Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/wiP8_YxjRxTEJlfdK-L7wzR6GkI.roa
File: wiP8_YxjRxTEJlfdK-L7wzR6GkI.roa (raw, json)
Hash identifier: YDJg0/n8jyg/MdLY0x0LCizkgn5nRRqfBIA06ettre0=
Subject key identifier: C2:23:FC:FD:8C:63:47:14:C4:26:57:DD:2B:E2:FB:C3:34:7A:1A:42
Certificate issuer: /CN=620b0435463746f5f237d93687bec2eacf224551
Certificate serial: 018CC500D9786659E0072C33412F39491102
Authority key identifier: 62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/wiP8_YxjRxTEJlfdK-L7wzR6GkI.roa
Signing time: Mon 01 Jan 2024 12:30:16 +0000
ROA not before: Mon 01 Jan 2024 12:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56974
IP address blocks: 185.44.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:d9:78:66:59:e0:07:2c:33:41:2f:39:49:11:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620b0435463746f5f237d93687bec2eacf224551
Validity
Not Before: Jan 1 12:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c223fcfd8c634714c42657dd2be2fbc3347a1a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:17:a4:b5:46:41:61:cc:34:1c:0a:8a:fa:c9:
6d:62:dd:5d:54:7c:ad:c1:11:44:25:98:8b:75:6e:
ce:3e:41:ba:55:56:2f:2b:f4:f5:5f:dd:cf:b2:64:
b7:43:16:02:a7:94:dd:cf:43:c9:5a:7e:fd:0d:56:
37:1f:32:2b:1e:6d:dc:88:25:b1:d3:63:6e:22:93:
02:5e:f5:55:b9:23:a8:4d:db:74:63:2b:b0:8b:cf:
1f:a1:ee:72:d4:4b:7c:41:cc:6d:0b:6c:2f:b1:bf:
67:72:8d:2d:56:a6:81:78:3c:30:64:7e:3b:0c:3c:
57:f2:28:7a:fd:c8:4d:9d:2e:30:db:03:02:05:85:
2c:af:1d:eb:81:b3:81:89:11:1b:e4:67:7e:84:da:
79:17:34:36:7f:d8:8c:58:89:e0:8f:bf:d5:65:9b:
c2:8d:be:71:e2:26:fd:ae:57:f9:10:e8:b2:fb:be:
bd:c0:66:a0:64:93:14:c9:4c:9d:7b:35:aa:e0:16:
d4:41:f4:5a:64:0f:bb:40:95:6d:a7:89:14:d1:a3:
bb:07:a2:9c:c1:ed:cc:61:aa:88:e5:02:63:d2:d3:
18:e7:05:df:f1:f5:a2:1c:49:8e:83:ac:9d:3b:a8:
85:3d:ab:ad:33:76:0b:d2:1b:8d:0e:cc:ef:9d:f8:
2c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:23:FC:FD:8C:63:47:14:C4:26:57:DD:2B:E2:FB:C3:34:7A:1A:42
X509v3 Authority Key Identifier:
keyid:62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/wiP8_YxjRxTEJlfdK-L7wzR6GkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.228.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ab:ed:1e:df:da:c6:fb:94:52:41:3a:35:74:4f:92:36:3e:
ad:f5:9c:dd:b6:81:2d:32:7e:a5:7d:c9:fb:0f:6f:2f:01:b4:
ca:34:9a:bc:28:14:26:1d:8f:19:1e:7d:a0:3e:d8:52:ec:ad:
0e:e8:68:8c:fa:20:36:0b:84:c6:9a:84:87:72:a8:0d:08:5c:
80:b4:24:6c:38:7c:2f:14:65:fe:7c:da:86:c8:4a:78:6a:fc:
a3:68:4d:96:d3:85:ba:06:4e:0c:77:1f:94:d8:d7:e6:94:7e:
e4:4c:14:4c:47:b3:c1:82:e7:37:36:40:3a:71:05:a2:ef:7d:
7f:f5:06:14:59:2b:50:a1:7d:19:bf:00:9c:d9:53:a8:24:bc:
44:29:07:f3:af:0c:f3:a4:cb:25:4c:f7:1a:40:87:93:f0:96:
3d:19:7b:61:64:39:e6:5d:4e:c7:31:15:8a:94:6b:35:8b:95:
98:10:4b:af:ae:26:61:db:51:cf:33:8c:9a:a0:cc:40:df:f9:
90:96:1f:df:bd:99:91:c5:b3:2a:e8:27:eb:c3:80:3d:80:db:
8e:c2:70:10:a2:6d:ba:ba:81:e4:7f:3c:4f:6a:3a:03:0b:3e:
7b:ec:b7:28:94:d9:48:73:00:14:2c:e3:ad:56:1a:54:bf:c3:
e8:14:cd:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFANl4ZlngBywzQS85SRECMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMGIwNDM1NDYzNzQ2ZjVmMjM3ZDkzNjg3YmVjMmVhY2Yy
MjQ1NTEwHhcNMjQwMTAxMTIzMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjIzZmNmZDhjNjM0NzE0YzQyNjU3ZGQyYmUyZmJjMzM0N2ExYTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxektUZBYcw0HAqK+sltYt1dVHyt
wRFEJZiLdW7OPkG6VVYvK/T1X93PsmS3QxYCp5Tdz0PJWn79DVY3HzIrHm3ciCWx
02NuIpMCXvVVuSOoTdt0Yyuwi88foe5y1Et8QcxtC2wvsb9nco0tVqaBeDwwZH47
DDxX8ih6/chNnS4w2wMCBYUsrx3rgbOBiREb5Gd+hNp5FzQ2f9iMWIngj7/VZZvC
jb5x4ib9rlf5EOiy+769wGagZJMUyUydezWq4BbUQfRaZA+7QJVtp4kU0aO7B6Kc
we3MYaqI5QJj0tMY5wXf8fWiHEmOg6ydO6iFPautM3YL0huNDszvnfgsZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMIj/P2MY0cUxCZX3Svi+8M0ehpCMB8GA1UdIwQY
MBaAFGILBDVGN0b18jfZNoe+wurPIkVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWdzRU5VWTNSdlh5TjlrMmg3N0M2czhpUlZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80YmIyYWEtNDRjZC00M2I2LWE3NmYt
NjhjNTljMTliOTM1LzEvd2lQOF9ZeGpSeFRFSmxmZEstTDd3elI2R2tJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi80YmIyYWEtNDRjZC00M2I2LWE3NmYtNjhjNTljMTliOTM1
LzEvWWdzRU5VWTNSdlh5TjlrMmg3N0M2czhpUlZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSzkMA0G
CSqGSIb3DQEBCwUAA4IBAQBSq+0e39rG+5RSQTo1dE+SNj6t9ZzdtoEtMn6lfcn7
D28vAbTKNJq8KBQmHY8ZHn2gPthS7K0O6GiM+iA2C4TGmoSHcqgNCFyAtCRsOHwv
FGX+fNqGyEp4avyjaE2W04W6Bk4Mdx+U2NfmlH7kTBRMR7PBguc3NkA6cQWi731/
9QYUWStQoX0ZvwCc2VOoJLxEKQfzrwzzpMslTPcaQIeT8JY9GXthZDnmXU7HMRWK
lGs1i5WYEEuvriZh21HPM4yaoMxA3/mQlh/fvZmRxbMq6Cfrw4A9gNuOwnAQom26
uoHkfzxPajoDCz577LcolNlIcwAULOOtVhpUv8PoFM3A
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:15:16 2024 by rpki-client on console-fra.rpki-client.org