Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/XTigtKK1E4uPFvXVRNDN_UQO-U8.roa
File: XTigtKK1E4uPFvXVRNDN_UQO-U8.roa (raw, json)
Hash identifier: TOEbrzZGgquz8GpzWr46DWeAely8n7nuYIpV8imIJYw=
Subject key identifier: 5D:38:A0:B4:A2:B5:13:8B:8F:16:F5:D5:44:D0:CD:FD:44:0E:F9:4F
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 018EF2FB67A7CA9E54DEB6336AB456BAE507
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/XTigtKK1E4uPFvXVRNDN_UQO-U8.roa
Signing time: Thu 18 Apr 2024 20:52:26 +0000
ROA not before: Thu 18 Apr 2024 20:52:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 185.148.243.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f2:fb:67:a7:ca:9e:54:de:b6:33:6a:b4:56:ba:e5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Apr 18 20:52:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d38a0b4a2b5138b8f16f5d544d0cdfd440ef94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:58:96:0b:e6:ac:f8:c2:ae:df:c4:44:7a:e6:
21:4a:8a:c3:fe:d7:0f:a7:81:1a:49:a4:a5:b4:f8:
7c:5b:ac:7f:6b:de:7a:f4:c1:8e:e7:87:23:c9:23:
62:60:67:c1:2d:35:4c:27:5c:2e:1e:1f:0a:af:a0:
32:a0:18:a5:a0:ac:31:8a:ee:5e:e9:81:15:08:d7:
02:f9:61:6f:08:aa:cb:36:8b:01:6f:f6:f4:39:8c:
72:41:8e:8d:91:a7:b3:60:ee:95:d0:87:4f:d2:6d:
c5:88:b1:3a:e6:c5:c8:f9:d3:7f:28:5f:81:b3:ee:
0e:10:9b:eb:db:97:fa:7c:b6:e5:68:09:dc:4b:23:
ec:5f:ed:ba:53:7d:d2:a4:89:db:d4:d0:65:6a:3e:
41:60:35:65:a1:ad:a5:f4:ec:1b:02:42:fb:b1:a8:
2d:5a:b5:bd:bb:67:a2:6a:b3:a5:f0:ee:7e:62:32:
8b:f7:7a:cc:a5:c2:3e:3f:32:7c:65:bb:74:61:1c:
c0:0a:3d:3d:4f:09:cb:76:84:c0:8b:67:01:81:c4:
eb:80:e6:4b:c4:52:60:5d:5e:a2:49:51:55:bf:a3:
fd:82:8e:32:9c:14:c3:fa:60:07:32:f2:25:05:e1:
b5:e3:65:30:09:29:ac:73:89:cc:f9:96:b9:3e:91:
32:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:38:A0:B4:A2:B5:13:8B:8F:16:F5:D5:44:D0:CD:FD:44:0E:F9:4F
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/XTigtKK1E4uPFvXVRNDN_UQO-U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.243.0/24
185.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
13:88:b9:1a:7a:99:2b:3d:1a:9e:fc:fc:02:93:c2:71:11:b7:
1d:5b:3e:06:e0:ae:28:6a:35:c1:e5:92:d9:0a:21:ef:68:f5:
50:2e:82:6c:c3:0e:b2:ff:e3:7b:ec:cb:fa:ca:4d:7a:84:da:
db:1e:c1:20:ad:42:90:5e:34:c1:3a:5b:31:40:ff:50:44:6a:
cb:41:b8:8d:12:49:83:f2:7a:2c:50:d2:c8:12:24:ce:ce:ed:
d3:80:ea:77:4c:b4:9d:9b:d6:94:78:a3:bc:94:bb:8e:ce:7c:
f5:27:86:0f:20:d2:0e:e6:5d:8e:36:d0:7c:a0:2a:27:b2:f9:
81:3c:69:e8:9a:11:4e:c0:24:fe:ec:c8:44:58:32:60:27:40:
bf:91:ef:c0:52:53:6f:1d:01:cc:19:02:d3:41:fa:0b:f7:88:
71:c0:52:95:83:44:96:5e:f0:a9:02:7e:4d:2c:91:a6:c7:cb:
87:40:4a:46:2a:35:c7:f0:3d:fd:b2:c9:5f:2c:32:68:c1:52:
51:4d:c5:20:2b:8d:31:36:f8:14:a0:26:a8:d2:67:33:57:d3:
1e:0e:f2:20:88:8a:b9:ac:a0:f7:f3:52:84:6c:a3:50:56:ed:
13:06:de:99:c9:d6:92:8f:4a:d8:30:40:41:6c:3b:72:b5:64:
64:3b:d0:b6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY7y+2enyp5U3rYzarRWuuUHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3
MjAyZDUwHhcNMjQwNDE4MjA1MjI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDM4YTBiNGEyYjUxMzhiOGYxNmY1ZDU0NGQwY2RmZDQ0MGVmOTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1liWC+as+MKu38REeuYhSorD/tcP
p4EaSaSltPh8W6x/a9569MGO54cjySNiYGfBLTVMJ1wuHh8Kr6AyoBiloKwxiu5e
6YEVCNcC+WFvCKrLNosBb/b0OYxyQY6NkaezYO6V0IdP0m3FiLE65sXI+dN/KF+B
s+4OEJvr25f6fLblaAncSyPsX+26U33SpInb1NBlaj5BYDVloa2l9OwbAkL7sagt
WrW9u2eiarOl8O5+YjKL93rMpcI+PzJ8Zbt0YRzACj09TwnLdoTAi2cBgcTrgOZL
xFJgXV6iSVFVv6P9go4ynBTD+mAHMvIlBeG142UwCSmsc4nM+Za5PpEyBwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFF04oLSitROLjxb11UTQzf1EDvlPMB8GA1UdIwQY
MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct
YzUxNWYzNTRjYzVhLzEvWFRpZ3RLSzFFNHVQRnZYVlJORE5fVVFPLVU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh
LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuZTzAwQA
ua4UMA0GCSqGSIb3DQEBCwUAA4IBAQATiLkaepkrPRqe/PwCk8JxEbcdWz4G4K4o
ajXB5ZLZCiHvaPVQLoJsww6y/+N77Mv6yk16hNrbHsEgrUKQXjTBOlsxQP9QRGrL
QbiNEkmD8nosUNLIEiTOzu3TgOp3TLSdm9aUeKO8lLuOznz1J4YPINIO5l2ONtB8
oConsvmBPGnomhFOwCT+7MhEWDJgJ0C/ke/AUlNvHQHMGQLTQfoL94hxwFKVg0SW
XvCpAn5NLJGmx8uHQEpGKjXH8D39sslfLDJowVJRTcUgK40xNvgUoCao0mczV9Me
DvIgiIq5rKD381KEbKNQVu0TBt6ZydaSj0rYMEBBbDtytWRkO9C2
-----END CERTIFICATE-----
Generated at Fri May 3 10:52:29 2024 by rpki-client on console-ams.rpki-client.org