Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/yM-OBUoc-1WgxCIJQK-OqkIfHec.roa
File: yM-OBUoc-1WgxCIJQK-OqkIfHec.roa (raw, json)
Hash identifier: kNe5nOSY3Uh0tOLVs/DbzsuUrysd374VTJYM5u6zauk=
Subject key identifier: C8:CF:8E:05:4A:1C:FB:55:A0:C4:22:09:40:AF:8E:AA:42:1F:1D:E7
Certificate issuer: /CN=468b68141796ca95e4c72f4bfa696acea5083af3
Certificate serial: 0192913B8C18EFE0854537689A4D7A215B35
Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/yM-OBUoc-1WgxCIJQK-OqkIfHec.roa
Signing time: Tue 15 Oct 2024 17:30:51 +0000
ROA not before: Tue 15 Oct 2024 17:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214415
IP address blocks: 185.175.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:91:3b:8c:18:ef:e0:85:45:37:68:9a:4d:7a:21:5b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3
Validity
Not Before: Oct 15 17:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8cf8e054a1cfb55a0c4220940af8eaa421f1de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:6c:11:c6:3a:a2:4f:c2:87:9d:8e:e9:04:
89:df:f8:0f:a3:e6:e9:e5:06:52:cb:2e:75:be:fd:
31:c7:28:58:58:55:b6:6d:0a:eb:c9:06:8b:c1:53:
fd:6e:f7:af:c5:65:c4:ca:14:74:83:08:8f:00:4c:
33:c9:a6:91:6e:ab:4e:65:b3:8d:d4:23:ad:f5:40:
03:a1:fe:42:3c:f9:55:15:eb:a0:b3:f3:b0:57:23:
e3:f5:54:a6:40:6f:16:5b:9e:73:f6:62:88:c7:d7:
95:e2:4d:3b:51:4a:ee:8a:10:34:80:b8:37:ca:66:
2f:d4:13:2f:eb:49:12:01:db:f3:77:8a:08:0f:ea:
eb:a3:c6:b1:82:8d:90:43:29:62:ab:f1:ee:f7:a4:
c0:82:bb:e1:1f:0d:59:ef:e0:a3:95:79:0e:d6:54:
ee:75:1f:00:3e:e9:91:9f:69:93:b6:2c:3e:ef:4c:
40:92:99:b5:4f:de:be:46:4a:1c:4c:d4:ac:4f:86:
b2:83:06:97:55:8e:3f:9c:03:0c:3e:09:3f:1f:ca:
95:81:78:d3:20:68:42:6e:cf:85:12:f1:fb:a9:9c:
a0:95:a8:48:d0:e3:06:90:78:5d:08:76:62:64:1b:
1a:20:aa:ed:6f:ba:0b:67:c7:9d:7a:c7:43:50:91:
69:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CF:8E:05:4A:1C:FB:55:A0:C4:22:09:40:AF:8E:AA:42:1F:1D:E7
X509v3 Authority Key Identifier:
keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/yM-OBUoc-1WgxCIJQK-OqkIfHec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.108.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ec:c3:81:65:3a:68:03:0c:31:7e:88:42:66:17:46:f7:f0:
40:11:cd:11:1f:3e:80:20:84:ac:de:8e:8b:bd:f9:07:38:23:
45:1a:bd:24:a1:6e:55:c0:9d:72:ca:7a:39:62:a7:95:41:44:
55:29:8e:4a:45:03:de:f1:48:98:83:18:70:c1:ae:c6:ab:9a:
39:1c:f1:34:64:3d:bd:1a:37:80:30:c6:6d:2f:10:83:84:b1:
05:68:e9:72:e6:cf:6d:6a:3e:77:14:30:b3:09:5e:9a:bd:be:
54:08:6b:df:01:7c:23:e3:d9:bc:5d:50:b0:06:be:5b:8e:dd:
53:2a:2e:b3:c5:e3:da:62:20:54:1e:18:10:e9:f7:d7:e1:fa:
e4:63:88:39:a0:09:58:90:1d:4f:8b:45:cd:6a:98:24:0f:3a:
15:10:ce:d5:7b:a5:fb:ff:1e:30:9a:55:04:2c:66:e0:ab:e4:
99:40:88:65:c3:04:93:f6:7b:d3:d3:18:37:84:c0:3d:2f:88:
f0:57:31:93:37:b5:59:a0:b8:7d:1b:78:34:43:3f:f4:6d:e6:
df:93:b4:61:2d:af:b4:cf:e7:c7:75:d7:35:a8:15:a6:1e:34:
80:17:22:92:a3:a0:14:65:44:77:2b:20:79:b8:a6:24:b0:e0:
a6:b4:15:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKRO4wY7+CFRTdomk16IVs1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGI2ODE0MTc5NmNhOTVlNGM3MmY0YmZhNjk2YWNlYTUw
ODNhZjMwHhcNMjQxMDE1MTczMDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGNmOGUwNTRhMWNmYjU1YTBjNDIyMDk0MGFmOGVhYTQyMWYxZGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW9sEcY6ok/Ch52O6QSJ3/gPo+bp
5QZSyy51vv0xxyhYWFW2bQrryQaLwVP9bvevxWXEyhR0gwiPAEwzyaaRbqtOZbON
1COt9UADof5CPPlVFeugs/OwVyPj9VSmQG8WW55z9mKIx9eV4k07UUruihA0gLg3
ymYv1BMv60kSAdvzd4oID+rro8axgo2QQyliq/Hu96TAgrvhHw1Z7+CjlXkO1lTu
dR8APumRn2mTtiw+70xAkpm1T96+RkocTNSsT4aygwaXVY4/nAMMPgk/H8qVgXjT
IGhCbs+FEvH7qZyglahI0OMGkHhdCHZiZBsaIKrtb7oLZ8edesdDUJFppQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMjPjgVKHPtVoMQiCUCvjqpCHx3nMB8GA1UdIwQY
MBaAFEaLaBQXlsqV5McvS/ppas6lCDrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81OThlOGItYTYzZi00MjVlLWI0Zjct
NDUyZDZkMzgyNmY3LzEveU0tT0JVb2MtMVdneENJSlFLLU9xa0lmSGVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81OThlOGItYTYzZi00MjVlLWI0ZjctNDUyZDZkMzgyNmY3
LzEvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAua9sMA0G
CSqGSIb3DQEBCwUAA4IBAQCa7MOBZTpoAwwxfohCZhdG9/BAEc0RHz6AIISs3o6L
vfkHOCNFGr0koW5VwJ1yyno5YqeVQURVKY5KRQPe8UiYgxhwwa7Gq5o5HPE0ZD29
GjeAMMZtLxCDhLEFaOly5s9taj53FDCzCV6avb5UCGvfAXwj49m8XVCwBr5bjt1T
Ki6zxePaYiBUHhgQ6ffX4frkY4g5oAlYkB1Pi0XNapgkDzoVEM7Ve6X7/x4wmlUE
LGbgq+SZQIhlwwST9nvT0xg3hMA9L4jwVzGTN7VZoLh9G3g0Qz/0bebfk7RhLa+0
z+fHddc1qBWmHjSAFyKSo6AUZUR3KyB5uKYksOCmtBWd
-----END CERTIFICATE-----
Generated at Mon Nov 25 17:00:34 2024 by rpki-client on console-ams.rpki-client.org