Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/0vc4YqJtT7Mk62B6ct_66D1OP4E.roa
File: 0vc4YqJtT7Mk62B6ct_66D1OP4E.roa (raw, json)
Hash identifier: fQ2xrh9CLc9S9OJUsncgw1uF6dJ6YyyYoHMMLrpUXJ8=
Subject key identifier: D2:F7:38:62:A2:6D:4F:B3:24:EB:60:7A:72:DF:FA:E8:3D:4E:3F:81
Certificate issuer: /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial: 018CC56E4726FF239041FC4CD425604BFC1A
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/0vc4YqJtT7Mk62B6ct_66D1OP4E.roa
Signing time: Mon 01 Jan 2024 14:29:47 +0000
ROA not before: Mon 01 Jan 2024 14:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49434
IP address blocks: 185.198.20.0/23 maxlen: 23
185.198.20.0/22 maxlen: 22
2a13:bf80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:47:26:ff:23:90:41:fc:4c:d4:25:60:4b:fc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Validity
Not Before: Jan 1 14:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2f73862a26d4fb324eb607a72dffae83d4e3f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f9:6f:d2:c1:17:3d:16:3c:2f:fa:10:e5:2e:
23:d1:23:d6:7a:1a:65:e1:88:70:91:a7:25:ec:1e:
e1:b3:03:c4:d4:06:96:bd:a7:b1:19:e1:9b:28:b3:
67:5f:6f:d5:0c:ad:70:a6:01:51:54:d7:b4:cf:5c:
5a:85:d1:31:25:87:f8:e5:24:52:8a:e1:a7:b8:02:
82:e6:14:d0:d0:c0:01:6b:fc:a3:ae:63:f9:7a:c6:
5f:6a:70:4a:2d:c4:bb:b9:53:74:02:99:05:e5:c9:
0a:48:85:64:75:ca:39:1b:df:77:77:21:ae:52:54:
85:4c:b4:1c:92:67:10:4a:80:8b:ed:1a:b3:41:89:
2f:c3:58:54:8c:26:92:7b:96:68:b2:76:ef:02:35:
48:99:a5:73:d5:66:7c:4b:4a:0c:5a:1b:29:5d:83:
59:0c:32:50:98:5b:ee:43:46:46:26:b4:76:85:d9:
c3:2f:4a:b9:d8:be:6c:87:96:58:91:32:e5:a0:82:
99:b4:f1:3b:f2:36:96:f1:a7:7c:80:01:94:ce:bc:
c8:1e:c7:ca:ed:0e:d2:c1:26:ad:50:eb:b0:44:b7:
17:8c:ad:01:b4:8d:8f:8b:2d:c6:23:84:7c:f0:c2:
ed:bb:e0:d3:bf:11:cb:98:92:60:28:99:e5:42:eb:
bd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F7:38:62:A2:6D:4F:B3:24:EB:60:7A:72:DF:FA:E8:3D:4E:3F:81
X509v3 Authority Key Identifier:
keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/0vc4YqJtT7Mk62B6ct_66D1OP4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.20.0/22
IPv6:
2a13:bf80::/29
Signature Algorithm: sha256WithRSAEncryption
85:e1:7a:38:b4:c9:d1:8c:39:04:a1:7f:f1:03:50:17:b0:8e:
dd:04:6b:91:e5:7c:5f:44:4a:a5:f7:ba:a0:dc:b2:99:e0:52:
93:35:6e:81:90:10:d4:d9:65:77:9a:b7:16:ef:7f:b2:98:5a:
7d:3c:58:e7:06:00:4a:95:85:44:76:f6:8b:e0:4a:65:b5:fd:
55:80:89:ff:0c:cb:7a:fa:a3:e2:5b:63:05:0e:09:2b:b5:f3:
a7:a0:43:98:24:cb:fe:2f:17:72:07:2d:c4:bb:58:d4:88:72:
35:65:67:5f:27:fb:6e:f1:f7:89:2a:2a:a2:ae:18:5d:a2:60:
25:bf:2a:0e:77:93:28:a8:e8:37:68:42:05:fa:25:01:6b:ae:
9c:11:95:cd:1c:d2:a4:b0:4e:a9:a7:05:53:c2:94:b9:59:da:
fd:3e:39:de:40:b4:c4:9a:7d:5a:a7:1f:ed:d3:d3:3c:96:1e:
ed:9b:72:65:e8:e4:cc:82:79:c3:0c:cf:ab:3d:33:08:c4:25:
48:23:d7:42:36:93:e6:89:f3:20:a2:54:6d:c7:5c:90:8e:60:
b7:4d:90:18:67:f6:c7:9b:ac:a5:5e:e4:86:f0:85:24:3d:2d:
e6:6a:6f:f7:d2:bb:5e:5e:84:c5:3f:18:eb:46:87:44:2a:fd:
9c:4a:c0:07
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzFbkcm/yOQQfxM1CVgS/waMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZjJjZjFhNjIzMGNkNjJjYjNjYThhMWJjMWQ0YTRiYjQz
MzdjMWQwHhcNMjQwMTAxMTQyOTQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmY3Mzg2MmEyNmQ0ZmIzMjRlYjYwN2E3MmRmZmFlODNkNGUzZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiflv0sEXPRY8L/oQ5S4j0SPWehpl
4Yhwkacl7B7hswPE1AaWvaexGeGbKLNnX2/VDK1wpgFRVNe0z1xahdExJYf45SRS
iuGnuAKC5hTQ0MABa/yjrmP5esZfanBKLcS7uVN0ApkF5ckKSIVkdco5G993dyGu
UlSFTLQckmcQSoCL7RqzQYkvw1hUjCaSe5ZosnbvAjVImaVz1WZ8S0oMWhspXYNZ
DDJQmFvuQ0ZGJrR2hdnDL0q52L5sh5ZYkTLloIKZtPE78jaW8ad8gAGUzrzIHsfK
7Q7SwSatUOuwRLcXjK0BtI2Piy3GI4R88MLtu+DTvxHLmJJgKJnlQuu92QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNL3OGKibU+zJOtgenLf+ug9Tj+BMB8GA1UdIwQY
MBaAFB/yzxpiMM1iyzyoobwdSku0M3wdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSF9MUEdtSXd6V0xMUEtpaHZCMUtTN1F6ZkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82YTQ4YTctMGMwMS00YWNhLWI0MzEt
NmNlZGNmMjM0OTc1LzEvMHZjNFlxSnRUN01rNjJCNmN0XzY2RDFPUDRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS82YTQ4YTctMGMwMS00YWNhLWI0MzEtNmNlZGNmMjM0OTc1
LzEvSF9MUEdtSXd6V0xMUEtpaHZCMUtTN1F6ZkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucYUMA0E
AgACMAcDBQMqE7+AMA0GCSqGSIb3DQEBCwUAA4IBAQCF4Xo4tMnRjDkEoX/xA1AX
sI7dBGuR5XxfREql97qg3LKZ4FKTNW6BkBDU2WV3mrcW73+ymFp9PFjnBgBKlYVE
dvaL4Epltf1VgIn/DMt6+qPiW2MFDgkrtfOnoEOYJMv+LxdyBy3Eu1jUiHI1ZWdf
J/tu8feJKiqirhhdomAlvyoOd5MoqOg3aEIF+iUBa66cEZXNHNKksE6ppwVTwpS5
Wdr9PjneQLTEmn1apx/t09M8lh7tm3Jl6OTMgnnDDM+rPTMIxCVII9dCNpPmifMg
olRtx1yQjmC3TZAYZ/bHm6ylXuSG8IUkPS3mam/30rteXoTFPxjrRodEKv2cSsAH
-----END CERTIFICATE-----
Generated at Fri May 3 07:07:44 2024 by rpki-client on console-fra.rpki-client.org