Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/KaIAwA6AKtgZxfQ5t6jZL2Kdh1U.roa
File: KaIAwA6AKtgZxfQ5t6jZL2Kdh1U.roa (raw, json)
Hash identifier: TcsZTpsdzwev9cycyW4bU0DPkao1Gx+WDyZxiR0q/jE=
Subject key identifier: 29:A2:00:C0:0E:80:2A:D8:19:C5:F4:39:B7:A8:D9:2F:62:9D:87:55
Certificate issuer: /CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
Certificate serial: 018CC94AAFC0D3827429D34D8FD88D3088B8
Authority key identifier: 15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/KaIAwA6AKtgZxfQ5t6jZL2Kdh1U.roa
Signing time: Tue 02 Jan 2024 08:29:24 +0000
ROA not before: Tue 02 Jan 2024 08:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203376
IP address blocks: 185.136.200.0/22 maxlen: 22
2a06:ffc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:af:c0:d3:82:74:29:d3:4d:8f:d8:8d:30:88:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
Validity
Not Before: Jan 2 08:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29a200c00e802ad819c5f439b7a8d92f629d8755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8f:83:8b:9a:d8:e8:8d:7d:11:f1:50:c8:3d:
06:35:61:8f:5f:5f:f8:3c:ce:3f:84:68:4e:7c:cf:
5b:18:37:d3:e9:e6:58:02:87:31:bf:a0:7a:7a:d0:
61:be:cb:47:59:df:4f:d3:49:f5:82:c6:35:33:15:
bb:5e:ae:7a:c5:3f:8e:3f:03:77:31:45:fc:07:0c:
ce:1b:4b:96:7a:1e:3c:d1:13:75:eb:4b:e9:41:b4:
22:4f:a1:01:19:a6:83:db:a0:3a:87:9a:56:56:80:
d5:95:66:54:16:59:27:3a:99:dd:d9:fc:fe:84:6d:
76:9a:40:10:c4:5b:90:0c:a0:57:36:3a:9b:08:57:
3a:d2:9c:2a:47:68:b6:c2:e8:d2:39:18:f4:ac:cc:
b7:0a:d9:63:36:d6:a5:f7:40:b8:02:44:84:64:eb:
44:59:40:a4:9f:ae:a1:55:30:13:b9:91:b6:a5:e0:
c6:f0:4c:0a:b8:50:54:ac:b7:81:d4:34:da:3f:c6:
70:6b:48:ea:6b:55:8b:e8:55:07:c5:fa:8a:73:95:
17:8e:92:1a:cd:61:e0:a2:41:fc:fd:95:8b:fb:03:
06:6d:a8:ad:f6:f7:fd:d0:79:7d:f7:36:68:50:2d:
69:bb:a1:4a:70:9c:d4:ad:20:4c:eb:38:8a:90:5d:
71:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A2:00:C0:0E:80:2A:D8:19:C5:F4:39:B7:A8:D9:2F:62:9D:87:55
X509v3 Authority Key Identifier:
keyid:15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/KaIAwA6AKtgZxfQ5t6jZL2Kdh1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.200.0/22
IPv6:
2a06:ffc0::/29
Signature Algorithm: sha256WithRSAEncryption
69:a1:db:d8:2e:dc:ee:de:5a:c9:1c:e1:e3:6a:52:07:44:22:
56:bc:79:65:8b:23:72:ed:e6:b0:d8:a8:db:1d:79:f0:8f:55:
0d:03:b1:80:4e:ac:d4:9a:1d:6c:29:5d:15:8e:1b:b4:fe:e6:
3b:34:6c:c1:91:df:97:03:b3:dc:72:ad:85:65:b8:2e:d4:24:
22:b6:0c:59:28:02:b3:a7:aa:6f:3f:f1:ba:be:06:1c:65:43:
87:44:e9:61:ac:b6:c7:91:17:55:af:2f:96:5d:ca:cf:e1:34:
a0:d5:49:67:03:fa:87:07:c8:d1:f2:80:9e:99:6d:cf:9b:18:
e1:c6:d3:64:d2:f5:e9:7a:2b:cd:4f:75:9e:83:51:11:bd:c7:
7c:a0:d8:38:c9:96:45:aa:d4:73:5f:d9:04:4c:7b:7c:c5:bb:
31:2e:8a:cc:66:87:95:cf:e7:a8:10:59:23:c5:ec:e0:ca:9c:
7c:3c:39:fb:ae:8d:a8:70:b5:06:26:8b:e9:2e:15:8a:75:d8:
d9:18:a2:fa:f5:8d:df:4e:b7:6d:f0:8c:32:1b:f4:2d:b0:b1:
69:20:2b:c6:b3:ee:1a:52:05:9d:c9:8a:06:06:2b:1d:f5:53:
59:ef:23:16:86:99:cd:a3:98:20:60:46:40:55:db:9b:3d:fd:
41:dc:c2:f6
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzJSq/A04J0KdNNj9iNMIi4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NWY0OTQ5YmY3Y2RhY2YzZTlkNDY1N2IwOGNkODQ3ODBk
NDE3NDUwHhcNMjQwMTAyMDgyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWEyMDBjMDBlODAyYWQ4MTljNWY0MzliN2E4ZDkyZjYyOWQ4NzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY+Di5rY6I19EfFQyD0GNWGPX1/4
PM4/hGhOfM9bGDfT6eZYAocxv6B6etBhvstHWd9P00n1gsY1MxW7Xq56xT+OPwN3
MUX8BwzOG0uWeh480RN160vpQbQiT6EBGaaD26A6h5pWVoDVlWZUFlknOpnd2fz+
hG12mkAQxFuQDKBXNjqbCFc60pwqR2i2wujSORj0rMy3CtljNtal90C4AkSEZOtE
WUCkn66hVTATuZG2peDG8EwKuFBUrLeB1DTaP8Zwa0jqa1WL6FUHxfqKc5UXjpIa
zWHgokH8/ZWL+wMGbait9vf90Hl99zZoUC1pu6FKcJzUrSBM6ziKkF1x6QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCmiAMAOgCrYGcX0Obeo2S9inYdVMB8GA1UdIwQY
MBaAFBVfSUm/fNrPPp1GV7CM2EeA1BdFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlY5SlNiOTgyczgtblVaWHNJellSNERVRjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC84ZjYwMWUtYzU2Zi00MGQ0LTlhZDUt
MWJjZTNiYzY3OGVkLzEvS2FJQXdBNkFLdGdaeGZRNXQ2alpMMktkaDFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC84ZjYwMWUtYzU2Zi00MGQ0LTlhZDUtMWJjZTNiYzY3OGVk
LzEvRlY5SlNiOTgyczgtblVaWHNJellSNERVRjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYjIMA0E
AgACMAcDBQMqBv/AMA0GCSqGSIb3DQEBCwUAA4IBAQBpodvYLtzu3lrJHOHjalIH
RCJWvHlliyNy7eaw2KjbHXnwj1UNA7GATqzUmh1sKV0Vjhu0/uY7NGzBkd+XA7Pc
cq2FZbgu1CQitgxZKAKzp6pvP/G6vgYcZUOHROlhrLbHkRdVry+WXcrP4TSg1Uln
A/qHB8jR8oCemW3PmxjhxtNk0vXpeivNT3Weg1ERvcd8oNg4yZZFqtRzX9kETHt8
xbsxLorMZoeVz+eoEFkjxezgypx8PDn7ro2ocLUGJovpLhWKddjZGKL69Y3fTrdt
8IwyG/QtsLFpICvGs+4aUgWdyYoGBisd9VNZ7yMWhpnNo5ggYEZAVdubPf1B3ML2
-----END CERTIFICATE-----
Generated at Fri May 17 10:34:19 2024 by rpki-client on console-fra.rpki-client.org