Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/P5yURFh53HDSIbeiUnB7U1pq9eM.roa
File: P5yURFh53HDSIbeiUnB7U1pq9eM.roa (raw, json)
Hash identifier: OTb/g2pYjXLm/7h8w++YQMWIN/v9i4LvhhYaJvQ8zlo=
Subject key identifier: 3F:9C:94:44:58:79:DC:70:D2:21:B7:A2:52:70:7B:53:5A:6A:F5:E3
Certificate issuer: /CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Certificate serial: 018CC56DDAFA2AD52CA1A28D57B751B988DE
Authority key identifier: D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/P5yURFh53HDSIbeiUnB7U1pq9eM.roa
Signing time: Mon 01 Jan 2024 14:29:20 +0000
ROA not before: Mon 01 Jan 2024 14:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200585
IP address blocks: 185.89.232.0/24 maxlen: 24
185.89.232.0/23 maxlen: 23
185.89.233.0/24 maxlen: 24
185.89.234.0/23 maxlen: 23
185.89.235.0/24 maxlen: 24
185.89.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:da:fa:2a:d5:2c:a1:a2:8d:57:b7:51:b9:88:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Validity
Not Before: Jan 1 14:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f9c94445879dc70d221b7a252707b535a6af5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:13:9b:22:14:54:b7:62:9d:f1:d0:88:78:
6a:84:65:27:79:ee:d0:33:99:6d:27:77:64:cc:69:
d9:4b:c4:da:62:e6:75:a5:a4:87:d5:a8:c4:2c:f4:
ad:24:f5:0d:58:3c:0f:57:61:eb:36:07:7f:df:c1:
da:29:2f:dd:d2:b4:71:e1:85:86:42:87:93:10:05:
2c:22:09:93:68:d0:ef:6a:7c:a3:ee:ed:fa:a1:42:
ea:92:49:86:29:b2:ed:5a:80:42:d8:d3:dc:a3:41:
c8:56:97:54:3c:b6:7c:2c:17:7b:7b:74:ca:f8:24:
8c:f1:c4:51:d2:23:1a:e2:35:87:0e:87:7d:04:ed:
54:c9:fc:61:51:fd:cb:ca:cc:ba:bb:ac:a0:4d:52:
1b:e0:70:6e:28:d9:6f:2f:fe:19:a7:39:93:cd:df:
32:b6:cd:3c:b1:03:5d:42:01:7f:92:6c:e4:4a:f3:
b9:82:be:6d:17:c6:55:b5:1c:5c:2a:0e:23:cb:9e:
e2:a9:aa:e7:c6:22:ae:62:4e:aa:f0:c3:ab:3a:e9:
06:1d:c6:2e:c5:90:74:de:17:ab:41:26:de:56:d0:
d6:21:dd:60:26:06:78:cf:4a:f8:3c:15:9a:53:86:
61:5a:8a:eb:b1:76:0b:1f:37:c9:08:e1:52:d2:33:
28:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9C:94:44:58:79:DC:70:D2:21:B7:A2:52:70:7B:53:5A:6A:F5:E3
X509v3 Authority Key Identifier:
keyid:D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/P5yURFh53HDSIbeiUnB7U1pq9eM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.232.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:d5:56:b3:54:e4:b6:13:4d:ea:7c:ec:a8:88:7e:74:f3:e2:
fe:4a:87:88:25:ea:00:47:4a:97:2a:79:2b:08:82:b7:7c:6f:
80:55:4f:e5:a4:22:3f:39:12:0b:1c:4b:c0:9b:cc:26:b8:ba:
8c:fb:7c:bf:58:c7:eb:7a:63:2a:06:a6:6c:1a:af:7e:ff:09:
f4:2d:65:39:7a:d6:27:26:de:b0:7f:07:de:26:78:f8:2f:8c:
b6:0c:ee:7b:85:5a:e9:06:22:b9:a2:e6:31:ba:dd:d2:41:6f:
db:97:b6:45:1e:dc:2b:b3:24:43:0d:0f:78:a8:3f:dc:39:00:
7a:f9:6f:c5:ec:34:db:cb:e6:91:ca:6a:bb:fb:8a:ed:1d:7c:
44:b5:0d:d0:bf:90:84:f3:55:32:bf:37:ac:00:5c:f2:fa:11:
bd:36:dc:0f:be:bc:9b:ef:cb:e2:c6:12:d4:c2:ed:29:92:17:
f3:b4:2c:06:b8:77:0c:02:fc:ce:97:eb:48:5f:58:44:6d:39:
a8:73:bb:66:c2:8d:ed:fd:f2:b0:60:58:0b:d7:15:aa:aa:81:
87:2b:20:56:d4:40:12:c6:d7:35:0a:b7:da:64:40:99:b4:9b:
76:c9:ee:35:f4:b4:1b:50:c4:80:8e:49:8c:27:5c:1f:db:87:
3c:e8:91:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbdr6KtUsoaKNV7dRuYjeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MmU1Y2RmNGM1NGZmODY4Y2U4OTUzMTVlYWI1OGYyZDg4
NjUwYzIwHhcNMjQwMTAxMTQyOTIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjljOTQ0NDU4NzlkYzcwZDIyMWI3YTI1MjcwN2I1MzVhNmFmNWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MMTmyIUVLdinfHQiHhqhGUnee7Q
M5ltJ3dkzGnZS8TaYuZ1paSH1ajELPStJPUNWDwPV2HrNgd/38HaKS/d0rRx4YWG
QoeTEAUsIgmTaNDvanyj7u36oULqkkmGKbLtWoBC2NPco0HIVpdUPLZ8LBd7e3TK
+CSM8cRR0iMa4jWHDod9BO1UyfxhUf3Lysy6u6ygTVIb4HBuKNlvL/4ZpzmTzd8y
ts08sQNdQgF/kmzkSvO5gr5tF8ZVtRxcKg4jy57iqarnxiKuYk6q8MOrOukGHcYu
xZB03herQSbeVtDWId1gJgZ4z0r4PBWaU4ZhWorrsXYLHzfJCOFS0jMoywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD+clERYedxw0iG3olJwe1NaavXjMB8GA1UdIwQY
MBaAFNkuXN9MVP+GjOiVMV6rWPLYhlDCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlM1YzMweFVfNGFNNkpVeFhxdFk4dGlHVU1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wYzNjMzAtNDUyNy00NzIyLTk3MWIt
ZjVmZTNlMWIwYTYzLzEvUDV5VVJGaDUzSERTSWJlaVVuQjdVMXBxOWVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wYzNjMzAtNDUyNy00NzIyLTk3MWItZjVmZTNlMWIwYTYz
LzEvMlM1YzMweFVfNGFNNkpVeFhxdFk4dGlHVU1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVnoMA0G
CSqGSIb3DQEBCwUAA4IBAQCd1VazVOS2E03qfOyoiH508+L+SoeIJeoAR0qXKnkr
CIK3fG+AVU/lpCI/ORILHEvAm8wmuLqM+3y/WMfremMqBqZsGq9+/wn0LWU5etYn
Jt6wfwfeJnj4L4y2DO57hVrpBiK5ouYxut3SQW/bl7ZFHtwrsyRDDQ94qD/cOQB6
+W/F7DTby+aRymq7+4rtHXxEtQ3Qv5CE81UyvzesAFzy+hG9NtwPvryb78vixhLU
wu0pkhfztCwGuHcMAvzOl+tIX1hEbTmoc7tmwo3t/fKwYFgL1xWqqoGHKyBW1EAS
xtc1CrfaZECZtJt2ye419LQbUMSAjkmMJ1wf24c86JEr
-----END CERTIFICATE-----
Generated at Mon Jul 1 16:04:55 2024 by rpki-client on console-fra.rpki-client.org