2024 17:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211588
IP address blocks: 185.229.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8f:a8:ff:16:a1:4f:81:69:96:7f:c2:6c:21:02:1e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Validity
Not Before: Aug 26 17:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22e51c88614176b269a9cba54be570f1dc5ac6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:38:54:fa:9c:17:00:63:2e:d9:db:1c:65:a6:
77:7c:68:19:63:bc:36:d2:58:7e:1c:d0:22:08:10:
ed:39:89:1b:8d:ba:22:8e:44:13:1c:74:c6:0b:e1:
cf:61:77:25:92:de:67:e2:e7:00:ac:61:df:05:08:
b2:dd:bd:d9:9f:c2:86:0a:17:b5:d6:8d:75:93:52:
a1:bf:a7:c8:f6:20:6d:29:bc:09:22:26:5f:b4:3e:
64:9b:52:17:7d:fa:fa:1d:00:91:c7:e1:fe:98:3e:
7c:eb:ba:4e:4c:8f:fc:69:d3:53:6e:db:20:9f:95:
18:02:c3:46:e7:bb:f2:99:2c:dc:69:f4:98:35:08:
fb:f4:69:39:a1:8d:7b:c0:4c:d8:f1:40:47:5a:67:
32:eb:2b:75:23:8c:d9:70:0a:41:cf:27:a5:f1:1a:
f5:2a:5b:14:77:a3:11:57:4e:72:08:bb:0f:90:e4:
9f:94:b9:49:7b:dc:b2:47:f3:95:e9:da:3b:d8:70:
35:7e:2a:a8:39:fc:05:c7:9d:34:ec:be:31:32:54:
6e:df:5b:25:e3:57:a4:62:55:95:bf:db:23:e4:a6:
d4:b2:a7:ab:00:fe:e2:2a:98:a6:77:66:07:f9:fe:
66:6a:79:a7:b7:a0:23:ee:1b:30:61:87:83:26:fe:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E5:1C:88:61:41:76:B2:69:A9:CB:A5:4B:E5:70:F1:DC:5A:C6:B2
X509v3 Authority Key Identifier:
keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/IuUciGFBdrJpqculS-Vw8dxaxrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.33.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:17:2b:22:87:8f:79:a3:f4:20:1d:4e:a3:a9:18:70:9f:61:
1a:38:1b:a9:bb:b9:02:af:c9:02:33:82:74:c1:c3:1f:b5:22:
ce:c3:7d:8d:16:a2:ab:51:f4:a4:a8:6d:82:7c:a5:b3:c3:0b:
ed:2a:47:a0:30:49:9f:70:a4:ed:ad:c2:86:61:09:42:bb:4c:
f5:c1:11:aa:bf:40:2d:11:88:7a:e4:60:53:07:e0:07:dc:d2:
84:dd:99:4d:1c:eb:1a:fc:83:b4:8c:3a:c2:a5:fb:71:06:12:
c1:90:01:c7:d3:82:38:08:c3:11:fa:a3:3e:f4:ad:c3:38:36:
3e:22:c3:fa:90:31:04:69:be:e4:dc:bf:c0:2e:8a:0d:f0:db:
e5:13:68:0b:07:83:df:18:c6:24:56:2f:01:04:c7:84:f7:bf:
4e:00:f5:e4:c3:96:df:a9:87:0a:07:ec:7f:4c:96:67:2e:da:
0d:58:55:32:cd:eb:a3:9c:c7:30:bf:3b:c0:54:2d:3f:ac:4a:
c6:2f:77:72:d6:02:ab:fc:03:55:48:85:fb:79:cf:ce:45:b8:
0c:a1:d4:ff:03:b0:88:c4:d5:30:da:5e:51:8a:9e:0f:13:9b:
17:f3:4c:c3:5d:69:18:cc:a4:a7:e1:35:bd:aa:e9:a7:5d:1c:
6b:e2:f1:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGPqP8WoU+BaZZ/wmwhAh5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZjgyMDZlMzMxMWRmMzk0ZjQ4Mzg5YjgxMjJiOTRhYTFm
MGIwNWMwHhcNMjQwODI2MTcwODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmU1MWM4ODYxNDE3NmIyNjlhOWNiYTU0YmU1NzBmMWRjNWFjNmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzhU+pwXAGMu2dscZaZ3fGgZY7w2
0lh+HNAiCBDtOYkbjboijkQTHHTGC+HPYXclkt5n4ucArGHfBQiy3b3Zn8KGChe1
1o11k1Khv6fI9iBtKbwJIiZftD5km1IXffr6HQCRx+H+mD5867pOTI/8adNTbtsg
n5UYAsNG57vymSzcafSYNQj79Gk5oY17wEzY8UBHWmcy6yt1I4zZcApBzyel8Rr1
KlsUd6MRV05yCLsPkOSflLlJe9yyR/OV6do72HA1fiqoOfwFx5007L4xMlRu31sl
41ekYlWVv9sj5KbUsqerAP7iKpimd2YH+f5manmnt6Aj7hswYYeDJv7+0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCLlHIhhQXayaanLpUvlcPHcWsayMB8GA1UdIwQY
MBaAFGb4IG4zEd85T0g4m4EiuUqh8LBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgt
YmJmZDQ1Yzg0YmVhLzEvSXVVY2lHRkJkckpwcWN1bFMtVnc4ZHhheHJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgtYmJmZDQ1Yzg0YmVh
LzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueUhMA0G
CSqGSIb3DQEBCwUAA4IBAQA/Fysih495o/QgHU6jqRhwn2EaOBupu7kCr8kCM4J0
wcMftSLOw32NFqKrUfSkqG2CfKWzwwvtKkegMEmfcKTtrcKGYQlCu0z1wRGqv0At
EYh65GBTB+AH3NKE3ZlNHOsa/IO0jDrCpftxBhLBkAHH04I4CMMR+qM+9K3DODY+
IsP6kDEEab7k3L/ALooN8NvlE2gLB4PfGMYkVi8BBMeE979OAPXkw5bfqYcKB+x/
TJZnLtoNWFUyzeujnMcwvzvAVC0/rErGL3dy1gKr/ANVSIX7ec/ORbgModT/A7CI
xNUw2l5Rip4PE5sX80zDXWkYzKSn4TW9qumnXRxr4vEH
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:12:30 2024 by rpki-client on console-ams.rpki-client.org