Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/PO7QwC8NEyRzGtWJsLGzjkZn1js.roa
File: PO7QwC8NEyRzGtWJsLGzjkZn1js.roa (raw, json)
Hash identifier: 0sEzGMlfMuT4DPKEG9PSQX93WFjekihItPGHvGpPTMI=
Subject key identifier: 3C:EE:D0:C0:2F:0D:13:24:73:1A:D5:89:B0:B1:B3:8E:46:67:D6:3B
Certificate issuer: /CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Certificate serial: 018CC8DCEC37EEB300F855F3CB820C3C266F
Authority key identifier: B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/PO7QwC8NEyRzGtWJsLGzjkZn1js.roa
Signing time: Tue 02 Jan 2024 06:29:30 +0000
ROA not before: Tue 02 Jan 2024 06:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2116
IP address blocks: 185.67.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:ec:37:ee:b3:00:f8:55:f3:cb:82:0c:3c:26:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Validity
Not Before: Jan 2 06:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ceed0c02f0d1324731ad589b0b1b38e4667d63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:0f:4b:3a:cb:2a:ee:cc:16:fe:e3:51:4a:
83:e5:4b:d0:da:ce:31:e5:53:12:2a:ab:90:76:bd:
b8:63:cd:6e:29:d2:0c:c6:c5:3a:78:86:2f:1a:37:
db:82:22:dc:32:b5:51:e3:7a:30:2a:2a:63:d8:d8:
fd:4e:9a:29:d1:1d:64:a6:95:50:80:bd:ab:fa:66:
5a:a2:aa:68:5b:02:c3:bb:1b:7f:81:46:8a:3a:d2:
bb:8e:e8:6e:fa:6d:10:a8:40:27:7c:fb:01:ac:db:
77:ec:97:c2:26:af:df:dd:75:9e:b5:df:19:49:85:
cf:7b:ba:3a:db:a4:42:99:ce:58:3c:6c:87:44:8f:
fb:c2:3a:f5:13:1f:cd:ac:b3:62:34:b7:41:21:68:
94:51:7e:39:b1:94:83:e0:58:b2:5f:d5:0d:49:28:
9e:ae:f6:ee:2b:a0:96:3c:b9:ca:d7:a1:95:c5:04:
63:70:49:04:72:31:a5:b0:4d:17:76:7d:60:1b:1b:
9f:91:f3:c3:e1:70:b5:f3:44:81:43:79:ac:0d:b8:
95:52:71:99:ff:b3:be:38:7d:f8:42:de:fe:42:1a:
10:78:27:85:8b:9f:52:9b:85:7e:b0:e9:e0:8a:85:
ff:07:25:05:b6:9d:df:ec:f7:45:37:ef:20:25:f7:
0c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EE:D0:C0:2F:0D:13:24:73:1A:D5:89:B0:B1:B3:8E:46:67:D6:3B
X509v3 Authority Key Identifier:
keyid:B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/PO7QwC8NEyRzGtWJsLGzjkZn1js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.40.0/22
Signature Algorithm: sha256WithRSAEncryption
17:bb:54:38:c5:ff:42:63:36:25:a3:46:5c:b8:5e:cf:65:c3:
ff:1b:37:9e:07:f1:59:cd:e2:6a:c0:81:68:68:f6:7d:45:5b:
60:c8:90:14:bb:e5:d3:c3:00:ca:fe:d5:0f:9b:19:57:83:86:
5a:94:47:de:65:48:b7:d6:51:33:9b:06:92:0c:41:56:6e:e4:
d3:c1:82:93:ee:76:c6:00:a9:cd:57:33:1d:05:8f:ea:96:a9:
d8:02:97:94:cf:1b:89:51:59:ea:73:39:c2:47:c3:f4:75:2f:
7f:6a:e7:81:96:4f:af:c5:1e:fb:16:f0:5b:22:ec:65:fd:50:
da:29:f8:92:ed:ff:30:f3:da:9c:09:37:9a:30:66:52:b1:68:
a1:8d:ff:5a:ea:36:77:0f:ff:57:81:83:85:07:ff:cd:d9:2d:
ac:e9:df:f9:d7:57:21:d4:e3:88:0f:b5:5e:43:d5:68:70:34:
a0:11:92:da:16:92:f9:50:6c:79:7e:66:e3:78:39:11:3b:e2:
fb:a9:3c:ac:ca:8f:b4:22:b2:4e:e6:7f:e2:cf:7f:50:3d:9c:
62:4a:38:5b:0c:53:3d:44:ab:03:67:27:c4:e4:32:45:77:1f:
c0:9e:5a:84:3e:f1:c0:ed:2e:71:ad:fd:ea:f5:73:09:e8:37:
74:9f:7d:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3Ow37rMA+FXzy4IMPCZvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYWRmMDVhZmVmNmY2NWZhMTlhNjFjMzBhZTRmYjExYzdj
ZjI1YjYwHhcNMjQwMTAyMDYyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2VlZDBjMDJmMGQxMzI0NzMxYWQ1ODliMGIxYjM4ZTQ2NjdkNjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycMPSzrLKu7MFv7jUUqD5UvQ2s4x
5VMSKquQdr24Y81uKdIMxsU6eIYvGjfbgiLcMrVR43owKipj2Nj9Tpop0R1kppVQ
gL2r+mZaoqpoWwLDuxt/gUaKOtK7juhu+m0QqEAnfPsBrNt37JfCJq/f3XWetd8Z
SYXPe7o626RCmc5YPGyHRI/7wjr1Ex/NrLNiNLdBIWiUUX45sZSD4FiyX9UNSSie
rvbuK6CWPLnK16GVxQRjcEkEcjGlsE0Xdn1gGxufkfPD4XC180SBQ3msDbiVUnGZ
/7O+OH34Qt7+QhoQeCeFi59Sm4V+sOngioX/ByUFtp3f7PdFN+8gJfcMzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDzu0MAvDRMkcxrVibCxs45GZ9Y7MB8GA1UdIwQY
MBaAFLCt8Fr+9vZfoZphwwrk+xHHzyW2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0szd1d2NzI5bC1obW1IREN1VDdFY2ZQSmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDk1OWItZDc5Yi00MmRjLWI4OTMt
NWYyZDBlMmFlNzE0LzEvUE83UXdDOE5FeVJ6R3RXSnNMR3pqa1puMWpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS83MDk1OWItZDc5Yi00MmRjLWI4OTMtNWYyZDBlMmFlNzE0
LzEvc0szd1d2NzI5bC1obW1IREN1VDdFY2ZQSmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUMoMA0G
CSqGSIb3DQEBCwUAA4IBAQAXu1Q4xf9CYzYlo0ZcuF7PZcP/GzeeB/FZzeJqwIFo
aPZ9RVtgyJAUu+XTwwDK/tUPmxlXg4ZalEfeZUi31lEzmwaSDEFWbuTTwYKT7nbG
AKnNVzMdBY/qlqnYApeUzxuJUVnqcznCR8P0dS9/aueBlk+vxR77FvBbIuxl/VDa
KfiS7f8w89qcCTeaMGZSsWihjf9a6jZ3D/9XgYOFB//N2S2s6d/511ch1OOID7Ve
Q9VocDSgEZLaFpL5UGx5fmbjeDkRO+L7qTysyo+0IrJO5n/iz39QPZxiSjhbDFM9
RKsDZyfE5DJFdx/AnlqEPvHA7S5xrf3q9XMJ6Dd0n31L
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:14:34 2024 by rpki-client on console-fra.rpki-client.org