Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/acRZgi1-oBmatO8MIdJZ0Lpvbpc.roa
File: acRZgi1-oBmatO8MIdJZ0Lpvbpc.roa (raw, json)
Hash identifier: vBBKYohIy+ajTztwmBnrBIGEgmHQH+2++MMzUBwX+/k=
Subject key identifier: 69:C4:59:82:2D:7E:A0:19:9A:B4:EF:0C:21:D2:59:D0:BA:6F:6E:97
Certificate issuer: /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial: 018CC6B7D05D3B6B2ED0D19330FE2BDDEED3
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/acRZgi1-oBmatO8MIdJZ0Lpvbpc.roa
Signing time: Mon 01 Jan 2024 20:29:44 +0000
ROA not before: Mon 01 Jan 2024 20:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200840
IP address blocks: 185.200.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:d0:5d:3b:6b:2e:d0:d1:93:30:fe:2b:dd:ee:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
Validity
Not Before: Jan 1 20:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69c459822d7ea0199ab4ef0c21d259d0ba6f6e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:d8:be:ec:56:94:94:26:0b:86:ad:87:6d:
73:aa:17:82:34:28:54:40:9e:f2:34:9d:14:cc:3c:
df:e2:18:54:fb:28:80:0a:40:a0:47:55:03:0a:0c:
39:5f:b9:9f:d0:05:7d:a5:c4:73:eb:83:43:6d:05:
51:60:29:dc:d5:21:ed:be:44:a2:80:de:2b:ab:60:
c0:c2:85:ca:a6:e5:8b:cb:1c:b4:6d:f1:06:4f:0d:
bf:ac:76:e8:06:7a:28:9e:c5:e3:35:2c:24:9c:1d:
87:ce:0f:f2:0f:41:74:45:e2:ef:87:56:23:03:d1:
e8:53:36:29:97:69:4f:06:7a:b9:61:dd:9b:48:7a:
16:63:18:ca:0f:41:08:6e:a7:59:27:f7:0b:53:1e:
c6:c7:30:9b:b3:19:63:19:e0:4b:1c:e1:8f:0b:eb:
de:9e:cb:57:4a:18:47:08:c6:90:e8:c3:95:c9:5b:
9d:16:94:c9:3d:a0:93:a7:9e:94:96:41:cf:56:90:
a9:d4:fd:f4:8c:17:d9:47:13:1b:58:0a:bf:dc:02:
a9:7f:2d:58:61:1b:c4:0a:61:f0:62:21:be:c7:e4:
a7:9d:af:b7:9f:e1:b8:53:e7:86:88:bb:97:fe:69:
16:a4:b5:65:b4:27:03:70:32:4c:01:47:7b:c3:37:
65:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C4:59:82:2D:7E:A0:19:9A:B4:EF:0C:21:D2:59:D0:BA:6F:6E:97
X509v3 Authority Key Identifier:
keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/acRZgi1-oBmatO8MIdJZ0Lpvbpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.14.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ed:49:b8:bc:aa:71:eb:ae:7f:7e:3e:31:d2:0e:5e:b1:f4:
e2:85:0c:18:d0:09:19:b5:e7:60:f8:f1:5f:2b:31:5d:a1:d7:
94:cb:89:1d:22:eb:54:50:26:8f:99:80:82:2a:f8:86:55:52:
d9:01:5e:2c:f1:f3:5e:cb:1d:93:0d:3c:14:11:f2:8c:0e:1d:
a6:78:87:f8:29:eb:d9:57:fd:ae:f1:4f:03:b7:f6:26:1e:1e:
87:fd:51:fa:b7:f1:17:3a:c8:4e:5b:70:6c:e4:6e:5b:08:3c:
6f:40:aa:73:a7:89:62:49:63:6e:bf:97:b3:54:82:a3:1b:1a:
8a:72:b5:7a:ea:67:56:b8:d2:7e:85:7a:79:7c:25:00:4e:95:
07:73:c1:5b:76:a2:43:35:62:75:8e:01:26:47:e1:17:5a:d9:
ae:99:88:bf:bc:25:b3:23:53:d0:d6:85:0c:66:09:2f:43:ab:
ad:b9:2f:d3:61:63:ff:4f:e8:fb:11:2b:05:d9:ad:26:cf:69:
11:ba:7f:20:50:f7:10:3b:54:8c:27:cb:05:a6:86:24:a3:0e:
69:a6:07:c7:0a:a0:a1:81:b5:31:20:93:67:76:df:04:cb:c3:
b1:f4:0a:16:96:67:05:f3:e7:f8:08:b7:57:79:91:9b:18:23:
ed:72:fc:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt9BdO2su0NGTMP4r3e7TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNzA0ODU4YjY0MzI2NmY3YzcxMDc3MjFjOThmMmJhOTNk
ZDUyNjUwHhcNMjQwMTAxMjAyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWM0NTk4MjJkN2VhMDE5OWFiNGVmMGMyMWQyNTlkMGJhNmY2ZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV7YvuxWlJQmC4ath21zqheCNChU
QJ7yNJ0UzDzf4hhU+yiACkCgR1UDCgw5X7mf0AV9pcRz64NDbQVRYCnc1SHtvkSi
gN4rq2DAwoXKpuWLyxy0bfEGTw2/rHboBnoonsXjNSwknB2Hzg/yD0F0ReLvh1Yj
A9HoUzYpl2lPBnq5Yd2bSHoWYxjKD0EIbqdZJ/cLUx7GxzCbsxljGeBLHOGPC+ve
nstXShhHCMaQ6MOVyVudFpTJPaCTp56UlkHPVpCp1P30jBfZRxMbWAq/3AKpfy1Y
YRvECmHwYiG+x+Snna+3n+G4U+eGiLuX/mkWpLVltCcDcDJMAUd7wzdliwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGnEWYItfqAZmrTvDCHSWdC6b26XMB8GA1UdIwQY
MBaAFM5wSFi2QyZvfHEHchyY8rqT3VJlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem5CSVdMWkRKbTk4Y1FkeUhKanl1cFBkVW1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wMjdhYWUtNDkyMi00MmE5LWE0Yzkt
MzhmODBkNjk2MWVjLzEvYWNSWmdpMS1vQm1hdE84TUlkSlowTHB2YnBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8wMjdhYWUtNDkyMi00MmE5LWE0YzktMzhmODBkNjk2MWVj
LzEvem5CSVdMWkRKbTk4Y1FkeUhKanl1cFBkVW1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucgOMA0G
CSqGSIb3DQEBCwUAA4IBAQAs7Um4vKpx665/fj4x0g5esfTihQwY0AkZtedg+PFf
KzFdodeUy4kdIutUUCaPmYCCKviGVVLZAV4s8fNeyx2TDTwUEfKMDh2meIf4KevZ
V/2u8U8Dt/YmHh6H/VH6t/EXOshOW3Bs5G5bCDxvQKpzp4liSWNuv5ezVIKjGxqK
crV66mdWuNJ+hXp5fCUATpUHc8FbdqJDNWJ1jgEmR+EXWtmumYi/vCWzI1PQ1oUM
ZgkvQ6utuS/TYWP/T+j7ESsF2a0mz2kRun8gUPcQO1SMJ8sFpoYkow5ppgfHCqCh
gbUxIJNndt8Ey8Ox9AoWlmcF8+f4CLdXeZGbGCPtcvwf
-----END CERTIFICATE-----
Generated at Sat Jun 1 08:10:46 2024 by rpki-client on console-fra.rpki-client.org