Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/A5n9RXqyOlIv7PXDl08MLdQ4P6M.roa
File: A5n9RXqyOlIv7PXDl08MLdQ4P6M.roa (raw, json)
Hash identifier: /8BZZWJgX/bA8HpFoLOhEGBfyHcMCx0Fni4nQn2NGXY=
Subject key identifier: 03:99:FD:45:7A:B2:3A:52:2F:EC:F5:C3:97:4F:0C:2D:D4:38:3F:A3
Certificate issuer: /CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Certificate serial: 018CC8010F33360BD52F992D0A8D89AD36FA
Authority key identifier: D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/A5n9RXqyOlIv7PXDl08MLdQ4P6M.roa
Signing time: Tue 02 Jan 2024 02:29:21 +0000
ROA not before: Tue 02 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61121
IP address blocks: 185.18.4.0/23 maxlen: 24
185.18.4.0/22 maxlen: 24
185.18.4.0/24 maxlen: 24
185.18.7.0/24 maxlen: 24
185.18.5.0/24 maxlen: 24
185.18.6.0/24 maxlen: 24
185.18.6.0/23 maxlen: 24
2a03:f1c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 18:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0f:33:36:0b:d5:2f:99:2d:0a:8d:89:ad:36:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Validity
Not Before: Jan 2 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0399fd457ab23a522fecf5c3974f0c2dd4383fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:18:38:ae:c7:95:3b:90:5c:ca:4c:58:0c:bb:
11:5b:ee:ba:57:81:32:4d:1e:6d:c9:f3:68:6d:d8:
19:62:ca:be:20:0d:37:16:96:96:7d:37:4d:f7:40:
27:3c:9d:d5:af:dc:d9:47:46:ac:06:46:0d:7c:5a:
5a:32:a1:f4:87:f1:9a:ca:2e:06:87:f7:70:36:64:
df:e8:2b:f1:28:95:da:46:95:e9:75:3a:f8:07:08:
f2:6c:83:bc:61:c4:44:33:9c:e1:e8:05:27:c0:f2:
19:ea:5b:0c:ad:c9:43:cc:63:e3:9a:b8:28:c9:24:
94:7e:ea:e7:52:db:1f:a8:38:3f:95:e6:54:ca:80:
0a:e2:31:7d:d9:18:40:f5:3f:99:41:42:55:63:bc:
25:17:5e:7d:6d:50:cd:d1:be:a7:fe:97:35:2e:40:
1f:4e:24:14:d1:34:ed:c2:75:9c:33:46:69:dc:88:
36:1b:75:dc:59:79:9d:fa:9d:5b:d5:69:41:2a:58:
3e:98:27:c9:f0:9a:c5:f9:d6:e9:24:64:8e:29:06:
e7:71:04:0c:b7:46:1d:b2:26:83:4c:41:f5:ba:d3:
77:99:37:82:e2:85:0c:da:13:d5:72:e9:ac:8f:09:
ab:5b:7c:e3:69:df:b7:5e:d6:c1:2f:b6:a4:f3:8a:
c1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:99:FD:45:7A:B2:3A:52:2F:EC:F5:C3:97:4F:0C:2D:D4:38:3F:A3
X509v3 Authority Key Identifier:
keyid:D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/A5n9RXqyOlIv7PXDl08MLdQ4P6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.4.0/22
IPv6:
2a03:f1c0::/32
Signature Algorithm: sha256WithRSAEncryption
8c:dc:50:c2:24:0d:5d:1e:5f:bf:a7:8d:b1:7b:07:77:8c:4f:
fb:64:96:56:0e:aa:4f:98:5a:c1:05:ed:7e:f8:2b:35:85:aa:
17:c9:ba:e5:73:50:18:8f:21:d8:61:fe:50:11:4a:17:9f:37:
da:45:5d:37:20:6c:99:24:1f:5b:63:ab:25:62:a4:10:ab:07:
e1:d2:32:c0:14:da:ff:60:08:5b:0f:36:19:46:d2:9a:f7:8b:
0f:76:46:c1:0d:d1:b7:9f:26:d7:4c:85:df:91:4f:0f:26:1c:
d0:96:c5:cd:a0:4d:b8:6c:61:5c:db:2b:54:55:7d:ad:4a:86:
1f:4d:a2:e4:62:79:22:c6:49:fd:92:c0:6b:bf:ca:83:e2:7a:
a0:42:6a:ac:3e:08:f0:c2:a7:ec:ae:4b:3b:84:6d:f5:c0:ba:
6d:93:6f:bb:80:cb:a7:07:44:a4:26:d8:30:ac:11:7e:bd:f4:
8f:58:e9:50:39:87:73:87:92:ab:48:3e:f8:68:ab:44:aa:4f:
78:ee:11:38:f0:44:27:dc:29:d6:55:40:8a:05:5d:4d:f7:27:
82:d4:7a:1b:3f:2c:b2:cf:ec:07:af:2e:25:5c:81:55:9c:c9:
76:16:8a:67:1f:d6:0b:2e:c7:ed:e5:f7:af:55:2b:b6:dc:e6:
5f:c0:98:34
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzIAQ8zNgvVL5ktCo2JrTb6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MDczZDA2YjU4NjUyZjg0OWZhOGJjZjNjZWM2Yjk1MDkw
OWJkNjgwHhcNMjQwMTAyMDIyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzk5ZmQ0NTdhYjIzYTUyMmZlY2Y1YzM5NzRmMGMyZGQ0MzgzZmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xg4rseVO5BcykxYDLsRW+66V4Ey
TR5tyfNobdgZYsq+IA03FpaWfTdN90AnPJ3Vr9zZR0asBkYNfFpaMqH0h/Gayi4G
h/dwNmTf6CvxKJXaRpXpdTr4BwjybIO8YcREM5zh6AUnwPIZ6lsMrclDzGPjmrgo
ySSUfurnUtsfqDg/leZUyoAK4jF92RhA9T+ZQUJVY7wlF159bVDN0b6n/pc1LkAf
TiQU0TTtwnWcM0Zp3Ig2G3XcWXmd+p1b1WlBKlg+mCfJ8JrF+dbpJGSOKQbncQQM
t0YdsiaDTEH1utN3mTeC4oUM2hPVcumsjwmrW3zjad+3XtbBL7ak84rBeQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAOZ/UV6sjpSL+z1w5dPDC3UOD+jMB8GA1UdIwQY
MBaAFNgHPQa1hlL4SfqLzzzsa5UJCb1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkFjOUJyV0dVdmhKLW92UFBPeHJsUWtKdldnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MjE5MjAtOTM5Yi00MTJiLWEzYzUt
MjMyOWQ3OWM0YWUzLzEvQTVuOVJYcXlPbEl2N1BYRGwwOE1MZFE0UDZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83MjE5MjAtOTM5Yi00MTJiLWEzYzUtMjMyOWQ3OWM0YWUz
LzEvMkFjOUJyV0dVdmhKLW92UFBPeHJsUWtKdldnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuRIEMA0E
AgACMAcDBQAqA/HAMA0GCSqGSIb3DQEBCwUAA4IBAQCM3FDCJA1dHl+/p42xewd3
jE/7ZJZWDqpPmFrBBe1++Cs1haoXybrlc1AYjyHYYf5QEUoXnzfaRV03IGyZJB9b
Y6slYqQQqwfh0jLAFNr/YAhbDzYZRtKa94sPdkbBDdG3nybXTIXfkU8PJhzQlsXN
oE24bGFc2ytUVX2tSoYfTaLkYnkixkn9ksBrv8qD4nqgQmqsPgjwwqfsrks7hG31
wLptk2+7gMunB0SkJtgwrBF+vfSPWOlQOYdzh5KrSD74aKtEqk947hE48EQn3CnW
VUCKBV1N9yeC1HobPyyyz+wHry4lXIFVnMl2FopnH9YLLsft5fevVSu23OZfwJg0
-----END CERTIFICATE-----
Generated at Sun May 26 00:24:40 2024 by rpki-client on console-ams.rpki-client.org