Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/_2w89-yDl6LCMUbk9LxssNG83Uw.roa
File: _2w89-yDl6LCMUbk9LxssNG83Uw.roa (raw, json)
Hash identifier: 9Ll0d77Sv65H4Fswc7aPyB64A1RLAAHJJIXFbExYZt8=
Subject key identifier: FF:6C:3C:F7:EC:83:97:A2:C2:31:46:E4:F4:BC:6C:B0:D1:BC:DD:4C
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018CC500B6E6B5654B4022A14706F2A7EC3D
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/_2w89-yDl6LCMUbk9LxssNG83Uw.roa
Signing time: Mon 01 Jan 2024 12:30:07 +0000
ROA not before: Mon 01 Jan 2024 12:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211975
IP address blocks: 185.177.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:b6:e6:b5:65:4b:40:22:a1:47:06:f2:a7:ec:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 12:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff6c3cf7ec8397a2c23146e4f4bc6cb0d1bcdd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8e:6d:8d:6c:f7:a7:f5:12:b0:0a:96:8d:fd:
29:0f:6f:b3:78:3f:67:00:c7:3e:fa:39:04:72:b6:
a7:54:63:ac:b6:85:a5:45:9b:25:65:20:11:48:81:
fe:cf:b0:4e:5e:12:99:b2:34:23:c4:0d:db:74:4a:
f8:c6:8a:0b:d4:45:7d:ab:0b:77:10:e6:43:22:01:
22:bb:3c:e0:b0:e9:49:60:17:2b:c0:1c:15:95:85:
8b:eb:ed:c5:de:77:15:bb:8e:36:27:fc:1e:d4:8a:
66:94:18:d2:b6:fa:6a:5f:d8:8e:bc:df:2d:a2:ad:
08:1f:49:79:20:14:20:ce:07:ea:4e:e7:44:2f:67:
e0:8f:71:24:e9:c6:c5:f1:a6:5d:19:b7:3a:b8:81:
d2:7e:0d:10:22:41:35:d7:3f:40:17:0f:e0:f5:bb:
f6:e4:1d:c0:98:9f:c4:02:9e:7e:b8:6f:db:96:6e:
ee:3c:83:e4:76:7a:b3:b0:40:04:5a:9a:45:c8:2a:
71:42:1b:c8:0e:2c:65:5a:e1:c3:a2:b6:ff:4c:25:
71:b5:aa:a2:a6:d4:e3:04:01:72:9e:03:d7:4a:3f:
6f:b1:21:cd:cc:db:dd:93:dd:f3:0c:81:21:5b:90:
7f:08:af:b4:b9:65:27:7d:33:9c:bb:99:86:af:fd:
09:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6C:3C:F7:EC:83:97:A2:C2:31:46:E4:F4:BC:6C:B0:D1:BC:DD:4C
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/_2w89-yDl6LCMUbk9LxssNG83Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.26.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f8:a7:f2:fc:45:5d:cf:7d:da:f5:fc:0b:68:1c:a7:24:b7:
26:36:24:e6:19:4b:af:ea:e0:12:34:f5:c8:0a:e2:c8:e4:fb:
72:e5:3d:db:8b:ae:58:b3:57:14:66:1c:42:e1:50:7d:88:9f:
10:6e:6b:ee:00:b4:7f:78:38:75:fa:10:eb:37:d4:5a:5f:f7:
a4:2c:b2:f2:9e:1c:fc:73:cd:7e:3f:5a:be:0c:98:c2:ee:36:
ed:d3:86:c4:fb:8d:91:72:8c:8a:49:60:25:c6:64:e1:8a:8f:
67:97:2e:06:51:c9:c6:1b:9a:36:aa:30:11:d5:fd:9b:48:e1:
dd:e9:a7:20:3b:5f:a1:f5:b2:d3:5b:9d:e4:57:2c:5f:fa:ba:
4c:7b:0e:39:2a:de:cd:a3:3f:11:95:56:55:2f:cd:88:46:f6:
9f:a5:26:c6:b6:39:ec:de:2a:3c:e5:03:0f:76:1d:cb:7b:15:
46:fe:c4:a4:fb:63:00:de:02:76:e2:2e:a4:99:19:fe:c0:d4:
95:f0:18:4a:5b:7c:6d:d5:85:80:14:72:83:5f:be:58:7d:0a:
fc:0a:86:32:2e:83:94:08:7d:df:f3:42:30:73:f4:bf:9f:83:
53:5b:de:7c:85:3b:df:22:3f:3a:b2:3a:ee:c1:53:16:2e:3f:
20:54:0e:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFALbmtWVLQCKhRwbyp+w9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjQwMTAxMTIzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjZjM2NmN2VjODM5N2EyYzIzMTQ2ZTRmNGJjNmNiMGQxYmNkZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY5tjWz3p/USsAqWjf0pD2+zeD9n
AMc++jkEcranVGOstoWlRZslZSARSIH+z7BOXhKZsjQjxA3bdEr4xooL1EV9qwt3
EOZDIgEiuzzgsOlJYBcrwBwVlYWL6+3F3ncVu442J/we1IpmlBjStvpqX9iOvN8t
oq0IH0l5IBQgzgfqTudEL2fgj3Ek6cbF8aZdGbc6uIHSfg0QIkE11z9AFw/g9bv2
5B3AmJ/EAp5+uG/blm7uPIPkdnqzsEAEWppFyCpxQhvIDixlWuHDorb/TCVxtaqi
ptTjBAFyngPXSj9vsSHNzNvdk93zDIEhW5B/CK+0uWUnfTOcu5mGr/0JmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP9sPPfsg5eiwjFG5PS8bLDRvN1MMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvXzJ3ODkteURsNkxDTVViazlMeHNzTkc4M1V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubEaMA0G
CSqGSIb3DQEBCwUAA4IBAQA8+Kfy/EVdz33a9fwLaBynJLcmNiTmGUuv6uASNPXI
CuLI5Pty5T3bi65Ys1cUZhxC4VB9iJ8QbmvuALR/eDh1+hDrN9RaX/ekLLLynhz8
c81+P1q+DJjC7jbt04bE+42RcoyKSWAlxmThio9nly4GUcnGG5o2qjAR1f2bSOHd
6acgO1+h9bLTW53kVyxf+rpMew45Kt7Noz8RlVZVL82IRvafpSbGtjns3io85QMP
dh3LexVG/sSk+2MA3gJ24i6kmRn+wNSV8BhKW3xt1YWAFHKDX75YfQr8CoYyLoOU
CH3f80Iwc/S/n4NTW958hTvfIj86sjruwVMWLj8gVA6v
-----END CERTIFICATE-----
Generated at Sun May 5 00:32:30 2024 by rpki-client on console-fra.rpki-client.org