Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/7oP-KwcW6HL5dsy0Qt2uHCmlNrw.roa
File: 7oP-KwcW6HL5dsy0Qt2uHCmlNrw.roa (raw, json)
Hash identifier: NtjbpOGx9I1qw6nUh+lDxj28zLIaPjp2WT2BhA/rO0s=
Subject key identifier: EE:83:FE:2B:07:16:E8:72:F9:76:CC:B4:42:DD:AE:1C:29:A5:36:BC
Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111
Certificate serial: 018CC5014ACF8BA2FE816109C94D5CD5CEE1
Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/7oP-KwcW6HL5dsy0Qt2uHCmlNrw.roa
Signing time: Mon 01 Jan 2024 12:30:45 +0000
ROA not before: Mon 01 Jan 2024 12:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32475
IP address blocks: 185.225.236.0/22 maxlen: 24
185.197.131.0/24 maxlen: 24
185.197.129.0/24 maxlen: 24
185.197.130.0/24 maxlen: 24
185.197.128.0/24 maxlen: 24
2a04:f280::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4a:cf:8b:a2:fe:81:61:09:c9:4d:5c:d5:ce:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111
Validity
Not Before: Jan 1 12:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee83fe2b0716e872f976ccb442ddae1c29a536bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cd:e4:f9:21:87:5b:9b:5a:ed:de:14:74:f2:
dd:0a:25:36:e4:c2:85:8a:89:18:eb:1b:29:b5:17:
a9:d5:26:da:4d:9f:07:e2:e8:72:26:21:fa:8d:17:
20:86:90:3b:56:ca:b8:dc:d8:b5:28:8b:8e:a7:95:
5c:c2:b4:2e:3b:a1:18:8f:fa:bb:e1:fb:a2:70:c3:
b3:2b:27:f3:51:80:6b:74:68:12:4b:93:a4:37:44:
de:09:e5:76:6f:82:aa:18:be:2e:c5:8c:9b:e8:55:
1d:e1:36:5c:a6:59:c4:5f:9f:7f:0f:46:5b:d5:dd:
30:1e:e3:d3:f3:2a:69:68:be:dc:90:95:5f:05:5d:
c1:0b:59:a4:c1:cc:76:47:c5:ef:22:72:0e:55:14:
1b:bf:aa:85:19:58:d0:2d:f4:97:d3:99:19:00:9a:
97:f6:e9:e9:00:f1:1d:f8:64:de:ee:6b:19:f2:b2:
1b:3c:c8:6b:da:a8:44:8b:ba:b2:fa:53:da:e9:dd:
2f:b0:65:1c:d0:eb:18:d7:de:9b:6e:bd:3f:bc:46:
30:54:82:86:dd:ca:67:97:05:74:a1:a9:ed:15:cf:
8d:93:71:be:d2:26:53:66:b4:ba:f1:f0:84:13:f2:
0b:bb:38:a4:34:c9:d5:9e:f6:f8:3d:d7:c2:b9:91:
92:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:83:FE:2B:07:16:E8:72:F9:76:CC:B4:42:DD:AE:1C:29:A5:36:BC
X509v3 Authority Key Identifier:
keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/7oP-KwcW6HL5dsy0Qt2uHCmlNrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.128.0/22
185.225.236.0/22
IPv6:
2a04:f280::/40
Signature Algorithm: sha256WithRSAEncryption
8c:fa:02:e0:df:dd:5f:26:1d:07:64:c0:53:c9:8b:88:74:34:
43:4f:f5:30:bc:71:89:62:30:88:19:bd:e0:82:65:34:f3:2a:
e4:93:2b:d4:ce:51:ac:8f:05:32:4e:c7:16:26:6c:c7:94:ab:
b9:6f:fc:0e:a7:20:45:cb:53:87:ad:5d:5c:e0:f5:08:7c:b5:
93:86:2d:30:e4:1e:be:99:ce:83:f8:41:b4:75:8b:80:32:5e:
58:47:7c:e4:d0:b0:32:4d:92:fc:ce:d4:21:17:bc:d3:82:4c:
b9:ca:65:62:52:3d:70:c3:7d:f6:b6:60:84:fd:01:28:ec:12:
35:2d:38:7e:61:40:6b:ba:16:e1:d0:5c:da:ac:77:77:1a:8b:
06:d7:61:18:64:5b:50:39:41:49:21:21:ea:02:91:72:39:58:
0f:b3:66:ba:fd:f3:83:54:d3:e2:29:b0:15:b8:b3:8b:40:89:
7d:86:82:0a:f6:4a:73:b0:bf:1f:c7:af:e0:d8:be:41:1e:23:
92:94:95:71:d2:4f:1c:1e:df:d6:ba:70:97:9d:5b:57:30:f2:
19:a9:30:84:59:e8:b8:57:8e:eb:72:66:ee:b9:88:71:13:36:
60:c8:e8:5f:4d:9b:69:3d:a3:68:a0:ae:72:e4:cd:ae:13:70:
2f:45:c3:3a
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYzFAUrPi6L+gWEJyU1c1c7hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkODhlYjczMGFiMWE1MDFlYTM2ZWEzNDgyZDc2NDU0NGUx
NDExMTEwHhcNMjQwMTAxMTIzMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTgzZmUyYjA3MTZlODcyZjk3NmNjYjQ0MmRkYWUxYzI5YTUzNmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1c3k+SGHW5ta7d4UdPLdCiU25MKF
iokY6xsptRep1SbaTZ8H4uhyJiH6jRcghpA7Vsq43Ni1KIuOp5VcwrQuO6EYj/q7
4fuicMOzKyfzUYBrdGgSS5OkN0TeCeV2b4KqGL4uxYyb6FUd4TZcplnEX59/D0Zb
1d0wHuPT8yppaL7ckJVfBV3BC1mkwcx2R8XvInIOVRQbv6qFGVjQLfSX05kZAJqX
9unpAPEd+GTe7msZ8rIbPMhr2qhEi7qy+lPa6d0vsGUc0OsY196bbr0/vEYwVIKG
3cpnlwV0oantFc+Nk3G+0iZTZrS68fCEE/ILuzikNMnVnvb4PdfCuZGSCQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFO6D/isHFuhy+XbMtELdrhwppTa8MB8GA1UdIwQY
MBaAFE2I63MKsaUB6jbqNILXZFROFBERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQt
NzI2ZjgzZDIzODkyLzEvN29QLUt3Y1c2SEw1ZHN5MFF0MnVIQ21sTnJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQtNzI2ZjgzZDIzODky
LzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQCucWAAwQC
ueHsMA4EAgACMAgDBgAqBPKAADANBgkqhkiG9w0BAQsFAAOCAQEAjPoC4N/dXyYd
B2TAU8mLiHQ0Q0/1MLxxiWIwiBm94IJlNPMq5JMr1M5RrI8FMk7HFiZsx5SruW/8
DqcgRctTh61dXOD1CHy1k4YtMOQevpnOg/hBtHWLgDJeWEd85NCwMk2S/M7UIRe8
04JMucplYlI9cMN99rZghP0BKOwSNS04fmFAa7oW4dBc2qx3dxqLBtdhGGRbUDlB
SSEh6gKRcjlYD7Nmuv3zg1TT4imwFbizi0CJfYaCCvZKc7C/H8ev4Ni+QR4jkpSV
cdJPHB7f1rpwl51bVzDyGakwhFnouFeO63Jm7rmIcRM2YMjoX02baT2jaKCucuTN
rhNwL0XDOg==
-----END CERTIFICATE-----
Generated at Fri May 17 08:38:18 2024 by rpki-client on console-fra.rpki-client.org