Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/yj8povSyrrKOPMXQ4wz1GezAvp0.roa
File: yj8povSyrrKOPMXQ4wz1GezAvp0.roa (raw, json)
Hash identifier: qKexIWCtlbmc02YN3D8ZPQcLueZi3RQ2FIyPvyFoxvo=
Subject key identifier: CA:3F:29:A2:F4:B2:AE:B2:8E:3C:C5:D0:E3:0C:F5:19:EC:C0:BE:9D
Certificate issuer: /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial: 018E7AEB9C56B02FF2CB95BD63F24AEDCD5D
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/yj8povSyrrKOPMXQ4wz1GezAvp0.roa
Signing time: Tue 26 Mar 2024 13:20:45 +0000
ROA not before: Tue 26 Mar 2024 13:20:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204415
IP address blocks: 185.148.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7a:eb:9c:56:b0:2f:f2:cb:95:bd:63:f2:4a:ed:cd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb190d102ac9603b405b36374d429868604937af
Validity
Not Before: Mar 26 13:20:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca3f29a2f4b2aeb28e3cc5d0e30cf519ecc0be9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:80:d4:75:a9:19:7a:6c:1d:4f:8c:60:3c:eb:
fb:eb:7e:60:a0:63:4b:9c:0c:9d:96:f0:4a:8d:58:
21:c3:fa:80:ef:b0:34:4c:70:66:c6:6a:15:38:39:
8e:68:48:27:17:a1:e2:c1:09:dd:e7:9c:8d:1a:7c:
e8:90:9d:0f:af:1a:e9:f4:3c:a2:e7:ee:77:4e:f2:
c8:37:14:ab:bb:b3:cc:9f:84:5d:11:78:ad:18:6e:
75:07:69:72:2e:83:b5:ad:84:19:a8:f1:44:df:28:
9c:da:b6:17:c8:9f:ec:7e:96:14:3d:0e:03:fe:c9:
45:7e:ea:03:95:a8:1e:8c:80:10:c1:d0:0c:9f:c3:
76:13:45:22:6d:07:0d:ff:9a:8e:8f:9f:0a:1e:e0:
81:18:0d:b6:96:75:dc:bd:26:45:71:5b:a0:f8:1e:
ba:2a:eb:6a:73:18:b5:c8:eb:25:ab:6f:b1:48:bf:
44:78:49:89:a5:28:98:b5:40:e2:75:25:82:f2:a3:
ce:30:3c:72:c2:ba:6f:58:16:0e:57:9b:c7:dc:ca:
82:2b:1b:82:2b:c3:f1:15:7d:e9:96:8d:64:e2:6e:
75:ae:44:14:43:cc:b4:5f:92:a5:c4:d8:a5:f5:3f:
f3:fa:81:bd:84:2b:9f:63:9c:99:90:9a:25:eb:67:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3F:29:A2:F4:B2:AE:B2:8E:3C:C5:D0:E3:0C:F5:19:EC:C0:BE:9D
X509v3 Authority Key Identifier:
keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/yj8povSyrrKOPMXQ4wz1GezAvp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.18.0/24
Signature Algorithm: sha256WithRSAEncryption
db:be:c7:c7:c4:0d:d6:53:5d:8c:8f:e4:7d:90:93:de:55:8a:
98:e5:74:94:10:29:c9:f1:21:e2:27:b2:7a:67:60:87:90:4b:
8e:ab:b8:aa:94:ca:1a:47:47:6b:66:2f:42:93:ae:b0:55:63:
79:72:18:5f:e5:4c:76:f3:04:97:5f:84:b6:13:dd:9f:9f:9f:
1b:e9:08:32:f0:5c:68:de:12:e5:a2:44:10:13:c9:a8:8e:ea:
eb:d3:e1:d8:e6:cd:16:b6:e5:9b:1a:48:88:51:97:3b:b0:94:
b5:59:f5:ac:58:d8:54:23:c7:6c:49:1b:9b:17:0a:01:47:2c:
a5:de:3c:09:e1:83:2e:72:57:69:15:0d:73:d3:72:e3:cc:73:
c4:c9:3d:d3:91:f2:9c:51:55:7b:cb:5e:f2:36:16:16:6d:80:
89:e6:a0:e6:40:c1:2b:b4:c7:3e:14:96:e0:81:98:57:70:8a:
4c:0a:39:99:07:66:fe:00:78:d9:e0:19:71:d9:cc:b8:d7:37:
63:6f:1e:1a:16:a8:18:5c:4e:f0:a5:1f:8a:ce:d8:2a:2f:90:
33:ac:5f:41:b0:c5:dd:86:98:dc:3a:b4:87:dd:c0:4b:41:3b:
d8:eb:c4:d9:f7:fb:08:e9:65:15:19:bc:37:ce:51:e9:35:79:
e3:9c:6f:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY5665xWsC/yy5W9Y/JK7c1dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMTkwZDEwMmFjOTYwM2I0MDViMzYzNzRkNDI5ODY4NjA0
OTM3YWYwHhcNMjQwMzI2MTMyMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTNmMjlhMmY0YjJhZWIyOGUzY2M1ZDBlMzBjZjUxOWVjYzBiZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYDUdakZemwdT4xgPOv7635goGNL
nAydlvBKjVghw/qA77A0THBmxmoVODmOaEgnF6HiwQnd55yNGnzokJ0Prxrp9Dyi
5+53TvLINxSru7PMn4RdEXitGG51B2lyLoO1rYQZqPFE3yic2rYXyJ/sfpYUPQ4D
/slFfuoDlagejIAQwdAMn8N2E0UibQcN/5qOj58KHuCBGA22lnXcvSZFcVug+B66
Kutqcxi1yOslq2+xSL9EeEmJpSiYtUDidSWC8qPOMDxywrpvWBYOV5vH3MqCKxuC
K8PxFX3plo1k4m51rkQUQ8y0X5KlxNil9T/z+oG9hCufY5yZkJol62eixwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMo/KaL0sq6yjjzF0OMM9RnswL6dMB8GA1UdIwQY
MBaAFLsZDRAqyWA7QFs2N01CmGhgSTevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYt
ZTkzZTJlYmE2OWI5LzEveWo4cG92U3lycktPUE1YUTR3ejFHZXpBdnAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYtZTkzZTJlYmE2OWI5
LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZQSMA0G
CSqGSIb3DQEBCwUAA4IBAQDbvsfHxA3WU12Mj+R9kJPeVYqY5XSUECnJ8SHiJ7J6
Z2CHkEuOq7iqlMoaR0drZi9Ck66wVWN5chhf5Ux28wSXX4S2E92fn58b6Qgy8Fxo
3hLlokQQE8mojurr0+HY5s0WtuWbGkiIUZc7sJS1WfWsWNhUI8dsSRubFwoBRyyl
3jwJ4YMucldpFQ1z03LjzHPEyT3TkfKcUVV7y17yNhYWbYCJ5qDmQMErtMc+FJbg
gZhXcIpMCjmZB2b+AHjZ4Blx2cy41zdjbx4aFqgYXE7wpR+KztgqL5AzrF9BsMXd
hpjcOrSH3cBLQTvY68TZ9/sI6WUVGbw3zlHpNXnjnG/k
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:28:17 2024 by rpki-client on console-ams.rpki-client.org