Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/X2ktVVVwhCYoPACEryBuePTWnJU.roa
File: X2ktVVVwhCYoPACEryBuePTWnJU.roa (raw, json)
Hash identifier: zcvcVkia+7b/WQr22QQglZHPkG93+Qa5U0FMm+XxsHY=
Subject key identifier: 5F:69:2D:55:55:70:84:26:28:3C:00:84:AF:20:6E:78:F4:D6:9C:95
Certificate issuer: /CN=7dec279b0501730698a30bcdcea3ae477c957331
Certificate serial: 018CC348926DF6879F3BE41E485DDA629EA6
Authority key identifier: 7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/X2ktVVVwhCYoPACEryBuePTWnJU.roa
Signing time: Mon 01 Jan 2024 04:29:22 +0000
ROA not before: Mon 01 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41605
IP address blocks: 185.82.148.0/22 maxlen: 22
185.82.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:92:6d:f6:87:9f:3b:e4:1e:48:5d:da:62:9e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec279b0501730698a30bcdcea3ae477c957331
Validity
Not Before: Jan 1 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f692d5555708426283c0084af206e78f4d69c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:83:e8:04:47:ef:d2:03:f2:6e:89:75:6d:09:
95:0a:b5:ca:72:92:4b:8d:c7:22:95:db:38:ba:b4:
d2:36:d9:08:03:46:8c:e1:4f:51:f4:71:52:46:b3:
5e:cc:bd:15:26:4c:05:0a:b6:e2:a5:1e:b8:7d:46:
ac:2f:6b:50:51:f6:bb:3f:94:ab:4f:a3:29:15:41:
42:29:34:a6:32:76:24:db:c7:b4:75:83:b2:de:52:
cc:d8:2b:0a:91:72:b0:00:7d:76:66:1d:54:d6:a7:
11:43:c8:2e:70:04:8d:1b:34:7c:97:fa:16:84:83:
a5:fb:99:66:36:bf:58:a4:63:ec:0f:1a:c6:4e:7e:
0c:af:3c:85:0a:e8:65:b8:42:ba:1f:0d:19:3b:81:
76:51:8b:59:99:44:31:64:74:d8:de:2a:5c:ed:ec:
dd:d3:69:33:0b:1d:68:62:56:d6:cb:0e:7f:9c:04:
92:1f:43:3f:8f:6b:b2:8b:03:a6:0d:bf:08:4c:96:
e5:7f:83:7b:33:0e:37:70:7d:82:c9:35:50:b3:e4:
11:f7:74:34:ad:a5:f1:be:75:6d:cf:9e:76:1a:16:
ed:a9:7c:9d:03:89:39:27:82:00:95:5f:d9:2d:d1:
1d:a2:9d:06:a4:92:c6:5a:8f:c1:fb:24:14:f5:66:
c2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:69:2D:55:55:70:84:26:28:3C:00:84:AF:20:6E:78:F4:D6:9C:95
X509v3 Authority Key Identifier:
keyid:7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/X2ktVVVwhCYoPACEryBuePTWnJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.148.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:05:38:13:b1:69:5c:86:6b:40:fe:49:a7:0a:01:7f:56:cc:
f8:82:3e:c7:e4:d0:6f:25:18:4d:01:8f:ea:cb:00:61:08:b4:
f8:05:1a:ac:09:17:ec:b2:63:31:2f:67:da:4b:e0:fb:ef:1f:
4f:35:9a:ff:1d:d6:76:c0:a4:ef:33:d7:45:27:50:7d:2a:01:
8c:67:39:41:c1:82:50:e2:dc:f4:81:95:8e:cb:9c:5f:3f:78:
43:c0:9d:c7:5f:37:ec:ef:e2:24:da:86:56:93:58:fd:9d:46:
4b:31:2e:0e:f5:c2:35:1f:5c:65:1f:14:ac:d3:3d:07:fc:9a:
af:a0:5e:77:7a:e0:11:bb:8b:94:7e:7c:27:2b:e9:de:b7:97:
c5:85:e5:45:c9:5f:5f:55:52:4c:0e:7a:a2:69:79:41:7f:93:
6d:af:c9:92:73:db:a8:11:ad:40:2f:6b:84:21:07:3b:07:10:
dd:cc:30:60:e9:c3:88:97:68:0e:c1:4c:46:dd:2c:e5:e0:15:
fd:91:4e:30:e1:ef:a9:6c:fe:c7:d8:70:6b:15:13:19:a6:e0:
9a:77:9f:ef:7f:42:e0:e1:c6:d7:0e:16:8e:11:fc:2c:a1:e8:
a6:88:d8:1b:f5:3c:46:7a:70:08:c0:e4:be:dc:69:c1:fc:71:
f4:ad:2c:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSJJt9oefO+QeSF3aYp6mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZWMyNzliMDUwMTczMDY5OGEzMGJjZGNlYTNhZTQ3N2M5
NTczMzEwHhcNMjQwMTAxMDQyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjY5MmQ1NTU1NzA4NDI2MjgzYzAwODRhZjIwNmU3OGY0ZDY5Yzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYPoBEfv0gPybol1bQmVCrXKcpJL
jccilds4urTSNtkIA0aM4U9R9HFSRrNezL0VJkwFCrbipR64fUasL2tQUfa7P5Sr
T6MpFUFCKTSmMnYk28e0dYOy3lLM2CsKkXKwAH12Zh1U1qcRQ8gucASNGzR8l/oW
hIOl+5lmNr9YpGPsDxrGTn4MrzyFCuhluEK6Hw0ZO4F2UYtZmUQxZHTY3ipc7ezd
02kzCx1oYlbWyw5/nASSH0M/j2uyiwOmDb8ITJblf4N7Mw43cH2CyTVQs+QR93Q0
raXxvnVtz552GhbtqXydA4k5J4IAlV/ZLdEdop0GpJLGWo/B+yQU9WbCxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF9pLVVVcIQmKDwAhK8gbnj01pyVMB8GA1UdIwQY
MBaAFH3sJ5sFAXMGmKMLzc6jrkd8lXMxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmV3bm13VUJjd2FZb3d2TnpxT3VSM3lWY3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kZWI5N2ItZGVmMS00NjQ2LWE1ZWQt
ZDg5ZTY0MTE4M2YzLzEvWDJrdFZWVndoQ1lvUEFDRXJ5QnVlUFRXbkpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9kZWI5N2ItZGVmMS00NjQ2LWE1ZWQtZDg5ZTY0MTE4M2Yz
LzEvZmV3bm13VUJjd2FZb3d2TnpxT3VSM3lWY3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVKUMA0G
CSqGSIb3DQEBCwUAA4IBAQCgBTgTsWlchmtA/kmnCgF/Vsz4gj7H5NBvJRhNAY/q
ywBhCLT4BRqsCRfssmMxL2faS+D77x9PNZr/HdZ2wKTvM9dFJ1B9KgGMZzlBwYJQ
4tz0gZWOy5xfP3hDwJ3HXzfs7+Ik2oZWk1j9nUZLMS4O9cI1H1xlHxSs0z0H/Jqv
oF53euARu4uUfnwnK+net5fFheVFyV9fVVJMDnqiaXlBf5Ntr8mSc9uoEa1AL2uE
IQc7BxDdzDBg6cOIl2gOwUxG3Szl4BX9kU4w4e+pbP7H2HBrFRMZpuCad5/vf0Lg
4cbXDhaOEfwsoeimiNgb9TxGenAIwOS+3GnB/HH0rSwe
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:06:27 2024 by rpki-client on console-fra.rpki-client.org