Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/g5yCn0kcJ7ZgG2QP8f8avaiVrPc.roa
File: g5yCn0kcJ7ZgG2QP8f8avaiVrPc.roa (raw, json)
Hash identifier: kVAv+gbie8R3leAf4x8mtntUD4dy8ys0IIeQOIiq780=
Subject key identifier: 83:9C:82:9F:49:1C:27:B6:60:1B:64:0F:F1:FF:1A:BD:A8:95:AC:F7
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 018CC9BBC3C9470309A3FDF19387D62BA8F4
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/g5yCn0kcJ7ZgG2QP8f8avaiVrPc.roa
Signing time: Tue 02 Jan 2024 10:32:54 +0000
ROA not before: Tue 02 Jan 2024 10:32:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198203
IP address blocks: 185.157.209.0/24 maxlen: 24
185.157.210.0/24 maxlen: 24
185.157.211.0/24 maxlen: 24
185.157.208.0/24 maxlen: 24
2a03:afe1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:c3:c9:47:03:09:a3:fd:f1:93:87:d6:2b:a8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Jan 2 10:32:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=839c829f491c27b6601b640ff1ff1abda895acf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a9:4d:d3:8f:30:7f:ed:0b:b5:82:16:79:8b:
35:55:7a:bf:69:59:d1:da:b5:ea:5b:c9:bc:c1:9d:
a4:14:0a:d6:05:c4:23:57:3a:50:6a:39:d8:c2:02:
d0:82:fe:3d:55:fb:29:dd:b2:23:9a:33:fb:ef:2d:
c2:2c:41:6d:b4:48:a0:b8:df:d4:8f:59:a6:02:56:
4d:a1:bb:36:19:bc:2b:3b:18:05:5f:cb:1c:18:21:
8e:cd:f1:30:cf:e6:29:c2:c3:98:6e:c8:a5:59:b9:
ad:35:5d:26:4f:70:8d:32:c9:30:d6:9c:f1:26:8f:
c7:b0:4d:9d:8d:d4:6a:1f:b5:b0:33:b3:d0:9b:d3:
32:81:3b:1e:e4:d2:c2:e3:ec:63:27:fd:16:be:41:
e6:63:ea:09:84:04:60:7a:b7:b6:70:97:47:3a:a0:
a5:b7:45:90:ce:02:5d:1b:c2:9b:f2:68:33:31:9c:
28:d8:05:79:c4:09:54:bb:40:32:66:6d:5b:2c:cc:
eb:e1:64:71:be:e4:b8:f3:80:0f:7b:51:96:8c:38:
19:8f:0a:55:02:2e:47:9f:f8:9c:94:88:2d:4c:45:
b6:a5:5a:ba:42:35:9a:fe:ec:8a:4e:92:36:53:f3:
cc:54:d2:59:7b:7c:a9:49:53:6c:dd:54:af:74:d0:
31:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9C:82:9F:49:1C:27:B6:60:1B:64:0F:F1:FF:1A:BD:A8:95:AC:F7
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/g5yCn0kcJ7ZgG2QP8f8avaiVrPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.208.0/22
IPv6:
2a03:afe1::/32
Signature Algorithm: sha256WithRSAEncryption
2f:9b:77:6d:c7:7b:d6:24:6c:ab:b5:89:7b:a5:40:a2:bd:8e:
e1:51:8d:89:60:a7:65:5a:7c:9e:c8:5b:8d:5b:3e:70:af:68:
5b:d3:0f:91:a0:14:e1:cf:18:35:e8:bf:6f:5e:92:22:5a:89:
b9:f1:3e:2f:de:21:5a:e9:3b:fb:19:40:bc:3e:58:6c:e7:4e:
8a:50:61:63:70:b3:4c:dd:91:4d:b5:31:2c:37:4d:60:59:26:
2e:31:06:fc:45:69:0a:45:b8:ee:be:1d:8b:6e:fe:39:24:0b:
a3:d5:a7:e1:68:95:44:9f:44:4c:a4:20:a9:81:28:6b:5e:34:
23:79:77:f0:64:4b:07:2c:b8:b2:ad:e1:a9:7e:cc:eb:4f:01:
77:65:fe:11:17:0c:b7:ae:36:53:d0:a0:38:c0:7e:f6:78:20:
b6:02:cc:22:41:9a:11:d9:39:f2:33:5c:3a:c4:bd:2e:9b:a5:
79:c6:b3:4a:82:aa:40:71:24:c9:fa:9f:d1:c5:e8:96:d8:6d:
ce:19:3f:4a:97:b8:af:0e:75:d1:19:64:c3:02:9b:93:ca:cd:
61:0c:e3:c7:a2:89:09:c7:d5:30:ca:e3:f5:17:07:03:2b:0a:
0d:2e:e6:eb:92:78:d0:15:0c:ae:77:8b:06:32:e2:6c:14:ad:
dc:f4:67:55
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzJu8PJRwMJo/3xk4fWK6j0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMGYzOWUyY2FhZThlMmNmMTRiY2M0MWIyM2YzYzg2ZTFh
NzIwZjgwHhcNMjQwMTAyMTAzMjU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzljODI5ZjQ5MWMyN2I2NjAxYjY0MGZmMWZmMWFiZGE4OTVhY2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqlN048wf+0LtYIWeYs1VXq/aVnR
2rXqW8m8wZ2kFArWBcQjVzpQajnYwgLQgv49Vfsp3bIjmjP77y3CLEFttEiguN/U
j1mmAlZNobs2GbwrOxgFX8scGCGOzfEwz+YpwsOYbsilWbmtNV0mT3CNMskw1pzx
Jo/HsE2djdRqH7WwM7PQm9MygTse5NLC4+xjJ/0WvkHmY+oJhARgere2cJdHOqCl
t0WQzgJdG8Kb8mgzMZwo2AV5xAlUu0AyZm1bLMzr4WRxvuS484APe1GWjDgZjwpV
Ai5Hn/iclIgtTEW2pVq6QjWa/uyKTpI2U/PMVNJZe3ypSVNs3VSvdNAxZwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIOcgp9JHCe2YBtkD/H/Gr2olaz3MB8GA1UdIwQY
MBaAFE4POeLKro4s8UvMQbI/PIbhpyD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNWUzY2MtYzFjZC00ZDY4LWJlYzMt
MWIwOGY3ZjUwMTVkLzEvZzV5Q24wa2NKN1pnRzJRUDhmOGF2YWlWclBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kNWUzY2MtYzFjZC00ZDY4LWJlYzMtMWIwOGY3ZjUwMTVk
LzEvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZ3QMA0E
AgACMAcDBQAqA6/hMA0GCSqGSIb3DQEBCwUAA4IBAQAvm3dtx3vWJGyrtYl7pUCi
vY7hUY2JYKdlWnyeyFuNWz5wr2hb0w+RoBThzxg16L9vXpIiWom58T4v3iFa6Tv7
GUC8Plhs506KUGFjcLNM3ZFNtTEsN01gWSYuMQb8RWkKRbjuvh2Lbv45JAuj1afh
aJVEn0RMpCCpgShrXjQjeXfwZEsHLLiyreGpfszrTwF3Zf4RFwy3rjZT0KA4wH72
eCC2AswiQZoR2TnyM1w6xL0um6V5xrNKgqpAcSTJ+p/RxeiW2G3OGT9Kl7ivDnXR
GWTDApuTys1hDOPHookJx9UwyuP1FwcDKwoNLubrknjQFQyud4sGMuJsFK3c9GdV
-----END CERTIFICATE-----
Generated at Sat Sep 28 12:42:34 2024 by rpki-client on console-ams.rpki-client.org