Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/f5TKsLgvdYJd5TcgvDucASNkyTM.roa
File: f5TKsLgvdYJd5TcgvDucASNkyTM.roa (raw, json)
Hash identifier: 9JlqNpvUVDn/yfb3KbPxGfFltY0Ukat+FQ1xd0emgig=
Subject key identifier: 7F:94:CA:B0:B8:2F:75:82:5D:E5:37:20:BC:3B:9C:01:23:64:C9:33
Certificate issuer: /CN=229fb0fb3d278e1b280a777de200efbd08baac30
Certificate serial: 018CC79414C0E7D87B05EA341FD5030DB10D
Authority key identifier: 22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/f5TKsLgvdYJd5TcgvDucASNkyTM.roa
Signing time: Tue 02 Jan 2024 00:30:19 +0000
ROA not before: Tue 02 Jan 2024 00:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206927
IP address blocks: 185.171.176.0/24 maxlen: 24
185.171.179.0/24 maxlen: 24
185.171.178.0/24 maxlen: 24
185.171.177.0/24 maxlen: 24
2a0a:e100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Jun 2024 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:14:c0:e7:d8:7b:05:ea:34:1f:d5:03:0d:b1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229fb0fb3d278e1b280a777de200efbd08baac30
Validity
Not Before: Jan 2 00:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f94cab0b82f75825de53720bc3b9c012364c933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:1e:c5:17:fb:44:b1:75:d6:46:da:c0:ea:
80:e8:fd:cc:25:8a:56:7c:83:ea:bf:a4:dd:c6:0a:
b4:3e:dc:b3:fa:a0:94:b7:e7:85:01:14:80:33:7b:
03:95:de:d4:da:59:0b:5c:16:aa:95:f8:b7:6a:b6:
81:e6:80:bc:ad:90:63:88:cb:96:55:1d:ff:5c:bc:
38:cf:dc:76:e2:87:4e:a2:c1:39:a8:5e:0b:54:c5:
9b:3c:6a:27:0d:f4:33:15:73:23:66:0e:e1:39:a2:
84:21:49:49:ab:71:29:68:7d:0b:e3:87:10:d5:f1:
0e:26:ef:ba:dd:32:9a:ec:5a:c2:5a:69:8e:a8:44:
bf:79:d6:43:87:42:b0:ef:d4:b6:b7:0b:30:98:79:
33:b6:d6:8d:60:10:bd:3e:ce:b3:f6:c0:84:7a:c4:
e1:95:c0:d5:d9:74:47:4c:6a:7c:1b:f2:75:5a:f2:
99:4c:b5:88:76:5f:ec:e6:4b:d4:75:c7:0d:bc:71:
39:20:c3:fa:23:a7:e5:75:1b:1c:15:6a:33:51:82:
63:14:73:84:b9:e0:5a:8d:0b:67:a4:32:2d:ae:73:
1e:64:a5:31:5d:f4:09:c1:62:e4:06:c7:49:9b:06:
fd:50:c4:3a:73:78:fd:41:9a:85:a7:c0:3a:80:1b:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:94:CA:B0:B8:2F:75:82:5D:E5:37:20:BC:3B:9C:01:23:64:C9:33
X509v3 Authority Key Identifier:
keyid:22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/f5TKsLgvdYJd5TcgvDucASNkyTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.176.0/22
IPv6:
2a0a:e100::/29
Signature Algorithm: sha256WithRSAEncryption
9d:b2:d9:84:fe:4c:d6:9d:5b:db:c1:aa:59:ec:d0:1e:ff:6f:
4c:6e:68:13:46:88:95:8c:bc:39:a7:e2:51:23:44:a3:9b:6b:
c9:3c:49:c5:30:79:c4:77:70:5e:e5:f0:1b:7d:a0:ab:d3:46:
b3:06:d0:3e:16:bb:57:68:27:ae:c7:25:69:e8:c3:a1:b3:75:
cb:2c:93:3a:41:0b:a4:e5:8d:47:9e:79:dd:c7:78:c2:b4:2c:
94:03:4a:92:4e:67:27:d7:62:59:2b:e6:80:53:91:2b:27:46:
2a:27:7a:1e:cc:6e:d9:d3:0f:52:d1:af:7d:77:b0:b3:8a:37:
2d:67:b1:73:96:be:7b:7f:90:b5:98:d6:ec:c2:f5:06:7c:15:
66:39:ca:2d:56:65:f2:1d:c5:68:19:0a:5d:79:16:77:9f:fc:
ba:c5:30:f4:2c:1d:ee:af:e7:73:8b:2f:96:cb:91:12:8c:c4:
42:b1:4f:13:4c:9f:d2:75:b1:78:ac:7b:d4:90:59:b7:f0:4d:
0a:b9:48:0c:1e:9c:07:71:c9:bc:b9:ff:bb:7f:09:37:74:a8:
13:83:6f:36:a4:64:d9:da:6e:3d:f0:5d:6a:4c:78:d8:fb:c3:
36:32:9b:68:2a:aa:9a:24:9b:e9:46:e0:fc:00:cc:83:3d:06:
94:e8:aa:01
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzHlBTA59h7Beo0H9UDDbENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyOWZiMGZiM2QyNzhlMWIyODBhNzc3ZGUyMDBlZmJkMDhi
YWFjMzAwHhcNMjQwMTAyMDAzMDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Zjk0Y2FiMGI4MmY3NTgyNWRlNTM3MjBiYzNiOWMwMTIzNjRjOTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZAexRf7RLF11kbawOqA6P3MJYpW
fIPqv6Tdxgq0Ptyz+qCUt+eFARSAM3sDld7U2lkLXBaqlfi3araB5oC8rZBjiMuW
VR3/XLw4z9x24odOosE5qF4LVMWbPGonDfQzFXMjZg7hOaKEIUlJq3EpaH0L44cQ
1fEOJu+63TKa7FrCWmmOqES/edZDh0Kw79S2twswmHkzttaNYBC9Ps6z9sCEesTh
lcDV2XRHTGp8G/J1WvKZTLWIdl/s5kvUdccNvHE5IMP6I6fldRscFWozUYJjFHOE
ueBajQtnpDItrnMeZKUxXfQJwWLkBsdJmwb9UMQ6c3j9QZqFp8A6gBsLCQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFH+UyrC4L3WCXeU3ILw7nAEjZMkzMB8GA1UdIwQY
MBaAFCKfsPs9J44bKAp3feIA770IuqwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXAtdy16MG5qaHNvQ25kOTRnRHZ2UWk2ckRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82YzU0YTktOWZlNS00ODkzLTlkYTct
N2I5ODY2MzNhYzVlLzEvZjVUS3NMZ3ZkWUpkNVRjZ3ZEdWNBU05reVRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS82YzU0YTktOWZlNS00ODkzLTlkYTctN2I5ODY2MzNhYzVl
LzEvSXAtdy16MG5qaHNvQ25kOTRnRHZ2UWk2ckRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuauwMA0E
AgACMAcDBQMqCuEAMA0GCSqGSIb3DQEBCwUAA4IBAQCdstmE/kzWnVvbwapZ7NAe
/29MbmgTRoiVjLw5p+JRI0Sjm2vJPEnFMHnEd3Be5fAbfaCr00azBtA+FrtXaCeu
xyVp6MOhs3XLLJM6QQuk5Y1Hnnndx3jCtCyUA0qSTmcn12JZK+aAU5ErJ0YqJ3oe
zG7Z0w9S0a99d7CzijctZ7Fzlr57f5C1mNbswvUGfBVmOcotVmXyHcVoGQpdeRZ3
n/y6xTD0LB3ur+dziy+Wy5ESjMRCsU8TTJ/SdbF4rHvUkFm38E0KuUgMHpwHccm8
uf+7fwk3dKgTg282pGTZ2m498F1qTHjY+8M2MptoKqqaJJvpRuD8AMyDPQaU6KoB
-----END CERTIFICATE-----
Generated at Fri Jun 14 06:22:38 2024 by rpki-client on console-fra.rpki-client.org