Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/cbqAwGpb0dMFO3g8OTMtkER8uAg.roa
File: cbqAwGpb0dMFO3g8OTMtkER8uAg.roa (raw, json)
Hash identifier: WL465HSaRKRVcqbOC0CTY5BoenUjgFlxnqa1FgmiIdo=
Subject key identifier: 71:BA:80:C0:6A:5B:D1:D3:05:3B:78:3C:39:33:2D:90:44:7C:B8:08
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 018CC26D2FD797F1C9189A8BA278E4E6D1FE
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/cbqAwGpb0dMFO3g8OTMtkER8uAg.roa
Signing time: Mon 01 Jan 2024 00:29:44 +0000
ROA not before: Mon 01 Jan 2024 00:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200746
IP address blocks: 185.109.220.0/24 maxlen: 24
2a0b:8f80:200::/48 maxlen: 48
2a0b:8f80:300::/48 maxlen: 48
2a0b:8f80:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2f:d7:97:f1:c9:18:9a:8b:a2:78:e4:e6:d1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Jan 1 00:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71ba80c06a5bd1d3053b783c39332d90447cb808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:80:b3:14:77:05:ca:54:c2:e1:f2:fa:35:e1:
d9:c0:b9:63:15:d4:1e:4c:c6:34:64:a9:37:bd:6a:
99:9c:04:e9:71:bd:91:ad:ab:d5:b6:45:f1:e8:50:
38:e4:d7:b8:ef:70:a9:90:c7:f7:38:97:05:f2:5e:
53:10:2e:d5:1c:59:e8:73:d2:4f:af:d1:b6:62:52:
31:21:ff:be:b3:67:5c:ed:33:f9:03:44:54:3f:a3:
a3:ce:1c:12:d8:cc:c9:e3:5f:7a:1b:bd:38:69:90:
01:94:c6:9b:5a:c6:03:be:db:f3:3b:e2:7d:b5:1a:
1f:d5:1a:ce:82:e7:72:0f:99:f1:fb:a0:e8:89:58:
5c:f2:b8:fa:fe:db:97:eb:c1:f8:bc:06:d0:42:ba:
1d:ea:da:e9:e9:1e:94:cb:85:7e:41:a8:88:b3:3d:
b8:e3:75:a3:b8:66:8e:5e:4c:eb:46:0a:41:3b:51:
e9:0b:e9:20:26:e5:1d:6b:5f:e9:d0:78:af:7c:1a:
6e:ea:04:58:1b:0e:48:2b:e0:1f:53:c1:d2:86:f9:
04:dd:96:6f:71:f4:87:f4:2e:a5:af:80:b6:46:e9:
17:35:31:83:28:bb:f0:03:88:4c:02:46:97:99:32:
72:b5:52:a9:96:54:32:4a:e1:a5:5d:cc:32:b7:50:
e2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BA:80:C0:6A:5B:D1:D3:05:3B:78:3C:39:33:2D:90:44:7C:B8:08
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/cbqAwGpb0dMFO3g8OTMtkER8uAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.220.0/24
IPv6:
2a0b:8f80:1::/48
2a0b:8f80:200::/48
2a0b:8f80:300::/48
Signature Algorithm: sha256WithRSAEncryption
72:55:fe:3b:9c:e7:6f:5e:3c:ef:dd:4d:77:1f:50:94:0b:0f:
4e:98:64:9a:a4:ac:a7:09:ad:a9:1f:9e:01:32:6c:43:d1:2e:
4a:1f:94:f5:a9:3e:9c:30:7f:09:9e:51:83:09:d2:7a:a4:ed:
77:2e:6a:7e:29:28:ae:2e:c4:8c:bb:61:06:0b:61:91:66:d8:
98:11:05:64:60:6c:e5:42:1e:c8:80:c9:ed:35:db:fd:25:7b:
c6:0a:ba:de:32:23:2a:5f:72:0c:99:37:c5:1f:83:0d:a5:3c:
ba:a2:2c:12:17:a5:18:b0:79:20:72:3f:dc:76:4e:50:b7:6d:
80:7d:0b:8a:57:c8:d2:a3:8d:78:45:4e:3c:eb:e1:e9:dc:90:
0d:1a:50:27:ed:13:78:c1:40:c3:6a:50:1d:6c:7f:47:6e:ba:
83:8e:9e:db:34:dc:99:16:c4:df:ec:bf:e9:39:02:9b:a4:20:
85:c1:b3:e4:be:fe:ee:63:73:9a:cb:a1:0f:6a:58:c8:c9:7e:
2f:b9:8a:f0:1c:9a:73:47:42:94:92:47:5f:11:2e:c2:b2:59:
e9:89:c2:40:17:4f:db:f4:ae:45:12:c5:27:81:8f:49:03:7f:
00:c2:75:3e:8a:ed:25:44:56:09:ea:4a:a4:4b:56:a5:2e:51:
5f:f5:37:17
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYzCbS/Xl/HJGJqLonjk5tH+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDlmZmZjZDgxYTY2YmM5OGI2MjlkNGMwNTc5MjQ3NjQ1
ZjBmZTQwHhcNMjQwMTAxMDAyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWJhODBjMDZhNWJkMWQzMDUzYjc4M2MzOTMzMmQ5MDQ0N2NiODA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkICzFHcFylTC4fL6NeHZwLljFdQe
TMY0ZKk3vWqZnATpcb2RravVtkXx6FA45Ne473CpkMf3OJcF8l5TEC7VHFnoc9JP
r9G2YlIxIf++s2dc7TP5A0RUP6OjzhwS2MzJ4196G704aZABlMabWsYDvtvzO+J9
tRof1RrOgudyD5nx+6DoiVhc8rj6/tuX68H4vAbQQrod6trp6R6Uy4V+QaiIsz24
43WjuGaOXkzrRgpBO1HpC+kgJuUda1/p0HivfBpu6gRYGw5IK+AfU8HShvkE3ZZv
cfSH9C6lr4C2RukXNTGDKLvwA4hMAkaXmTJytVKpllQySuGlXcwyt1Di/wIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFHG6gMBqW9HTBTt4PDkzLZBEfLgIMB8GA1UdIwQY
MBaAFCkJ//zYGma8mLYp1MBXkkdkXw/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2Qt
ZjJhZTdiYzdlY2M1LzEvY2JxQXdHcGIwZE1GTzNnOE9UTXRrRVI4dUFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2QtZjJhZTdiYzdlY2M1
LzEvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAuW3cMCEE
AgACMBsDBwAqC4+AAAEDBwAqC4+AAgADBwAqC4+AAwAwDQYJKoZIhvcNAQELBQAD
ggEBAHJV/juc529ePO/dTXcfUJQLD06YZJqkrKcJrakfngEybEPRLkoflPWpPpww
fwmeUYMJ0nqk7Xcuan4pKK4uxIy7YQYLYZFm2JgRBWRgbOVCHsiAye012/0le8YK
ut4yIypfcgyZN8Ufgw2lPLqiLBIXpRiweSByP9x2TlC3bYB9C4pXyNKjjXhFTjzr
4enckA0aUCftE3jBQMNqUB1sf0duuoOOnts03JkWxN/sv+k5ApukIIXBs+S+/u5j
c5rLoQ9qWMjJfi+5ivAcmnNHQpSSR18RLsKyWemJwkAXT9v0rkUSxSeBj0kDfwDC
dT6K7SVEVgnqSqRLVqUuUV/1Nxc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:42:41 2024 by rpki-client on console-fra.rpki-client.org