Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/b_Z98cIMEfgVkkjg_sEGH6olHKE.roa
File: b_Z98cIMEfgVkkjg_sEGH6olHKE.roa (raw, json)
Hash identifier: yv24A+EwcekxiDpzWo+ZFR3e/2FT8L/gKZYcCHUXcPs=
Subject key identifier: 6F:F6:7D:F1:C2:0C:11:F8:15:92:48:E0:FE:C1:06:1F:AA:25:1C:A1
Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial: 018CC4930242E2F950BDE9D45BE9FBD4B248
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/b_Z98cIMEfgVkkjg_sEGH6olHKE.roa
Signing time: Mon 01 Jan 2024 10:30:17 +0000
ROA not before: Mon 01 Jan 2024 10:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34984
IP address blocks: 185.195.228.0/24 maxlen: 24
185.195.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:02:42:e2:f9:50:bd:e9:d4:5b:e9:fb:d4:b2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Validity
Not Before: Jan 1 10:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ff67df1c20c11f8159248e0fec1061faa251ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:05:a0:42:31:fd:fc:0a:c7:3d:16:1c:3e:
05:78:2d:bf:ba:9e:c9:a3:ef:6d:4a:9c:a6:00:b5:
a8:7f:06:a4:42:84:22:98:aa:d5:44:f1:1c:37:35:
a5:aa:53:75:5a:9c:28:d9:10:89:9f:fa:7a:a6:3d:
6c:12:82:20:90:df:84:06:ee:ae:ca:4d:5d:fd:cd:
ae:b8:a7:94:72:07:f8:b7:75:f7:4f:21:0e:95:20:
42:c3:a0:37:d7:08:f2:8a:93:4a:66:af:b9:57:f6:
0b:f3:6a:25:40:81:8b:3c:f7:a9:7a:55:f3:e2:e6:
8b:f7:25:0d:0f:28:cc:3e:bc:e2:7c:e0:37:8b:8a:
54:9b:10:94:1d:34:cb:99:11:8a:32:f6:4c:49:c9:
a5:c8:19:b2:3a:0b:95:ae:8f:42:1c:34:95:86:55:
4c:b4:f2:41:0f:82:7c:f6:3f:e0:42:4b:df:88:db:
ea:c5:1a:d7:ab:0f:d7:65:f2:ea:7f:ae:5b:f6:07:
be:ca:e2:9b:f1:70:58:1a:25:c6:ad:c0:a7:63:14:
4b:de:a5:b5:c7:43:58:20:3c:f3:0c:b3:c5:db:54:
e8:50:5f:8e:44:04:15:fd:af:0a:57:76:ed:bb:b3:
e7:55:d7:87:34:ab:7d:2a:f9:c4:cf:4e:94:d8:d7:
e1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F6:7D:F1:C2:0C:11:F8:15:92:48:E0:FE:C1:06:1F:AA:25:1C:A1
X509v3 Authority Key Identifier:
keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/b_Z98cIMEfgVkkjg_sEGH6olHKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.228.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:67:ea:e1:30:4b:ff:d2:7d:97:a5:c3:bb:e3:6b:b2:b7:41:
14:63:99:fb:d9:34:37:ce:2e:3c:c3:c7:d9:1f:fc:21:45:ad:
92:38:db:a3:d1:0b:c9:57:6e:ba:fe:4a:0e:18:51:b8:24:a5:
ec:34:c5:93:95:23:c2:bd:bc:75:86:a9:e9:da:6e:d5:52:67:
9b:c7:8b:98:f2:25:57:15:e3:1f:d2:68:b3:a9:4c:b2:3e:f7:
47:8c:06:e4:7b:50:4f:61:70:9d:ff:7b:78:af:83:24:d8:1e:
37:cd:55:1c:78:ab:e5:1b:43:82:4a:07:1e:d8:89:9d:d2:20:
82:7a:b2:b0:a5:5c:c9:7e:bd:ec:91:45:b7:2b:34:ea:87:b3:
c4:95:ab:6b:26:e3:41:35:8f:72:ff:91:0c:dd:a6:ac:e9:cd:
65:f1:58:d6:0c:25:97:b1:a6:09:d5:f1:ad:79:a4:86:fc:66:
4d:69:4e:76:9f:66:ac:5f:76:33:ac:07:02:82:8c:37:78:8b:
fd:af:7f:2e:53:2c:45:1a:7e:a8:e9:72:77:eb:c8:22:60:00:
97:9a:9f:5f:5b:3e:71:bc:b0:ad:57:c6:57:17:f1:79:ba:45:
60:2c:79:9e:da:df:a6:42:48:87:40:67:e6:35:4c:5e:a6:d6:
d3:94:a7:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkwJC4vlQvenUW+n71LJIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhODM0ZGYxZGFmYTdmZTZlYWQzNjBiM2VlNzVhMjkzMWFm
MWZmZTkwHhcNMjQwMTAxMTAzMDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmY2N2RmMWMyMGMxMWY4MTU5MjQ4ZTBmZWMxMDYxZmFhMjUxY2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p0FoEIx/fwKxz0WHD4FeC2/up7J
o+9tSpymALWofwakQoQimKrVRPEcNzWlqlN1Wpwo2RCJn/p6pj1sEoIgkN+EBu6u
yk1d/c2uuKeUcgf4t3X3TyEOlSBCw6A31wjyipNKZq+5V/YL82olQIGLPPepelXz
4uaL9yUNDyjMPrzifOA3i4pUmxCUHTTLmRGKMvZMScmlyBmyOguVro9CHDSVhlVM
tPJBD4J89j/gQkvfiNvqxRrXqw/XZfLqf65b9ge+yuKb8XBYGiXGrcCnYxRL3qW1
x0NYIDzzDLPF21ToUF+ORAQV/a8KV3btu7PnVdeHNKt9KvnEz06U2NfhuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG/2ffHCDBH4FZJI4P7BBh+qJRyhMB8GA1UdIwQY
MBaAFNqDTfHa+n/m6tNgs+51opMa8f/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUt
MDc1ZGM0NjA0YWVmLzEvYl9aOThjSU1FZmdWa2tqZ19zRUdINm9sSEtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUtMDc1ZGM0NjA0YWVm
LzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucPkMA0G
CSqGSIb3DQEBCwUAA4IBAQAaZ+rhMEv/0n2XpcO742uyt0EUY5n72TQ3zi48w8fZ
H/whRa2SONuj0QvJV266/koOGFG4JKXsNMWTlSPCvbx1hqnp2m7VUmebx4uY8iVX
FeMf0mizqUyyPvdHjAbke1BPYXCd/3t4r4Mk2B43zVUceKvlG0OCSgce2Imd0iCC
erKwpVzJfr3skUW3KzTqh7PElatrJuNBNY9y/5EM3aas6c1l8VjWDCWXsaYJ1fGt
eaSG/GZNaU52n2asX3YzrAcCgow3eIv9r38uUyxFGn6o6XJ368giYACXmp9fWz5x
vLCtV8ZXF/F5ukVgLHme2t+mQkiHQGfmNUxeptbTlKcz
-----END CERTIFICATE-----
Generated at Thu May 30 17:39:53 2024 by rpki-client on console-fra.rpki-client.org