Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/cLzHWV48v4VQjF4qhTbyNCjRyHk.roa
File: cLzHWV48v4VQjF4qhTbyNCjRyHk.roa (raw, json)
Hash identifier: RMbHHGjzv44pm1MnUODTFtgZjaOxAZLTK/hLxG3aEjw=
Subject key identifier: 70:BC:C7:59:5E:3C:BF:85:50:8C:5E:2A:85:36:F2:34:28:D1:C8:79
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 018CCA2A00340FFD189B267B14D08FC8CA46
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/cLzHWV48v4VQjF4qhTbyNCjRyHk.roa
Signing time: Tue 02 Jan 2024 12:33:19 +0000
ROA not before: Tue 02 Jan 2024 12:33:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59586
IP address blocks: 185.148.140.0/22 maxlen: 22
91.240.252.0/23 maxlen: 23
2a07:6000::/29 maxlen: 29
2001:67c:1ba4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:00:34:0f:fd:18:9b:26:7b:14:d0:8f:c8:ca:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Jan 2 12:33:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70bcc7595e3cbf85508c5e2a8536f23428d1c879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:ba:33:c7:77:1d:ee:a9:5e:32:f2:5b:db:
a8:32:f5:a9:8d:f7:06:ee:36:49:9f:a0:7d:7a:dd:
53:0f:a3:ba:bb:bf:65:6d:51:87:f7:0c:eb:60:9f:
ef:6e:f5:06:d4:57:44:2f:e6:67:b3:1c:07:17:62:
87:72:67:da:c4:ca:57:90:4f:2d:65:c2:36:4e:70:
ff:6b:74:14:6a:8f:24:98:da:2d:1c:68:aa:17:f4:
d0:26:01:8d:30:39:88:60:20:73:74:b1:89:d5:32:
7e:5e:b9:6f:10:9e:de:34:d2:a6:15:c7:ea:31:50:
cc:fd:de:ee:45:c1:22:b4:21:a2:0b:49:8d:1e:46:
32:3e:d5:e5:25:3b:da:a1:24:32:39:19:a3:fb:fe:
5c:b7:f8:4b:17:3f:b8:6a:08:02:03:5d:2f:0b:17:
8c:e7:ba:c6:fc:0b:0b:78:32:32:db:10:5c:65:6a:
6a:3c:77:32:40:b6:24:db:11:2f:91:7e:1b:b0:e6:
3d:9f:eb:ad:bf:70:7c:e7:08:41:e8:0c:0b:32:20:
35:dd:2f:2e:ac:d5:0e:61:21:27:bd:50:f4:8a:94:
7c:34:3f:be:73:05:11:2b:ab:6f:2f:88:52:a4:2e:
97:be:bf:1d:80:72:38:ea:87:eb:05:71:f7:5e:0a:
66:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BC:C7:59:5E:3C:BF:85:50:8C:5E:2A:85:36:F2:34:28:D1:C8:79
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/cLzHWV48v4VQjF4qhTbyNCjRyHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.252.0/23
185.148.140.0/22
IPv6:
2001:67c:1ba4::/48
2a07:6000::/29
Signature Algorithm: sha256WithRSAEncryption
92:fc:ae:8f:3e:19:4f:01:51:15:2a:a5:eb:04:7c:3f:ff:35:
76:1e:1e:ee:14:66:11:39:71:da:07:60:87:9c:0b:96:e8:18:
8f:ff:ba:e9:26:e8:60:0f:b6:32:d5:66:15:10:b2:43:8c:0f:
44:a8:ab:00:84:98:b2:1b:f8:f3:4e:d5:41:88:f2:56:99:11:
bc:9a:24:a2:e8:22:4d:3a:c9:e4:77:af:cb:35:b5:b6:dd:fc:
39:81:db:b7:71:41:38:d4:1c:3b:03:95:db:b4:ff:44:0c:30:
7f:bd:fe:31:c3:e9:14:fc:b9:29:74:03:a0:07:04:af:4b:c4:
7d:a5:dc:19:2c:0e:c2:06:0e:65:6e:d6:95:4b:33:56:c3:9d:
15:5f:a5:c1:bc:04:72:68:26:27:42:29:6e:d1:b7:ec:37:73:
5c:ec:72:e5:1d:8e:e3:82:c9:07:5c:a3:cc:01:0f:4a:3a:f6:
2c:3a:1d:e6:88:d6:fc:51:d7:ea:f7:f7:e0:33:48:c8:12:67:
bf:b6:6f:dd:b2:f2:86:5d:db:66:cc:e9:9b:35:d5:25:9e:25:
e8:b4:cb:1c:56:41:8c:24:24:d3:04:6c:2e:ad:17:90:98:53:
35:32:83:73:f4:be:0b:0c:72:9a:d0:75:0d:ea:90:ee:12:6f:
2f:e8:d4:e8
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYzKKgA0D/0YmyZ7FNCPyMpGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMDRjYTRhOTY2MTYzMWM0ZWM2MTVhM2E2ZDE1ZDIyMDMw
ZGNmNDkwHhcNMjQwMTAyMTIzMzE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGJjYzc1OTVlM2NiZjg1NTA4YzVlMmE4NTM2ZjIzNDI4ZDFjODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMu6M8d3He6pXjLyW9uoMvWpjfcG
7jZJn6B9et1TD6O6u79lbVGH9wzrYJ/vbvUG1FdEL+ZnsxwHF2KHcmfaxMpXkE8t
ZcI2TnD/a3QUao8kmNotHGiqF/TQJgGNMDmIYCBzdLGJ1TJ+XrlvEJ7eNNKmFcfq
MVDM/d7uRcEitCGiC0mNHkYyPtXlJTvaoSQyORmj+/5ct/hLFz+4aggCA10vCxeM
57rG/AsLeDIy2xBcZWpqPHcyQLYk2xEvkX4bsOY9n+utv3B85whB6AwLMiA13S8u
rNUOYSEnvVD0ipR8ND++cwURK6tvL4hSpC6Xvr8dgHI46ofrBXH3XgpmcwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFHC8x1lePL+FUIxeKoU28jQo0ch5MB8GA1UdIwQY
MBaAFGoEykqWYWMcTsYVo6bRXSIDDc9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mYTRlNjktNTc1ZS00NmViLWI5YzMt
ODExM2RhNjdlZjc1LzEvY0x6SFdWNDh2NFZRakY0cWhUYnlOQ2pSeUhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9mYTRlNjktNTc1ZS00NmViLWI5YzMtODExM2RhNjdlZjc1
LzEvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQBW/D8AwQC
uZSMMBYEAgACMBADBwAgAQZ8G6QDBQMqB2AAMA0GCSqGSIb3DQEBCwUAA4IBAQCS
/K6PPhlPAVEVKqXrBHw//zV2Hh7uFGYROXHaB2CHnAuW6BiP/7rpJuhgD7Yy1WYV
ELJDjA9EqKsAhJiyG/jzTtVBiPJWmRG8miSi6CJNOsnkd6/LNbW23fw5gdu3cUE4
1Bw7A5XbtP9EDDB/vf4xw+kU/LkpdAOgBwSvS8R9pdwZLA7CBg5lbtaVSzNWw50V
X6XBvARyaCYnQilu0bfsN3Nc7HLlHY7jgskHXKPMAQ9KOvYsOh3miNb8Udfq9/fg
M0jIEme/tm/dsvKGXdtmzOmbNdUlniXotMscVkGMJCTTBGwurReQmFM1MoNz9L4L
DHKa0HUN6pDuEm8v6NTo
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:07:34 2024 by rpki-client on console-ams.rpki-client.org