Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/gv2IQqmew0ki5w6c1zDA7PMgMfE.roa
File: gv2IQqmew0ki5w6c1zDA7PMgMfE.roa (raw, json)
Hash identifier: IBfpgUIY7BJ22DC+P0wtxZuwbQ3WfmkGaY6p01hqVPM=
Subject key identifier: 82:FD:88:42:A9:9E:C3:49:22:E7:0E:9C:D7:30:C0:EC:F3:20:31:F1
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B936CA0396D344E23B5FEEC1A01391
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/gv2IQqmew0ki5w6c1zDA7PMgMfE.roa
Signing time: Mon 01 Jan 2024 20:31:16 +0000
ROA not before: Mon 01 Jan 2024 20:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45007
IP address blocks: 85.187.45.0/24 maxlen: 24
185.242.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:36:ca:03:96:d3:44:e2:3b:5f:ee:c1:a0:13:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82fd8842a99ec34922e70e9cd730c0ecf32031f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:b7:10:9e:9c:91:8a:5b:f9:2f:7d:bb:c3:
4b:69:0b:4f:21:6b:3e:66:c1:86:cf:6c:50:b6:18:
3a:b0:6b:29:76:4f:81:2c:87:10:a4:c9:49:38:77:
9d:6b:0a:7b:0f:45:5d:8d:61:40:d6:7d:68:58:8b:
28:7b:c8:35:3f:d5:f3:35:9a:d2:98:82:d3:15:a3:
1f:f5:74:5f:a2:61:e9:56:96:34:2e:cb:1c:71:38:
65:92:7b:f0:99:0b:23:df:8a:c3:ff:ef:0f:2a:e6:
8d:9e:48:83:7b:7f:e3:86:b8:8a:e2:5d:97:54:28:
86:58:1c:ed:5a:9c:88:88:e7:fb:b5:1d:54:22:ad:
bd:46:5e:b6:95:27:29:c8:a8:37:1c:ac:94:5c:9e:
2d:ff:fb:02:64:78:bc:15:1f:7f:9d:88:a0:a4:78:
8e:26:59:3c:aa:6b:60:2d:23:d4:9d:28:18:0a:b7:
41:4b:89:a8:c0:17:a6:5b:e1:c5:bb:67:18:e9:94:
a1:f4:78:73:06:ac:a1:66:48:dd:e4:2f:84:b0:b9:
03:39:22:02:5e:9e:3f:3d:fe:21:4c:2a:df:b7:de:
f0:e6:56:e4:b6:78:b2:67:f7:d1:79:79:3d:a7:5a:
c8:69:62:f0:7d:8a:da:94:37:09:e9:23:65:f2:9f:
00:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FD:88:42:A9:9E:C3:49:22:E7:0E:9C:D7:30:C0:EC:F3:20:31:F1
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/gv2IQqmew0ki5w6c1zDA7PMgMfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.45.0/24
185.242.171.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ac:88:74:36:f1:a2:08:44:d2:15:ac:12:ab:cc:ca:aa:46:
55:e0:48:1d:c8:54:22:90:50:38:bb:5f:7a:81:0c:d3:f7:60:
02:c9:1f:68:27:ef:13:6f:1f:48:a2:00:d5:f8:89:69:e2:78:
e6:40:79:27:22:df:c9:c8:8b:37:17:a3:9f:00:df:04:07:e5:
33:dd:44:6d:53:a2:d4:85:5a:7e:7c:de:19:6c:c4:02:4a:fd:
45:2c:3b:e3:bf:fd:fa:55:47:98:0b:75:52:39:98:fc:d9:43:
b0:13:d9:5e:d4:80:fa:6e:fc:b9:57:89:f2:20:40:d9:7f:ef:
77:74:dc:0d:45:98:d5:57:e3:32:af:a2:36:e7:fd:1b:09:8b:
cc:70:f9:05:c1:2b:ff:18:bd:23:c9:0a:97:d8:f5:76:a5:01:
ad:8e:c5:06:1c:d6:ef:5b:95:92:a1:c4:6e:14:f5:2f:42:94:
53:df:56:61:c8:13:56:4c:44:b7:ac:f1:70:36:91:c1:bc:21:
82:ef:e2:b2:d2:ec:2d:38:f7:de:62:a0:4d:54:78:56:df:43:
20:6d:9d:eb:78:be:10:3b:c5:19:34:d0:95:50:23:34:ca:c7:
4a:c2:07:3e:98:f1:44:8b:6d:96:29:d9:c0:6c:0c:f2:9a:10:
e9:f3:67:a5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzGuTbKA5bTROI7X+7BoBORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjQwMTAxMjAzMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmZkODg0MmE5OWVjMzQ5MjJlNzBlOWNkNzMwYzBlY2YzMjAzMWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhS3EJ6ckYpb+S99u8NLaQtPIWs+
ZsGGz2xQthg6sGspdk+BLIcQpMlJOHedawp7D0VdjWFA1n1oWIsoe8g1P9XzNZrS
mILTFaMf9XRfomHpVpY0LssccThlknvwmQsj34rD/+8PKuaNnkiDe3/jhriK4l2X
VCiGWBztWpyIiOf7tR1UIq29Rl62lScpyKg3HKyUXJ4t//sCZHi8FR9/nYigpHiO
Jlk8qmtgLSPUnSgYCrdBS4mowBemW+HFu2cY6ZSh9HhzBqyhZkjd5C+EsLkDOSIC
Xp4/Pf4hTCrft97w5lbktniyZ/fReXk9p1rIaWLwfYralDcJ6SNl8p8AgwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIL9iEKpnsNJIucOnNcwwOzzIDHxMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvZ3YySVFxbWV3MGtpNXc2YzF6REE3UE1nTWZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVbstAwQA
ufKrMA0GCSqGSIb3DQEBCwUAA4IBAQBrrIh0NvGiCETSFawSq8zKqkZV4EgdyFQi
kFA4u196gQzT92ACyR9oJ+8Tbx9IogDV+Ilp4njmQHknIt/JyIs3F6OfAN8EB+Uz
3URtU6LUhVp+fN4ZbMQCSv1FLDvjv/36VUeYC3VSOZj82UOwE9le1ID6bvy5V4ny
IEDZf+93dNwNRZjVV+Myr6I25/0bCYvMcPkFwSv/GL0jyQqX2PV2pQGtjsUGHNbv
W5WSocRuFPUvQpRT31ZhyBNWTES3rPFwNpHBvCGC7+Ky0uwtOPfeYqBNVHhW30Mg
bZ3reL4QO8UZNNCVUCM0ysdKwgc+mPFEi22WKdnAbAzymhDp82el
-----END CERTIFICATE-----
Generated at Sat Sep 28 16:16:22 2024 by rpki-client on console-fra.rpki-client.org