Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/DwSsD4Z4zweBJgTsJquv5pFelI8.roa
File: DwSsD4Z4zweBJgTsJquv5pFelI8.roa (raw, json)
Hash identifier: VLmUjM7Hp45g9QbZ2eXZOTaDU41X6ognuymVTGKyDuE=
Subject key identifier: 0F:04:AC:0F:86:78:CF:07:81:26:04:EC:26:AB:AF:E6:91:5E:94:8F
Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Certificate serial: 018CC56E6C2DF60A7899105DD4ABFA28C1AC
Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/DwSsD4Z4zweBJgTsJquv5pFelI8.roa
Signing time: Mon 01 Jan 2024 14:29:57 +0000
ROA not before: Mon 01 Jan 2024 14:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198167
IP address blocks: 185.138.222.0/23 maxlen: 23
185.138.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:6c:2d:f6:0a:78:99:10:5d:d4:ab:fa:28:c1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Validity
Not Before: Jan 1 14:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f04ac0f8678cf07812604ec26abafe6915e948f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:80:0a:3f:b0:f1:33:4c:9d:db:f2:25:62:0a:
69:77:75:4f:a6:5d:64:91:d5:1e:99:b4:13:57:f2:
f6:6b:64:64:e9:ca:8e:3c:0e:ce:13:cf:be:2a:ab:
af:e7:d7:d1:3b:9d:6a:25:a0:76:1e:9b:2e:55:15:
4f:3f:fa:8b:1d:3a:c7:81:02:0f:f4:94:15:f2:12:
53:96:5e:01:39:b1:78:e1:87:bc:9d:33:58:c9:7e:
21:6a:95:4c:08:76:59:76:cf:62:a0:97:0a:c4:b8:
85:44:b2:25:60:95:d0:3a:f4:a2:1d:16:3a:6d:c3:
f4:e1:c3:71:04:64:4b:57:91:de:54:a9:27:95:05:
ba:7a:70:63:b6:2a:7a:80:57:43:f5:53:c2:49:b0:
d5:9f:7d:02:8c:69:5a:d4:84:f8:6f:bc:0e:3a:72:
21:e8:6d:ea:7d:66:e5:45:c3:df:8d:fc:e6:c0:77:
9c:fd:9d:88:fa:03:67:75:0e:09:6d:14:71:26:b7:
c2:55:5a:f0:cf:b6:fd:0f:a6:b5:71:21:6f:d8:3f:
5d:39:44:30:68:e4:07:fc:4b:10:d4:de:dc:27:a1:
bd:b3:d7:db:79:7d:52:cb:81:b7:4a:21:97:b7:11:
5b:04:13:20:65:e5:81:5e:c7:f8:83:2d:a1:92:7a:
3b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:04:AC:0F:86:78:CF:07:81:26:04:EC:26:AB:AF:E6:91:5E:94:8F
X509v3 Authority Key Identifier:
keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/DwSsD4Z4zweBJgTsJquv5pFelI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.220.0/22
Signature Algorithm: sha256WithRSAEncryption
16:82:b4:0e:1b:6b:51:e0:8c:8b:56:e2:c8:53:2b:7d:3e:95:
df:69:0e:0c:29:8c:f9:6c:e9:5d:21:c3:0f:76:87:83:e5:c4:
03:87:de:d5:c1:0c:78:b2:d3:df:bb:3a:ed:7b:32:f0:fb:20:
f6:0e:84:97:be:8c:b7:93:43:7b:57:72:99:f5:ef:bd:9c:b9:
21:84:ca:28:48:d7:a0:3f:84:15:2e:fd:f2:dc:c5:c8:b6:ac:
54:4d:cb:31:78:0d:e9:a9:5b:7d:bd:24:27:41:a9:ec:fd:58:
49:2a:fc:0d:b7:d4:43:6e:9b:d4:53:eb:dc:e2:02:7a:69:77:
0b:92:75:28:d9:52:91:d3:d0:53:f6:3c:33:36:c7:02:c8:f3:
60:cf:e2:22:d2:f0:07:79:3b:4c:12:34:9e:21:16:75:be:5a:
0a:37:ae:f0:57:e8:38:e9:bc:63:2f:13:59:df:e7:75:11:80:
7e:e7:c3:39:d5:23:f7:00:9b:68:c1:83:43:f6:11:3e:d0:94:
62:00:b0:6b:e2:e0:f9:51:25:67:0a:66:d5:6c:e9:92:21:92:
3f:e0:e3:f8:fb:2e:48:3c:98:4f:d9:50:4d:3c:94:35:24:b1:
97:e0:38:c8:f4:dd:27:49:04:23:b0:8b:52:9c:67:ea:13:c5:
ba:33:84:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbmwt9gp4mRBd1Kv6KMGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZWExYjEyOTdkYmMzZjRiODFkOTEwYzI0NzZlYzgxZmMz
ZTk2OWIwHhcNMjQwMTAxMTQyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjA0YWMwZjg2NzhjZjA3ODEyNjA0ZWMyNmFiYWZlNjkxNWU5NDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4AKP7DxM0yd2/IlYgppd3VPpl1k
kdUembQTV/L2a2Rk6cqOPA7OE8++Kquv59fRO51qJaB2HpsuVRVPP/qLHTrHgQIP
9JQV8hJTll4BObF44Ye8nTNYyX4hapVMCHZZds9ioJcKxLiFRLIlYJXQOvSiHRY6
bcP04cNxBGRLV5HeVKknlQW6enBjtip6gFdD9VPCSbDVn30CjGla1IT4b7wOOnIh
6G3qfWblRcPfjfzmwHec/Z2I+gNndQ4JbRRxJrfCVVrwz7b9D6a1cSFv2D9dOUQw
aOQH/EsQ1N7cJ6G9s9fbeX1Sy4G3SiGXtxFbBBMgZeWBXsf4gy2hkno7VQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA8ErA+GeM8HgSYE7Carr+aRXpSPMB8GA1UdIwQY
MBaAFEvqGxKX28P0uB2RDCR27IH8PpabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81ZTQzYjAtOGYwZS00NjljLWI5Yjkt
ODZmNWQwYTExOTQ5LzEvRHdTc0Q0WjR6d2VCSmdUc0pxdXY1cEZlbEk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny81ZTQzYjAtOGYwZS00NjljLWI5YjktODZmNWQwYTExOTQ5
LzEvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYrcMA0G
CSqGSIb3DQEBCwUAA4IBAQAWgrQOG2tR4IyLVuLIUyt9PpXfaQ4MKYz5bOldIcMP
doeD5cQDh97VwQx4stPfuzrtezLw+yD2DoSXvoy3k0N7V3KZ9e+9nLkhhMooSNeg
P4QVLv3y3MXItqxUTcsxeA3pqVt9vSQnQans/VhJKvwNt9RDbpvUU+vc4gJ6aXcL
knUo2VKR09BT9jwzNscCyPNgz+Ii0vAHeTtMEjSeIRZ1vloKN67wV+g46bxjLxNZ
3+d1EYB+58M51SP3AJtowYND9hE+0JRiALBr4uD5USVnCmbVbOmSIZI/4OP4+y5I
PJhP2VBNPJQ1JLGX4DjI9N0nSQQjsItSnGfqE8W6M4QU
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:49 2024 by rpki-client on console-fra.rpki-client.org