Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/a2mbT3remjVgqvst_nwavFAu2Rc.roa
File: a2mbT3remjVgqvst_nwavFAu2Rc.roa (raw, json)
Hash identifier: MtsRnveyR/4llWt2aIBRCQGWX0eXQyreV8egal8UcRI=
Subject key identifier: 6B:69:9B:4F:7A:DE:9A:35:60:AA:FB:2D:FE:7C:1A:BC:50:2E:D9:17
Certificate issuer: /CN=a548aed90a5e23b4a73695608f3b6578bfdec615
Certificate serial: 018CC2DAD0D68EF7CF09A4A753B9EA66E255
Authority key identifier: A5:48:AE:D9:0A:5E:23:B4:A7:36:95:60:8F:3B:65:78:BF:DE:C6:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/a2mbT3remjVgqvst_nwavFAu2Rc.roa
Signing time: Mon 01 Jan 2024 02:29:29 +0000
ROA not before: Mon 01 Jan 2024 02:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35486
IP address blocks: 185.79.29.0/24 maxlen: 26
185.79.28.0/24 maxlen: 24
185.79.31.0/24 maxlen: 26
185.79.30.0/24 maxlen: 26
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d0:d6:8e:f7:cf:09:a4:a7:53:b9:ea:66:e2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a548aed90a5e23b4a73695608f3b6578bfdec615
Validity
Not Before: Jan 1 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b699b4f7ade9a3560aafb2dfe7c1abc502ed917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d2:e9:09:fd:c6:bd:f5:76:72:e0:cf:b8:45:
df:20:d9:2b:95:06:60:14:67:7b:71:2c:d1:c1:41:
52:39:3d:69:cf:cb:7c:93:8d:05:af:5f:b6:26:5b:
27:03:5b:4a:07:39:27:17:10:30:d5:8f:e0:63:2a:
02:73:5c:08:c9:c2:18:6d:79:3e:32:e4:33:bc:a0:
14:4f:89:89:05:f1:85:c0:80:e4:24:ee:27:ee:43:
5c:98:81:2c:da:67:1d:34:60:b9:99:57:5c:d2:74:
05:b1:ed:b5:cf:d6:e5:58:94:a5:50:01:eb:74:2c:
00:7b:bc:54:fe:f6:8e:50:90:1c:68:e1:2a:80:e5:
90:8b:0c:7c:26:99:61:4c:72:2c:25:44:7f:81:62:
bf:29:e4:26:ca:df:44:8c:74:2e:66:71:b9:3d:a0:
96:83:e0:dc:2c:09:20:9c:47:e3:cf:16:50:0c:fb:
a6:40:77:7c:6c:28:3a:52:8e:7f:b1:8d:cc:2c:38:
5c:a9:44:d4:05:82:6e:2a:c6:23:7b:91:dc:2d:d9:
7d:eb:63:69:05:06:55:68:38:3f:d0:62:83:98:51:
66:d5:12:50:8b:05:fe:af:34:52:5f:c3:75:03:a0:
c7:50:dc:4a:91:2c:d4:12:e8:f2:7c:f7:ee:d9:ac:
84:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:69:9B:4F:7A:DE:9A:35:60:AA:FB:2D:FE:7C:1A:BC:50:2E:D9:17
X509v3 Authority Key Identifier:
keyid:A5:48:AE:D9:0A:5E:23:B4:A7:36:95:60:8F:3B:65:78:BF:DE:C6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/a2mbT3remjVgqvst_nwavFAu2Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.28.0/22
Signature Algorithm: sha256WithRSAEncryption
92:e8:5e:e2:9e:04:e7:e3:4b:d0:68:e1:cf:d1:f3:50:83:11:
2b:d5:1f:fb:bc:f4:8b:ad:0d:d9:e8:c2:76:5e:fb:85:cf:30:
66:27:2e:ce:eb:17:7a:d4:14:70:58:1a:35:8c:97:b5:cb:7e:
7d:bc:3f:f4:22:06:2c:16:d8:55:8b:c5:2c:e6:f9:d1:c9:73:
9c:49:9b:67:1e:cf:51:73:9c:fd:f4:20:af:61:6f:d6:3b:18:
b4:f0:cd:c5:8f:ff:28:07:fa:7d:d8:f8:4d:09:a8:5e:45:31:
07:0a:fb:12:eb:17:5f:df:4f:82:7a:95:68:5f:b3:fe:16:16:
7a:02:56:ee:8a:5c:23:e5:5e:ca:db:ad:b8:a0:31:b7:8a:c8:
50:8a:42:3c:7c:24:23:18:b9:f2:04:7a:33:a4:dc:38:c4:1c:
f1:e5:c4:93:c1:d3:2c:da:26:f2:15:46:15:74:ea:04:6f:c8:
23:12:4d:79:62:f2:22:43:db:a0:bc:5a:64:73:de:dd:61:26:
18:80:75:3e:84:86:f8:3f:9c:b6:02:77:30:ed:33:dd:77:d2:
8f:fa:86:06:a4:66:a2:ea:fd:02:d0:35:cf:4c:aa:5a:f5:07:
11:f9:8f:33:e1:9a:4d:41:60:34:98:98:68:9a:d1:22:04:37:
03:f1:c0:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2tDWjvfPCaSnU7nqZuJVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NDhhZWQ5MGE1ZTIzYjRhNzM2OTU2MDhmM2I2NTc4YmZk
ZWM2MTUwHhcNMjQwMTAxMDIyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjY5OWI0ZjdhZGU5YTM1NjBhYWZiMmRmZTdjMWFiYzUwMmVkOTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltLpCf3GvfV2cuDPuEXfINkrlQZg
FGd7cSzRwUFSOT1pz8t8k40Fr1+2JlsnA1tKBzknFxAw1Y/gYyoCc1wIycIYbXk+
MuQzvKAUT4mJBfGFwIDkJO4n7kNcmIEs2mcdNGC5mVdc0nQFse21z9blWJSlUAHr
dCwAe7xU/vaOUJAcaOEqgOWQiwx8JplhTHIsJUR/gWK/KeQmyt9EjHQuZnG5PaCW
g+DcLAkgnEfjzxZQDPumQHd8bCg6Uo5/sY3MLDhcqUTUBYJuKsYje5HcLdl962Np
BQZVaDg/0GKDmFFm1RJQiwX+rzRSX8N1A6DHUNxKkSzUEujyfPfu2ayEawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGtpm0963po1YKr7Lf58GrxQLtkXMB8GA1UdIwQY
MBaAFKVIrtkKXiO0pzaVYI87ZXi/3sYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFVpdTJRcGVJN1NuTnBWZ2p6dGxlTF9leGhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83NDY2YzItNTZkNC00OTRhLWIyNjct
NTQ2M2I3MWUyNmRlLzEvYTJtYlQzcmVtalZncXZzdF9ud2F2RkF1MlJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83NDY2YzItNTZkNC00OTRhLWIyNjctNTQ2M2I3MWUyNmRl
LzEvcFVpdTJRcGVJN1NuTnBWZ2p6dGxlTF9leGhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuU8cMA0G
CSqGSIb3DQEBCwUAA4IBAQCS6F7ingTn40vQaOHP0fNQgxEr1R/7vPSLrQ3Z6MJ2
XvuFzzBmJy7O6xd61BRwWBo1jJe1y359vD/0IgYsFthVi8Us5vnRyXOcSZtnHs9R
c5z99CCvYW/WOxi08M3Fj/8oB/p92PhNCaheRTEHCvsS6xdf30+CepVoX7P+FhZ6
Albuilwj5V7K2624oDG3ishQikI8fCQjGLnyBHozpNw4xBzx5cSTwdMs2ibyFUYV
dOoEb8gjEk15YvIiQ9ugvFpkc97dYSYYgHU+hIb4P5y2Ancw7TPdd9KP+oYGpGai
6v0C0DXPTKpa9QcR+Y8z4ZpNQWA0mJhomtEiBDcD8cBY
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:13 2024 by rpki-client on console-ams.rpki-client.org