Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/LiibPmYo7tK0pUdAcZcv4DXhbwI.roa
File: LiibPmYo7tK0pUdAcZcv4DXhbwI.roa (raw, json)
Hash identifier: lgEUW586BvV9R4byr4QyCSHKcsXLl1LEXr0iuSbJ8H0=
Subject key identifier: 2E:28:9B:3E:66:28:EE:D2:B4:A5:47:40:71:97:2F:E0:35:E1:6F:02
Certificate issuer: /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Certificate serial: 018CC94BECAF6BAD151458D22E60F1BA9E43
Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/LiibPmYo7tK0pUdAcZcv4DXhbwI.roa
Signing time: Tue 02 Jan 2024 08:30:45 +0000
ROA not before: Tue 02 Jan 2024 08:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211994
IP address blocks: 185.233.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:ec:af:6b:ad:15:14:58:d2:2e:60:f1:ba:9e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Validity
Not Before: Jan 2 08:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e289b3e6628eed2b4a5474071972fe035e16f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ee:99:ae:9d:88:65:a7:2d:55:a9:a1:a1:01:
15:d5:8b:b1:ef:27:10:44:21:c6:ca:de:e6:6a:a6:
aa:08:ca:13:c1:2c:09:63:14:50:68:39:8e:a6:0a:
d0:47:d4:b6:ef:32:35:c1:69:0a:4a:b4:09:cf:7d:
44:de:a1:47:62:87:68:76:a8:40:7c:95:92:e0:eb:
54:e5:2d:d0:4f:be:28:ae:77:3d:57:1a:f0:89:57:
12:ca:cc:6e:d0:e4:ba:2f:d1:46:b4:d2:31:e6:5c:
c2:bf:b4:7e:3d:36:1a:9d:e6:e4:a1:e5:14:43:b9:
8d:13:2a:59:93:94:90:9f:22:4f:a7:bc:56:84:2d:
3d:9f:34:c2:eb:b3:a2:5b:ce:ab:1d:e9:3f:c4:ae:
0f:e1:45:09:6a:2a:35:e8:a5:28:ad:aa:5c:ac:28:
df:46:2d:8f:dd:b4:44:8c:8e:c4:ab:8c:46:e7:2d:
e2:47:d0:4a:39:a5:30:aa:c6:df:85:ec:24:f0:ee:
0f:47:8a:c4:04:93:6c:a1:21:e3:8d:fb:0c:2f:73:
b6:a7:1b:46:f9:10:e8:70:59:1f:58:f4:b2:d0:78:
66:e7:a1:a3:4b:16:03:62:62:69:e3:cc:b7:1a:91:
ab:93:c0:59:3f:a7:05:aa:f7:fc:ed:07:db:df:37:
26:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:28:9B:3E:66:28:EE:D2:B4:A5:47:40:71:97:2F:E0:35:E1:6F:02
X509v3 Authority Key Identifier:
keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/LiibPmYo7tK0pUdAcZcv4DXhbwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.64.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ab:79:b0:1d:a2:60:a7:72:2b:89:65:7d:b8:18:ee:35:8d:
27:f6:09:e2:d1:67:bc:d4:19:4d:1e:07:77:39:ee:9f:b2:dc:
d6:7c:4f:78:5e:02:cf:e6:74:48:d8:88:09:0c:32:f9:6e:4f:
4b:cb:a3:70:d5:98:dd:39:81:13:5b:40:af:20:99:6d:0a:bd:
80:88:d1:23:ff:9c:53:e4:82:70:eb:76:e7:5a:89:d0:9b:d3:
9c:68:77:f1:c0:b9:98:54:0f:18:72:7e:94:5e:22:dc:76:d0:
3b:25:cb:a3:6c:a1:54:33:8f:73:2d:83:ca:51:f0:c8:aa:71:
e1:dc:ff:3f:d0:14:68:20:c7:5f:0b:62:6f:c8:53:cf:33:26:
01:e0:51:10:35:5d:27:cd:bc:57:42:38:60:73:d3:bb:ae:e9:
ef:37:c6:db:ee:5c:a2:a0:c9:38:84:a7:ab:31:9f:35:fb:67:
e4:12:98:14:41:94:c5:9e:40:c8:d9:f9:fc:a7:ca:2e:d8:c4:
bb:9b:e5:f3:cd:12:5b:cc:11:b0:61:02:f8:ab:0a:15:87:f3:
99:82:59:2e:f2:d2:c7:a7:4a:67:c8:7f:bf:61:64:0a:76:5e:
38:23:8c:98:20:9d:02:2e:a8:05:03:b5:70:98:50:a7:7a:da:
a9:dd:06:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJS+yva60VFFjSLmDxup5DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYzIzZThhOGVjOTM5NmIxYjU0Y2ZmYjI3MWM1NTc2NmQ5
NDkxOTkwHhcNMjQwMTAyMDgzMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTI4OWIzZTY2MjhlZWQyYjRhNTQ3NDA3MTk3MmZlMDM1ZTE2ZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e6Zrp2IZactVamhoQEV1Yux7ycQ
RCHGyt7maqaqCMoTwSwJYxRQaDmOpgrQR9S27zI1wWkKSrQJz31E3qFHYododqhA
fJWS4OtU5S3QT74ornc9VxrwiVcSysxu0OS6L9FGtNIx5lzCv7R+PTYanebkoeUU
Q7mNEypZk5SQnyJPp7xWhC09nzTC67OiW86rHek/xK4P4UUJaio16KUorapcrCjf
Ri2P3bREjI7Eq4xG5y3iR9BKOaUwqsbfhewk8O4PR4rEBJNsoSHjjfsML3O2pxtG
+RDocFkfWPSy0Hhm56GjSxYDYmJp48y3GpGrk8BZP6cFqvf87Qfb3zcm7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC4omz5mKO7StKVHQHGXL+A14W8CMB8GA1UdIwQY
MBaAFD3CPoqOyTlrG1TP+yccVXZtlJGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kMWNmZDctOThkMy00M2I5LTk4MWUt
YzBkZDQ3NzFjMmFhLzEvTGlpYlBtWW83dEswcFVkQWNaY3Y0RFhoYndJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kMWNmZDctOThkMy00M2I5LTk4MWUtYzBkZDQ3NzFjMmFh
LzEvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuelAMA0G
CSqGSIb3DQEBCwUAA4IBAQBsq3mwHaJgp3IriWV9uBjuNY0n9gni0We81BlNHgd3
Oe6fstzWfE94XgLP5nRI2IgJDDL5bk9Ly6Nw1ZjdOYETW0CvIJltCr2AiNEj/5xT
5IJw63bnWonQm9OcaHfxwLmYVA8Ycn6UXiLcdtA7JcujbKFUM49zLYPKUfDIqnHh
3P8/0BRoIMdfC2JvyFPPMyYB4FEQNV0nzbxXQjhgc9O7runvN8bb7lyioMk4hKer
MZ81+2fkEpgUQZTFnkDI2fn8p8ou2MS7m+XzzRJbzBGwYQL4qwoVh/OZglku8tLH
p0pnyH+/YWQKdl44I4yYIJ0CLqgFA7VwmFCnetqp3QYD
-----END CERTIFICATE-----
Generated at Sat Jun 1 17:01:44 2024 by rpki-client on console-ams.rpki-client.org