Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/fSKrItVIuW9zX3cm1DfNZJqrazo.roa
File: fSKrItVIuW9zX3cm1DfNZJqrazo.roa (raw, json)
Hash identifier: NwG2FIxJHOYFzpBEAdIDkg1J9WXWwKgkwLiRyzQPw4M=
Subject key identifier: 7D:22:AB:22:D5:48:B9:6F:73:5F:77:26:D4:37:CD:64:9A:AB:6B:3A
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 018CC2DAF7B7E420C1D2AA82D15DE366A010
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/fSKrItVIuW9zX3cm1DfNZJqrazo.roa
Signing time: Mon 01 Jan 2024 02:29:39 +0000
ROA not before: Mon 01 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48847
IP address blocks: 185.176.210.0/24 maxlen: 24
185.176.209.0/24 maxlen: 24
185.176.208.0/22 maxlen: 22
185.176.208.0/24 maxlen: 24
185.176.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f7:b7:e4:20:c1:d2:aa:82:d1:5d:e3:66:a0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Jan 1 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d22ab22d548b96f735f7726d437cd649aab6b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:58:2c:6b:ca:18:a9:cb:99:b7:e6:c8:f5:ba:
c5:dd:61:04:a9:85:bf:91:99:3a:3a:ef:90:9d:b9:
fd:37:1f:41:43:7a:49:38:ef:3e:58:d3:37:09:a1:
b2:3e:67:70:51:02:fd:17:52:af:06:63:01:44:8f:
46:b4:75:ff:43:3e:bc:3d:ec:9e:4d:55:16:ac:29:
ec:d4:e0:1f:79:e7:69:b4:9e:9a:81:c8:c2:db:f2:
10:22:c9:a8:12:05:ca:ea:10:3b:4b:4e:d6:e9:06:
20:94:d7:d6:23:3b:0b:43:f7:8d:40:27:66:83:c9:
72:7f:55:cc:59:27:30:1b:06:59:bd:7a:da:cb:3b:
cb:b1:05:e1:cb:0f:19:72:ca:c0:9b:2e:46:e5:fa:
cb:22:25:e2:df:1a:a7:d4:cb:4c:98:94:e9:6d:81:
93:5c:d0:73:77:28:32:38:36:db:f3:d7:ae:73:cb:
b7:24:6e:fa:11:3f:7f:d9:b7:b8:96:87:c2:70:02:
d2:24:19:51:a3:d3:bd:26:72:54:75:cd:55:8b:d2:
28:28:62:8c:d7:9a:6a:73:a7:89:fd:e4:df:60:86:
54:85:c0:79:83:11:10:83:0c:35:4e:d2:99:8e:6f:
d2:35:a3:7a:3a:9e:4d:12:0a:98:44:31:74:bd:45:
c8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:22:AB:22:D5:48:B9:6F:73:5F:77:26:D4:37:CD:64:9A:AB:6B:3A
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/fSKrItVIuW9zX3cm1DfNZJqrazo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.208.0/22
Signature Algorithm: sha256WithRSAEncryption
36:7e:65:e3:db:de:fc:8a:24:f6:f9:24:f7:c3:15:c0:ec:e9:
98:84:6f:b3:81:c8:c5:d1:72:20:0e:8c:aa:38:d1:14:44:37:
cd:d5:8b:f1:f8:e6:65:cd:d8:e1:37:68:41:2a:6e:4a:20:35:
da:45:24:d1:50:a0:6c:d2:dc:bf:6e:e4:dc:37:cb:1b:f9:29:
06:b7:4b:cf:3e:12:26:69:4c:84:43:45:a8:db:76:4f:c1:a7:
21:d2:3f:2e:93:03:68:a4:e2:05:1a:7e:0d:64:b1:93:5d:a3:
dd:d8:9c:da:86:ed:7d:a6:14:13:41:52:de:fc:98:12:55:da:
39:94:ef:4a:c0:5e:07:4d:c4:f9:c2:24:99:81:55:a1:2a:66:
b7:42:32:ea:7d:49:c9:01:0c:3f:01:cf:1f:11:0a:d4:3f:20:
43:6c:63:bf:09:79:87:c3:3c:2f:ab:49:c5:80:1a:15:a9:24:
54:29:35:05:17:c3:73:f3:76:ea:c3:05:d5:7c:fb:f9:bf:c2:
d4:8e:0f:90:55:7c:30:8c:68:6e:ba:c6:fb:64:27:9d:ed:3d:
ae:86:22:d5:05:e2:9e:d1:cd:d1:e3:76:33:d1:2f:bb:20:58:
f2:8b:e3:8f:42:12:77:1e:6e:80:76:f6:95:b8:bb:2d:39:dd:
6c:72:cf:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2ve35CDB0qqC0V3jZqAQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNjliNmIyYTBhNzI4MThkMWZhOWE0NmVmMmFkNzgxMmI5
NWJjYzAwHhcNMjQwMTAxMDIyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDIyYWIyMmQ1NDhiOTZmNzM1Zjc3MjZkNDM3Y2Q2NDlhYWI2YjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglgsa8oYqcuZt+bI9brF3WEEqYW/
kZk6Ou+Qnbn9Nx9BQ3pJOO8+WNM3CaGyPmdwUQL9F1KvBmMBRI9GtHX/Qz68Peye
TVUWrCns1OAfeedptJ6agcjC2/IQIsmoEgXK6hA7S07W6QYglNfWIzsLQ/eNQCdm
g8lyf1XMWScwGwZZvXrayzvLsQXhyw8ZcsrAmy5G5frLIiXi3xqn1MtMmJTpbYGT
XNBzdygyODbb89euc8u3JG76ET9/2be4lofCcALSJBlRo9O9JnJUdc1Vi9IoKGKM
15pqc6eJ/eTfYIZUhcB5gxEQgww1TtKZjm/SNaN6Op5NEgqYRDF0vUXIGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH0iqyLVSLlvc193JtQ3zWSaq2s6MB8GA1UdIwQY
MBaAFJ1ptrKgpygY0fqaRu8q14ErlbzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82MzNhZjItNWI0ZS00YTRjLWIxMzkt
Mzk2MDc4MjFhMDlhLzEvZlNLckl0Vkl1Vzl6WDNjbTFEZk5aSnFyYXpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82MzNhZjItNWI0ZS00YTRjLWIxMzktMzk2MDc4MjFhMDlh
LzEvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubDQMA0G
CSqGSIb3DQEBCwUAA4IBAQA2fmXj2978iiT2+ST3wxXA7OmYhG+zgcjF0XIgDoyq
ONEURDfN1Yvx+OZlzdjhN2hBKm5KIDXaRSTRUKBs0ty/buTcN8sb+SkGt0vPPhIm
aUyEQ0Wo23ZPwach0j8ukwNopOIFGn4NZLGTXaPd2Jzahu19phQTQVLe/JgSVdo5
lO9KwF4HTcT5wiSZgVWhKma3QjLqfUnJAQw/Ac8fEQrUPyBDbGO/CXmHwzwvq0nF
gBoVqSRUKTUFF8Nz83bqwwXVfPv5v8LUjg+QVXwwjGhuusb7ZCed7T2uhiLVBeKe
0c3R43Yz0S+7IFjyi+OPQhJ3Hm6AdvaVuLstOd1scs+a
-----END CERTIFICATE-----
Generated at Fri Jun 7 20:33:02 2024 by rpki-client on console-ams.rpki-client.org