Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/1ceV4z9wrfDOG1i7eA0I352GAHM.roa
File: 1ceV4z9wrfDOG1i7eA0I352GAHM.roa (raw, json)
Hash identifier: M7JYHsoSvOsKTPxIrEthiPhznoWgod+Sab5EylmR/KI=
Subject key identifier: D5:C7:95:E3:3F:70:AD:F0:CE:1B:58:BB:78:0D:08:DF:9D:86:00:73
Certificate issuer: /CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Certificate serial: 018CC64B3FBF9D5D47D2D7BA30747AED94A8
Authority key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/1ceV4z9wrfDOG1i7eA0I352GAHM.roa
Signing time: Mon 01 Jan 2024 18:31:09 +0000
ROA not before: Mon 01 Jan 2024 18:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24582
IP address blocks: 185.64.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 13:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:3f:bf:9d:5d:47:d2:d7:ba:30:74:7a:ed:94:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Validity
Not Before: Jan 1 18:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5c795e33f70adf0ce1b58bb780d08df9d860073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bf:af:b9:e2:72:24:0c:bb:77:7d:79:ec:f0:
a8:3a:98:83:ae:1f:23:0f:c2:b6:8d:eb:80:ac:58:
e3:8d:3b:0a:09:f7:d6:1f:37:51:06:07:e2:9a:8d:
17:3e:a8:a5:59:70:3e:bc:90:56:a6:63:3d:a6:03:
9a:d4:00:98:55:29:e2:f5:6c:56:7a:ce:de:56:70:
2c:83:8e:fe:bd:c6:91:4e:f7:da:77:29:45:75:74:
e1:ee:77:da:4a:76:87:1e:92:e0:60:7c:5b:f4:8b:
6b:18:9d:4c:f6:af:17:26:d8:e1:38:61:1b:aa:3a:
38:b3:5c:26:79:7e:12:55:86:1a:62:ac:bd:af:07:
87:e6:2c:35:9c:11:78:8c:1f:8a:f7:9b:e6:cf:cf:
0c:9f:33:c0:ac:37:18:8f:10:e9:56:56:f5:5c:ae:
50:5c:bc:50:f2:08:53:99:7a:29:39:6b:9c:61:77:
6c:79:6a:d1:44:bf:c8:7f:60:1a:73:05:72:6c:a6:
ee:05:de:c0:68:29:a0:44:7f:2b:8d:4b:f3:29:b1:
0c:88:20:ff:7e:03:b8:b2:e2:bb:0d:47:6c:b5:b1:
a4:7a:cb:35:80:81:89:b8:d6:aa:dd:bd:d7:17:df:
9c:44:c7:86:ea:cd:ca:28:13:fd:09:15:56:0d:39:
d8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C7:95:E3:3F:70:AD:F0:CE:1B:58:BB:78:0D:08:DF:9D:86:00:73
X509v3 Authority Key Identifier:
keyid:E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/1ceV4z9wrfDOG1i7eA0I352GAHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.96.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:2e:14:c2:79:40:74:e7:35:e8:53:50:eb:1f:b5:59:8e:4a:
8f:43:aa:32:e6:68:bc:06:a9:f1:66:24:1c:21:31:eb:f3:b0:
a4:a4:ea:db:55:92:51:cc:ca:07:29:8e:2d:da:85:a8:a8:c4:
77:55:7e:71:db:45:a9:5c:17:f9:72:1b:af:58:b7:f8:dd:2b:
d7:2f:7f:f6:77:79:ff:18:8d:bd:38:30:3e:d0:c6:c5:6c:dd:
fc:94:4e:05:9f:26:9c:55:b7:1a:9c:69:ac:a0:30:be:f2:6c:
c8:7e:20:cf:df:6c:18:77:62:0a:80:11:48:cb:2c:0f:93:72:
ce:33:bb:28:d5:7c:d0:84:2b:b9:bb:95:9d:ae:ef:18:34:b5:
40:04:c4:7a:db:6a:0a:45:3e:72:a5:65:b9:c7:58:17:da:0f:
d1:20:64:4d:73:58:32:3d:e4:f9:8d:2d:5d:13:fb:89:22:66:
26:cd:dd:c8:63:3e:04:65:d5:be:5d:4d:cb:d9:27:19:62:b4:
89:ea:56:1d:58:ea:5f:9f:c8:4b:22:8d:fe:81:cb:51:50:6a:
bc:60:6f:f7:2b:74:0e:b7:df:d8:21:d2:51:c3:18:c5:99:43:
de:ba:b3:e5:54:99:32:06:ab:6d:7b:ca:75:3b:83:b8:72:34:
3a:44:0f:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSz+/nV1H0te6MHR67ZSoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZDljZmIwNzhlZGE1ODE2ZmM4MDllOThjMjVjYjcxOTYz
ZTc1YjcwHhcNMjQwMTAxMTgzMTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWM3OTVlMzNmNzBhZGYwY2UxYjU4YmI3ODBkMDhkZjlkODYwMDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr+vueJyJAy7d3157PCoOpiDrh8j
D8K2jeuArFjjjTsKCffWHzdRBgfimo0XPqilWXA+vJBWpmM9pgOa1ACYVSni9WxW
es7eVnAsg47+vcaRTvfadylFdXTh7nfaSnaHHpLgYHxb9ItrGJ1M9q8XJtjhOGEb
qjo4s1wmeX4SVYYaYqy9rweH5iw1nBF4jB+K95vmz88MnzPArDcYjxDpVlb1XK5Q
XLxQ8ghTmXopOWucYXdseWrRRL/If2AacwVybKbuBd7AaCmgRH8rjUvzKbEMiCD/
fgO4suK7DUdstbGkess1gIGJuNaq3b3XF9+cRMeG6s3KKBP9CRVWDTnYzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNXHleM/cK3wzhtYu3gNCN+dhgBzMB8GA1UdIwQY
MBaAFOfZz7B47aWBb8gJ6Ywly3GWPnW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTluUHNIanRwWUZ2eUFucGpDWExjWlktZGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wMDBlYTctYzlmNC00ZWJiLWI5YjEt
ZmVlZTdjMjlkNGRlLzEvMWNlVjR6OXdyZkRPRzFpN2VBMEkzNTJHQUhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8wMDBlYTctYzlmNC00ZWJiLWI5YjEtZmVlZTdjMjlkNGRl
LzEvNTluUHNIanRwWUZ2eUFucGpDWExjWlktZGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUBgMA0G
CSqGSIb3DQEBCwUAA4IBAQA6LhTCeUB05zXoU1DrH7VZjkqPQ6oy5mi8BqnxZiQc
ITHr87CkpOrbVZJRzMoHKY4t2oWoqMR3VX5x20WpXBf5chuvWLf43SvXL3/2d3n/
GI29ODA+0MbFbN38lE4FnyacVbcanGmsoDC+8mzIfiDP32wYd2IKgBFIyywPk3LO
M7so1XzQhCu5u5Wdru8YNLVABMR622oKRT5ypWW5x1gX2g/RIGRNc1gyPeT5jS1d
E/uJImYmzd3IYz4EZdW+XU3L2ScZYrSJ6lYdWOpfn8hLIo3+gctRUGq8YG/3K3QO
t9/YIdJRwxjFmUPeurPlVJkyBqtte8p1O4O4cjQ6RA9p
-----END CERTIFICATE-----
Generated at Tue May 28 16:56:47 2024 by rpki-client on console-fra.rpki-client.org