Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/2mwX9KtX4bP1ptKghY4ptiE0Jsw.roa
File: 2mwX9KtX4bP1ptKghY4ptiE0Jsw.roa (raw, json)
Hash identifier: tOLx6WOfV9Mw0r20U6iATXGduVXtLjXOFhGO4LU7Pp4=
Subject key identifier: DA:6C:17:F4:AB:57:E1:B3:F5:A6:D2:A0:85:8E:29:B6:21:34:26:CC
Certificate issuer: /CN=7c772e1e26e6c23f40ad6668c85fe950da1063fc
Certificate serial: 018CC8DD3911422BE9DA705FAF39B7458F3F
Authority key identifier: 7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/2mwX9KtX4bP1ptKghY4ptiE0Jsw.roa
Signing time: Tue 02 Jan 2024 06:29:50 +0000
ROA not before: Tue 02 Jan 2024 06:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51301
IP address blocks: 185.135.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:39:11:42:2b:e9:da:70:5f:af:39:b7:45:8f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c772e1e26e6c23f40ad6668c85fe950da1063fc
Validity
Not Before: Jan 2 06:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da6c17f4ab57e1b3f5a6d2a0858e29b6213426cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:19:3a:85:9c:4d:a8:14:fa:0a:f1:43:eb:75:
76:5c:c9:08:f9:99:38:28:07:24:aa:45:30:e3:f9:
0a:14:8e:a8:85:60:c8:a6:05:5c:3e:c2:b4:38:83:
46:36:2b:93:bb:3a:19:d3:6e:0e:8f:c9:55:39:b1:
e6:c4:c2:cb:5d:9a:8d:20:dd:77:5c:63:fd:66:eb:
4f:45:0a:d5:47:8c:9c:88:f0:b0:1e:78:d0:26:14:
64:9e:76:a5:ee:42:34:2b:3b:cd:dc:03:6a:be:3e:
24:7e:c1:61:53:7e:e4:33:6c:b6:86:37:2a:fa:f0:
28:94:ef:60:0b:6a:16:a4:b1:8c:04:af:79:c2:b9:
e2:cb:26:03:8b:b0:ca:66:8b:2b:29:d7:f7:6a:ca:
73:a1:7c:d2:ad:47:99:31:b8:9e:ff:bc:ae:c7:5e:
d8:21:2e:3e:f7:61:d6:77:f5:2e:91:4b:d5:01:51:
b4:26:e0:f3:39:b3:76:d0:53:46:07:35:5d:33:4e:
4b:66:9a:f5:b1:a1:2f:a2:9e:2f:4c:e9:ad:4b:37:
9e:b3:79:ce:66:55:eb:61:7c:3f:37:8e:25:7e:8b:
fd:53:d4:05:93:c7:08:46:94:d4:88:52:49:51:06:
32:d5:88:2d:26:8f:71:30:aa:5c:80:40:15:bf:ac:
d0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6C:17:F4:AB:57:E1:B3:F5:A6:D2:A0:85:8E:29:B6:21:34:26:CC
X509v3 Authority Key Identifier:
keyid:7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/2mwX9KtX4bP1ptKghY4ptiE0Jsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.188.0/24
Signature Algorithm: sha256WithRSAEncryption
33:57:ee:ad:c5:57:59:ca:c9:ef:2f:93:96:e7:f4:f5:ac:32:
8f:e3:7f:d0:c8:c6:a8:34:bc:37:7f:31:5e:04:82:cd:7c:9f:
b6:d4:95:54:47:97:b5:75:5d:90:f1:75:6e:fd:df:6e:34:2e:
76:09:06:7d:41:59:c0:cd:9f:dc:a3:d1:0f:9a:33:ef:43:dc:
25:fd:5b:ca:6a:31:7c:c9:c4:6f:90:20:b9:be:ba:03:ce:c0:
27:0f:9c:f1:49:ae:c3:f8:f1:19:1a:b7:56:5d:86:04:cb:16:
7b:84:bd:93:9d:29:40:14:e2:01:c3:d1:77:37:46:d3:ee:2a:
65:9a:c6:7f:24:c2:ac:5b:61:01:82:66:f2:80:c9:d4:62:f4:
db:2c:ef:69:07:ac:5d:b6:da:8e:bf:72:e6:6f:b9:85:52:26:
0d:b7:1e:e1:7d:10:80:25:f8:ab:08:33:25:8d:da:df:6f:2c:
88:5e:58:83:3f:ea:b1:78:d4:c2:03:35:4b:d0:7d:35:ad:24:
f1:fe:ae:69:2c:9c:d1:68:c3:8d:da:73:66:02:5c:8a:21:35:
db:8c:9e:9b:29:df:79:be:72:19:57:96:c4:94:2e:3d:2b:38:
a3:21:78:68:62:88:09:1e:8b:94:6b:c6:f8:dc:3c:0d:9c:8c:
02:5f:a8:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3TkRQivp2nBfrzm3RY8/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNzcyZTFlMjZlNmMyM2Y0MGFkNjY2OGM4NWZlOTUwZGEx
MDYzZmMwHhcNMjQwMTAyMDYyOTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTZjMTdmNGFiNTdlMWIzZjVhNmQyYTA4NThlMjliNjIxMzQyNmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBk6hZxNqBT6CvFD63V2XMkI+Zk4
KAckqkUw4/kKFI6ohWDIpgVcPsK0OINGNiuTuzoZ024Oj8lVObHmxMLLXZqNIN13
XGP9ZutPRQrVR4yciPCwHnjQJhRknnal7kI0KzvN3ANqvj4kfsFhU37kM2y2hjcq
+vAolO9gC2oWpLGMBK95wrniyyYDi7DKZosrKdf3aspzoXzSrUeZMbie/7yux17Y
IS4+92HWd/UukUvVAVG0JuDzObN20FNGBzVdM05LZpr1saEvop4vTOmtSzees3nO
ZlXrYXw/N44lfov9U9QFk8cIRpTUiFJJUQYy1YgtJo9xMKpcgEAVv6zQZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNpsF/SrV+Gz9abSoIWOKbYhNCbMMB8GA1UdIwQY
MBaAFHx3Lh4m5sI/QK1maMhf6VDaEGP8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkhjdUhpYm13ajlBcldab3lGX3BVTm9RWV93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wMzczMWQtNGFiMC00OTgxLThhM2Et
MjNjNDdlOTUzNWU3LzEvMm13WDlLdFg0YlAxcHRLZ2hZNHB0aUUwSnN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8wMzczMWQtNGFiMC00OTgxLThhM2EtMjNjNDdlOTUzNWU3
LzEvZkhjdUhpYm13ajlBcldab3lGX3BVTm9RWV93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYe8MA0G
CSqGSIb3DQEBCwUAA4IBAQAzV+6txVdZysnvL5OW5/T1rDKP43/QyMaoNLw3fzFe
BILNfJ+21JVUR5e1dV2Q8XVu/d9uNC52CQZ9QVnAzZ/co9EPmjPvQ9wl/VvKajF8
ycRvkCC5vroDzsAnD5zxSa7D+PEZGrdWXYYEyxZ7hL2TnSlAFOIBw9F3N0bT7ipl
msZ/JMKsW2EBgmbygMnUYvTbLO9pB6xdttqOv3Lmb7mFUiYNtx7hfRCAJfirCDMl
jdrfbyyIXliDP+qxeNTCAzVL0H01rSTx/q5pLJzRaMON2nNmAlyKITXbjJ6bKd95
vnIZV5bElC49KzijIXhoYogJHouUa8b43DwNnIwCX6gm
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:07:16 2024 by rpki-client on console-fra.rpki-client.org