Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/6EJdVniFPgBZO9YgZbRzQPTj81Q.roa
File: 6EJdVniFPgBZO9YgZbRzQPTj81Q.roa (raw, json)
Hash identifier: R/lq8ie3ctBf6OBaQ4+yNHz9/hwjRaueJzFDCpcfaSY=
Subject key identifier: E8:42:5D:56:78:85:3E:00:59:3B:D6:20:65:B4:73:40:F4:E3:F3:54
Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial: 018CC64A5644E7A7C2EC0B2771E4F692F2CE
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/6EJdVniFPgBZO9YgZbRzQPTj81Q.roa
Signing time: Mon 01 Jan 2024 18:30:09 +0000
ROA not before: Mon 01 Jan 2024 18:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47987
IP address blocks: 185.141.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 14:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:56:44:e7:a7:c2:ec:0b:27:71:e4:f6:92:f2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Validity
Not Before: Jan 1 18:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8425d5678853e00593bd62065b47340f4e3f354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:25:2d:d3:91:87:41:76:ff:99:be:e4:72:0e:
fc:90:a1:a6:2a:da:52:e5:2a:e7:ad:87:ed:a9:12:
3f:e8:7a:05:86:f5:5b:19:ab:5e:10:a1:95:fa:f9:
a1:d4:2f:d0:08:ff:56:56:8f:cb:4c:e5:67:3c:c1:
88:1c:05:d7:2c:fa:e1:43:d7:18:14:96:10:b2:66:
7e:74:76:b0:c6:be:5e:f5:88:bb:9e:11:43:af:5e:
3c:f7:d2:fe:48:cc:74:1d:4c:07:39:52:95:a4:98:
7d:92:a6:65:a9:33:fc:44:3d:82:9e:8a:80:10:62:
d7:61:6e:01:44:1d:ed:5c:00:a9:bb:e6:df:4d:03:
2f:41:4f:3b:42:f8:87:05:7a:6a:e2:5f:81:5a:2c:
eb:fb:71:a5:6c:3a:db:7c:0e:5c:d9:8f:24:74:01:
32:52:d6:0d:66:4f:54:21:90:82:12:0d:ba:00:38:
76:b2:d5:6c:e8:f5:af:d1:5f:ba:d4:e8:0c:4e:3c:
50:75:96:eb:1f:8e:a6:31:04:0d:a7:61:ab:00:46:
38:d3:3f:e0:ba:63:ff:82:e4:dc:35:1d:8d:ce:02:
5c:3c:08:b5:1c:6d:86:17:c7:5d:98:e9:d0:31:56:
40:4c:86:01:14:ee:72:94:db:e4:3e:01:bf:be:23:
33:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:42:5D:56:78:85:3E:00:59:3B:D6:20:65:B4:73:40:F4:E3:F3:54
X509v3 Authority Key Identifier:
keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/6EJdVniFPgBZO9YgZbRzQPTj81Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.252.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:c3:8d:ac:1b:c5:92:a7:80:fb:3d:ad:e3:dd:83:31:31:6c:
f2:78:f3:44:40:ed:eb:ae:05:30:11:c1:2b:12:e5:b4:89:79:
3f:47:96:15:af:2e:32:65:74:e9:34:e9:3c:33:a4:85:49:bd:
a4:9a:89:98:3c:11:c2:9e:0e:07:20:e0:94:fa:a5:c8:b6:86:
dc:35:27:5b:95:1b:c0:95:d8:2a:1a:de:4e:e8:4f:a2:70:cd:
9b:6d:da:72:c1:ed:56:aa:52:ee:bd:13:1d:09:42:a3:05:84:
83:d9:86:46:b0:e5:28:f3:0e:5e:6e:fc:62:23:92:12:b4:e1:
3a:b8:51:7a:7b:f3:21:8a:3d:42:34:8f:2e:0c:3b:be:34:2e:
b2:6e:0c:e8:35:f6:68:70:53:0b:ff:de:ae:81:bb:0b:29:b5:
08:10:d2:d9:ae:95:3c:74:a9:4d:bd:6b:5f:1e:93:89:f5:7a:
03:ad:c3:fa:af:d9:fb:d4:62:33:36:72:9b:98:24:3f:6b:49:
18:bf:80:c4:01:2d:ef:fc:ee:3c:7b:7f:b9:49:83:e8:98:68:
88:52:e4:fe:03:a6:92:08:b5:51:12:a4:b9:47:2b:58:59:e4:
fa:0a:d8:ba:11:68:fe:64:96:21:b4:58:41:97:c2:ed:5e:a9:
88:01:e6:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSlZE56fC7AsnceT2kvLOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxOWYwNzY2OWU1OGVjMzJiOWQ5MTMyZTJjYTZkMTljMmU5
NDkzNjAwHhcNMjQwMTAxMTgzMDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODQyNWQ1Njc4ODUzZTAwNTkzYmQ2MjA2NWI0NzM0MGY0ZTNmMzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCUt05GHQXb/mb7kcg78kKGmKtpS
5SrnrYftqRI/6HoFhvVbGateEKGV+vmh1C/QCP9WVo/LTOVnPMGIHAXXLPrhQ9cY
FJYQsmZ+dHawxr5e9Yi7nhFDr14899L+SMx0HUwHOVKVpJh9kqZlqTP8RD2CnoqA
EGLXYW4BRB3tXACpu+bfTQMvQU87QviHBXpq4l+BWizr+3GlbDrbfA5c2Y8kdAEy
UtYNZk9UIZCCEg26ADh2stVs6PWv0V+61OgMTjxQdZbrH46mMQQNp2GrAEY40z/g
umP/guTcNR2NzgJcPAi1HG2GF8ddmOnQMVZATIYBFO5ylNvkPgG/viMzTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOhCXVZ4hT4AWTvWIGW0c0D04/NUMB8GA1UdIwQY
MBaAFLGfB2aeWOwyudkTLiym0ZwulJNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMt
NjQxZGQ0Mjg4YzQwLzEvNkVKZFZuaUZQZ0JaTzlZZ1piUnpRUFRqODFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMtNjQxZGQ0Mjg4YzQw
LzEvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY38MA0G
CSqGSIb3DQEBCwUAA4IBAQCrw42sG8WSp4D7Pa3j3YMxMWzyePNEQO3rrgUwEcEr
EuW0iXk/R5YVry4yZXTpNOk8M6SFSb2kmomYPBHCng4HIOCU+qXItobcNSdblRvA
ldgqGt5O6E+icM2bbdpywe1WqlLuvRMdCUKjBYSD2YZGsOUo8w5ebvxiI5IStOE6
uFF6e/Mhij1CNI8uDDu+NC6ybgzoNfZocFML/96ugbsLKbUIENLZrpU8dKlNvWtf
HpOJ9XoDrcP6r9n71GIzNnKbmCQ/a0kYv4DEAS3v/O48e3+5SYPomGiIUuT+A6aS
CLVREqS5RytYWeT6Cti6EWj+ZJYhtFhBl8LtXqmIAeYB
-----END CERTIFICATE-----
Generated at Thu May 16 23:14:28 2024 by rpki-client on console-fra.rpki-client.org