Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/RGHRxrJlh-6h2rprrSYR7ZgvVlo.roa
File: RGHRxrJlh-6h2rprrSYR7ZgvVlo.roa (raw, json)
Hash identifier: Qqs5EMdLdAk+NwCsvyyT1AQBYo+26G7xXQiMkXKbCpA=
Subject key identifier: 44:61:D1:C6:B2:65:87:EE:A1:DA:BA:6B:AD:26:11:ED:98:2F:56:5A
Certificate issuer: /CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Certificate serial: 018CC64B35296C7B97FD604298DD9F7D1FFF
Authority key identifier: 09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/RGHRxrJlh-6h2rprrSYR7ZgvVlo.roa
Signing time: Mon 01 Jan 2024 18:31:06 +0000
ROA not before: Mon 01 Jan 2024 18:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201643
IP address blocks: 185.68.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:35:29:6c:7b:97:fd:60:42:98:dd:9f:7d:1f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Validity
Not Before: Jan 1 18:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4461d1c6b26587eea1daba6bad2611ed982f565a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:96:2a:65:35:d4:81:af:40:fa:66:fe:ed:b3:
ed:69:e0:5a:36:5a:51:8c:3e:5d:c2:3e:85:5a:e8:
bf:dd:fc:2a:11:0c:65:9b:95:99:d2:ea:ae:93:6b:
03:4e:0b:0d:e5:4c:2b:6e:be:d2:d3:55:4f:34:c6:
fc:e6:b8:af:44:f6:22:64:3d:88:62:fb:dc:86:b9:
f7:36:0a:43:2b:4e:db:92:1c:95:57:28:06:1f:a9:
5f:34:15:9a:0f:3e:42:24:c8:3d:5d:05:6a:84:cd:
6b:0e:a3:07:b4:65:06:2f:63:88:64:be:7d:ec:53:
cc:04:65:a8:33:33:cf:bb:47:82:18:a2:41:f3:99:
51:1a:b9:fa:5d:6a:10:26:90:77:e5:cf:a4:7a:79:
34:96:3c:6b:a7:e0:3f:08:2a:0d:e9:03:c7:c2:96:
d9:7e:03:69:2d:e5:e8:6c:5a:3f:c0:00:44:80:97:
7b:3b:8b:04:e6:7d:10:de:87:6e:c2:e2:21:ba:8a:
94:48:ae:ec:c5:c1:71:e6:0b:0b:d1:f1:f6:e3:15:
9a:3c:a5:7a:a6:72:f0:3a:78:e2:f6:e6:c1:72:bb:
d8:66:f5:4f:2e:7e:99:87:e0:3b:86:94:1e:7b:97:
55:e3:4c:f0:6f:a5:61:6e:ee:16:e7:08:d3:bf:74:
c3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:61:D1:C6:B2:65:87:EE:A1:DA:BA:6B:AD:26:11:ED:98:2F:56:5A
X509v3 Authority Key Identifier:
keyid:09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/RGHRxrJlh-6h2rprrSYR7ZgvVlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.100.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:56:18:83:e3:08:b8:65:1d:4f:e5:53:1a:80:b6:f7:bd:eb:
e8:07:c1:ef:38:a3:52:e6:df:a0:61:31:5d:9a:51:89:fa:45:
66:79:aa:d8:2e:4f:04:79:35:e1:2b:d3:a3:f1:95:68:64:2b:
2d:54:58:25:07:bc:79:70:8d:10:a4:ba:ec:e8:6c:8b:ea:7e:
25:19:c3:b4:de:0a:a0:14:93:49:38:3b:bf:17:14:8d:80:5e:
ba:2e:ba:ae:cb:98:48:21:4f:bf:e6:ed:a9:c4:6b:e8:45:d7:
fe:1f:35:e4:83:37:19:32:f9:be:ec:9f:34:ba:ed:01:26:75:
c3:76:35:59:3a:d9:ae:45:76:7e:b1:c3:fd:f7:13:41:62:2f:
31:9c:b7:3b:db:20:49:1a:85:2f:40:68:03:79:3a:9a:69:e1:
e9:0b:10:6f:ba:e3:8d:3f:a3:39:1e:b7:5e:6f:26:54:8d:a5:
4e:b5:61:63:4c:da:e2:58:eb:11:e6:71:94:78:88:fb:d1:6d:
58:a7:3f:46:db:5a:0b:21:3f:f6:fe:3d:b8:eb:7e:e7:1a:88:
91:20:93:6e:84:38:2f:5d:87:a0:6a:46:f0:ff:84:78:b0:94:
e7:36:dd:a3:05:4e:48:df:cc:8e:65:f3:86:90:13:90:47:53:
e5:b8:14:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSzUpbHuX/WBCmN2ffR//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MDgyMDRkN2NmNWJjNGFhYjM4ZmZhMzlkYTNhNjgxZWQy
MTdiZDQwHhcNMjQwMTAxMTgzMTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDYxZDFjNmIyNjU4N2VlYTFkYWJhNmJhZDI2MTFlZDk4MmY1NjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZYqZTXUga9A+mb+7bPtaeBaNlpR
jD5dwj6FWui/3fwqEQxlm5WZ0uquk2sDTgsN5Uwrbr7S01VPNMb85rivRPYiZD2I
Yvvchrn3NgpDK07bkhyVVygGH6lfNBWaDz5CJMg9XQVqhM1rDqMHtGUGL2OIZL59
7FPMBGWoMzPPu0eCGKJB85lRGrn6XWoQJpB35c+kenk0ljxrp+A/CCoN6QPHwpbZ
fgNpLeXobFo/wABEgJd7O4sE5n0Q3oduwuIhuoqUSK7sxcFx5gsL0fH24xWaPKV6
pnLwOnji9ubBcrvYZvVPLn6Zh+A7hpQee5dV40zwb6Vhbu4W5wjTv3TD+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFERh0cayZYfuodq6a60mEe2YL1ZaMB8GA1UdIwQY
MBaAFAkIIE189bxKqzj/o52jpoHtIXvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1FnZ1RYejF2RXFyT1Atam5hT21nZTBoZTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kYjllNTgtZWU0Mi00YTEwLTgyMjIt
ODgyM2YxMTFkZjA3LzEvUkdIUnhySmxoLTZoMnJwcnJTWVI3Wmd2VmxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9kYjllNTgtZWU0Mi00YTEwLTgyMjItODgyM2YxMTFkZjA3
LzEvQ1FnZ1RYejF2RXFyT1Atam5hT21nZTBoZTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuURkMA0G
CSqGSIb3DQEBCwUAA4IBAQCKVhiD4wi4ZR1P5VMagLb3vevoB8HvOKNS5t+gYTFd
mlGJ+kVmearYLk8EeTXhK9Oj8ZVoZCstVFglB7x5cI0QpLrs6GyL6n4lGcO03gqg
FJNJODu/FxSNgF66Lrquy5hIIU+/5u2pxGvoRdf+HzXkgzcZMvm+7J80uu0BJnXD
djVZOtmuRXZ+scP99xNBYi8xnLc72yBJGoUvQGgDeTqaaeHpCxBvuuONP6M5Hrde
byZUjaVOtWFjTNriWOsR5nGUeIj70W1Ypz9G21oLIT/2/j24637nGoiRIJNuhDgv
XYegakbw/4R4sJTnNt2jBU5I38yOZfOGkBOQR1PluBRa
-----END CERTIFICATE-----
Generated at Sat Sep 28 05:49:44 2024 by rpki-client on console-fra.rpki-client.org