Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/tm7OMllPB99z21Nw2of0u4KmnBQ.roa
File: tm7OMllPB99z21Nw2of0u4KmnBQ.roa (raw, json)
Hash identifier: DbWvxZ2iD6J2ew+KrKCe06zq9jb30PBy4V9riYi4KpI=
Subject key identifier: B6:6E:CE:32:59:4F:07:DF:73:DB:53:70:DA:87:F4:BB:82:A6:9C:14
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 01903465A2E6D1246BD5BC2405DA351A19EB
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/tm7OMllPB99z21Nw2of0u4KmnBQ.roa
Signing time: Thu 20 Jun 2024 06:46:34 +0000
ROA not before: Thu 20 Jun 2024 06:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7545
IP address blocks: 185.27.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:65:a2:e6:d1:24:6b:d5:bc:24:05:da:35:1a:19:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Jun 20 06:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b66ece32594f07df73db5370da87f4bb82a69c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8d:06:16:8c:6e:e8:12:e5:56:f1:68:4b:24:
ea:6b:ec:fc:a8:06:7b:f2:2a:03:b3:76:4c:98:ec:
ce:62:cc:28:0d:a5:9a:fc:c8:b3:e6:9d:df:8b:77:
41:64:bf:83:68:b3:5f:f8:9e:0b:9d:9f:3b:f8:65:
e5:5b:46:d2:f9:0d:c7:17:01:9f:22:df:eb:82:df:
ce:d0:7c:d5:67:8c:52:d4:aa:e6:2b:a4:c9:07:07:
36:7d:3a:a8:fa:bb:ee:83:fd:c5:18:42:85:2f:fb:
43:56:1c:c8:b8:1a:f9:18:6a:3e:69:be:0c:72:9b:
3f:1d:ef:4e:d8:06:1f:76:93:38:d7:76:b2:d3:e2:
8f:f6:fe:6e:7a:18:d3:f0:9b:9f:fb:2b:bf:28:52:
37:05:0b:ae:f3:63:00:71:b7:49:9c:5f:fc:98:d5:
f9:1b:5f:b3:62:a5:b9:1d:d0:23:87:10:16:15:49:
6e:33:1e:72:6a:3c:e5:61:d5:02:ac:1d:93:60:62:
58:03:2a:32:cd:35:4b:d0:2a:4c:18:28:42:7b:3a:
15:73:60:7e:f0:57:93:25:74:29:28:48:43:9f:1b:
fd:89:81:94:a9:dc:fa:5c:f0:50:88:62:4f:71:f6:
99:c2:11:e6:d8:34:86:e7:40:49:e7:4e:ad:5a:01:
fa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6E:CE:32:59:4F:07:DF:73:DB:53:70:DA:87:F4:BB:82:A6:9C:14
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/tm7OMllPB99z21Nw2of0u4KmnBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.228.0/24
Signature Algorithm: sha256WithRSAEncryption
57:7d:f9:bf:1c:90:fb:ca:e1:4a:e2:2f:27:94:dc:2c:d6:6e:
7f:44:9a:40:a2:53:85:43:fe:6c:e4:d5:6c:95:8d:0e:b5:05:
28:ab:77:7e:81:fd:2b:61:3a:fb:ef:5f:f3:ce:52:a0:f1:38:
a2:ab:e6:ed:f4:6d:72:93:cc:8c:44:d2:8e:f3:e8:b2:49:20:
e4:cf:f3:7d:09:62:5e:c6:a6:53:10:94:bb:87:f2:ee:11:e0:
04:a5:04:f4:49:d3:63:e2:85:ee:c6:cc:dd:cf:53:97:3c:30:
ae:f3:d3:42:67:38:48:e5:e3:44:0b:1a:45:f2:b8:ff:49:4c:
1b:d3:db:4e:f4:78:ac:69:11:35:5f:be:d4:10:2e:eb:1b:f9:
55:56:8b:5a:98:bc:50:56:10:81:41:b9:a6:3a:90:b9:6f:ab:
6d:6e:98:4c:5d:24:7e:96:e5:be:bf:5e:90:a8:c0:31:08:41:
42:ed:17:57:85:68:0d:4a:e9:1f:1a:70:6f:b0:69:dc:b9:e7:
7a:1d:42:2b:c8:68:da:d8:d9:b2:59:16:ee:b6:e5:02:8f:74:
a8:6e:71:c8:80:26:95:cc:4e:be:b6:9b:ff:91:cb:1a:70:ad:
0a:03:f1:bd:24:16:60:7c:2d:7b:49:91:ae:57:7f:50:8a:ab:
b4:5e:f3:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZA0ZaLm0SRr1bwkBdo1GhnrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5
ZDcwNmEwHhcNMjQwNjIwMDY0NjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjZlY2UzMjU5NGYwN2RmNzNkYjUzNzBkYTg3ZjRiYjgyYTY5YzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI0GFoxu6BLlVvFoSyTqa+z8qAZ7
8ioDs3ZMmOzOYswoDaWa/Miz5p3fi3dBZL+DaLNf+J4LnZ87+GXlW0bS+Q3HFwGf
It/rgt/O0HzVZ4xS1KrmK6TJBwc2fTqo+rvug/3FGEKFL/tDVhzIuBr5GGo+ab4M
cps/He9O2AYfdpM413ay0+KP9v5uehjT8Juf+yu/KFI3BQuu82MAcbdJnF/8mNX5
G1+zYqW5HdAjhxAWFUluMx5yajzlYdUCrB2TYGJYAyoyzTVL0CpMGChCezoVc2B+
8FeTJXQpKEhDnxv9iYGUqdz6XPBQiGJPcfaZwhHm2DSG50BJ506tWgH6PQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLZuzjJZTwffc9tTcNqH9LuCppwUMB8GA1UdIwQY
MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt
YjVkODg4YWRmZDM3LzEvdG03T01sbFBCOTl6MjFOdzJvZjB1NEttbkJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3
LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRvkMA0G
CSqGSIb3DQEBCwUAA4IBAQBXffm/HJD7yuFK4i8nlNws1m5/RJpAolOFQ/5s5NVs
lY0OtQUoq3d+gf0rYTr771/zzlKg8Tiiq+bt9G1yk8yMRNKO8+iySSDkz/N9CWJe
xqZTEJS7h/LuEeAEpQT0SdNj4oXuxszdz1OXPDCu89NCZzhI5eNECxpF8rj/SUwb
09tO9HisaRE1X77UEC7rG/lVVotamLxQVhCBQbmmOpC5b6ttbphMXSR+luW+v16Q
qMAxCEFC7RdXhWgNSukfGnBvsGncued6HUIryGja2NmyWRbutuUCj3SobnHIgCaV
zE6+tpv/kcsacK0KA/G9JBZgfC17SZGuV39Qiqu0XvMB
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:35:10 2024 by rpki-client on console-ams.rpki-client.org