Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/coQ2brrjPUlgqBGPTcv7zHn6k0I.roa
File: coQ2brrjPUlgqBGPTcv7zHn6k0I.roa (raw, json)
Hash identifier: yezmZtobMvIGaxQ0e8YNra+xRilYDdv4PaoVCew4IV8=
Subject key identifier: 72:84:36:6E:BA:E3:3D:49:60:A8:11:8F:4D:CB:FB:CC:79:FA:93:42
Certificate issuer: /CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
Certificate serial: 018F0B13F6814ACBCA1E738B9CF5CF813189
Authority key identifier: AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/coQ2brrjPUlgqBGPTcv7zHn6k0I.roa
Signing time: Tue 23 Apr 2024 13:10:08 +0000
ROA not before: Tue 23 Apr 2024 13:10:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202531
IP address blocks: 185.151.219.0/24 maxlen: 24
185.206.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0b:13:f6:81:4a:cb:ca:1e:73:8b:9c:f5:cf:81:31:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
Validity
Not Before: Apr 23 13:10:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7284366ebae33d4960a8118f4dcbfbcc79fa9342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:89:50:eb:b7:9d:86:72:b7:c2:67:a5:b5:
cd:c1:20:3a:36:6b:ef:0d:dc:e0:0c:7e:2f:63:ad:
c6:7f:b9:0b:f1:b9:9a:81:74:04:c3:75:60:8f:d4:
03:9c:41:79:75:32:4f:d1:21:9a:b8:3c:b0:ca:6d:
62:32:54:0b:e8:05:cc:6f:17:a9:63:50:b7:77:5e:
7e:45:73:cd:49:b1:bb:ea:a2:53:ce:ad:d9:8f:6e:
7e:94:73:3f:e3:7c:6e:c1:ba:65:dd:96:7d:e5:e1:
bf:d8:ea:cf:db:ae:a4:fc:88:4d:97:76:d7:50:82:
36:60:f1:62:47:5a:95:34:cc:8b:58:03:cd:b6:ab:
2b:4c:b6:08:ff:59:7e:b6:9e:3d:af:4e:66:92:ec:
c7:0b:64:e0:6b:ca:ca:b4:bb:8e:8a:95:62:d0:c8:
66:41:3a:ed:0c:b2:7f:9a:a1:d1:a5:6d:54:77:8d:
38:a2:ea:e3:84:d3:c8:42:ce:c0:69:e4:47:13:7f:
cd:b7:c9:fe:9e:1e:cc:af:21:ba:5e:46:08:72:e5:
45:03:5f:63:ca:9c:03:33:ad:93:81:bb:f8:65:3a:
35:ef:91:de:ab:9e:a3:27:76:32:12:1b:81:7f:19:
4d:d1:e9:b3:8a:51:e7:48:1c:11:43:7c:b5:a7:3c:
55:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:84:36:6E:BA:E3:3D:49:60:A8:11:8F:4D:CB:FB:CC:79:FA:93:42
X509v3 Authority Key Identifier:
keyid:AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/coQ2brrjPUlgqBGPTcv7zHn6k0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.219.0/24
185.206.254.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a1:ea:1b:4a:49:1d:73:ea:be:84:ca:a8:ed:a7:4c:ce:c9:
27:f4:38:36:d9:16:b3:bf:8f:36:2d:80:a1:7c:01:3f:8d:48:
48:3e:bc:6d:84:f5:84:7a:91:85:16:c8:b5:b1:24:a8:62:35:
ea:80:3a:d2:1a:07:07:ab:35:97:27:c5:4d:b6:b3:26:9b:d4:
fb:0a:23:ca:05:ff:26:8a:b9:29:f2:c1:89:ea:73:03:25:36:
38:45:cc:61:00:65:45:99:b5:9d:dd:c0:c6:49:a1:cb:67:c6:
69:81:76:6f:13:37:9a:75:bc:6c:a4:8a:e6:d8:bf:95:cc:72:
55:ec:5b:88:d2:2b:1a:d9:e1:29:54:3d:f8:da:df:71:e7:01:
12:82:19:a9:e2:96:fb:09:3b:ea:c1:77:ac:b5:0d:e9:18:e4:
3c:65:f3:9a:cf:99:99:be:ac:96:91:e5:32:26:da:31:c3:71:
27:96:2d:8b:3e:35:2c:eb:a7:52:2a:27:36:a7:76:74:d9:19:
f6:08:96:13:b2:6b:de:04:38:f7:22:b6:09:18:50:12:94:4f:
a4:92:e4:c4:59:95:99:b1:24:ab:e5:19:d8:85:5f:c7:c1:a8:
27:b4:7f:e2:28:c4:2c:ee:cb:4e:8b:6d:0f:b2:64:c9:d9:b9:
82:8d:32:b4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY8LE/aBSsvKHnOLnPXPgTGJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNjhjOTUxOGMyYWQ1NGMwYWNiODIxNDY4Yzg2ZTQ1YmEx
NjFjMTgwHhcNMjQwNDIzMTMxMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Mjg0MzY2ZWJhZTMzZDQ5NjBhODExOGY0ZGNiZmJjYzc5ZmE5MzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppKJUOu3nYZyt8JnpbXNwSA6Nmvv
DdzgDH4vY63Gf7kL8bmagXQEw3Vgj9QDnEF5dTJP0SGauDywym1iMlQL6AXMbxep
Y1C3d15+RXPNSbG76qJTzq3Zj25+lHM/43xuwbpl3ZZ95eG/2OrP266k/IhNl3bX
UII2YPFiR1qVNMyLWAPNtqsrTLYI/1l+tp49r05mkuzHC2Tga8rKtLuOipVi0Mhm
QTrtDLJ/mqHRpW1Ud404ourjhNPIQs7AaeRHE3/Nt8n+nh7MryG6XkYIcuVFA19j
ypwDM62Tgbv4ZTo175Heq56jJ3YyEhuBfxlN0emzilHnSBwRQ3y1pzxVpwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHKENm664z1JYKgRj03L+8x5+pNCMB8GA1UdIwQY
MBaAFK5oyVGMKtVMCsuCFGjIbkW6FhwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm1qSlVZd3ExVXdLeTRJVWFNaHVSYm9XSEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83YjQyYjQtMWQxMi00MmNmLWE4ZjAt
MTZiNmJlZGE4N2QwLzEvY29RMmJycmpQVWxncUJHUFRjdjd6SG42azBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS83YjQyYjQtMWQxMi00MmNmLWE4ZjAtMTZiNmJlZGE4N2Qw
LzEvcm1qSlVZd3ExVXdLeTRJVWFNaHVSYm9XSEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuZfbAwQA
uc7+MA0GCSqGSIb3DQEBCwUAA4IBAQA/oeobSkkdc+q+hMqo7adMzskn9Dg22Raz
v482LYChfAE/jUhIPrxthPWEepGFFsi1sSSoYjXqgDrSGgcHqzWXJ8VNtrMmm9T7
CiPKBf8mirkp8sGJ6nMDJTY4RcxhAGVFmbWd3cDGSaHLZ8ZpgXZvEzeadbxspIrm
2L+VzHJV7FuI0isa2eEpVD342t9x5wESghmp4pb7CTvqwXestQ3pGOQ8ZfOaz5mZ
vqyWkeUyJtoxw3Enli2LPjUs66dSKic2p3Z02Rn2CJYTsmveBDj3IrYJGFASlE+k
kuTEWZWZsSSr5RnYhV/HwagntH/iKMQs7stOi20PsmTJ2bmCjTK0
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:00:23 2024 by rpki-client on console-ams.rpki-client.org