Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/4O80yslJAPAcYjs8vOsS1RYzt4k.roa
File: 4O80yslJAPAcYjs8vOsS1RYzt4k.roa (raw, json)
Hash identifier: AXqMUtCmzbbXYB4jpJWURhOCDn798jdqbSlIVtNaecU=
Subject key identifier: E0:EF:34:CA:C9:49:00:F0:1C:62:3B:3C:BC:EB:12:D5:16:33:B7:89
Certificate issuer: /CN=261b941dbe59651fafbba9724a12775e07edb635
Certificate serial: 018CC2DAD9B4FA5A58A1D95E785EFA6A4A29
Authority key identifier: 26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/4O80yslJAPAcYjs8vOsS1RYzt4k.roa
Signing time: Mon 01 Jan 2024 02:29:31 +0000
ROA not before: Mon 01 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31367
IP address blocks: 185.172.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d9:b4:fa:5a:58:a1:d9:5e:78:5e:fa:6a:4a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261b941dbe59651fafbba9724a12775e07edb635
Validity
Not Before: Jan 1 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0ef34cac94900f01c623b3cbceb12d51633b789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:78:82:64:a8:06:03:b1:97:a9:18:6c:3c:a3:
25:49:bf:1c:d5:26:6a:a2:72:1c:65:b6:d6:de:ce:
98:43:d2:c8:90:16:03:3d:eb:ea:02:79:ad:a8:20:
57:23:f3:37:9a:11:00:d8:c0:04:2e:6d:93:b4:bb:
8b:1c:88:20:55:2c:b2:ad:fd:44:23:3a:51:c2:d2:
8a:68:3d:4b:41:c5:f2:b2:b8:d4:f4:f3:2c:26:a4:
2c:9c:70:b6:d0:fc:14:09:de:4d:35:67:f9:3f:8d:
b9:9e:93:80:66:ac:a1:d7:e3:af:8f:21:7d:01:be:
4c:fd:19:90:55:88:66:67:11:fd:72:88:11:36:53:
57:4a:09:68:43:fd:f3:8f:e7:4b:96:85:39:5c:c1:
7c:74:b5:15:fd:7e:fe:51:89:c6:0a:85:85:24:84:
82:f1:e0:d6:3c:96:ba:f9:25:c5:40:d4:41:2b:66:
70:00:8b:f3:20:a4:48:33:93:8c:3c:12:92:95:e0:
09:45:60:ca:49:f4:34:a5:97:90:94:d0:79:bc:7c:
16:8b:dd:54:c1:9e:01:2c:17:70:7e:a3:c2:41:86:
d0:4a:c0:cf:52:f4:b8:e7:ef:22:9b:8a:54:44:01:
6a:a5:f8:35:22:f7:21:09:42:51:a4:24:8a:8f:0f:
ae:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EF:34:CA:C9:49:00:F0:1C:62:3B:3C:BC:EB:12:D5:16:33:B7:89
X509v3 Authority Key Identifier:
keyid:26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/4O80yslJAPAcYjs8vOsS1RYzt4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.152.0/22
Signature Algorithm: sha256WithRSAEncryption
06:df:ba:de:45:18:4c:ad:c6:48:ce:a0:f0:8a:e1:92:97:e1:
da:65:03:5e:3f:f5:84:7e:97:59:04:af:c0:29:00:d5:04:16:
6d:53:40:8a:5e:87:b8:60:6d:b3:24:5b:92:9b:61:b7:33:58:
ea:85:6a:97:1a:67:44:5b:6f:0e:f2:11:49:b6:7c:e0:57:62:
dc:4b:78:29:9a:2c:47:10:e4:13:84:5c:4b:db:40:b1:24:33:
95:19:a4:ea:08:ed:e8:0c:bd:ed:df:c4:ad:57:12:15:5b:14:
4b:eb:81:75:11:32:68:d0:f5:85:9e:9e:e6:31:c0:2a:39:ad:
be:5b:ef:2b:e2:84:49:1d:f4:0e:8d:0b:ff:20:a0:4a:eb:42:
28:6d:56:9a:37:3b:2a:28:f5:64:bc:74:c5:4b:4d:2c:01:1b:
15:11:9c:2b:f9:b3:79:d5:ac:37:32:b1:12:50:b0:5e:81:3f:
ff:3c:64:1d:fb:6e:de:02:b0:b6:07:8b:19:b8:3c:02:08:22:
27:66:2d:14:87:2f:0a:04:cc:7d:cc:ab:51:9f:d1:3c:cb:e8:
04:a5:c6:45:db:59:c5:0c:1e:9c:9c:e5:44:a6:93:b1:bd:af:
35:e9:52:47:7e:e4:dc:c1:06:e9:0b:fe:25:98:29:7a:26:f4:
46:72:f6:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2tm0+lpYodleeF76akopMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MWI5NDFkYmU1OTY1MWZhZmJiYTk3MjRhMTI3NzVlMDdl
ZGI2MzUwHhcNMjQwMTAxMDIyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGVmMzRjYWM5NDkwMGYwMWM2MjNiM2NiY2ViMTJkNTE2MzNiNzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13iCZKgGA7GXqRhsPKMlSb8c1SZq
onIcZbbW3s6YQ9LIkBYDPevqAnmtqCBXI/M3mhEA2MAELm2TtLuLHIggVSyyrf1E
IzpRwtKKaD1LQcXysrjU9PMsJqQsnHC20PwUCd5NNWf5P425npOAZqyh1+OvjyF9
Ab5M/RmQVYhmZxH9cogRNlNXSgloQ/3zj+dLloU5XMF8dLUV/X7+UYnGCoWFJISC
8eDWPJa6+SXFQNRBK2ZwAIvzIKRIM5OMPBKSleAJRWDKSfQ0pZeQlNB5vHwWi91U
wZ4BLBdwfqPCQYbQSsDPUvS45+8im4pURAFqpfg1IvchCUJRpCSKjw+uKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFODvNMrJSQDwHGI7PLzrEtUWM7eJMB8GA1UdIwQY
MBaAFCYblB2+WWUfr7upckoSd14H7bY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmh1VUhiNVpaUi12dTZseVNoSjNYZ2Z0dGpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8yZjgzMGYtYWY0ZC00ZDMzLWEzMDAt
Yjk4ZGY1NDRiYzIwLzEvNE84MHlzbEpBUEFjWWpzOHZPc1MxUll6dDRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8yZjgzMGYtYWY0ZC00ZDMzLWEzMDAtYjk4ZGY1NDRiYzIw
LzEvSmh1VUhiNVpaUi12dTZseVNoSjNYZ2Z0dGpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuayYMA0G
CSqGSIb3DQEBCwUAA4IBAQAG37reRRhMrcZIzqDwiuGSl+HaZQNeP/WEfpdZBK/A
KQDVBBZtU0CKXoe4YG2zJFuSm2G3M1jqhWqXGmdEW28O8hFJtnzgV2LcS3gpmixH
EOQThFxL20CxJDOVGaTqCO3oDL3t38StVxIVWxRL64F1ETJo0PWFnp7mMcAqOa2+
W+8r4oRJHfQOjQv/IKBK60IobVaaNzsqKPVkvHTFS00sARsVEZwr+bN51aw3MrES
ULBegT//PGQd+27eArC2B4sZuDwCCCInZi0Uhy8KBMx9zKtRn9E8y+gEpcZF21nF
DB6cnOVEppOxva816VJHfuTcwQbpC/4lmCl6JvRGcvaQ
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:48:39 2024 by rpki-client on console-fra.rpki-client.org