Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/hMLZsMP0mCFYSbg_SWPJD5KtUOw.roa
File: hMLZsMP0mCFYSbg_SWPJD5KtUOw.roa (raw, json)
Hash identifier: Xt+fjgZ6o1ArGnkOE+NirbQvi6woh8S78/lTIi2NfLk=
Subject key identifier: 84:C2:D9:B0:C3:F4:98:21:58:49:B8:3F:49:63:C9:0F:92:AD:50:EC
Certificate issuer: /CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Certificate serial: 018CC94BEF3309092E5FE459D562463E3AF6
Authority key identifier: CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/hMLZsMP0mCFYSbg_SWPJD5KtUOw.roa
Signing time: Tue 02 Jan 2024 08:30:45 +0000
ROA not before: Tue 02 Jan 2024 08:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52165
IP address blocks: 185.185.185.0/24 maxlen: 24
185.185.184.0/24 maxlen: 24
185.185.186.0/24 maxlen: 24
185.185.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:ef:33:09:09:2e:5f:e4:59:d5:62:46:3e:3a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Validity
Not Before: Jan 2 08:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84c2d9b0c3f498215849b83f4963c90f92ad50ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fa:cb:17:26:72:c8:a8:de:90:8b:69:c5:ce:
ef:53:82:c2:5f:67:a9:0a:16:56:a7:f5:39:a4:2f:
c0:d8:ac:9f:47:26:27:57:2f:71:50:f0:fc:dc:e0:
6d:ba:06:77:b5:e0:74:3d:0b:4d:d2:c5:5d:4b:b1:
09:69:54:9f:6e:f8:d2:ff:9d:20:35:3f:6b:16:95:
d7:74:cd:44:14:11:93:f7:0b:e2:ef:0c:d8:54:d1:
67:a0:3f:7e:19:f4:cc:86:00:db:33:b0:13:b5:e1:
fc:85:a7:5e:1c:9d:81:f4:5a:71:43:ae:e7:8a:0b:
e7:ef:22:e8:3c:a3:aa:0c:ad:68:5f:81:3c:ad:af:
95:ed:d1:8f:2d:a5:c6:90:a1:81:8a:87:77:b5:d6:
d4:d4:b2:6a:fc:ba:7d:48:6e:7b:be:a7:eb:65:6b:
03:1d:9e:7b:67:31:7e:54:ac:b0:60:a9:33:30:43:
97:9c:05:83:48:9c:34:b6:39:b1:ca:66:8d:c4:a0:
23:96:67:e1:88:5c:06:6c:a6:8c:9c:61:e5:b4:7f:
7a:b6:a9:54:31:89:66:79:9a:1a:d2:19:e6:67:9a:
02:18:65:90:c9:d2:4f:27:9a:aa:2f:83:7a:b4:ee:
93:e4:60:1e:92:8c:f7:fa:a5:48:59:10:4e:4b:1e:
eb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C2:D9:B0:C3:F4:98:21:58:49:B8:3F:49:63:C9:0F:92:AD:50:EC
X509v3 Authority Key Identifier:
keyid:CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/hMLZsMP0mCFYSbg_SWPJD5KtUOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.184.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:c5:ea:ab:c4:9a:f8:8d:cb:de:0f:dc:a0:a5:08:6c:bc:cb:
9a:18:53:b8:a5:32:bf:34:91:a3:e7:fd:4c:e7:d6:09:12:8b:
00:97:4f:9a:3f:67:1f:7b:0b:f7:3d:85:a3:ac:e0:3c:59:42:
d4:fe:ec:94:d0:96:48:0b:9b:48:18:c0:12:52:d0:b6:2e:22:
02:99:12:d0:6c:bb:cb:af:20:8d:16:38:76:bb:bc:50:5f:28:
8c:22:37:58:48:65:14:d2:f7:ce:08:e9:7f:31:7e:c7:f1:ed:
39:f7:c9:e6:59:04:c4:29:38:83:60:80:3d:82:0e:52:d7:46:
12:96:2c:c1:d6:35:77:0e:a4:09:c1:98:8e:59:c7:db:f5:43:
f1:d7:23:15:3d:fb:16:cf:c3:ee:e6:c5:6f:b5:74:8e:53:46:
e2:eb:8a:5b:e4:52:be:ad:83:fb:a9:df:9d:dd:35:ca:07:3e:
1d:b0:18:21:7d:ec:af:e5:83:f2:e1:a1:b3:14:6c:e4:5b:c5:
5b:c7:63:64:61:87:31:bd:9f:9d:d9:a8:a2:6a:b6:a8:4b:a3:
ab:e5:66:b3:54:6e:3d:ed:e1:d5:d3:46:5b:67:f8:23:0c:51:
16:9a:77:df:d6:c1:46:c2:2b:3b:49:5d:49:b1:09:4c:77:3a:
a8:7f:20:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJS+8zCQkuX+RZ1WJGPjr2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmOWYwMmRiZDk3MjU5NWEzMWNhYmVhYjBjZDk1ZDcwNmE4
Y2RkMzEwHhcNMjQwMTAyMDgzMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGMyZDliMGMzZjQ5ODIxNTg0OWI4M2Y0OTYzYzkwZjkyYWQ1MGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfrLFyZyyKjekItpxc7vU4LCX2ep
ChZWp/U5pC/A2KyfRyYnVy9xUPD83OBtugZ3teB0PQtN0sVdS7EJaVSfbvjS/50g
NT9rFpXXdM1EFBGT9wvi7wzYVNFnoD9+GfTMhgDbM7ATteH8hadeHJ2B9FpxQ67n
igvn7yLoPKOqDK1oX4E8ra+V7dGPLaXGkKGBiod3tdbU1LJq/Lp9SG57vqfrZWsD
HZ57ZzF+VKywYKkzMEOXnAWDSJw0tjmxymaNxKAjlmfhiFwGbKaMnGHltH96tqlU
MYlmeZoa0hnmZ5oCGGWQydJPJ5qqL4N6tO6T5GAekoz3+qVIWRBOSx7rMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFITC2bDD9JghWEm4P0ljyQ+SrVDsMB8GA1UdIwQY
MBaAFM+fAtvZcllaMcq+qwzZXXBqjN0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejU4QzI5bHlXVm94eXI2ckRObGRjR3FNM1RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80ZTdjZjktYTlkZi00YmEzLWFmNzct
ZTI3MDdlMTk3NTQxLzEvaE1MWnNNUDBtQ0ZZU2JnX1NXUEpENUt0VU93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi80ZTdjZjktYTlkZi00YmEzLWFmNzctZTI3MDdlMTk3NTQx
LzEvejU4QzI5bHlXVm94eXI2ckRObGRjR3FNM1RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubm4MA0G
CSqGSIb3DQEBCwUAA4IBAQB7xeqrxJr4jcveD9ygpQhsvMuaGFO4pTK/NJGj5/1M
59YJEosAl0+aP2cfewv3PYWjrOA8WULU/uyU0JZIC5tIGMASUtC2LiICmRLQbLvL
ryCNFjh2u7xQXyiMIjdYSGUU0vfOCOl/MX7H8e0598nmWQTEKTiDYIA9gg5S10YS
lizB1jV3DqQJwZiOWcfb9UPx1yMVPfsWz8Pu5sVvtXSOU0bi64pb5FK+rYP7qd+d
3TXKBz4dsBghfeyv5YPy4aGzFGzkW8Vbx2NkYYcxvZ+d2aiiaraoS6Or5WazVG49
7eHV00ZbZ/gjDFEWmnff1sFGwis7SV1JsQlMdzqofyC5
-----END CERTIFICATE-----
Generated at Fri Sep 27 22:05:41 2024 by rpki-client on console-fra.rpki-client.org