Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pr4Q_T5fH2FLvp7EPAcEEytMY9o.roa
File: pr4Q_T5fH2FLvp7EPAcEEytMY9o.roa (raw, json)
Hash identifier: E819WCWfk9ZK0zMp8uS9qGerLzB0PO4j16pSt4SoqG0=
Subject key identifier: A6:BE:10:FD:3E:5F:1F:61:4B:BE:9E:C4:3C:07:04:13:2B:4C:63:DA
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CD9E9838436AA2661DAB043516BFFEF42
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pr4Q_T5fH2FLvp7EPAcEEytMY9o.roa
Signing time: Fri 05 Jan 2024 13:56:48 +0000
ROA not before: Fri 05 Jan 2024 13:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15557
IP address blocks: 185.228.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d9:e9:83:84:36:aa:26:61:da:b0:43:51:6b:ff:ef:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 5 13:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6be10fd3e5f1f614bbe9ec43c0704132b4c63da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:ac:eb:48:a1:b5:b5:77:1b:66:30:9b:04:
bb:38:39:7f:f1:ee:c2:ba:12:58:58:6c:2c:d7:e5:
67:14:d8:f4:e9:e8:58:94:02:c0:d4:30:5c:ac:52:
a9:c9:1e:08:87:27:c1:b3:73:98:46:75:69:48:f5:
48:28:57:94:ad:62:4a:fc:08:89:5b:c7:ff:e1:fd:
0a:af:72:13:11:d2:5a:49:2a:fd:0e:9e:05:79:2b:
5d:b5:f6:98:25:80:d7:f5:00:2b:09:1b:30:62:7b:
63:94:aa:0d:10:8c:ca:f6:48:a8:23:49:19:4c:1e:
a4:07:97:51:25:c2:ba:6d:bc:47:04:ba:0e:4a:5e:
6c:01:9c:bc:f2:2f:c7:77:e4:c8:a7:fd:d2:c7:e1:
9c:f5:b7:83:86:a9:ca:53:ba:32:64:81:df:06:ac:
f6:8e:6d:75:29:73:20:e9:8c:13:bf:d4:54:c6:34:
1d:48:41:f2:1b:8c:95:5f:dd:bc:d0:d6:d6:3d:c2:
2c:57:8d:f2:4a:6e:4c:6c:cf:7c:49:c8:98:ba:cd:
d1:e2:10:08:6b:c8:a9:32:bd:2c:7c:d9:0f:7b:9e:
a0:a9:ae:cf:02:96:8e:c2:b6:ab:30:2b:f7:3b:72:
0c:88:2e:bd:e3:fe:60:51:5b:6f:d7:47:05:7c:aa:
fc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BE:10:FD:3E:5F:1F:61:4B:BE:9E:C4:3C:07:04:13:2B:4C:63:DA
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pr4Q_T5fH2FLvp7EPAcEEytMY9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.226.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:12:d6:77:8d:94:30:2d:ad:50:86:57:f8:ba:45:c6:99:02:
72:93:e0:b2:a4:f6:d0:1a:09:43:41:f0:b8:c4:60:27:54:c4:
62:99:29:46:15:94:e2:f1:62:49:af:13:1d:98:cb:e9:68:44:
9b:ef:be:a5:96:b2:42:dc:5f:91:b4:83:05:53:a6:00:66:1e:
4d:ce:8a:53:5b:41:1a:2a:8a:e4:bd:15:f0:77:b1:17:e5:9c:
d6:ae:af:7a:16:05:f6:1b:fc:0d:ec:f7:96:fe:d5:f9:16:c0:
69:33:fe:85:1c:6d:be:07:27:fe:20:8f:a6:1c:ac:b0:f4:1f:
88:f2:04:99:53:f9:7b:3a:56:5d:cf:db:a5:07:61:c5:46:e0:
4d:f2:68:5e:7f:b8:88:a4:9a:d0:9e:ac:fe:9e:02:02:4e:64:
c2:0d:99:84:15:56:74:62:3f:3f:87:18:14:cb:3e:f2:6d:7d:
f9:63:56:e7:8a:f1:4a:58:20:4e:1c:c2:d6:71:5b:f7:4b:04:
27:1a:9a:38:2e:a0:cd:90:dd:e9:16:a7:f2:ef:63:33:49:8d:
09:2e:3b:08:7a:f1:ee:07:c0:00:03:42:97:2b:1e:87:09:c5:
5d:1e:d2:ed:67:36:f1:2d:f9:fa:9d:d9:f4:cb:b6:5c:3d:66:
c3:3e:19:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzZ6YOENqomYdqwQ1Fr/+9CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjQwMTA1MTM1NjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmJlMTBmZDNlNWYxZjYxNGJiZTllYzQzYzA3MDQxMzJiNGM2M2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnes60ihtbV3G2YwmwS7ODl/8e7C
uhJYWGws1+VnFNj06ehYlALA1DBcrFKpyR4IhyfBs3OYRnVpSPVIKFeUrWJK/AiJ
W8f/4f0Kr3ITEdJaSSr9Dp4FeStdtfaYJYDX9QArCRswYntjlKoNEIzK9kioI0kZ
TB6kB5dRJcK6bbxHBLoOSl5sAZy88i/Hd+TIp/3Sx+Gc9beDhqnKU7oyZIHfBqz2
jm11KXMg6YwTv9RUxjQdSEHyG4yVX9280NbWPcIsV43ySm5MbM98SciYus3R4hAI
a8ipMr0sfNkPe56gqa7PApaOwrarMCv3O3IMiC694/5gUVtv10cFfKr8UwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKa+EP0+Xx9hS76exDwHBBMrTGPaMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvcHI0UV9UNWZIMkZMdnA3RVBBY0VFeXRNWTlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueTiMA0G
CSqGSIb3DQEBCwUAA4IBAQA7EtZ3jZQwLa1Qhlf4ukXGmQJyk+CypPbQGglDQfC4
xGAnVMRimSlGFZTi8WJJrxMdmMvpaESb776llrJC3F+RtIMFU6YAZh5NzopTW0Ea
KorkvRXwd7EX5ZzWrq96FgX2G/wN7PeW/tX5FsBpM/6FHG2+Byf+II+mHKyw9B+I
8gSZU/l7OlZdz9ulB2HFRuBN8mhef7iIpJrQnqz+ngICTmTCDZmEFVZ0Yj8/hxgU
yz7ybX35Y1bnivFKWCBOHMLWcVv3SwQnGpo4LqDNkN3pFqfy72MzSY0JLjsIevHu
B8AAA0KXKx6HCcVdHtLtZzbxLfn6ndn0y7ZcPWbDPhmL
-----END CERTIFICATE-----
Generated at Sun May 5 20:04:47 2024 by rpki-client on console-ams.rpki-client.org