Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/RyNytlOTGqEMGDNq2XaREyHPm6M.roa
File: RyNytlOTGqEMGDNq2XaREyHPm6M.roa (raw, json)
Hash identifier: 0DlLaS/LwTUQ3YBvbMHHWrao1EUfhYjKlq1tWuPWywE=
Subject key identifier: 47:23:72:B6:53:93:1A:A1:0C:18:33:6A:D9:76:91:13:21:CF:9B:A3
Certificate issuer: /CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
Certificate serial: 018EA56AD2A5C2DF705919F2D43741B038E8
Authority key identifier: 4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/RyNytlOTGqEMGDNq2XaREyHPm6M.roa
Signing time: Wed 03 Apr 2024 19:23:45 +0000
ROA not before: Wed 03 Apr 2024 19:23:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202813
IP address blocks: 185.178.136.0/22 maxlen: 24
185.178.136.0/23 maxlen: 23
185.178.136.0/24 maxlen: 24
185.178.137.0/24 maxlen: 24
185.178.138.0/23 maxlen: 23
185.178.138.0/24 maxlen: 24
185.178.139.0/24 maxlen: 24
2a0b:fa80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a5:6a:d2:a5:c2:df:70:59:19:f2:d4:37:41:b0:38:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
Validity
Not Before: Apr 3 19:23:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=472372b653931aa10c18336ad976911321cf9ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d1:2b:85:8f:c6:28:55:bf:e2:45:48:72:16:
3b:cf:f0:d2:9a:cc:18:24:0f:8a:21:23:37:e9:07:
23:f7:e4:7c:ab:7a:73:8b:1c:d8:ca:64:19:0e:49:
06:ca:4f:ac:c2:fb:1d:3d:92:fb:b4:78:6d:4e:f7:
15:e5:07:39:6b:c4:cf:4c:43:09:b1:60:82:25:31:
bb:ea:37:c2:25:06:25:9e:81:91:c1:18:71:a5:df:
c0:a8:48:6c:b1:33:fb:4d:3d:ec:41:36:32:0f:45:
ea:2a:ee:85:9a:78:a3:5f:2f:76:af:6f:fd:7c:78:
56:de:5b:02:cd:57:1e:6a:3b:d7:7b:82:35:87:50:
8c:1c:88:60:b6:52:04:43:72:f1:48:f0:1c:93:ad:
3b:da:10:b4:9a:dc:7e:a4:a9:03:41:25:89:f7:1b:
ee:2c:70:a5:40:45:f8:b1:12:7a:a4:07:9a:a8:bd:
b2:c1:34:f3:8e:cd:33:d5:6f:81:dd:ec:4c:97:a8:
81:3b:2c:57:0f:82:cd:57:ff:2d:c7:11:34:98:0d:
69:9b:17:45:de:d4:2d:21:2b:e3:3a:f7:15:9d:57:
b2:db:1b:b0:41:65:f7:d8:2e:aa:13:22:97:31:a0:
0a:5d:16:51:47:7a:64:53:e0:cd:d8:7b:43:c6:57:
27:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:23:72:B6:53:93:1A:A1:0C:18:33:6A:D9:76:91:13:21:CF:9B:A3
X509v3 Authority Key Identifier:
keyid:4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/RyNytlOTGqEMGDNq2XaREyHPm6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.136.0/22
IPv6:
2a0b:fa80::/29
Signature Algorithm: sha256WithRSAEncryption
ae:3b:1c:d6:16:11:b5:0a:8b:ac:df:58:18:dd:ca:69:41:d7:
bb:c6:c9:ec:04:94:7c:1a:71:7b:e7:73:e2:8b:eb:e5:ff:cc:
52:d0:35:df:77:6e:6c:a4:50:26:d2:6e:69:ca:51:a4:51:d2:
a7:4b:f5:63:49:c0:e7:88:f5:71:55:6e:97:0b:06:eb:67:28:
a3:b9:51:3f:65:2f:ae:92:d8:cf:d7:dd:65:42:bb:fa:57:95:
a5:26:15:66:34:63:cf:ab:6d:0c:af:35:fe:dd:54:9f:5e:7e:
8c:17:b5:44:7c:46:18:78:32:be:86:c6:f4:4d:c3:e4:da:76:
9d:0d:43:5b:5c:37:53:11:34:b4:aa:d2:d1:8a:c1:8c:b6:01:
db:d1:5b:aa:84:d8:ef:31:fd:2f:53:ce:93:8c:3f:d0:59:3b:
c7:ec:cd:df:71:58:e1:97:be:c9:ef:fa:1b:e1:dd:e3:c7:a2:
0e:27:2c:ca:ab:15:0f:a0:cf:3c:1b:a8:35:22:44:fd:b5:d6:
ef:19:ab:fe:39:75:f2:a3:e7:ac:f7:cf:25:41:b8:ac:6d:ee:
fb:33:61:91:4e:95:46:f4:af:d1:10:de:2d:fa:2a:ab:49:f5:
10:dd:2d:34:7f:a2:ab:b6:71:0e:af:e0:ed:ab:92:2d:f5:10:
64:16:22:56
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY6latKlwt9wWRny1DdBsDjoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMmI2YTY5NDNkMzMzOGQwMDc1MDM2ZDk2OWVjMDFjM2Rj
ZWZjYTkwHhcNMjQwNDAzMTkyMzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzIzNzJiNjUzOTMxYWExMGMxODMzNmFkOTc2OTExMzIxY2Y5YmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntErhY/GKFW/4kVIchY7z/DSmswY
JA+KISM36Qcj9+R8q3pzixzYymQZDkkGyk+swvsdPZL7tHhtTvcV5Qc5a8TPTEMJ
sWCCJTG76jfCJQYlnoGRwRhxpd/AqEhssTP7TT3sQTYyD0XqKu6FmnijXy92r2/9
fHhW3lsCzVceajvXe4I1h1CMHIhgtlIEQ3LxSPAck6072hC0mtx+pKkDQSWJ9xvu
LHClQEX4sRJ6pAeaqL2ywTTzjs0z1W+B3exMl6iBOyxXD4LNV/8txxE0mA1pmxdF
3tQtISvjOvcVnVey2xuwQWX32C6qEyKXMaAKXRZRR3pkU+DN2HtDxlcn8wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEcjcrZTkxqhDBgzatl2kRMhz5ujMB8GA1UdIwQY
MBaAFE4ramlD0zONAHUDbZaewBw9zvypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84ODk2MDgtMGY0MC00YTY0LWI1MjYt
MWEyNmI5ZDhmZWRlLzEvUnlOeXRsT1RHcUVNR0ROcTJYYVJFeUhQbTZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84ODk2MDgtMGY0MC00YTY0LWI1MjYtMWEyNmI5ZDhmZWRl
LzEvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubKIMA0E
AgACMAcDBQMqC/qAMA0GCSqGSIb3DQEBCwUAA4IBAQCuOxzWFhG1Cous31gY3cpp
Qde7xsnsBJR8GnF753Pii+vl/8xS0DXfd25spFAm0m5pylGkUdKnS/VjScDniPVx
VW6XCwbrZyijuVE/ZS+uktjP191lQrv6V5WlJhVmNGPPq20MrzX+3VSfXn6MF7VE
fEYYeDK+hsb0TcPk2nadDUNbXDdTETS0qtLRisGMtgHb0VuqhNjvMf0vU86TjD/Q
WTvH7M3fcVjhl77J7/ob4d3jx6IOJyzKqxUPoM88G6g1IkT9tdbvGav+OXXyo+es
988lQbisbe77M2GRTpVG9K/REN4t+iqrSfUQ3S00f6KrtnEOr+Dtq5It9RBkFiJW
-----END CERTIFICATE-----
Generated at Sat Jun 8 06:17:59 2024 by rpki-client on console-ams.rpki-client.org