Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/4_iAdiEUqE6jEfEL4CU3NMhqwZY.roa
File: 4_iAdiEUqE6jEfEL4CU3NMhqwZY.roa (raw, json)
Hash identifier: vkDSI5PDIEILE5LWyJSaNfj6LvxgR18/4God94+TtcM=
Subject key identifier: E3:F8:80:76:21:14:A8:4E:A3:11:F1:0B:E0:25:37:34:C8:6A:C1:96
Certificate issuer: /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial: 0191A77D271FDF554EE3C31DAFFC922B148E
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/4_iAdiEUqE6jEfEL4CU3NMhqwZY.roa
Signing time: Sat 31 Aug 2024 08:11:22 +0000
ROA not before: Sat 31 Aug 2024 08:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47825
IP address blocks: 185.201.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a7:7d:27:1f:df:55:4e:e3:c3:1d:af:fc:92:2b:14:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Validity
Not Before: Aug 31 08:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3f880762114a84ea311f10be0253734c86ac196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:ca:fc:45:0f:d4:f0:ac:29:52:7a:c0:de:
09:b0:d6:ed:67:cb:f0:ac:51:51:7d:8e:b9:15:a6:
dd:d7:b9:84:c9:02:fd:31:b9:c5:57:fa:be:13:03:
6b:11:1c:99:bc:ed:34:93:51:17:78:70:9f:61:fb:
4d:58:b6:68:ed:b7:03:ea:e0:c3:40:e0:ed:be:0d:
45:5d:36:70:72:01:b6:08:d0:99:1c:d5:a0:26:8e:
d6:36:c4:31:b4:b6:fd:09:ec:59:61:9d:88:d2:33:
19:6d:ad:93:35:25:de:76:e2:d7:a9:05:9f:8a:b1:
7c:3b:b3:4c:74:d6:e1:a9:96:b3:e6:7c:ce:0e:f1:
c7:bf:2d:38:ea:e9:4e:f0:3d:41:59:67:9c:39:87:
f2:5e:41:02:6b:27:6f:66:bf:30:9c:2a:19:ee:81:
e3:7e:3b:14:94:e0:be:28:04:8e:19:0b:50:2b:77:
fb:95:58:63:82:84:20:34:7c:41:ee:27:45:94:9d:
0a:fc:1e:57:e5:a0:22:21:dd:8a:9e:b8:92:a9:3f:
09:88:1f:d4:2a:f6:cd:9a:ac:65:34:eb:e1:3b:73:
30:b6:ce:d7:cf:06:91:50:d0:21:e5:36:6f:5b:cd:
f5:01:06:cf:8a:1a:f4:11:f4:ba:b7:41:8e:09:de:
06:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F8:80:76:21:14:A8:4E:A3:11:F1:0B:E0:25:37:34:C8:6A:C1:96
X509v3 Authority Key Identifier:
keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/4_iAdiEUqE6jEfEL4CU3NMhqwZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.69.0/24
Signature Algorithm: sha256WithRSAEncryption
37:9f:d6:00:67:96:ba:0a:85:56:3a:6a:58:63:34:e6:c2:6d:
e0:f2:11:c7:74:3b:d0:03:17:b6:63:fb:bf:88:ed:96:01:5f:
d2:b3:14:ff:91:92:c7:3f:b7:61:f5:28:d3:79:cf:58:b4:31:
27:a2:11:0c:4d:4b:cf:17:60:e6:4d:9c:df:52:36:6c:7a:4e:
1a:26:4e:ae:0c:5b:03:51:7b:d7:0f:ce:cc:06:0d:9f:41:44:
7c:23:59:af:2d:30:f9:c8:c5:88:ab:c0:1f:33:0c:65:79:cc:
cd:ed:61:6d:d5:bb:e6:be:34:09:85:51:8c:81:bd:e3:2d:ec:
cc:f6:84:b8:c9:e2:ec:89:00:5a:27:5c:a7:34:2d:ce:1d:17:
63:75:a1:af:b5:f7:b3:b8:c1:08:dc:eb:35:3b:9b:27:d7:3f:
58:c5:25:24:4a:16:a0:d9:28:78:5a:9e:40:a5:d2:64:fd:cb:
3b:4d:f9:68:48:d3:3d:c1:75:5c:32:78:d0:63:ec:24:c5:39:
33:8b:7b:b1:b3:96:a4:6b:8f:29:5a:eb:88:32:43:ad:e4:0c:
0d:75:ce:e6:f3:17:86:82:fc:92:ae:5a:25:d2:db:64:a7:15:
a5:c4:42:0a:17:a7:05:b8:57:f3:97:71:0b:1a:89:dc:e2:99:
be:95:3e:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGnfScf31VO48Mdr/ySKxSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjdlN2NmODE3NmUzMDI3NjRkNDgyOTlmYzIyYTliZGM2
YmE2ODMwHhcNMjQwODMxMDgxMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2Y4ODA3NjIxMTRhODRlYTMxMWYxMGJlMDI1MzczNGM4NmFjMTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtLK/EUP1PCsKVJ6wN4JsNbtZ8vw
rFFRfY65Fabd17mEyQL9MbnFV/q+EwNrERyZvO00k1EXeHCfYftNWLZo7bcD6uDD
QODtvg1FXTZwcgG2CNCZHNWgJo7WNsQxtLb9CexZYZ2I0jMZba2TNSXeduLXqQWf
irF8O7NMdNbhqZaz5nzODvHHvy046ulO8D1BWWecOYfyXkECaydvZr8wnCoZ7oHj
fjsUlOC+KASOGQtQK3f7lVhjgoQgNHxB7idFlJ0K/B5X5aAiId2KnriSqT8JiB/U
KvbNmqxlNOvhO3Mwts7XzwaRUNAh5TZvW831AQbPihr0EfS6t0GOCd4GmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOP4gHYhFKhOoxHxC+AlNzTIasGWMB8GA1UdIwQY
MBaAFAP358+BduMCdk1IKZ/CKpvca6aDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUt
M2NmM2I0NjNhODZhLzEvNF9pQWRpRVVxRTZqRWZFTDRDVTNOTWhxd1pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUtM2NmM2I0NjNhODZh
LzEvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuclFMA0G
CSqGSIb3DQEBCwUAA4IBAQA3n9YAZ5a6CoVWOmpYYzTmwm3g8hHHdDvQAxe2Y/u/
iO2WAV/SsxT/kZLHP7dh9SjTec9YtDEnohEMTUvPF2DmTZzfUjZsek4aJk6uDFsD
UXvXD87MBg2fQUR8I1mvLTD5yMWIq8AfMwxleczN7WFt1bvmvjQJhVGMgb3jLezM
9oS4yeLsiQBaJ1ynNC3OHRdjdaGvtfezuMEI3Os1O5sn1z9YxSUkShag2Sh4Wp5A
pdJk/cs7TfloSNM9wXVcMnjQY+wkxTkzi3uxs5aka48pWuuIMkOt5AwNdc7m8xeG
gvySrlol0ttkpxWlxEIKF6cFuFfzl3ELGonc4pm+lT74
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:41 2024 by rpki-client on console-ams.rpki-client.org