Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/y1JPRqOFN5hGJcQVDznGCnOd_ms.roa
File: y1JPRqOFN5hGJcQVDznGCnOd_ms.roa (raw, json)
Hash identifier: NEWwO/i929geT9k9bm9C2rBWm5F87xxQ/lX1Ws9iEP8=
Subject key identifier: CB:52:4F:46:A3:85:37:98:46:25:C4:15:0F:39:C6:0A:73:9D:FE:6B
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018CC348F051A9DE4C04619D0BD01AA8F49C
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/y1JPRqOFN5hGJcQVDznGCnOd_ms.roa
Signing time: Mon 01 Jan 2024 04:29:46 +0000
ROA not before: Mon 01 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19437
IP address blocks: 148.222.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f0:51:a9:de:4c:04:61:9d:0b:d0:1a:a8:f4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 1 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb524f46a38537984625c4150f39c60a739dfe6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:95:98:f6:0c:42:44:44:84:fb:4b:4a:c7:76:
6c:46:70:13:7a:de:14:a5:01:45:9f:23:99:c9:d5:
6b:59:49:55:ec:90:8f:b9:9e:5e:9c:a9:e7:37:45:
c2:84:1e:0b:55:96:9e:e7:69:b3:99:53:b3:ef:a0:
21:45:3f:c4:ee:1d:3f:6c:97:39:00:07:9d:df:44:
ff:93:2f:8b:2f:e2:16:f3:ca:8c:6f:89:4a:b2:d4:
a6:98:fe:fd:61:1a:c7:70:af:60:54:6e:74:f9:56:
bf:2a:bc:ac:10:5d:2b:90:cd:9d:27:18:c6:fd:1c:
92:a6:79:ee:6d:f6:fe:96:db:09:2e:79:f3:b4:a6:
d9:e0:f9:30:59:cc:47:04:84:b4:ef:84:6a:95:86:
d4:75:4c:f9:40:52:d4:7e:27:4d:89:59:d8:0f:d8:
04:56:f1:21:ec:2a:c8:4e:8f:92:ad:30:f2:d2:8c:
e5:7d:12:a0:e0:a8:5a:0c:9c:0c:fe:f3:0e:0a:14:
a7:c4:fe:51:39:bd:75:5f:e3:56:d4:0b:56:2a:3e:
d7:3a:6b:8c:3d:fc:4d:b7:9b:8e:cb:2b:ce:27:3f:
79:66:48:7d:40:1e:3a:e3:e0:8b:66:34:5f:a1:d5:
c0:e9:ee:0a:c4:d1:be:c6:b3:7f:33:30:26:89:80:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:52:4F:46:A3:85:37:98:46:25:C4:15:0F:39:C6:0A:73:9D:FE:6B
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/y1JPRqOFN5hGJcQVDznGCnOd_ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.222.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:a6:90:08:0d:c6:a4:af:75:03:81:1d:88:00:45:a2:3a:e4:
36:72:63:fb:ff:41:b4:ba:f3:97:15:08:8b:9a:13:45:06:5a:
46:77:b5:50:01:30:38:9a:d8:c8:b3:d2:78:5b:05:0a:c5:85:
0e:b6:05:ed:15:ee:c9:28:3f:4a:4d:e8:e0:0e:95:ec:b7:a8:
25:a8:03:1b:08:6a:9b:ed:94:11:06:c4:e8:49:ac:82:a8:0b:
8c:95:a6:23:66:f4:71:5f:89:d8:6a:83:ac:80:db:76:f9:c5:
bd:36:4c:e6:fe:5f:56:8f:68:6a:39:7d:0d:75:20:3e:a0:17:
b2:2a:15:48:24:62:8d:61:08:17:fe:03:7c:b4:19:ae:f4:36:
07:ab:ae:16:56:9f:56:f4:e7:60:79:e0:67:2e:d4:2b:13:71:
90:68:e5:97:64:9f:41:4c:10:90:56:5e:5f:78:65:2e:e3:ac:
8a:80:ba:99:d0:34:81:82:7f:f0:02:ce:cf:92:e9:06:6a:87:
e9:df:13:3d:db:55:87:16:3d:f1:af:77:52:ea:4b:1b:f5:16:
f3:39:a0:da:cd:c0:40:ca:a5:74:d1:4f:63:2c:ad:4d:47:54:
b8:26:de:4e:5f:c8:86:21:de:63:dc:c5:8e:5f:62:90:8b:c8:
ca:33:f7:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSPBRqd5MBGGdC9AaqPScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0
NTgxNzMwHhcNMjQwMTAxMDQyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjUyNGY0NmEzODUzNzk4NDYyNWM0MTUwZjM5YzYwYTczOWRmZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJWY9gxCRESE+0tKx3ZsRnATet4U
pQFFnyOZydVrWUlV7JCPuZ5enKnnN0XChB4LVZae52mzmVOz76AhRT/E7h0/bJc5
AAed30T/ky+LL+IW88qMb4lKstSmmP79YRrHcK9gVG50+Va/KrysEF0rkM2dJxjG
/RySpnnubfb+ltsJLnnztKbZ4PkwWcxHBIS074RqlYbUdUz5QFLUfidNiVnYD9gE
VvEh7CrITo+SrTDy0ozlfRKg4KhaDJwM/vMOChSnxP5ROb11X+NW1AtWKj7XOmuM
PfxNt5uOyyvOJz95Zkh9QB464+CLZjRfodXA6e4KxNG+xrN/MzAmiYBoEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMtST0ajhTeYRiXEFQ85xgpznf5rMB8GA1UdIwQY
MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt
M2NjODVhZDNjMTkwLzEveTFKUFJxT0ZONWhHSmNRVkR6bkdDbk9kX21zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw
LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClN7wMA0G
CSqGSIb3DQEBCwUAA4IBAQCpppAIDcakr3UDgR2IAEWiOuQ2cmP7/0G0uvOXFQiL
mhNFBlpGd7VQATA4mtjIs9J4WwUKxYUOtgXtFe7JKD9KTejgDpXst6glqAMbCGqb
7ZQRBsToSayCqAuMlaYjZvRxX4nYaoOsgNt2+cW9Nkzm/l9Wj2hqOX0NdSA+oBey
KhVIJGKNYQgX/gN8tBmu9DYHq64WVp9W9OdgeeBnLtQrE3GQaOWXZJ9BTBCQVl5f
eGUu46yKgLqZ0DSBgn/wAs7PkukGaofp3xM921WHFj3xr3dS6ksb9RbzOaDazcBA
yqV00U9jLK1NR1S4Jt5OX8iGId5j3MWOX2KQi8jKM/fW
-----END CERTIFICATE-----
Generated at Thu May 2 02:03:38 2024 by rpki-client on console-fra.rpki-client.org