Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/xcmoytNRRpKQcn9cj410-V2DTAM.roa
File: xcmoytNRRpKQcn9cj410-V2DTAM.roa (raw, json)
Hash identifier: 5LlB/5otF3mS8zDpvNJ73MVFd1ovohYG63FS6HGrLWQ=
Subject key identifier: C5:C9:A8:CA:D3:51:46:92:90:72:7F:5C:8F:8D:74:F9:5D:83:4C:03
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 018CC6B7995812AA2D7728D3DF5E4CB5BC80
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/xcmoytNRRpKQcn9cj410-V2DTAM.roa
Signing time: Mon 01 Jan 2024 20:29:30 +0000
ROA not before: Mon 01 Jan 2024 20:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205216
IP address blocks: 185.221.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:99:58:12:aa:2d:77:28:d3:df:5e:4c:b5:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Jan 1 20:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5c9a8cad351469290727f5c8f8d74f95d834c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:f4:2c:57:05:ad:76:f3:a1:53:1b:b7:55:
37:e3:6a:2d:bd:35:af:03:ed:0c:31:93:b3:0e:f8:
7d:b7:f9:de:94:55:7d:b6:94:fa:e0:47:d8:ca:67:
0d:c2:e5:dc:fb:02:bc:8d:98:c8:ee:7e:28:fa:e6:
23:c4:13:df:0e:6d:11:30:0b:11:fb:5f:d8:0c:7e:
9a:3c:43:00:78:00:10:6c:78:e9:43:f2:d4:25:e8:
ef:73:1e:89:ce:41:f7:50:31:1e:5e:70:bf:60:1c:
1a:b0:be:45:33:6e:58:a8:0e:cd:49:00:34:ef:4a:
42:c4:dc:29:8f:2e:84:77:ad:05:1c:6a:55:27:be:
0b:0b:33:c0:78:e3:9d:a6:89:9f:d1:4c:70:43:cb:
e2:c1:31:92:0e:c2:87:f8:40:0b:3b:ae:71:83:ed:
27:2f:80:0b:ad:87:d4:c5:9f:bd:67:bf:2a:d4:a1:
c9:30:9c:4c:b4:32:01:f9:bb:05:13:0e:36:c7:35:
f0:97:60:f9:5f:25:31:f7:49:95:12:99:78:fb:13:
f8:28:d8:8c:a5:b5:1c:0a:2f:04:08:d2:5f:b6:de:
49:9d:dc:03:f8:06:43:c1:8c:58:a0:d3:94:e3:2e:
23:c3:35:35:bd:9f:4b:b3:bb:4b:3f:94:c7:e4:c8:
e4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C9:A8:CA:D3:51:46:92:90:72:7F:5C:8F:8D:74:F9:5D:83:4C:03
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/xcmoytNRRpKQcn9cj410-V2DTAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.47.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:ca:41:3f:2d:40:81:6b:02:24:24:5e:e0:d8:49:55:15:cf:
72:1f:a9:5a:e4:d3:a9:ab:71:c9:73:b3:bc:c5:7c:99:10:66:
36:d5:03:c1:59:e3:8f:ed:7c:e9:39:d0:42:d3:9b:97:ea:32:
25:1d:cc:b3:14:37:22:9e:fc:47:59:c2:df:88:fa:f7:1a:94:
2e:30:75:52:ad:b8:0a:c0:89:c1:88:55:62:5f:cb:84:78:c1:
bb:65:28:08:dd:5e:8f:e7:5b:e4:54:31:e1:b8:34:94:6a:2c:
44:bf:b8:58:f1:c5:64:64:f4:8d:cc:29:52:2d:e0:28:3d:2c:
5a:3e:17:1c:1e:c7:41:ee:1a:7c:f7:85:3f:1d:84:e7:a5:3d:
d9:68:a2:69:47:88:4c:a1:56:c7:5b:64:49:a9:5b:0a:87:d1:
88:d0:41:8b:2e:ab:6b:86:02:04:05:ae:78:16:f4:b1:f0:0c:
80:fb:83:98:17:8e:1e:44:2d:4a:9a:8c:25:02:25:aa:09:62:
d7:1d:f3:e0:91:6b:60:c8:36:e3:a7:79:83:6d:d7:da:99:c8:
f6:11:f2:1f:aa:dc:f2:b3:9d:c8:d0:b9:0a:8f:d3:e7:f0:5d:
03:a7:0b:52:0f:b1:36:29:e9:f8:15:6b:66:14:7b:4e:b4:81:
27:33:9c:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt5lYEqotdyjT315MtbyAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0
MzE3MjUwHhcNMjQwMTAxMjAyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWM5YThjYWQzNTE0NjkyOTA3MjdmNWM4ZjhkNzRmOTVkODM0YzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6X0LFcFrXbzoVMbt1U342otvTWv
A+0MMZOzDvh9t/nelFV9tpT64EfYymcNwuXc+wK8jZjI7n4o+uYjxBPfDm0RMAsR
+1/YDH6aPEMAeAAQbHjpQ/LUJejvcx6JzkH3UDEeXnC/YBwasL5FM25YqA7NSQA0
70pCxNwpjy6Ed60FHGpVJ74LCzPAeOOdpomf0UxwQ8viwTGSDsKH+EALO65xg+0n
L4ALrYfUxZ+9Z78q1KHJMJxMtDIB+bsFEw42xzXwl2D5XyUx90mVEpl4+xP4KNiM
pbUcCi8ECNJftt5JndwD+AZDwYxYoNOU4y4jwzU1vZ9Ls7tLP5TH5MjkXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMXJqMrTUUaSkHJ/XI+NdPldg0wDMB8GA1UdIwQY
MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt
ZjRjNWZjM2NhMmM0LzEveGNtb3l0TlJScEtRY245Y2o0MTAtVjJEVEFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0
LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud0vMA0G
CSqGSIb3DQEBCwUAA4IBAQDAykE/LUCBawIkJF7g2ElVFc9yH6la5NOpq3HJc7O8
xXyZEGY21QPBWeOP7XzpOdBC05uX6jIlHcyzFDcinvxHWcLfiPr3GpQuMHVSrbgK
wInBiFViX8uEeMG7ZSgI3V6P51vkVDHhuDSUaixEv7hY8cVkZPSNzClSLeAoPSxa
PhccHsdB7hp894U/HYTnpT3ZaKJpR4hMoVbHW2RJqVsKh9GI0EGLLqtrhgIEBa54
FvSx8AyA+4OYF44eRC1KmowlAiWqCWLXHfPgkWtgyDbjp3mDbdfamcj2EfIfqtzy
s53I0LkKj9Pn8F0DpwtSD7E2Ken4FWtmFHtOtIEnM5wv
-----END CERTIFICATE-----
Generated at Fri Jun 7 21:38:05 2024 by rpki-client on console-fra.rpki-client.org