Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6c6f86-d378-4796-ace3-261f3ec84f2c/1/Rqr8mgRg9fFEJNw4quN4O3pCL9A.roa
File: Rqr8mgRg9fFEJNw4quN4O3pCL9A.roa (raw, json)
Hash identifier: Gcnh+/uqBsYgW48qFV4w4NBaCVQYSSf7XxLH8miVgnc=
Subject key identifier: 46:AA:FC:9A:04:60:F5:F1:44:24:DC:38:AA:E3:78:3B:7A:42:2F:D0
Certificate issuer: /CN=4833d1b845b733ea7e81c11f9da8c54a21544134
Certificate serial: 018CC64B0F214DDC1A80BA17823C37A398F9
Authority key identifier: 48:33:D1:B8:45:B7:33:EA:7E:81:C1:1F:9D:A8:C5:4A:21:54:41:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDPRuEW3M-p-gcEfnajFSiFUQTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6c6f86-d378-4796-ace3-261f3ec84f2c/1/Rqr8mgRg9fFEJNw4quN4O3pCL9A.roa
Signing time: Mon 01 Jan 2024 18:30:56 +0000
ROA not before: Mon 01 Jan 2024 18:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60277
IP address blocks: 185.190.204.0/22 maxlen: 22
193.57.206.0/23 maxlen: 23
185.32.252.0/22 maxlen: 22
193.57.216.0/23 maxlen: 23
2a00:ca20::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6c6f86-d378-4796-ace3-261f3ec84f2c/1/SDPRuEW3M-p-gcEfnajFSiFUQTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6c6f86-d378-4796-ace3-261f3ec84f2c/1/SDPRuEW3M-p-gcEfnajFSiFUQTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SDPRuEW3M-p-gcEfnajFSiFUQTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:0f:21:4d:dc:1a:80:ba:17:82:3c:37:a3:98:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4833d1b845b733ea7e81c11f9da8c54a21544134
Validity
Not Before: Jan 1 18:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46aafc9a0460f5f14424dc38aae3783b7a422fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ae:ed:76:5e:6d:e2:0d:3d:1e:b3:bd:73:87:
c5:60:91:40:55:78:a0:57:c7:1c:4c:44:f3:7f:7f:
56:65:9f:d0:57:a5:58:4d:f8:88:da:9c:46:b7:ba:
d1:c9:5a:4f:36:22:bb:68:ff:66:31:78:c8:30:c8:
75:8d:98:c3:7b:b7:a8:5d:15:bd:a0:f5:d1:bc:80:
e3:cc:6f:1d:09:b5:64:7e:e6:fc:4c:de:c0:33:bf:
0b:35:3a:e6:31:2e:c0:47:89:9a:b9:e9:36:eb:ad:
f0:b6:b0:62:ca:4e:d5:23:71:b9:cf:33:72:7e:b2:
6a:89:1d:bc:62:6c:22:c6:d6:4a:83:5d:a6:38:d7:
f1:e9:09:5e:ba:11:01:6d:64:71:04:40:2d:12:ed:
fc:ca:04:1a:1d:d2:c2:e1:af:f5:22:79:60:7f:f5:
8f:df:fd:57:c4:61:29:d7:db:41:28:71:4f:78:cb:
a5:38:4f:46:f3:ac:d0:a0:e2:e7:cf:4f:4f:c0:87:
cf:98:97:0a:d5:79:00:73:9a:9e:92:2b:48:32:7a:
db:7b:16:8b:07:70:87:52:ba:de:0d:b5:92:19:c5:
d8:0a:11:b6:cd:88:80:3b:91:2d:ac:c0:a9:a9:26:
3f:dc:bd:dc:47:bf:d7:76:0c:3f:f6:53:bf:48:5b:
67:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AA:FC:9A:04:60:F5:F1:44:24:DC:38:AA:E3:78:3B:7A:42:2F:D0
X509v3 Authority Key Identifier:
keyid:48:33:D1:B8:45:B7:33:EA:7E:81:C1:1F:9D:A8:C5:4A:21:54:41:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDPRuEW3M-p-gcEfnajFSiFUQTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6c6f86-d378-4796-ace3-261f3ec84f2c/1/Rqr8mgRg9fFEJNw4quN4O3pCL9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6c6f86-d378-4796-ace3-261f3ec84f2c/1/SDPRuEW3M-p-gcEfnajFSiFUQTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.252.0/22
185.190.204.0/22
193.57.206.0/23
193.57.216.0/23
IPv6:
2a00:ca20::/29
Signature Algorithm: sha256WithRSAEncryption
0d:d8:85:7b:90:b4:d3:82:31:ae:f5:50:e8:07:4e:aa:82:c8:
f8:d7:9a:9d:12:35:8b:29:25:66:0c:fa:1a:77:b2:17:a4:6c:
ea:05:c2:e6:36:b9:99:f7:db:32:f1:80:a0:55:0b:d8:9c:ce:
46:c5:7d:08:da:86:0b:15:c5:35:84:2c:51:c7:75:78:a8:1b:
c6:32:59:39:32:ae:20:ea:af:61:03:0a:f4:e4:a2:5d:61:33:
ad:86:b2:dd:c6:df:97:ba:89:9a:39:29:c9:59:78:4c:9e:66:
60:6d:32:8e:32:d9:7d:62:46:a4:3f:5d:c8:50:c5:1c:93:e3:
ef:98:2e:e6:7c:c3:8c:be:c0:e0:b2:7e:ea:d6:3a:30:e3:ec:
9e:60:ee:cc:a5:17:1a:41:52:dd:1c:e3:1e:31:61:fb:5d:31:
8e:ba:32:3f:ec:d6:be:61:28:0c:cd:f6:36:40:6d:4a:74:4f:
41:0d:9a:0c:c1:90:5c:32:e2:6d:70:bd:05:a5:62:b0:49:5a:
93:94:f5:68:aa:f6:03:a1:61:a0:8e:97:04:9c:3a:50:64:b1:
bb:24:1e:70:16:ea:f9:36:33:90:db:3f:e7:99:27:46:80:d8:
26:07:df:3a:00:a4:98:eb:58:2c:b8:04:da:f5:6f:b2:46:8a:
22:85:13:2e
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYzGSw8hTdwagLoXgjw3o5j5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MzNkMWI4NDViNzMzZWE3ZTgxYzExZjlkYThjNTRhMjE1
NDQxMzQwHhcNMjQwMTAxMTgzMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmFhZmM5YTA0NjBmNWYxNDQyNGRjMzhhYWUzNzgzYjdhNDIyZmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq7tdl5t4g09HrO9c4fFYJFAVXig
V8ccTETzf39WZZ/QV6VYTfiI2pxGt7rRyVpPNiK7aP9mMXjIMMh1jZjDe7eoXRW9
oPXRvIDjzG8dCbVkfub8TN7AM78LNTrmMS7AR4mauek2663wtrBiyk7VI3G5zzNy
frJqiR28YmwixtZKg12mONfx6QleuhEBbWRxBEAtEu38ygQaHdLC4a/1Inlgf/WP
3/1XxGEp19tBKHFPeMulOE9G86zQoOLnz09PwIfPmJcK1XkAc5qekitIMnrbexaL
B3CHUrreDbWSGcXYChG2zYiAO5EtrMCpqSY/3L3cR7/Xdgw/9lO/SFtnGwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFEaq/JoEYPXxRCTcOKrjeDt6Qi/QMB8GA1UdIwQY
MBaAFEgz0bhFtzPqfoHBH52oxUohVEE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0RQUnVFVzNNLXAtZ2NFZm5hakZTaUZVUVRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82YzZmODYtZDM3OC00Nzk2LWFjZTMt
MjYxZjNlYzg0ZjJjLzEvUnFyOG1nUmc5ZkZFSk53NHF1TjRPM3BDTDlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82YzZmODYtZDM3OC00Nzk2LWFjZTMtMjYxZjNlYzg0ZjJj
LzEvU0RQUnVFVzNNLXAtZ2NFZm5hakZTaUZVUVRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCuSD8AwQC
ub7MAwQBwTnOAwQBwTnYMA0EAgACMAcDBQMqAMogMA0GCSqGSIb3DQEBCwUAA4IB
AQAN2IV7kLTTgjGu9VDoB06qgsj415qdEjWLKSVmDPoad7IXpGzqBcLmNrmZ99sy
8YCgVQvYnM5GxX0I2oYLFcU1hCxRx3V4qBvGMlk5Mq4g6q9hAwr05KJdYTOthrLd
xt+XuomaOSnJWXhMnmZgbTKOMtl9YkakP13IUMUck+PvmC7mfMOMvsDgsn7q1jow
4+yeYO7MpRcaQVLdHOMeMWH7XTGOujI/7Na+YSgMzfY2QG1KdE9BDZoMwZBcMuJt
cL0FpWKwSVqTlPVoqvYDoWGgjpcEnDpQZLG7JB5wFur5NjOQ2z/nmSdGgNgmB986
AKSY61gsuATa9W+yRooihRMu
-----END CERTIFICATE-----
Generated at Sat Sep 28 14:43:21 2024 by rpki-client on console-ams.rpki-client.org