Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/XViYcjBBfYhfCf7qAD1W0bUtt7M.roa
File: XViYcjBBfYhfCf7qAD1W0bUtt7M.roa (raw, json)
Hash identifier: MVDwE4Vck+Au9vSs9YiI+VRae8taQ1pjGF05fYuGaIA=
Subject key identifier: 5D:58:98:72:30:41:7D:88:5F:09:FE:EA:00:3D:56:D1:B5:2D:B7:B3
Certificate issuer: /CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Certificate serial: 018CC5DC1E43A28D577A211442E8225D261D
Authority key identifier: ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/XViYcjBBfYhfCf7qAD1W0bUtt7M.roa
Signing time: Mon 01 Jan 2024 16:29:46 +0000
ROA not before: Mon 01 Jan 2024 16:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202536
IP address blocks: 185.92.2.0/24 maxlen: 24
185.92.1.0/24 maxlen: 24
185.92.0.0/24 maxlen: 24
185.92.3.0/24 maxlen: 24
2a05:ef00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Dec 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:1e:43:a2:8d:57:7a:21:14:42:e8:22:5d:26:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Validity
Not Before: Jan 1 16:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d58987230417d885f09feea003d56d1b52db7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:03:fc:84:a5:11:71:2e:0f:d5:73:8d:96:2c:
2d:5d:48:57:3b:1a:59:f7:df:8c:89:7a:80:a2:03:
a2:ee:67:9b:10:67:2d:3e:01:cb:d8:72:63:92:30:
13:f0:89:cd:24:c8:aa:45:8b:df:8c:3c:ef:59:e3:
19:1e:77:ff:b5:4f:1f:73:c8:85:35:8e:b9:64:79:
a9:33:fd:d6:2b:0e:e5:44:6a:a3:b9:76:f7:83:55:
8b:68:63:ef:d5:4c:2c:9a:e6:6e:4f:51:c0:c2:4c:
ae:19:16:7f:9f:29:8f:00:6c:39:25:3a:77:dc:91:
f4:1a:48:24:cb:ee:f9:6e:e1:54:fa:ec:bc:18:39:
98:cd:55:57:71:4a:b5:d5:8a:e3:b6:9f:59:ab:99:
c6:4f:38:29:27:62:3c:5a:4a:b8:02:0a:d0:65:f0:
8d:52:f4:d1:47:dd:0b:42:19:db:75:77:f4:60:de:
9e:7f:73:9e:34:0f:bd:0e:34:9a:24:3d:b9:79:80:
c6:1b:99:88:7a:5b:6c:e6:18:5d:9c:1a:a3:a2:75:
c9:4d:a6:1d:ab:09:43:9f:83:18:ef:33:a5:eb:16:
4e:9a:6f:02:46:c4:6f:21:04:a2:07:09:98:76:01:
76:a5:a9:60:1a:6d:69:93:91:42:dc:c5:9c:06:45:
88:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:58:98:72:30:41:7D:88:5F:09:FE:EA:00:3D:56:D1:B5:2D:B7:B3
X509v3 Authority Key Identifier:
keyid:ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/XViYcjBBfYhfCf7qAD1W0bUtt7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.0.0/22
IPv6:
2a05:ef00::/29
Signature Algorithm: sha256WithRSAEncryption
18:f6:9c:e5:c0:f3:06:6a:fb:2f:4c:a2:dc:fb:af:6a:29:b7:
3d:19:85:2b:bd:8c:e8:5c:cb:4c:7a:52:4d:ba:26:9c:91:3f:
65:55:18:b2:45:5e:7b:7d:b1:97:b6:b4:20:0d:99:77:1a:6a:
72:83:a5:46:10:17:69:07:14:8b:c3:b7:57:0c:8f:e4:a3:3a:
0f:50:af:cf:c6:c6:ac:a4:3f:6b:b5:00:22:18:3f:eb:a1:70:
54:6e:8e:35:97:35:8e:4f:32:b7:55:a3:a8:1e:f2:07:e9:b2:
af:9a:a9:02:18:63:7f:ff:a1:01:37:87:2c:2f:48:21:3c:88:
ff:f2:13:d3:08:13:c7:70:f0:2a:46:42:52:7d:75:85:30:51:
14:2a:d3:83:e0:0d:98:9c:49:df:49:f7:25:7d:60:9c:62:b0:
02:c0:a0:86:4e:24:41:c0:71:99:23:57:82:dc:64:30:8e:5b:
45:2d:a7:52:6f:1c:51:e4:69:d6:fa:f4:4c:1c:35:c0:a6:89:
f1:50:3e:10:f9:ba:e4:e5:3b:7c:b8:6e:84:28:56:de:92:35:
1e:9f:aa:2c:14:a2:a4:cb:60:b9:fe:83:7f:d0:95:d0:de:37:
36:70:da:fe:57:23:c5:73:7b:16:6a:f1:b5:8a:80:4a:6f:88:
41:2d:c7:7b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzF3B5Doo1XeiEUQugiXSYdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZGQ2MWJhY2Y2NTRlNjY1ZDkxMmE3NmRlOGY2M2I1MDA0
YzdlNDgwHhcNMjQwMTAxMTYyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDU4OTg3MjMwNDE3ZDg4NWYwOWZlZWEwMDNkNTZkMWI1MmRiN2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAP8hKURcS4P1XONliwtXUhXOxpZ
99+MiXqAogOi7mebEGctPgHL2HJjkjAT8InNJMiqRYvfjDzvWeMZHnf/tU8fc8iF
NY65ZHmpM/3WKw7lRGqjuXb3g1WLaGPv1UwsmuZuT1HAwkyuGRZ/nymPAGw5JTp3
3JH0Gkgky+75buFU+uy8GDmYzVVXcUq11Yrjtp9Zq5nGTzgpJ2I8Wkq4AgrQZfCN
UvTRR90LQhnbdXf0YN6ef3OeNA+9DjSaJD25eYDGG5mIelts5hhdnBqjonXJTaYd
qwlDn4MY7zOl6xZOmm8CRsRvIQSiBwmYdgF2palgGm1pk5FC3MWcBkWIoQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFF1YmHIwQX2IXwn+6gA9VtG1LbezMB8GA1UdIwQY
MBaAFO3dYbrPZU5mXZEqdt6PY7UATH5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2QxaHVzOWxUbVpka1NwMjNvOWp0UUJNZmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wNDVhMzgtZTBiYS00ODdmLWI0NjEt
NzI2NmFmYzk4ZGJhLzEvWFZpWWNqQkJmWWhmQ2Y3cUFEMVcwYlV0dDdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wNDVhMzgtZTBiYS00ODdmLWI0NjEtNzI2NmFmYzk4ZGJh
LzEvN2QxaHVzOWxUbVpka1NwMjNvOWp0UUJNZmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVwAMA0E
AgACMAcDBQMqBe8AMA0GCSqGSIb3DQEBCwUAA4IBAQAY9pzlwPMGavsvTKLc+69q
Kbc9GYUrvYzoXMtMelJNuiackT9lVRiyRV57fbGXtrQgDZl3Gmpyg6VGEBdpBxSL
w7dXDI/kozoPUK/PxsaspD9rtQAiGD/roXBUbo41lzWOTzK3VaOoHvIH6bKvmqkC
GGN//6EBN4csL0ghPIj/8hPTCBPHcPAqRkJSfXWFMFEUKtOD4A2YnEnfSfclfWCc
YrACwKCGTiRBwHGZI1eC3GQwjltFLadSbxxR5GnW+vRMHDXAponxUD4Q+brk5Tt8
uG6EKFbekjUen6osFKKky2C5/oN/0JXQ3jc2cNr+VyPFc3sWavG1ioBKb4hBLcd7
-----END CERTIFICATE-----
Generated at Wed Dec 4 08:43:24 2024 by rpki-client on console-fra.rpki-client.org