Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/eUmfuZZ-oXCYp48DDsj212zIaK4.roa
File: eUmfuZZ-oXCYp48DDsj212zIaK4.roa (raw, json)
Hash identifier: 3CNtL1O87jF12eD2l3FTPjmD46JY1glDdX5+tHCZ74M=
Subject key identifier: 79:49:9F:B9:96:7E:A1:70:98:A7:8F:03:0E:C8:F6:D7:6C:C8:68:AE
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 018CC6B78CACB34ADA8B97C2C12BDA481188
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/eUmfuZZ-oXCYp48DDsj212zIaK4.roa
Signing time: Mon 01 Jan 2024 20:29:26 +0000
ROA not before: Mon 01 Jan 2024 20:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3267
IP address blocks: 185.220.194.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:8c:ac:b3:4a:da:8b:97:c2:c1:2b:da:48:11:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Jan 1 20:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79499fb9967ea17098a78f030ec8f6d76cc868ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:fe:3d:6b:ee:3a:1d:ce:57:b7:a4:17:98:
1a:25:db:f8:d3:34:f0:1c:46:19:14:3d:f5:e6:fb:
e3:7d:6d:4b:de:a2:0c:63:ce:9c:b6:dd:43:6c:d6:
b8:55:56:46:52:fe:e5:aa:52:35:9c:3f:31:53:2d:
69:fa:87:ac:13:ed:2a:e9:18:e2:f0:1f:ad:70:77:
25:b5:ce:08:df:3a:86:7c:6e:a2:e8:53:e8:8a:5d:
f3:a5:16:c3:45:5d:3b:6d:b4:78:80:af:cf:57:31:
f5:95:ce:11:2e:14:fc:f2:2c:3f:82:1b:c3:df:79:
d7:8b:5f:73:bb:8f:70:a5:80:cb:ad:76:0a:ba:f2:
b8:c1:5a:0b:c9:9f:3c:3d:fc:82:0e:45:13:10:01:
0a:b8:28:60:28:c6:69:4d:86:c5:45:41:df:2a:bc:
8f:71:73:0f:06:ea:6e:e1:2d:40:01:96:3a:36:6f:
f9:33:96:46:9d:47:b3:ec:40:ab:df:f6:e0:cf:1a:
4d:36:a4:f8:fa:86:e6:60:cb:22:c6:d6:20:7a:90:
38:1d:55:4b:78:4a:02:87:99:02:f1:7f:60:38:25:
5b:95:34:ac:8e:ff:20:97:00:65:29:a4:5e:5b:b4:
29:1d:5a:f0:30:45:49:69:c9:d5:78:2b:ca:8b:73:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:49:9F:B9:96:7E:A1:70:98:A7:8F:03:0E:C8:F6:D7:6C:C8:68:AE
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/eUmfuZZ-oXCYp48DDsj212zIaK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.194.0/23
Signature Algorithm: sha256WithRSAEncryption
73:39:16:22:d6:8a:14:63:3f:35:20:24:ae:63:61:fd:c8:a2:
4b:ca:32:65:66:59:2a:05:40:96:c1:ef:db:95:b9:d4:e6:2b:
a4:7b:7b:ee:3d:f8:04:2a:f3:f1:9e:a7:55:8d:16:6b:52:45:
aa:7d:49:97:ba:69:42:55:95:84:01:40:d3:98:34:70:d1:ec:
8e:01:4a:f1:7e:30:59:d0:f9:55:4b:1a:c4:08:94:83:20:78:
e2:18:44:14:ba:fc:d5:3b:35:28:ec:e9:7c:2a:00:a9:78:f6:
23:0c:2d:2d:47:da:9b:88:d3:ea:80:24:cf:30:12:24:2d:d2:
6d:37:12:d5:17:3b:8d:42:16:1a:18:24:36:94:d5:31:72:22:
e9:4e:6c:03:cd:21:28:0d:66:84:b1:49:aa:47:c4:18:ee:bb:
b0:11:d3:bf:49:08:c1:d5:76:34:f1:fb:06:45:2f:41:e5:3f:
d3:0b:54:72:4f:b6:8b:40:27:6d:d5:d1:4e:34:9a:68:68:cb:
06:43:81:4c:0d:f2:f6:7c:f2:4c:b9:48:d5:3e:76:6d:36:28:
8f:fc:5b:47:f2:ab:6f:32:03:94:75:c7:75:70:93:cd:b1:3d:
24:34:c7:df:87:f1:fa:2d:39:86:6e:0c:02:be:6b:22:30:76:
16:9e:09:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt4yss0rai5fCwSvaSBGIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMWY2MTViOTE4MzlmNTFlZDNhNWI1Mzc1M2IyN2IwMmM3
NmRhOTUwHhcNMjQwMTAxMjAyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTQ5OWZiOTk2N2VhMTcwOThhNzhmMDMwZWM4ZjZkNzZjYzg2OGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBv+PWvuOh3OV7ekF5gaJdv40zTw
HEYZFD315vvjfW1L3qIMY86ctt1DbNa4VVZGUv7lqlI1nD8xUy1p+oesE+0q6Rji
8B+tcHcltc4I3zqGfG6i6FPoil3zpRbDRV07bbR4gK/PVzH1lc4RLhT88iw/ghvD
33nXi19zu49wpYDLrXYKuvK4wVoLyZ88PfyCDkUTEAEKuChgKMZpTYbFRUHfKryP
cXMPBupu4S1AAZY6Nm/5M5ZGnUez7ECr3/bgzxpNNqT4+obmYMsixtYgepA4HVVL
eEoCh5kC8X9gOCVblTSsjv8glwBlKaReW7QpHVrwMEVJacnVeCvKi3OgXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHlJn7mWfqFwmKePAw7I9tdsyGiuMB8GA1UdIwQY
MBaAFP8fYVuRg59R7TpbU3U7J7AsdtqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9iNDE2YTUtZWU0Zi00Y2M3LWIwYzQt
NzQ3NWY3MGRmOWZhLzEvZVVtZnVaWi1vWENZcDQ4RERzajIxMnpJYUs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9iNDE2YTUtZWU0Zi00Y2M3LWIwYzQtNzQ3NWY3MGRmOWZh
LzEvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudzCMA0G
CSqGSIb3DQEBCwUAA4IBAQBzORYi1ooUYz81ICSuY2H9yKJLyjJlZlkqBUCWwe/b
lbnU5iuke3vuPfgEKvPxnqdVjRZrUkWqfUmXumlCVZWEAUDTmDRw0eyOAUrxfjBZ
0PlVSxrECJSDIHjiGEQUuvzVOzUo7Ol8KgCpePYjDC0tR9qbiNPqgCTPMBIkLdJt
NxLVFzuNQhYaGCQ2lNUxciLpTmwDzSEoDWaEsUmqR8QY7ruwEdO/SQjB1XY08fsG
RS9B5T/TC1RyT7aLQCdt1dFONJpoaMsGQ4FMDfL2fPJMuUjVPnZtNiiP/FtH8qtv
MgOUdcd1cJPNsT0kNMffh/H6LTmGbgwCvmsiMHYWnglu
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:46:15 2024 by rpki-client on console-fra.rpki-client.org