Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/4BxkYyNqKH8fBLXC4-dUhPXpSPg.roa
File: 4BxkYyNqKH8fBLXC4-dUhPXpSPg.roa (raw, json)
Hash identifier: ++io4JN8dZg7Bykpm8CiQvYOyAEu05VMLOi36bV1LJc=
Subject key identifier: E0:1C:64:63:23:6A:28:7F:1F:04:B5:C2:E3:E7:54:84:F5:E9:48:F8
Certificate issuer: /CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Certificate serial: 018CC500282A8D9C50CD1335C9A0EB5B0B15
Authority key identifier: CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/4BxkYyNqKH8fBLXC4-dUhPXpSPg.roa
Signing time: Mon 01 Jan 2024 12:29:31 +0000
ROA not before: Mon 01 Jan 2024 12:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58273
IP address blocks: 185.217.156.0/22 maxlen: 24
2a0b:cac0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:28:2a:8d:9c:50:cd:13:35:c9:a0:eb:5b:0b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Validity
Not Before: Jan 1 12:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e01c6463236a287f1f04b5c2e3e75484f5e948f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f3:fd:ca:78:31:a6:42:1a:e8:52:b0:7b:2a:
15:56:3c:2f:c4:e1:2b:6a:d2:a6:da:ec:d8:3a:43:
47:b0:5e:6c:48:c4:bb:02:71:1d:f5:be:10:7d:40:
ef:aa:f3:5a:e3:b7:22:87:a0:d8:ba:5c:cf:0f:8c:
b3:76:2c:59:f0:c3:ea:b0:e7:c6:59:b7:41:9a:46:
fe:2c:05:27:ed:dc:10:5c:f5:f3:f0:4d:54:d0:db:
1b:a3:2d:d2:24:2c:b4:09:23:51:10:09:54:ad:5d:
2c:d2:ce:98:f9:68:2d:02:8f:81:4f:5b:9b:c5:dc:
71:93:8d:36:79:41:0c:fb:94:73:68:d2:88:35:da:
e7:c5:af:b6:77:e3:9f:8e:a1:27:64:f8:56:9d:5d:
1e:02:0b:7b:df:60:70:1a:66:d6:53:59:11:15:6c:
c4:6e:65:6d:96:21:75:59:76:50:c0:d4:96:fc:c2:
d7:be:ab:65:51:a9:09:19:1e:b1:63:38:13:35:13:
ee:ea:76:4b:ff:b6:2c:e2:e2:d1:4e:9a:81:60:8c:
67:08:9b:98:fe:23:7c:19:0a:f0:1f:eb:d8:ae:8c:
2c:29:4e:21:cd:09:6d:f2:e4:97:a7:7f:70:e4:0c:
10:dc:78:79:3e:6f:34:54:cb:63:86:1e:6b:28:5c:
29:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1C:64:63:23:6A:28:7F:1F:04:B5:C2:E3:E7:54:84:F5:E9:48:F8
X509v3 Authority Key Identifier:
keyid:CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/4BxkYyNqKH8fBLXC4-dUhPXpSPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.156.0/22
IPv6:
2a0b:cac0::/29
Signature Algorithm: sha256WithRSAEncryption
a7:65:5d:04:88:89:57:43:91:a1:5c:f0:7c:61:e1:68:6e:3a:
c4:76:9f:70:96:3c:1d:a3:68:7a:d6:db:1c:2b:00:64:5a:f7:
29:01:81:4b:10:8d:76:77:96:51:34:95:48:44:6b:9f:85:b0:
78:96:3c:6c:f5:86:91:76:63:f3:68:87:5a:55:f7:db:3d:ed:
f6:61:b3:0b:63:63:91:e9:1a:c3:18:5c:db:00:51:c6:ab:3f:
8a:a5:b8:30:36:22:bd:56:33:4f:bc:19:43:ac:9e:37:51:b8:
d1:35:d5:51:b1:1c:c0:83:70:6b:fe:35:4a:f0:a3:8e:07:a3:
4b:d5:07:66:a4:1d:6e:e6:72:a4:d9:ff:fe:de:2b:81:63:6f:
2b:dd:38:35:68:d2:87:86:c5:59:6b:c5:6f:c9:3f:d9:e1:0c:
2e:00:9a:14:b2:6b:c6:77:69:9c:c3:87:75:e8:f4:d2:9f:e6:
2f:bb:59:21:08:6b:18:be:fe:e6:d0:bc:6b:b8:54:53:28:f3:
21:b3:da:d2:02:6f:e7:40:5d:45:3c:25:ad:92:4d:20:fc:74:
6f:76:5d:10:b4:af:0a:da:9a:e1:ae:7e:cc:45:22:e4:7a:c1:
0f:ae:bd:e1:01:d0:9b:1f:4b:35:15:a8:95:df:da:ed:83:c3:
df:cc:52:14
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzFACgqjZxQzRM1yaDrWwsVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNTY0OWRiYmE1OTJmMWM5ZjNmMjg4OWJjZjgxZmQyMjU5
ODkzNjcwHhcNMjQwMTAxMTIyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDFjNjQ2MzIzNmEyODdmMWYwNGI1YzJlM2U3NTQ4NGY1ZTk0OGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPP9yngxpkIa6FKweyoVVjwvxOEr
atKm2uzYOkNHsF5sSMS7AnEd9b4QfUDvqvNa47cih6DYulzPD4yzdixZ8MPqsOfG
WbdBmkb+LAUn7dwQXPXz8E1U0Nsboy3SJCy0CSNREAlUrV0s0s6Y+WgtAo+BT1ub
xdxxk402eUEM+5RzaNKINdrnxa+2d+OfjqEnZPhWnV0eAgt732BwGmbWU1kRFWzE
bmVtliF1WXZQwNSW/MLXvqtlUakJGR6xYzgTNRPu6nZL/7Ys4uLRTpqBYIxnCJuY
/iN8GQrwH+vYrowsKU4hzQlt8uSXp39w5AwQ3Hh5Pm80VMtjhh5rKFwp2QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOAcZGMjaih/HwS1wuPnVIT16Uj4MB8GA1UdIwQY
MBaAFM5WSdu6WS8cnz8oibz4H9IlmJNnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemxaSjI3cFpMeHlmUHlpSnZQZ2YwaVdZazJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MzczODUtMWE5MC00MmY1LThlNDAt
YzY3YWI4M2FjMWY1LzEvNEJ4a1l5TnFLSDhmQkxYQzQtZFVoUFhwU1BnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy85MzczODUtMWE5MC00MmY1LThlNDAtYzY3YWI4M2FjMWY1
LzEvemxaSjI3cFpMeHlmUHlpSnZQZ2YwaVdZazJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudmcMA0E
AgACMAcDBQMqC8rAMA0GCSqGSIb3DQEBCwUAA4IBAQCnZV0EiIlXQ5GhXPB8YeFo
bjrEdp9wljwdo2h61tscKwBkWvcpAYFLEI12d5ZRNJVIRGufhbB4ljxs9YaRdmPz
aIdaVffbPe32YbMLY2OR6RrDGFzbAFHGqz+KpbgwNiK9VjNPvBlDrJ43UbjRNdVR
sRzAg3Br/jVK8KOOB6NL1QdmpB1u5nKk2f/+3iuBY28r3Tg1aNKHhsVZa8VvyT/Z
4QwuAJoUsmvGd2mcw4d16PTSn+Yvu1khCGsYvv7m0LxruFRTKPMhs9rSAm/nQF1F
PCWtkk0g/HRvdl0QtK8K2prhrn7MRSLkesEPrr3hAdCbH0s1FaiV39rtg8PfzFIU
-----END CERTIFICATE-----
Generated at Fri Jun 7 13:03:55 2024 by rpki-client on console-ams.rpki-client.org