Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/l4qtzTtMCwn6NB3bmaJvZuIGvYo.roa
File: l4qtzTtMCwn6NB3bmaJvZuIGvYo.roa (raw, json)
Hash identifier: wi9Z32zqTqWfFxQoXPsPPmb/gVTS14d9XjYowkVQ08o=
Subject key identifier: 97:8A:AD:CD:3B:4C:0B:09:FA:34:1D:DB:99:A2:6F:66:E2:06:BD:8A
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 018CC56EA49A00F61D8112886D59C5221BD4
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/l4qtzTtMCwn6NB3bmaJvZuIGvYo.roa
Signing time: Mon 01 Jan 2024 14:30:11 +0000
ROA not before: Mon 01 Jan 2024 14:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201782
IP address blocks: 185.229.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:a4:9a:00:f6:1d:81:12:88:6d:59:c5:22:1b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Jan 1 14:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=978aadcd3b4c0b09fa341ddb99a26f66e206bd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:9a:69:38:69:f1:d0:3f:a5:3f:24:d1:c4:
c4:cb:2d:fc:74:16:9b:60:b3:e2:49:f1:89:e0:f2:
cc:18:59:e5:81:9b:8a:9e:aa:bb:0c:bc:b3:ca:c1:
a0:53:c8:8c:5d:63:be:ea:58:30:b9:aa:99:4a:54:
24:75:ea:3b:d7:c7:55:00:7b:9a:3a:ff:31:40:f7:
ad:a2:69:7e:24:05:79:4e:56:88:9e:53:a6:8a:46:
a8:19:56:e1:6b:d6:8e:f4:55:45:ed:34:19:ca:b3:
6e:04:7e:a4:d5:35:12:b0:fd:79:c1:22:8e:e1:17:
16:37:23:f4:b2:42:29:df:0f:e5:04:d5:3a:b1:c9:
fc:f0:40:21:90:a8:5e:c1:62:b6:16:ae:3f:7c:21:
a3:9c:13:44:22:ac:6a:5e:f9:54:d2:b2:7b:aa:9a:
0a:86:2c:66:82:57:34:7b:ca:06:2c:49:91:7c:eb:
8b:8e:9d:df:95:14:20:53:6e:f3:2e:84:90:02:47:
e7:c3:f2:b8:2a:74:38:ae:19:4a:18:9b:11:55:82:
ab:d1:f8:b0:c7:c0:a2:b6:41:b8:aa:8f:88:46:9a:
f6:d5:b7:97:e9:1a:41:41:1f:21:51:f6:bb:2a:1d:
71:55:4f:b1:9f:12:29:e9:1c:5e:8b:7e:38:89:49:
5d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8A:AD:CD:3B:4C:0B:09:FA:34:1D:DB:99:A2:6F:66:E2:06:BD:8A
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/l4qtzTtMCwn6NB3bmaJvZuIGvYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.60.0/22
Signature Algorithm: sha256WithRSAEncryption
88:9b:69:55:cb:be:f5:0a:11:31:4d:7c:6e:16:4a:26:1c:94:
3e:23:af:cb:14:07:3b:51:eb:72:8f:b0:bd:9b:2a:e2:6c:16:
a1:9c:7a:b4:71:71:42:cd:52:90:48:f6:2b:7a:84:3b:06:c2:
4c:f7:04:cd:fc:25:5d:ba:4e:6f:79:cf:42:27:e4:16:bd:b5:
10:89:3e:d9:9d:40:1b:a0:f3:10:67:ac:62:ce:47:47:e7:0f:
5d:1c:11:79:f6:be:4d:3c:9e:a5:6a:38:d8:df:3e:a6:1f:d6:
44:63:ba:55:a1:d3:05:70:5c:d0:17:91:33:f4:43:27:f9:8a:
e0:32:ec:43:bf:e3:fe:ed:a1:8b:1f:0e:77:32:87:d9:3b:1c:
19:7f:bd:08:a2:9c:73:37:40:98:ea:f2:a7:26:d4:c7:a3:12:
e9:22:d9:6b:85:5b:d0:9d:b2:db:7e:62:17:70:b4:43:13:1f:
0a:2e:3a:6e:7c:f2:a0:f9:2e:06:f4:e6:f7:7f:93:04:cb:42:
fb:f1:ff:69:10:c5:41:df:e5:da:0b:83:bd:ba:49:fe:37:95:
04:93:0a:a7:eb:10:b9:38:49:06:49:9f:68:33:b8:a4:a5:35:
8c:0d:eb:31:38:dd:c1:03:44:d4:a7:58:4a:5b:5f:88:01:f6:
99:3c:51:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbqSaAPYdgRKIbVnFIhvUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3M2UzMjc4YmFhMjQ5YzE0ZGU2MDVkYzk2NGIyYzI3NTVk
ZmVjZmEwHhcNMjQwMTAxMTQzMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzhhYWRjZDNiNGMwYjA5ZmEzNDFkZGI5OWEyNmY2NmUyMDZiZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkCaaThp8dA/pT8k0cTEyy38dBab
YLPiSfGJ4PLMGFnlgZuKnqq7DLyzysGgU8iMXWO+6lgwuaqZSlQkdeo718dVAHua
Ov8xQPetoml+JAV5TlaInlOmikaoGVbha9aO9FVF7TQZyrNuBH6k1TUSsP15wSKO
4RcWNyP0skIp3w/lBNU6scn88EAhkKhewWK2Fq4/fCGjnBNEIqxqXvlU0rJ7qpoK
hixmglc0e8oGLEmRfOuLjp3flRQgU27zLoSQAkfnw/K4KnQ4rhlKGJsRVYKr0fiw
x8CitkG4qo+IRpr21beX6RpBQR8hUfa7Kh1xVU+xnxIp6Rxei344iUldtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJeKrc07TAsJ+jQd25mib2biBr2KMB8GA1UdIwQY
MBaAFHc+Mni6oknBTeYF3JZLLCdV3+z6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MmVjNDYtZWI4NC00NzVhLWE0Nzgt
MWYxNGVjODA1MzkwLzEvbDRxdHpUdE1Dd242TkIzYm1hSnZadUlHdllvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MmVjNDYtZWI4NC00NzVhLWE0NzgtMWYxNGVjODA1Mzkw
LzEvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueU8MA0G
CSqGSIb3DQEBCwUAA4IBAQCIm2lVy771ChExTXxuFkomHJQ+I6/LFAc7Uetyj7C9
myribBahnHq0cXFCzVKQSPYreoQ7BsJM9wTN/CVduk5vec9CJ+QWvbUQiT7ZnUAb
oPMQZ6xizkdH5w9dHBF59r5NPJ6lajjY3z6mH9ZEY7pVodMFcFzQF5Ez9EMn+Yrg
MuxDv+P+7aGLHw53MofZOxwZf70IopxzN0CY6vKnJtTHoxLpItlrhVvQnbLbfmIX
cLRDEx8KLjpufPKg+S4G9Ob3f5MEy0L78f9pEMVB3+XaC4O9ukn+N5UEkwqn6xC5
OEkGSZ9oM7ikpTWMDesxON3BA0TUp1hKW1+IAfaZPFH2
-----END CERTIFICATE-----
Generated at Sun Jun 23 00:58:18 2024 by rpki-client on console-fra.rpki-client.org