Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/3LdgBxXNIJOOxO7SA9RLSKkW4Bw.roa
File: 3LdgBxXNIJOOxO7SA9RLSKkW4Bw.roa (raw, json)
Hash identifier: FiF6YI+RvqwQhDGsOuBoKGV8k24DGiJYgDt8k2MPy34=
Subject key identifier: DC:B7:60:07:15:CD:20:93:8E:C4:EE:D2:03:D4:4B:48:A9:16:E0:1C
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019000FCD4E3806322E627C8C97AEC9AC020
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/3LdgBxXNIJOOxO7SA9RLSKkW4Bw.roa
Signing time: Mon 10 Jun 2024 07:11:27 +0000
ROA not before: Mon 10 Jun 2024 07:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212077
IP address blocks: 85.133.200.0/22 maxlen: 24
85.133.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:00:fc:d4:e3:80:63:22:e6:27:c8:c9:7a:ec:9a:c0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 10 07:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcb7600715cd20938ec4eed203d44b48a916e01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:4e:1a:cd:3f:0d:38:b5:64:be:2e:9d:97:
22:99:19:0b:d0:df:4f:70:9c:12:3d:ec:79:14:3d:
10:40:cc:4d:58:c9:08:e5:6d:60:e6:e0:79:47:0c:
1e:0a:aa:52:43:3a:c9:a1:2c:09:85:8a:ed:40:34:
5d:5a:c0:ec:54:36:c6:23:2d:45:e7:00:dc:76:02:
24:dd:70:e0:73:fc:8c:57:27:30:b3:69:90:d2:8d:
18:4e:b4:86:a5:54:cb:5d:23:00:b0:0b:a2:1e:43:
a2:c0:9f:c9:0b:68:04:97:12:fb:84:b5:6a:20:3f:
59:8a:0c:15:48:01:90:c3:70:31:aa:c5:8b:e0:ee:
0c:0d:d7:bf:fa:09:52:5f:4a:2c:4e:6b:99:09:4c:
b8:de:51:8c:e0:34:f2:da:5c:c9:47:a7:7f:1e:7f:
4f:7a:86:e6:3b:5d:61:a6:8b:20:b3:09:04:f6:f7:
67:7b:33:11:98:22:d1:2b:02:6b:c8:67:02:d9:9b:
27:b2:70:f5:10:34:a9:09:83:1a:76:23:11:af:79:
e7:03:30:61:23:39:fe:05:c9:95:24:bf:e2:b7:17:
52:dd:50:ad:7f:f5:e6:b1:39:cc:b0:18:63:2d:b0:
17:bd:22:80:5e:c3:07:ad:73:b6:4a:8b:55:72:9f:
5c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B7:60:07:15:CD:20:93:8E:C4:EE:D2:03:D4:4B:48:A9:16:E0:1C
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/3LdgBxXNIJOOxO7SA9RLSKkW4Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.200.0/22
85.133.243.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e3:c2:13:b6:c2:56:f5:e0:c9:fa:02:f4:5a:89:60:d8:c6:
85:67:5e:0f:e6:a0:07:f7:49:ef:1a:65:4e:dc:a3:f4:18:5f:
68:16:73:0e:6e:0e:98:d6:e8:71:45:83:ef:7e:0d:cf:c4:d9:
e3:54:79:e5:4c:cf:26:3c:f8:81:2e:5d:0f:8f:90:1b:c5:e3:
46:72:8d:6b:0b:c7:f2:68:8b:e4:a8:39:3c:60:36:d3:ab:04:
ff:40:97:68:58:a9:c8:53:7a:6f:fc:12:4b:c3:20:44:03:91:
86:a9:3c:de:09:0c:32:0d:52:f7:e6:e4:71:f3:85:11:ae:e7:
c0:f0:45:7d:a3:8b:29:14:80:64:af:e7:67:fb:8d:33:56:a9:
1a:ee:62:ae:b9:ee:16:3a:99:12:64:13:7e:5d:8a:d0:7d:78:
93:05:ce:f0:e8:20:d4:79:c0:33:ca:13:0d:01:af:c4:b3:02:
bc:e8:a1:0e:49:81:45:75:b4:45:e9:ec:f4:3c:ed:55:47:b0:
5f:3b:dc:5f:ce:23:c5:c4:f0:90:77:81:af:56:0e:08:8c:79:
b7:9a:c9:31:9b:5e:4d:92:ba:d0:2b:42:f8:69:89:b6:45:3f:
d3:b9:41:5c:b8:34:65:9c:be:40:b7:42:d2:e3:81:a0:ec:60:
3b:fd:e6:31
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZAA/NTjgGMi5ifIyXrsmsAgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjQwNjEwMDcxMTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2I3NjAwNzE1Y2QyMDkzOGVjNGVlZDIwM2Q0NGI0OGE5MTZlMDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdtOGs0/DTi1ZL4unZcimRkL0N9P
cJwSPex5FD0QQMxNWMkI5W1g5uB5RwweCqpSQzrJoSwJhYrtQDRdWsDsVDbGIy1F
5wDcdgIk3XDgc/yMVycws2mQ0o0YTrSGpVTLXSMAsAuiHkOiwJ/JC2gElxL7hLVq
ID9ZigwVSAGQw3AxqsWL4O4MDde/+glSX0osTmuZCUy43lGM4DTy2lzJR6d/Hn9P
eobmO11hposgswkE9vdnezMRmCLRKwJryGcC2ZsnsnD1EDSpCYMadiMRr3nnAzBh
Izn+BcmVJL/itxdS3VCtf/XmsTnMsBhjLbAXvSKAXsMHrXO2SotVcp9cJwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNy3YAcVzSCTjsTu0gPUS0ipFuAcMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvM0xkZ0J4WE5JSk9PeE83U0E5UkxTS2tXNEJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVYXIAwQA
VYXzMA0GCSqGSIb3DQEBCwUAA4IBAQAG48ITtsJW9eDJ+gL0Wolg2MaFZ14P5qAH
90nvGmVO3KP0GF9oFnMObg6Y1uhxRYPvfg3PxNnjVHnlTM8mPPiBLl0Pj5AbxeNG
co1rC8fyaIvkqDk8YDbTqwT/QJdoWKnIU3pv/BJLwyBEA5GGqTzeCQwyDVL35uRx
84URrufA8EV9o4spFIBkr+dn+40zVqka7mKuue4WOpkSZBN+XYrQfXiTBc7w6CDU
ecAzyhMNAa/EswK86KEOSYFFdbRF6ez0PO1VR7BfO9xfziPFxPCQd4GvVg4IjHm3
mskxm15NkrrQK0L4aYm2RT/TuUFcuDRlnL5At0LS44Gg7GA7/eYx
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:18:52 2024 by rpki-client on console-fra.rpki-client.org