Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6ef4b9-5e35-423c-bbc4-0a2ebfc2c850/1/RzY6hsPQcKXxu4GB-9Wd1bSctMU.roa
File: RzY6hsPQcKXxu4GB-9Wd1bSctMU.roa (raw, json)
Hash identifier: 0nSiLR0Zvy/n/yHsdCCXp0/aN/aOMlEjbpdmHMEWBwM=
Subject key identifier: 47:36:3A:86:C3:D0:70:A5:F1:BB:81:81:FB:D5:9D:D5:B4:9C:B4:C5
Certificate issuer: /CN=5a15823b86adc7eebeee7a2d8b70e12dc9bbf5b5
Certificate serial: 018CCA98F6F4B124EB6119F8E7FA0FADC6A7
Authority key identifier: 5A:15:82:3B:86:AD:C7:EE:BE:EE:7A:2D:8B:70:E1:2D:C9:BB:F5:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhWCO4atx-6-7noti3DhLcm79bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6ef4b9-5e35-423c-bbc4-0a2ebfc2c850/1/RzY6hsPQcKXxu4GB-9Wd1bSctMU.roa
Signing time: Tue 02 Jan 2024 14:34:31 +0000
ROA not before: Tue 02 Jan 2024 14:34:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202766
IP address blocks: 185.224.78.0/24 maxlen: 24
185.224.77.0/24 maxlen: 24
185.224.76.0/24 maxlen: 24
185.224.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6ef4b9-5e35-423c-bbc4-0a2ebfc2c850/1/WhWCO4atx-6-7noti3DhLcm79bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6ef4b9-5e35-423c-bbc4-0a2ebfc2c850/1/WhWCO4atx-6-7noti3DhLcm79bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhWCO4atx-6-7noti3DhLcm79bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:98:f6:f4:b1:24:eb:61:19:f8:e7:fa:0f:ad:c6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a15823b86adc7eebeee7a2d8b70e12dc9bbf5b5
Validity
Not Before: Jan 2 14:34:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47363a86c3d070a5f1bb8181fbd59dd5b49cb4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d4:fb:f6:8a:13:e8:34:73:ce:9e:ed:c4:fe:
f4:4e:77:45:15:b0:87:df:04:cd:df:36:9f:76:a3:
62:28:09:2d:ee:d8:1c:83:d5:42:b6:88:fc:4f:d1:
21:60:11:f6:de:d3:c9:76:90:9a:7d:21:da:a9:ec:
52:aa:a0:b6:25:7e:33:5d:67:3a:eb:d6:5c:1c:c8:
5c:86:38:11:f8:ee:7b:3b:f1:e0:ba:9b:bd:96:38:
b2:17:a8:1f:a7:ee:c1:f2:92:bc:c2:9f:2e:c1:70:
46:25:29:bb:3a:67:6c:90:a8:17:90:ca:bb:2d:22:
2d:e7:ef:f7:14:12:a7:e0:8f:13:fd:75:f8:7e:54:
b6:97:52:69:bf:fd:f9:1d:aa:68:1f:5d:3e:84:1c:
e1:d2:17:35:67:2f:9b:00:a3:1a:cd:35:a2:8b:62:
3e:15:d2:ad:43:df:87:f0:d7:1e:c4:13:16:6c:36:
e4:6d:26:70:30:d2:e7:f9:11:f7:62:b0:39:92:5b:
7c:28:ff:4d:0a:01:e0:e2:a8:70:d5:45:87:9a:cf:
11:f1:3b:b9:af:e5:a8:aa:5e:3f:34:f7:67:c3:6f:
05:c4:97:f2:0e:4d:62:62:98:91:38:4a:24:68:b5:
14:96:f1:b0:0b:93:11:fd:23:e9:f0:0b:48:96:1a:
e1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:36:3A:86:C3:D0:70:A5:F1:BB:81:81:FB:D5:9D:D5:B4:9C:B4:C5
X509v3 Authority Key Identifier:
keyid:5A:15:82:3B:86:AD:C7:EE:BE:EE:7A:2D:8B:70:E1:2D:C9:BB:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhWCO4atx-6-7noti3DhLcm79bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6ef4b9-5e35-423c-bbc4-0a2ebfc2c850/1/RzY6hsPQcKXxu4GB-9Wd1bSctMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6ef4b9-5e35-423c-bbc4-0a2ebfc2c850/1/WhWCO4atx-6-7noti3DhLcm79bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.76.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:91:ba:58:06:32:e4:52:63:c1:87:ab:8d:05:7a:5a:2a:77:
51:c3:4f:6d:cf:37:2c:7a:29:c1:ae:52:b5:91:42:68:d3:75:
58:8d:a2:9f:a6:eb:64:e1:08:02:7d:d8:ca:69:c3:8c:c8:a2:
ae:bc:20:6f:d0:d0:5c:53:ff:31:b9:c5:93:08:06:91:e4:bc:
b6:92:ab:f7:fc:2a:fa:48:65:27:4c:7c:78:f7:56:9b:23:a9:
96:70:a5:2e:2a:87:be:8a:18:80:df:9b:a4:c1:bf:7a:c9:c2:
1c:01:95:c0:36:46:d9:dc:92:3a:28:67:74:46:3d:94:f1:9a:
b5:96:cf:1e:c8:98:e2:45:b4:e1:1e:67:47:9c:1c:8a:50:af:
e3:13:a8:ff:25:25:db:9c:d8:70:f5:0c:47:c2:5c:a0:ba:ee:
ae:81:50:12:e7:2d:a2:b7:c2:f0:fe:e8:3b:2b:0f:43:d4:0f:
94:31:c0:1f:b0:2e:7f:c4:72:83:97:53:86:5a:01:b1:3e:9a:
fd:23:d6:c8:fd:ce:da:5b:cd:54:94:0e:40:2d:d0:95:e7:dc:
c1:19:99:6b:6e:35:23:b5:98:24:26:c1:d0:25:6f:66:62:2e:
56:29:a4:1e:e5:fe:9f:0f:d3:04:5b:b7:d6:d9:3f:72:c0:cc:
d0:9d:45:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKmPb0sSTrYRn45/oPrcanMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMTU4MjNiODZhZGM3ZWViZWVlN2EyZDhiNzBlMTJkYzli
YmY1YjUwHhcNMjQwMTAyMTQzNDMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzM2M2E4NmMzZDA3MGE1ZjFiYjgxODFmYmQ1OWRkNWI0OWNiNGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNT79ooT6DRzzp7txP70TndFFbCH
3wTN3zafdqNiKAkt7tgcg9VCtoj8T9EhYBH23tPJdpCafSHaqexSqqC2JX4zXWc6
69ZcHMhchjgR+O57O/Hgupu9ljiyF6gfp+7B8pK8wp8uwXBGJSm7OmdskKgXkMq7
LSIt5+/3FBKn4I8T/XX4flS2l1Jpv/35HapoH10+hBzh0hc1Zy+bAKMazTWii2I+
FdKtQ9+H8NcexBMWbDbkbSZwMNLn+RH3YrA5klt8KP9NCgHg4qhw1UWHms8R8Tu5
r+Woql4/NPdnw28FxJfyDk1iYpiROEokaLUUlvGwC5MR/SPp8AtIlhrhXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEc2OobD0HCl8buBgfvVndW0nLTFMB8GA1UdIwQY
MBaAFFoVgjuGrcfuvu56LYtw4S3Ju/W1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hXQ080YXR4LTYtN25vdGkzRGhMY203OWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82ZWY0YjktNWUzNS00MjNjLWJiYzQt
MGEyZWJmYzJjODUwLzEvUnpZNmhzUFFjS1h4dTRHQi05V2QxYlNjdE1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC82ZWY0YjktNWUzNS00MjNjLWJiYzQtMGEyZWJmYzJjODUw
LzEvV2hXQ080YXR4LTYtN25vdGkzRGhMY203OWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueBMMA0G
CSqGSIb3DQEBCwUAA4IBAQAdkbpYBjLkUmPBh6uNBXpaKndRw09tzzcseinBrlK1
kUJo03VYjaKfputk4QgCfdjKacOMyKKuvCBv0NBcU/8xucWTCAaR5Ly2kqv3/Cr6
SGUnTHx491abI6mWcKUuKoe+ihiA35ukwb96ycIcAZXANkbZ3JI6KGd0Rj2U8Zq1
ls8eyJjiRbThHmdHnByKUK/jE6j/JSXbnNhw9QxHwlyguu6ugVAS5y2it8Lw/ug7
Kw9D1A+UMcAfsC5/xHKDl1OGWgGxPpr9I9bI/c7aW81UlA5ALdCV59zBGZlrbjUj
tZgkJsHQJW9mYi5WKaQe5f6fD9MEW7fW2T9ywMzQnUWC
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:57:12 2024 by rpki-client on console-fra.rpki-client.org