Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/1I0HlI903CEitRz__YAFJEWqHPc.roa
File: 1I0HlI903CEitRz__YAFJEWqHPc.roa (raw, json)
Hash identifier: AhiCMOljo2Hmo/GtvQWXuOlJy8j63OiCCgsM9WGrXQA=
Subject key identifier: D4:8D:07:94:8F:74:DC:21:22:B5:1C:FF:FD:80:05:24:45:AA:1C:F7
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 018D7D397ADC3B6B708F6354153F777D1654
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/1I0HlI903CEitRz__YAFJEWqHPc.roa
Signing time: Tue 06 Feb 2024 07:02:15 +0000
ROA not before: Tue 06 Feb 2024 07:02:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201021
IP address blocks: 185.28.60.0/24 maxlen: 24
185.28.61.0/24 maxlen: 24
185.28.62.0/24 maxlen: 24
185.28.63.0/24 maxlen: 24
185.103.196.0/24 maxlen: 24
185.103.197.0/24 maxlen: 24
185.103.198.0/24 maxlen: 24
185.103.199.0/24 maxlen: 24
185.106.20.0/24 maxlen: 24
185.106.21.0/24 maxlen: 24
185.106.22.0/24 maxlen: 24
185.106.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:39:7a:dc:3b:6b:70:8f:63:54:15:3f:77:7d:16:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Feb 6 07:02:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d48d07948f74dc2122b51cfffd80052445aa1cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:79:f9:93:df:42:c3:09:83:cf:3f:c8:ce:8d:
05:81:d6:cd:f8:35:f2:0b:3b:e3:35:d8:cd:4b:7c:
38:e6:fb:e8:a2:d3:3f:df:d2:e2:f7:ed:09:c3:d9:
5e:70:64:24:9f:92:c1:79:d3:c7:54:69:81:98:f1:
57:0b:f0:cc:4f:1c:f4:ad:de:4a:da:5b:f7:5f:54:
27:87:bd:f7:6d:38:6c:4d:19:db:62:bd:b7:11:4d:
d7:e5:ab:aa:77:b4:62:86:90:75:f3:04:64:9e:c7:
e1:c6:d6:72:49:0b:38:37:d5:45:81:7d:00:36:71:
11:46:be:71:8c:99:ba:50:d1:a4:fc:fc:88:dd:bd:
b4:41:5e:83:7e:a8:9a:82:29:fe:13:34:3e:d4:30:
b4:c4:72:bb:a7:a4:40:0f:ca:fb:b8:e3:7d:58:58:
b1:dc:48:3a:e4:c8:59:7b:81:28:f6:54:0f:37:70:
a5:1e:9c:25:99:85:eb:65:54:ca:9a:17:75:c2:98:
e1:b4:94:9a:95:3a:cd:f5:7d:0e:10:4e:0d:c0:f7:
9a:85:c8:df:d5:72:07:a1:11:17:0f:69:3a:c4:19:
32:88:79:6c:b8:0e:c3:a3:20:1d:14:2e:9f:4c:9f:
cc:3d:39:88:3f:af:46:59:f2:b3:5d:c9:9f:dd:83:
54:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8D:07:94:8F:74:DC:21:22:B5:1C:FF:FD:80:05:24:45:AA:1C:F7
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/1I0HlI903CEitRz__YAFJEWqHPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.60.0/22
185.103.196.0/22
185.106.20.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:58:b5:5e:d8:67:31:44:5b:50:12:09:ae:4a:df:2f:78:2d:
74:ff:b7:b5:df:56:0c:4b:5b:d2:34:7f:84:c6:1e:cd:6d:81:
47:df:c4:b9:af:aa:98:e3:8f:2b:62:3f:a7:19:a8:b2:7b:67:
2e:c2:4e:11:b0:be:12:dc:06:47:78:02:69:35:8c:a0:f0:c4:
3e:38:dc:2f:cb:78:86:5d:e1:21:f6:13:5c:60:3a:84:4b:28:
22:a4:de:4f:05:a9:18:e6:d5:0f:3b:04:aa:8b:96:e7:26:57:
05:dc:eb:02:94:3e:6b:f8:15:f1:0f:62:92:c1:a1:ce:26:57:
72:b8:8f:9c:39:cd:c2:ae:ca:ae:dc:e1:98:8b:3c:db:a3:08:
8c:fc:13:3b:8f:1a:66:be:6e:32:a1:c0:84:3c:72:75:3e:21:
f0:7b:24:55:30:59:e7:d4:03:81:77:92:73:2b:1b:8e:88:a2:
52:9c:e3:50:e1:24:c9:a3:2c:85:fa:f8:c5:ec:a7:1f:bd:bf:
5d:75:f2:9b:df:77:85:35:4a:fc:93:4a:ac:ac:7b:ee:71:4a:
58:97:d8:65:e0:d3:d6:2b:3c:5e:27:78:ea:28:63:5d:ea:37:
4f:56:55:84:46:ae:e5:18:18:48:6c:93:00:3b:bc:a8:3f:ef:
f4:f2:1f:ef
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY19OXrcO2twj2NUFT93fRZUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZDUyNGEwNWQ0NzdiODJmYmNhOTNlN2E1MDRhYTMxYTNh
ZDY4NjMwHhcNMjQwMjA2MDcwMjE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDhkMDc5NDhmNzRkYzIxMjJiNTFjZmZmZDgwMDUyNDQ1YWExY2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnn5k99CwwmDzz/Izo0FgdbN+DXy
CzvjNdjNS3w45vvootM/39Li9+0Jw9lecGQkn5LBedPHVGmBmPFXC/DMTxz0rd5K
2lv3X1Qnh733bThsTRnbYr23EU3X5auqd7RihpB18wRknsfhxtZySQs4N9VFgX0A
NnERRr5xjJm6UNGk/PyI3b20QV6Dfqiagin+EzQ+1DC0xHK7p6RAD8r7uON9WFix
3Eg65MhZe4Eo9lQPN3ClHpwlmYXrZVTKmhd1wpjhtJSalTrN9X0OEE4NwPeahcjf
1XIHoREXD2k6xBkyiHlsuA7DoyAdFC6fTJ/MPTmIP69GWfKzXcmf3YNUEwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNSNB5SPdNwhIrUc//2ABSRFqhz3MB8GA1UdIwQY
MBaAFN/VJKBdR3uC+8qT56UEqjGjrWhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzlVa29GMUhlNEw3eXBQbnBRU3FNYU90YUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yMGMxODctMDBmZC00NTllLWFhZTQt
NDY3ZjRmN2Y1ZGVkLzEvMUkwSGxJOTAzQ0VpdFJ6X19ZQUZKRVdxSFBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8yMGMxODctMDBmZC00NTllLWFhZTQtNDY3ZjRmN2Y1ZGVk
LzEvMzlVa29GMUhlNEw3eXBQbnBRU3FNYU90YUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuRw8AwQC
uWfEAwQCuWoUMA0GCSqGSIb3DQEBCwUAA4IBAQC3WLVe2GcxRFtQEgmuSt8veC10
/7e131YMS1vSNH+Exh7NbYFH38S5r6qY448rYj+nGaiye2cuwk4RsL4S3AZHeAJp
NYyg8MQ+ONwvy3iGXeEh9hNcYDqESygipN5PBakY5tUPOwSqi5bnJlcF3OsClD5r
+BXxD2KSwaHOJldyuI+cOc3Crsqu3OGYizzbowiM/BM7jxpmvm4yocCEPHJ1PiHw
eyRVMFnn1AOBd5JzKxuOiKJSnONQ4STJoyyF+vjF7Kcfvb9ddfKb33eFNUr8k0qs
rHvucUpYl9hl4NPWKzxeJ3jqKGNd6jdPVlWERq7lGBhIbJMAO7yoP+/08h/v
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:31 2024 by rpki-client on console-fra.rpki-client.org