Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/RP0tGcUWeKQ6qQjHJFGgMXSPkoc.roa
File: RP0tGcUWeKQ6qQjHJFGgMXSPkoc.roa (raw, json)
Hash identifier: OfDe7NfUMJbqa46QZ0/ACvjmE1T8UJfjQmmUodRTb7w=
Subject key identifier: 44:FD:2D:19:C5:16:78:A4:3A:A9:08:C7:24:51:A0:31:74:8F:92:87
Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial: 018CC424647E1808ADD8C5A4382CAD00E73F
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/RP0tGcUWeKQ6qQjHJFGgMXSPkoc.roa
Signing time: Mon 01 Jan 2024 08:29:28 +0000
ROA not before: Mon 01 Jan 2024 08:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 185.187.104.0/24 maxlen: 24
185.187.105.0/24 maxlen: 24
185.187.107.0/24 maxlen: 24
185.187.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:64:7e:18:08:ad:d8:c5:a4:38:2c:ad:00:e7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
Validity
Not Before: Jan 1 08:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44fd2d19c51678a43aa908c72451a031748f9287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7d:a1:c7:f7:76:20:cc:d9:09:55:b7:2d:dc:
e6:32:6b:3f:7e:02:05:cb:6a:46:9f:9f:30:4c:e3:
ad:52:1a:7c:d4:01:9b:5f:f0:a1:9b:2a:e2:61:fa:
27:2c:43:5f:7a:80:26:34:3a:c2:ed:c6:85:c5:40:
a8:75:ed:e5:a7:ec:1f:ac:40:0e:c8:0f:ff:a0:f3:
d6:1a:04:f5:3c:8f:9b:94:29:de:32:52:1f:94:51:
aa:8f:3b:3a:70:f1:21:9c:fe:75:e3:16:75:3a:e0:
71:b1:31:88:cb:19:a0:ae:05:4d:b3:6d:59:b1:dc:
aa:22:77:f1:60:c2:ba:c1:5b:34:de:77:bd:8f:f0:
21:84:eb:d8:5e:95:7f:7b:11:ff:46:70:7d:89:51:
4d:93:9b:cd:e0:cb:8c:9b:2a:4d:02:d1:af:b7:56:
0b:00:35:11:d5:ee:43:be:87:c1:68:2d:bf:81:12:
7c:f9:9d:48:59:c1:e0:2c:2f:8e:bf:bf:61:ae:36:
84:91:17:e4:96:79:dc:81:5b:b7:a1:d3:db:d2:bb:
32:e1:1e:3f:07:e7:df:e8:09:d1:da:cf:80:dd:b2:
41:7e:da:a8:82:1a:ee:ad:20:6a:c5:72:14:2d:9f:
2c:af:e3:8a:dc:0b:2b:d4:46:1c:7a:3b:fc:83:f3:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FD:2D:19:C5:16:78:A4:3A:A9:08:C7:24:51:A0:31:74:8F:92:87
X509v3 Authority Key Identifier:
keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/RP0tGcUWeKQ6qQjHJFGgMXSPkoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.104.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:cb:8a:4f:92:56:36:ad:33:ae:c2:ca:80:43:ab:cf:6b:51:
dc:bd:36:64:76:84:00:b6:f7:00:96:dc:00:97:06:6a:92:67:
2d:7e:e0:26:99:7c:09:2e:9e:58:28:fc:6f:d5:d9:20:97:31:
10:db:de:b3:0e:60:5b:5d:13:c6:1a:38:71:5a:93:5f:86:f5:
5d:47:21:44:c6:d1:fa:ea:a0:97:ed:85:9f:a2:fb:a8:0b:3c:
1b:dc:7c:a4:a6:91:33:7f:4d:c5:ce:c3:46:c7:d7:0f:80:88:
00:1e:d8:33:35:07:e8:92:9a:e5:0e:a1:b2:ea:e5:35:05:94:
da:d0:6f:f7:eb:3d:c4:83:08:51:3b:c2:d2:73:d6:74:d2:ec:
27:21:46:19:8d:00:a1:38:2f:aa:35:57:4b:ed:d0:e6:48:8e:
f7:89:2d:35:a8:c0:e8:b6:70:88:8c:a6:6b:73:20:0d:91:60:
6f:8f:0b:e6:67:aa:ce:39:3f:d1:33:89:42:3a:2e:39:ce:d2:
12:65:8b:49:50:08:ed:a3:ca:f9:6e:c7:00:e0:df:e7:bb:e9:
b7:d4:a6:87:d2:94:01:29:6d:fe:59:b1:fc:b9:e5:16:94:b6:
23:f9:84:2e:09:87:51:c3:8c:9f:2c:81:e4:cd:87:70:3a:09:
d4:a9:20:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJGR+GAit2MWkOCytAOc/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MzhlNjQyOTllNTQ1ZDM2MzcwNzRjYjk0NmI0MDBmNzk5
MGVjZjQwHhcNMjQwMTAxMDgyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGZkMmQxOWM1MTY3OGE0M2FhOTA4YzcyNDUxYTAzMTc0OGY5Mjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n2hx/d2IMzZCVW3LdzmMms/fgIF
y2pGn58wTOOtUhp81AGbX/ChmyriYfonLENfeoAmNDrC7caFxUCode3lp+wfrEAO
yA//oPPWGgT1PI+blCneMlIflFGqjzs6cPEhnP514xZ1OuBxsTGIyxmgrgVNs21Z
sdyqInfxYMK6wVs03ne9j/AhhOvYXpV/exH/RnB9iVFNk5vN4MuMmypNAtGvt1YL
ADUR1e5DvofBaC2/gRJ8+Z1IWcHgLC+Ov79hrjaEkRfklnncgVu3odPb0rsy4R4/
B+ff6AnR2s+A3bJBftqoghrurSBqxXIULZ8sr+OK3Asr1EYcejv8g/P7rQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFET9LRnFFnikOqkIxyRRoDF0j5KHMB8GA1UdIwQY
MBaAFAQ45kKZ5UXTY3B0y5RrQA95kOz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jNmY1NmItYmYyMi00MTdlLWIxMWIt
YzZkYzU4MTM3ZDA3LzEvUlAwdEdjVVdlS1E2cVFqSEpGR2dNWFNQa29jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9jNmY1NmItYmYyMi00MTdlLWIxMWItYzZkYzU4MTM3ZDA3
LzEvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubtoMA0G
CSqGSIb3DQEBCwUAA4IBAQBsy4pPklY2rTOuwsqAQ6vPa1HcvTZkdoQAtvcAltwA
lwZqkmctfuAmmXwJLp5YKPxv1dkglzEQ296zDmBbXRPGGjhxWpNfhvVdRyFExtH6
6qCX7YWfovuoCzwb3HykppEzf03FzsNGx9cPgIgAHtgzNQfokprlDqGy6uU1BZTa
0G/36z3EgwhRO8LSc9Z00uwnIUYZjQChOC+qNVdL7dDmSI73iS01qMDotnCIjKZr
cyANkWBvjwvmZ6rOOT/RM4lCOi45ztISZYtJUAjto8r5bscA4N/nu+m31KaH0pQB
KW3+WbH8ueUWlLYj+YQuCYdRw4yfLIHkzYdwOgnUqSAt
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:39:13 2024 by rpki-client on console-fra.rpki-client.org