Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/cw4i9_rju5qfpltGYM4WAWOc57Y.roa
File: cw4i9_rju5qfpltGYM4WAWOc57Y.roa (raw, json)
Hash identifier: IjUnsTLLMojD/667nA2vMdb0Uo9iHDHiVz4ngcTv8Xs=
Subject key identifier: 73:0E:22:F7:FA:E3:BB:9A:9F:A6:5B:46:60:CE:16:01:63:9C:E7:B6
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018CC348F22E5A8E3DD3550EA256A28661F7
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/cw4i9_rju5qfpltGYM4WAWOc57Y.roa
Signing time: Mon 01 Jan 2024 04:29:46 +0000
ROA not before: Mon 01 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 185.179.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f2:2e:5a:8e:3d:d3:55:0e:a2:56:a2:86:61:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 1 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=730e22f7fae3bb9a9fa65b4660ce1601639ce7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:03:16:41:fc:a9:71:af:7b:72:85:c1:62:
80:76:b4:a6:9e:b6:c9:98:06:27:a4:18:0c:f6:38:
ec:34:ff:3e:da:ec:84:c3:f8:99:d9:7e:04:3a:34:
eb:38:22:c8:ee:9d:b3:3a:ef:86:bf:9f:2a:43:9d:
84:18:99:4e:67:5b:26:02:3e:32:3c:c4:77:6a:bb:
38:f4:02:54:d1:3c:06:ed:e0:77:99:1d:47:ff:19:
cf:50:b9:81:da:e9:63:e6:75:11:61:96:99:85:65:
1f:b0:41:1c:1f:ea:4f:60:d5:75:d9:b5:df:bf:1a:
d1:93:9b:7d:fd:cf:14:c9:df:be:30:e3:90:5a:1e:
2d:40:2b:ff:80:14:6b:aa:04:16:4f:47:b5:45:48:
13:ca:c1:ba:74:fc:36:a1:54:76:14:4d:7a:d3:4d:
ee:21:2a:a5:1a:3d:24:c1:ee:ab:9d:9e:c6:8c:2f:
0d:1c:cb:5f:19:34:6e:e9:e9:b5:24:ed:9a:dd:e0:
07:fe:62:96:60:45:2a:bb:13:67:db:3f:3c:08:f8:
74:b7:10:37:3b:3e:62:8b:1e:16:da:00:2a:0a:18:
67:8f:c7:36:35:00:72:21:b0:ce:1f:16:26:bd:c9:
4a:06:50:29:e9:e0:30:57:d5:77:46:4b:75:ff:fe:
b6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0E:22:F7:FA:E3:BB:9A:9F:A6:5B:46:60:CE:16:01:63:9C:E7:B6
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/cw4i9_rju5qfpltGYM4WAWOc57Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.217.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:cc:f1:d2:7b:87:87:09:3b:e7:4a:67:31:e4:16:31:ae:f1:
5b:07:0d:a8:14:5a:da:57:90:85:da:6c:d3:7b:1f:56:a1:34:
ba:6d:07:54:62:e3:79:0a:cc:35:c2:bc:e1:16:71:a2:78:87:
e2:e2:f4:58:5d:60:bc:6a:14:14:c9:90:24:9a:59:b6:3f:69:
2f:6a:6d:b4:dc:42:51:e4:6c:70:95:20:74:ca:d1:8c:51:88:
ec:7a:50:41:03:ff:9b:e2:4f:3f:79:a2:1e:fa:4c:de:f0:2b:
92:dd:41:bd:bc:2b:e0:c8:66:8e:11:48:00:79:84:a3:f0:f2:
4e:53:8b:d8:3f:be:a8:8d:8b:c8:0a:e8:ea:24:e3:77:ae:51:
c6:7a:54:c2:6e:70:b1:85:b9:e2:fb:fb:24:d1:90:9a:e7:0c:
85:8f:b9:d0:f6:eb:b0:8d:d2:e5:ca:8a:6d:3d:43:02:09:59:
25:c0:57:d2:af:94:5a:1e:57:00:67:f6:63:08:8c:71:92:07:
49:7c:02:3d:f7:0e:11:57:d6:75:d0:e9:de:b2:1e:d6:86:45:
16:a6:51:16:95:a6:e9:39:25:27:e8:01:85:25:f9:c5:55:b1:
17:46:dc:93:63:27:9f:9f:e8:b0:b9:10:a4:36:02:e6:63:10:
1e:b5:99:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSPIuWo4901UOolaihmH3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0
NTgxNzMwHhcNMjQwMTAxMDQyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzBlMjJmN2ZhZTNiYjlhOWZhNjViNDY2MGNlMTYwMTYzOWNlN2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHEDFkH8qXGve3KFwWKAdrSmnrbJ
mAYnpBgM9jjsNP8+2uyEw/iZ2X4EOjTrOCLI7p2zOu+Gv58qQ52EGJlOZ1smAj4y
PMR3ars49AJU0TwG7eB3mR1H/xnPULmB2ulj5nURYZaZhWUfsEEcH+pPYNV12bXf
vxrRk5t9/c8Uyd++MOOQWh4tQCv/gBRrqgQWT0e1RUgTysG6dPw2oVR2FE16003u
ISqlGj0kwe6rnZ7GjC8NHMtfGTRu6em1JO2a3eAH/mKWYEUquxNn2z88CPh0txA3
Oz5iix4W2gAqChhnj8c2NQByIbDOHxYmvclKBlAp6eAwV9V3Rkt1//622QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHMOIvf647uan6ZbRmDOFgFjnOe2MB8GA1UdIwQY
MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt
M2NjODVhZDNjMTkwLzEvY3c0aTlfcmp1NXFmcGx0R1lNNFdBV09jNTdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw
LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubPZMA0G
CSqGSIb3DQEBCwUAA4IBAQBNzPHSe4eHCTvnSmcx5BYxrvFbBw2oFFraV5CF2mzT
ex9WoTS6bQdUYuN5Csw1wrzhFnGieIfi4vRYXWC8ahQUyZAkmlm2P2kvam203EJR
5GxwlSB0ytGMUYjselBBA/+b4k8/eaIe+kze8CuS3UG9vCvgyGaOEUgAeYSj8PJO
U4vYP76ojYvICujqJON3rlHGelTCbnCxhbni+/sk0ZCa5wyFj7nQ9uuwjdLlyopt
PUMCCVklwFfSr5RaHlcAZ/ZjCIxxkgdJfAI99w4RV9Z10Onesh7WhkUWplEWlabp
OSUn6AGFJfnFVbEXRtyTYyefn+iwuRCkNgLmYxAetZlp
-----END CERTIFICATE-----
Generated at Thu May 2 13:03:48 2024 by rpki-client on console-ams.rpki-client.org