Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/h6WzY4bP3cZC79weVVfVr3RsG2E.roa
File: h6WzY4bP3cZC79weVVfVr3RsG2E.roa (raw, json)
Hash identifier: iFnlZkbXqjrKVdH8LeutUTzdJgltfpJSmf1q2rcYPBQ=
Subject key identifier: 87:A5:B3:63:86:CF:DD:C6:42:EF:DC:1E:55:57:D5:AF:74:6C:1B:61
Certificate issuer: /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Certificate serial: 018CC5DD1D22899340BD52A49FE369D7DA1C
Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/h6WzY4bP3cZC79weVVfVr3RsG2E.roa
Signing time: Mon 01 Jan 2024 16:30:51 +0000
ROA not before: Mon 01 Jan 2024 16:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39183
IP address blocks: 185.252.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:1d:22:89:93:40:bd:52:a4:9f:e3:69:d7:da:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Validity
Not Before: Jan 1 16:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87a5b36386cfddc642efdc1e5557d5af746c1b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:cf:37:9b:43:68:ac:b7:7e:c2:fc:09:82:
13:52:9d:16:29:bd:b5:c6:92:5b:b6:78:46:8e:52:
0e:6f:e2:64:d8:17:95:69:ef:9b:10:e3:8f:62:c3:
c6:ab:c6:61:a3:41:40:ac:ec:4e:b8:a3:db:f1:f2:
bc:27:59:f1:fc:6f:99:1c:6d:92:a8:22:5d:a3:3c:
69:67:de:ae:61:79:2b:3b:cf:66:2b:f2:89:32:a9:
e5:fb:1b:e7:d6:9b:d0:6f:09:81:8c:1b:55:d6:3a:
de:8c:03:89:e6:89:b9:43:55:5e:8e:6d:0a:3d:0e:
6c:93:72:e9:2e:5c:7f:6d:12:5d:28:c7:76:18:89:
77:65:72:b9:92:30:4e:ee:3a:70:e8:79:d6:24:8a:
12:9d:70:07:03:67:73:f5:7c:32:56:56:3d:97:c3:
f8:cf:e5:a9:3a:f9:2a:1e:e3:b3:e4:55:81:7e:05:
4c:b0:34:1a:ff:35:0e:4a:d9:b9:5a:c6:3d:10:7b:
98:0d:cb:c4:50:75:b0:42:52:b5:2e:85:5a:a5:b6:
65:3c:64:a5:f6:36:ce:09:db:50:64:63:51:61:24:
ff:62:3e:e9:ea:c6:0c:b7:d3:fb:4e:eb:8b:c7:55:
d9:d7:e8:a9:41:ef:ca:a6:47:bc:1d:33:94:88:81:
f0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A5:B3:63:86:CF:DD:C6:42:EF:DC:1E:55:57:D5:AF:74:6C:1B:61
X509v3 Authority Key Identifier:
keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/h6WzY4bP3cZC79weVVfVr3RsG2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.20.0/24
Signature Algorithm: sha256WithRSAEncryption
59:bd:f8:98:9c:50:4d:9a:53:9e:07:56:04:33:56:f8:08:04:
60:cf:dd:7d:79:dc:2a:99:68:95:04:88:d1:b6:a1:0c:98:79:
ad:09:49:8b:5d:02:da:9e:7e:bb:8a:de:ff:9d:f3:0d:dc:4e:
cd:f2:76:f3:15:65:42:2a:03:0e:76:9a:f8:5c:be:b5:31:74:
d8:47:00:ce:68:3c:8e:9b:92:da:c1:82:a8:e5:96:bf:e8:6e:
53:31:a6:f5:6c:73:d2:a2:4d:11:a9:82:d2:5c:28:83:ca:8b:
0b:f3:1f:00:2b:41:a3:b2:b5:9e:76:3c:78:49:47:ce:35:87:
4e:2e:fe:54:3f:92:42:de:0e:f8:0e:cc:cb:ab:11:aa:2c:ec:
af:87:43:8d:1e:3e:83:5a:9b:14:05:50:c0:74:83:b1:f4:eb:
cb:47:9d:c5:6c:02:2c:45:7b:61:47:3a:1c:5d:6f:32:1b:13:
e0:4a:d7:33:46:ed:9b:4f:32:1f:c6:1f:55:0a:14:32:de:31:
4e:e7:7c:24:33:0f:b8:e0:8b:64:20:dd:53:22:dd:0f:eb:5a:
7a:65:be:d2:a8:63:a4:4e:3e:c9:b9:78:54:5d:6d:61:f4:e5:
ea:c5:82:24:8c:31:5d:dd:26:65:68:ab:a0:cc:f4:4f:0d:3a:
d2:1c:e3:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3R0iiZNAvVKkn+Np19ocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjE4NmU5NzA5N2M4NDE3ZDk0MzdkNzBjZmRmYzUyNzMz
MWI1YTgwHhcNMjQwMTAxMTYzMDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2E1YjM2Mzg2Y2ZkZGM2NDJlZmRjMWU1NTU3ZDVhZjc0NmMxYjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHbPN5tDaKy3fsL8CYITUp0WKb21
xpJbtnhGjlIOb+Jk2BeVae+bEOOPYsPGq8Zho0FArOxOuKPb8fK8J1nx/G+ZHG2S
qCJdozxpZ96uYXkrO89mK/KJMqnl+xvn1pvQbwmBjBtV1jrejAOJ5om5Q1Vejm0K
PQ5sk3LpLlx/bRJdKMd2GIl3ZXK5kjBO7jpw6HnWJIoSnXAHA2dz9XwyVlY9l8P4
z+WpOvkqHuOz5FWBfgVMsDQa/zUOStm5WsY9EHuYDcvEUHWwQlK1LoVapbZlPGSl
9jbOCdtQZGNRYST/Yj7p6sYMt9P7TuuLx1XZ1+ipQe/Kpke8HTOUiIHw6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIels2OGz93GQu/cHlVX1a90bBthMB8GA1UdIwQY
MBaAFPHxhulwl8hBfZQ31wz9/FJzMbWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZHRzZYQ1h5RUY5bERmWERQMzhVbk14dGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81YzNiOTktYjhlZi00ZWQxLTg1N2Mt
YjY1Y2QxMzYyNjJlLzEvaDZXelk0YlAzY1pDNzl3ZVZWZlZyM1JzRzJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81YzNiOTktYjhlZi00ZWQxLTg1N2MtYjY1Y2QxMzYyNjJl
LzEvOGZHRzZYQ1h5RUY5bERmWERQMzhVbk14dGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufwUMA0G
CSqGSIb3DQEBCwUAA4IBAQBZvfiYnFBNmlOeB1YEM1b4CARgz919edwqmWiVBIjR
tqEMmHmtCUmLXQLann67it7/nfMN3E7N8nbzFWVCKgMOdpr4XL61MXTYRwDOaDyO
m5LawYKo5Za/6G5TMab1bHPSok0RqYLSXCiDyosL8x8AK0GjsrWedjx4SUfONYdO
Lv5UP5JC3g74DszLqxGqLOyvh0ONHj6DWpsUBVDAdIOx9OvLR53FbAIsRXthRzoc
XW8yGxPgStczRu2bTzIfxh9VChQy3jFO53wkMw+44ItkIN1TIt0P61p6Zb7SqGOk
Tj7JuXhUXW1h9OXqxYIkjDFd3SZlaKugzPRPDTrSHOPW
-----END CERTIFICATE-----
Generated at Sat May 18 06:44:26 2024 by rpki-client on console-ams.rpki-client.org