Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/d1c7HRULH9tIAdlg7Fr5bJm3e1o.roa
File: d1c7HRULH9tIAdlg7Fr5bJm3e1o.roa (raw, json)
Hash identifier: 2sCDeNMVLXYxUjd0imZUQRokYPDSfRJL/mUHPU4jHFw=
Subject key identifier: 77:57:3B:1D:15:0B:1F:DB:48:01:D9:60:EC:5A:F9:6C:99:B7:7B:5A
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 018CC9BC6D8A7AAD204967B1EA0EF87C9691
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/d1c7HRULH9tIAdlg7Fr5bJm3e1o.roa
Signing time: Tue 02 Jan 2024 10:33:38 +0000
ROA not before: Tue 02 Jan 2024 10:33:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205196
IP address blocks: 185.226.93.0/24 maxlen: 24
185.226.94.0/24 maxlen: 24
185.226.92.0/24 maxlen: 24
185.226.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:6d:8a:7a:ad:20:49:67:b1:ea:0e:f8:7c:96:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Jan 2 10:33:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77573b1d150b1fdb4801d960ec5af96c99b77b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:90:58:0e:e1:1f:ea:cb:e1:7c:6b:11:ea:
62:a5:31:db:00:70:94:2e:f1:83:45:b4:43:6c:45:
c8:ab:bd:22:2d:e2:60:9c:a6:38:6e:96:92:6d:55:
0e:6d:be:8a:00:f9:8a:bf:88:1c:48:f1:ae:41:ba:
bf:4f:bc:98:37:c5:5e:56:08:3e:5f:a6:d7:c3:de:
e5:e9:91:57:76:c2:92:49:16:31:e4:ba:1b:19:5b:
9f:34:2b:48:bd:17:c6:f5:26:10:c0:3c:ef:d7:f5:
7a:83:7e:5b:c2:b6:72:e7:cb:0b:b1:ae:2b:11:d3:
43:36:be:f8:bd:34:88:d5:10:c1:9d:d8:0b:e2:89:
db:a3:b1:a8:7e:a4:99:ad:71:a3:bc:30:9e:f1:cc:
7e:29:89:43:11:c9:a1:7e:1f:01:b9:87:5e:9b:80:
ac:f7:65:2b:95:e7:83:e9:76:cf:2a:38:ba:b0:36:
2d:fa:8d:ba:de:79:34:16:02:87:88:89:6a:e9:9c:
22:1a:5e:f1:1d:da:85:77:8e:e0:85:a3:b1:60:44:
f7:0e:9c:06:b0:78:6a:5f:c3:45:45:59:c4:b5:67:
64:ea:db:b4:6d:8d:4b:d4:8c:70:d6:45:c0:e5:40:
15:19:31:2f:76:91:31:f6:9b:57:68:b8:76:6e:f4:
d7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:57:3B:1D:15:0B:1F:DB:48:01:D9:60:EC:5A:F9:6C:99:B7:7B:5A
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/d1c7HRULH9tIAdlg7Fr5bJm3e1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.92.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:44:94:7f:2b:17:52:21:0c:85:04:8c:fb:2b:2b:32:62:b8:
c3:8f:35:a9:cc:7d:ad:49:66:c8:60:e9:e0:6b:2b:22:d4:83:
89:31:aa:ac:26:a3:6c:04:5b:a0:89:cf:ea:33:2f:56:69:1a:
84:34:47:7f:58:e6:eb:8f:17:c5:26:21:a0:3d:c9:cf:a5:e7:
60:fa:15:04:5f:01:a0:fa:80:4c:b3:30:da:95:91:93:7e:8f:
2f:25:82:68:dc:a6:85:31:0b:ee:3f:a8:94:32:a3:8d:0a:b4:
97:b7:f3:a6:b8:2f:43:b5:fd:a3:12:02:c1:41:15:f2:71:70:
d9:1b:9d:fa:ae:33:2f:ec:e5:de:32:99:36:b1:9d:cd:5a:65:
f4:cf:ab:2e:ae:81:b2:53:e5:a8:d4:0a:73:23:79:9c:8f:5b:
77:ee:72:ed:f3:c4:6b:6a:a9:a6:60:a4:f0:57:e6:3a:4f:f2:
3a:d9:b1:98:c8:06:a6:94:b2:5b:c9:38:d0:dd:1d:6b:70:e8:
29:b3:e8:17:2b:92:a6:4b:7d:b0:cb:c8:84:9f:aa:39:70:ed:
3f:be:43:f5:5b:aa:9b:09:2e:1b:95:c8:63:f4:ff:e0:e2:5a:
34:56:5e:55:b1:a4:94:53:ef:70:32:ca:16:0c:64:01:75:6e:
ec:74:1a:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvG2Keq0gSWex6g74fJaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MmFjMzgyNjg5Njg3YjYwZmNlNWNlOWRiODg3YjIxZDY4
YTZhYmMwHhcNMjQwMTAyMTAzMzM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzU3M2IxZDE1MGIxZmRiNDgwMWQ5NjBlYzVhZjk2Yzk5Yjc3YjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsCQWA7hH+rL4XxrEepipTHbAHCU
LvGDRbRDbEXIq70iLeJgnKY4bpaSbVUObb6KAPmKv4gcSPGuQbq/T7yYN8VeVgg+
X6bXw97l6ZFXdsKSSRYx5LobGVufNCtIvRfG9SYQwDzv1/V6g35bwrZy58sLsa4r
EdNDNr74vTSI1RDBndgL4onbo7GofqSZrXGjvDCe8cx+KYlDEcmhfh8BuYdem4Cs
92UrleeD6XbPKji6sDYt+o263nk0FgKHiIlq6ZwiGl7xHdqFd47ghaOxYET3DpwG
sHhqX8NFRVnEtWdk6tu0bY1L1Ixw1kXA5UAVGTEvdpEx9ptXaLh2bvTXCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHdXOx0VCx/bSAHZYOxa+WyZt3taMB8GA1UdIwQY
MBaAFAQqw4Joloe2D85c6duIeyHWimq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUt
NzBiYzY2ODkzZTVjLzEvZDFjN0hSVUxIOXRJQWRsZzdGcjViSm0zZTFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUtNzBiYzY2ODkzZTVj
LzEvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueJcMA0G
CSqGSIb3DQEBCwUAA4IBAQAvRJR/KxdSIQyFBIz7KysyYrjDjzWpzH2tSWbIYOng
aysi1IOJMaqsJqNsBFugic/qMy9WaRqENEd/WObrjxfFJiGgPcnPpedg+hUEXwGg
+oBMszDalZGTfo8vJYJo3KaFMQvuP6iUMqONCrSXt/OmuC9Dtf2jEgLBQRXycXDZ
G536rjMv7OXeMpk2sZ3NWmX0z6suroGyU+Wo1ApzI3mcj1t37nLt88RraqmmYKTw
V+Y6T/I62bGYyAamlLJbyTjQ3R1rcOgps+gXK5KmS32wy8iEn6o5cO0/vkP1W6qb
CS4blchj9P/g4lo0Vl5VsaSUU+9wMsoWDGQBdW7sdBrW
-----END CERTIFICATE-----
Generated at Wed Jun 26 09:40:24 2024 by rpki-client on console-fra.rpki-client.org