Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/1UWrU6f4RzNtMn_91sZsgvU83hE.roa
File: 1UWrU6f4RzNtMn_91sZsgvU83hE.roa (raw, json)
Hash identifier: bOZN622zrGq208QK8+4EauPANLoj7uxghFOeJtibDbg=
Subject key identifier: D5:45:AB:53:A7:F8:47:33:6D:32:7F:FD:D6:C6:6C:82:F5:3C:DE:11
Certificate issuer: /CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Certificate serial: 018CC3489B4FE6FB92F1EEFB26BA624ECED8
Authority key identifier: 09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/1UWrU6f4RzNtMn_91sZsgvU83hE.roa
Signing time: Mon 01 Jan 2024 04:29:24 +0000
ROA not before: Mon 01 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203591
IP address blocks: 178.22.248.0/22 maxlen: 22
178.22.253.0/24 maxlen: 24
178.22.252.0/24 maxlen: 24
178.22.255.0/24 maxlen: 24
178.22.254.0/24 maxlen: 24
185.6.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9b:4f:e6:fb:92:f1:ee:fb:26:ba:62:4e:ce:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Validity
Not Before: Jan 1 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d545ab53a7f847336d327ffdd6c66c82f53cde11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:ee:0e:1b:74:a1:fa:39:e9:43:01:44:d2:
45:59:72:78:46:3e:2d:db:b6:e7:b4:76:92:66:8a:
6e:4f:43:fa:49:d4:f6:d5:c1:b1:4d:bf:99:fd:1b:
26:37:49:cc:fe:32:ef:3b:84:b2:dd:64:90:e6:e8:
38:cc:28:74:4f:2f:03:94:86:d2:4a:6e:7c:1c:20:
a3:88:74:26:66:de:99:22:94:89:69:cb:24:1c:ce:
31:a6:99:56:bc:e7:0f:76:21:64:b7:3b:13:5c:33:
d2:3c:88:e6:26:08:13:cc:12:d9:09:7a:16:fc:09:
c8:33:34:a2:3c:2d:82:25:27:57:67:8e:e3:17:f9:
d8:99:0d:2e:d0:0d:36:6c:c3:c5:c3:16:6a:9e:64:
ad:e4:bb:82:d7:9c:9a:63:bc:09:5a:1c:b9:d3:83:
05:a7:d4:23:d9:3d:d7:45:f5:13:be:d3:52:e5:07:
aa:0c:df:a9:20:76:ba:48:cd:78:09:bd:5c:2e:9e:
00:de:49:8c:35:6d:2e:7d:f5:39:a1:26:63:dc:d4:
9e:03:e4:64:9e:a5:78:86:13:e4:18:eb:fc:35:13:
65:2b:cc:0b:20:8d:9a:94:5e:fa:d7:27:48:67:1d:
cd:38:53:7c:39:f6:2c:d5:e1:08:53:ec:d4:1a:e3:
1c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:45:AB:53:A7:F8:47:33:6D:32:7F:FD:D6:C6:6C:82:F5:3C:DE:11
X509v3 Authority Key Identifier:
keyid:09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/1UWrU6f4RzNtMn_91sZsgvU83hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.248.0/21
185.6.240.0/22
Signature Algorithm: sha256WithRSAEncryption
13:d8:84:81:96:39:76:eb:cc:3c:28:81:8f:13:34:09:fb:47:
ce:a8:c2:48:07:39:59:c4:a4:70:50:2f:00:ca:34:12:e0:a1:
92:e3:eb:9c:6b:de:e1:55:7e:f8:66:15:da:50:1b:ae:ee:fb:
48:52:f2:2f:9c:90:2f:5f:1f:2a:c3:3b:a9:0c:a0:e8:5e:58:
12:7a:77:c0:d2:fd:b5:77:f5:e2:fe:91:48:90:3c:38:4a:e2:
da:19:87:51:d6:4b:0c:2a:02:44:05:49:90:d5:62:af:fe:d7:
1e:37:bf:9b:4c:37:41:36:1a:a5:7d:76:2a:83:99:fe:88:aa:
2b:a4:3e:31:22:a1:a0:c4:a0:c5:72:6a:81:1b:8a:85:c8:43:
f3:8d:3f:b2:e2:7e:2f:6a:53:3c:94:58:c2:29:88:02:3b:ec:
4c:e2:9c:e5:b9:50:d8:f8:55:25:d4:97:0e:c2:41:b6:80:e3:
a5:52:18:c3:20:90:82:32:0f:83:64:88:dc:39:cf:1f:91:2d:
30:a6:d8:75:ee:26:84:66:ee:cb:b2:8a:ff:6d:36:db:d4:9f:
bb:3e:04:d5:bc:73:26:da:d2:1d:02:e8:7e:6f:d8:54:9b:d0:
2a:67:89:c0:e8:bb:7a:52:8c:19:cf:bf:c0:03:a0:6d:31:63:
be:c9:f6:84
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzDSJtP5vuS8e77JrpiTs7YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZTRhOGQ2NzA2ZDlkMGY5YzEwOTFjYTY5OTUxZjRhYmQ1
OWQ0MmIwHhcNMjQwMTAxMDQyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTQ1YWI1M2E3Zjg0NzMzNmQzMjdmZmRkNmM2NmM4MmY1M2NkZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJDuDht0ofo56UMBRNJFWXJ4Rj4t
27bntHaSZopuT0P6SdT21cGxTb+Z/RsmN0nM/jLvO4Sy3WSQ5ug4zCh0Ty8DlIbS
Sm58HCCjiHQmZt6ZIpSJacskHM4xpplWvOcPdiFktzsTXDPSPIjmJggTzBLZCXoW
/AnIMzSiPC2CJSdXZ47jF/nYmQ0u0A02bMPFwxZqnmSt5LuC15yaY7wJWhy504MF
p9Qj2T3XRfUTvtNS5QeqDN+pIHa6SM14Cb1cLp4A3kmMNW0uffU5oSZj3NSeA+Rk
nqV4hhPkGOv8NRNlK8wLII2alF761ydIZx3NOFN8OfYs1eEIU+zUGuMccwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNVFq1On+EczbTJ//dbGbIL1PN4RMB8GA1UdIwQY
MBaAFAnkqNZwbZ0PnBCRymmVH0q9WdQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2VTbzFuQnRuUS1jRUpIS2FaVWZTcjFaMUNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80N2ViN2ItYzNiYS00NzhhLTgxNzgt
NDA0ZDMxMjgwZTYxLzEvMVVXclU2ZjRSek50TW5fOTFzWnNndlU4M2hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80N2ViN2ItYzNiYS00NzhhLTgxNzgtNDA0ZDMxMjgwZTYx
LzEvQ2VTbzFuQnRuUS1jRUpIS2FaVWZTcjFaMUNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDshb4AwQC
uQbwMA0GCSqGSIb3DQEBCwUAA4IBAQAT2ISBljl268w8KIGPEzQJ+0fOqMJIBzlZ
xKRwUC8AyjQS4KGS4+uca97hVX74ZhXaUBuu7vtIUvIvnJAvXx8qwzupDKDoXlgS
enfA0v21d/Xi/pFIkDw4SuLaGYdR1ksMKgJEBUmQ1WKv/tceN7+bTDdBNhqlfXYq
g5n+iKorpD4xIqGgxKDFcmqBG4qFyEPzjT+y4n4valM8lFjCKYgCO+xM4pzluVDY
+FUl1JcOwkG2gOOlUhjDIJCCMg+DZIjcOc8fkS0wpth17iaEZu7Lsor/bTbb1J+7
PgTVvHMm2tIdAuh+b9hUm9AqZ4nA6Lt6UowZz7/AA6BtMWO+yfaE
-----END CERTIFICATE-----
Generated at Fri Jun 21 04:26:47 2024 by rpki-client on console-ams.rpki-client.org