Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/4GH3E1_8KCOd8gx1FEOkkOOtRnY.roa
File: 4GH3E1_8KCOd8gx1FEOkkOOtRnY.roa (raw, json)
Hash identifier: 7DCGxprE6rggzuibdnBNTv9vWiYKJQsZMZr7zTXzPgo=
Subject key identifier: E0:61:F7:13:5F:FC:28:23:9D:F2:0C:75:14:43:A4:90:E3:AD:46:76
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 018CC801DE951548AC8AD85A078871A6A7E3
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/4GH3E1_8KCOd8gx1FEOkkOOtRnY.roa
Signing time: Tue 02 Jan 2024 02:30:14 +0000
ROA not before: Tue 02 Jan 2024 02:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44667
IP address blocks: 185.93.104.0/22 maxlen: 22
158.41.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 04:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:de:95:15:48:ac:8a:d8:5a:07:88:71:a6:a7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 2 02:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e061f7135ffc28239df20c751443a490e3ad4676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3c:51:cb:a7:c0:4a:95:36:ea:30:a8:b5:4a:
ca:f3:ef:56:8d:81:a5:d3:a6:3d:d4:fa:3a:a2:6e:
e8:aa:49:d6:09:64:f0:9b:e6:d9:26:e7:ae:f5:6b:
d9:80:38:50:15:29:72:e0:c5:68:07:0e:eb:49:87:
1f:06:45:4d:9c:c7:86:d9:4f:c9:e1:4a:83:c3:d7:
b1:20:96:d8:38:8a:78:9b:3a:4a:47:99:de:e5:65:
48:c6:b8:6d:fa:3f:c7:1d:58:ca:47:32:b8:0a:96:
35:c6:3e:4f:73:87:11:ac:32:7a:58:57:86:10:61:
08:a8:b6:d7:5a:f7:19:e9:76:a1:55:78:09:48:54:
b3:a1:49:07:10:ba:55:b6:d1:d0:f8:58:92:aa:ff:
a2:57:1e:e5:b0:12:83:74:d6:5d:84:27:3a:63:d1:
20:47:50:d1:57:05:11:ea:c7:7e:7f:2d:b5:3e:11:
8a:4b:3e:03:8b:06:d7:66:c1:34:f4:89:23:fe:36:
36:34:f5:de:78:8d:71:ba:78:d6:23:13:b8:92:61:
fd:f6:90:f9:3c:33:89:d1:b4:1c:11:8f:84:14:aa:
f0:70:7b:28:83:8b:04:56:4e:f6:bd:5f:8f:7d:34:
40:86:c3:6a:83:fe:28:77:b6:f3:c6:33:7d:98:6b:
5c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:61:F7:13:5F:FC:28:23:9D:F2:0C:75:14:43:A4:90:E3:AD:46:76
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/4GH3E1_8KCOd8gx1FEOkkOOtRnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.41.0.0/20
185.93.104.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:7a:72:fe:65:c8:66:a2:7d:be:04:c2:7f:93:78:b5:db:1f:
10:6a:d1:ed:06:f3:c5:43:f1:bc:ba:fe:38:fa:0d:04:07:2d:
c8:c7:c1:18:ad:cb:9b:e3:4a:bd:37:dd:56:e2:ac:b8:db:12:
a1:0d:e7:aa:32:b8:e1:48:6f:3c:08:27:a6:8a:9f:fb:02:b7:
42:1b:7a:e8:f8:61:50:3d:b7:d8:37:ca:bd:74:b4:89:19:c7:
49:ce:a2:2f:3b:0d:f5:be:b0:34:3f:dc:d8:93:d8:b1:2c:af:
66:42:8e:a3:6c:fa:b2:29:ea:75:2a:90:fd:a4:cf:49:e5:63:
69:76:f4:0c:50:0b:31:fb:66:91:2e:64:a2:65:b3:23:7e:8a:
5c:13:6b:a2:1a:2f:5a:2b:8c:3d:97:06:12:3c:97:26:3d:c9:
8f:64:63:49:d6:ff:7f:46:ee:9c:4b:86:41:5f:3d:2a:ae:59:
3f:b3:09:91:e7:f9:8c:14:50:fd:0d:3c:ae:a6:5b:99:e0:87:
60:53:ac:25:04:14:52:75:77:fa:f6:58:9e:f2:24:f4:b4:8d:
40:8f:68:05:63:92:34:ef:4a:e1:80:a0:16:f5:24:f6:27:ae:
05:30:47:be:c8:ce:62:e8:c4:5b:41:18:23:1b:55:66:77:a8:
fc:e2:1f:14
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzIAd6VFUisithaB4hxpqfjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzc5ZTU2MjM4YjZmMmVhMDY4ZWRlNGUyMGFlZjAwYzkw
NDEzMmIwHhcNMjQwMTAyMDIzMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDYxZjcxMzVmZmMyODIzOWRmMjBjNzUxNDQzYTQ5MGUzYWQ0Njc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTxRy6fASpU26jCotUrK8+9WjYGl
06Y91Po6om7oqknWCWTwm+bZJueu9WvZgDhQFSly4MVoBw7rSYcfBkVNnMeG2U/J
4UqDw9exIJbYOIp4mzpKR5ne5WVIxrht+j/HHVjKRzK4CpY1xj5Pc4cRrDJ6WFeG
EGEIqLbXWvcZ6XahVXgJSFSzoUkHELpVttHQ+FiSqv+iVx7lsBKDdNZdhCc6Y9Eg
R1DRVwUR6sd+fy21PhGKSz4DiwbXZsE09Ikj/jY2NPXeeI1xunjWIxO4kmH99pD5
PDOJ0bQcEY+EFKrwcHsog4sEVk72vV+PfTRAhsNqg/4od7bzxjN9mGtcnQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOBh9xNf/CgjnfIMdRRDpJDjrUZ2MB8GA1UdIwQY
MBaAFP53nlYji28uoGjt5OIK7wDJBBMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQt
MzM4OTQ5MTNkY2I3LzEvNEdIM0UxXzhLQ09kOGd4MUZFT2trT090Um5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQtMzM4OTQ5MTNkY2I3
LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEnikAAwQC
uV1oMA0GCSqGSIb3DQEBCwUAA4IBAQBfenL+Zchmon2+BMJ/k3i12x8QatHtBvPF
Q/G8uv44+g0EBy3Ix8EYrcub40q9N91W4qy42xKhDeeqMrjhSG88CCemip/7ArdC
G3ro+GFQPbfYN8q9dLSJGcdJzqIvOw31vrA0P9zYk9ixLK9mQo6jbPqyKep1KpD9
pM9J5WNpdvQMUAsx+2aRLmSiZbMjfopcE2uiGi9aK4w9lwYSPJcmPcmPZGNJ1v9/
Ru6cS4ZBXz0qrlk/swmR5/mMFFD9DTyupluZ4IdgU6wlBBRSdXf69lie8iT0tI1A
j2gFY5I070rhgKAW9ST2J64FMEe+yM5i6MRbQRgjG1Vmd6j84h8U
-----END CERTIFICATE-----
Generated at Sat Apr 27 14:06:39 2024 by rpki-client on console-ams.rpki-client.org