Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/Knwvea1OAdKXhIMl5TwQ1CJKkx0.roa
File: Knwvea1OAdKXhIMl5TwQ1CJKkx0.roa (raw, json)
Hash identifier: ywCO4kNiw9+8MICCCzFooxa2Qq1A/OKsYx1fNO/wU9w=
Subject key identifier: 2A:7C:2F:79:AD:4E:01:D2:97:84:83:25:E5:3C:10:D4:22:4A:93:1D
Certificate issuer: /CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124
Certificate serial: 018CC64A4F8336B97CAA78592C7F698F4305
Authority key identifier: BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/Knwvea1OAdKXhIMl5TwQ1CJKkx0.roa
Signing time: Mon 01 Jan 2024 18:30:07 +0000
ROA not before: Mon 01 Jan 2024 18:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211068
IP address blocks: 185.183.140.0/22 maxlen: 22
185.183.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:4f:83:36:b9:7c:aa:78:59:2c:7f:69:8f:43:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124
Validity
Not Before: Jan 1 18:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a7c2f79ad4e01d297848325e53c10d4224a931d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:11:93:4e:2f:79:54:e7:28:b3:3f:53:3c:
8d:bc:e6:a4:12:d2:4f:fb:9f:72:1d:fd:ff:bc:6c:
e5:2b:d4:c2:f7:9d:96:65:ce:87:f9:23:10:76:2e:
51:c1:9c:c1:39:0a:99:9a:34:3f:ab:ad:68:d8:60:
69:d8:bd:ce:bb:96:48:23:39:ec:9d:12:e9:37:f4:
e3:95:0f:20:d7:b8:d7:79:4c:e6:6a:41:c8:7f:28:
88:87:5a:e0:90:f0:ba:b0:3b:47:19:f9:da:87:43:
48:cf:0a:60:b5:07:ee:1c:07:7f:64:a4:c0:b1:d9:
5c:2b:ba:4b:59:c5:9e:9d:4b:af:65:d9:49:af:e3:
e2:ea:a6:5b:9e:c6:30:0d:ee:ce:7e:f8:c8:30:27:
a9:ae:c8:22:1e:2a:16:5b:11:3e:f3:50:a9:36:e7:
f8:c3:89:41:18:8e:03:40:3f:39:e5:db:92:7f:82:
9b:6d:a3:23:cd:92:5b:51:5f:33:f2:26:10:3b:c1:
c6:5d:f8:18:1a:10:3a:29:f1:f9:9a:93:81:69:90:
46:c8:5e:46:05:c7:64:cf:8b:fa:51:78:58:59:70:
f4:92:b3:ef:d8:5e:76:8e:9c:64:3e:c7:48:60:56:
50:6d:f5:4f:f5:5d:5f:2e:c4:f6:fe:08:f9:2d:d5:
fb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7C:2F:79:AD:4E:01:D2:97:84:83:25:E5:3C:10:D4:22:4A:93:1D
X509v3 Authority Key Identifier:
keyid:BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/Knwvea1OAdKXhIMl5TwQ1CJKkx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.140.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:a0:cb:ce:c0:02:fe:57:bb:20:ff:e8:ef:6c:b2:e4:a8:16:
16:be:66:07:40:80:67:73:a5:c1:f1:2d:b6:ef:b2:27:a7:c9:
f0:c4:f6:11:dc:cf:43:72:16:58:ea:d1:fe:9f:1c:62:7b:77:
2b:1e:15:a2:20:ea:3a:be:1e:93:85:13:5e:b6:af:53:7a:f7:
2f:e5:98:be:2e:64:78:e3:ba:3f:47:77:70:13:15:b0:43:87:
b0:96:15:9c:06:15:d8:49:03:70:4c:86:6c:50:ed:49:3c:d0:
89:ba:76:a5:4a:ad:a3:7c:19:23:bf:1d:32:7e:45:fe:37:41:
d4:b2:3f:27:03:7a:00:44:18:6c:ad:1f:09:97:98:a9:f2:d5:
9d:c3:9d:89:f4:bb:0d:37:eb:4a:a1:c5:84:95:70:8f:70:bc:
3a:8c:7c:b2:6c:9f:87:c0:b9:23:61:01:99:86:f5:a7:43:35:
d9:c3:49:de:56:a6:24:84:97:33:f2:37:c5:75:23:62:ee:a0:
2e:96:5d:fa:2d:9a:c7:88:6b:95:4b:06:4e:68:18:44:7f:90:
10:95:f2:1e:e9:8f:69:ad:54:79:54:ff:84:98:e5:ef:3e:cc:
e5:97:ca:eb:da:8f:63:e0:10:9b:4b:73:65:ec:73:b6:1f:8e:
40:97:5e:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSk+DNrl8qnhZLH9pj0MFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNGFiZDc4NGJmMGMwMjQ5YzAxMzlkNjEwZmY5MGE5YWUw
YjcxMjQwHhcNMjQwMTAxMTgzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTdjMmY3OWFkNGUwMWQyOTc4NDgzMjVlNTNjMTBkNDIyNGE5MzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0wRk04veVTnKLM/UzyNvOakEtJP
+59yHf3/vGzlK9TC952WZc6H+SMQdi5RwZzBOQqZmjQ/q61o2GBp2L3Ou5ZIIzns
nRLpN/TjlQ8g17jXeUzmakHIfyiIh1rgkPC6sDtHGfnah0NIzwpgtQfuHAd/ZKTA
sdlcK7pLWcWenUuvZdlJr+Pi6qZbnsYwDe7OfvjIMCeprsgiHioWWxE+81CpNuf4
w4lBGI4DQD855duSf4KbbaMjzZJbUV8z8iYQO8HGXfgYGhA6KfH5mpOBaZBGyF5G
Bcdkz4v6UXhYWXD0krPv2F52jpxkPsdIYFZQbfVP9V1fLsT2/gj5LdX7CwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCp8L3mtTgHSl4SDJeU8ENQiSpMdMB8GA1UdIwQY
MBaAFL1KvXhL8MAknAE51hD/kKmuC3EkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlVxOWVFdnd3Q1NjQVRuV0VQLVFxYTRMY1NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9lMTA0M2MtN2M3NS00ZmZjLWI0OTQt
YmI1ZjhiODA5YjBjLzEvS253dmVhMU9BZEtYaElNbDVUd1ExQ0pLa3gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9lMTA0M2MtN2M3NS00ZmZjLWI0OTQtYmI1ZjhiODA5YjBj
LzEvdlVxOWVFdnd3Q1NjQVRuV0VQLVFxYTRMY1NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubeMMA0G
CSqGSIb3DQEBCwUAA4IBAQBOoMvOwAL+V7sg/+jvbLLkqBYWvmYHQIBnc6XB8S22
77Inp8nwxPYR3M9DchZY6tH+nxxie3crHhWiIOo6vh6ThRNetq9Tevcv5Zi+LmR4
47o/R3dwExWwQ4ewlhWcBhXYSQNwTIZsUO1JPNCJunalSq2jfBkjvx0yfkX+N0HU
sj8nA3oARBhsrR8Jl5ip8tWdw52J9LsNN+tKocWElXCPcLw6jHyybJ+HwLkjYQGZ
hvWnQzXZw0neVqYkhJcz8jfFdSNi7qAull36LZrHiGuVSwZOaBhEf5AQlfIe6Y9p
rVR5VP+EmOXvPszll8rr2o9j4BCbS3Nl7HO2H45Al15s
-----END CERTIFICATE-----
Generated at Tue Nov 26 22:23:17 2024 by rpki-client on console-ams.rpki-client.org