Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/_xM4s0CeblTGiFJZsKdw_08XDVA.roa
File: _xM4s0CeblTGiFJZsKdw_08XDVA.roa (raw, json)
Hash identifier: zgADurhcLuHVdzTUryGFONtAEk7Skix8Ix6bmfrOECQ=
Subject key identifier: FF:13:38:B3:40:9E:6E:54:C6:88:52:59:B0:A7:70:FF:4F:17:0D:50
Certificate issuer: /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial: 018E1A7F6888BD8036CEDA390A3679C02A85
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/_xM4s0CeblTGiFJZsKdw_08XDVA.roa
Signing time: Thu 07 Mar 2024 19:59:01 +0000
ROA not before: Thu 07 Mar 2024 19:59:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208871
IP address blocks: 185.156.24.0/22 maxlen: 22
185.156.24.0/24 maxlen: 24
185.156.25.0/24 maxlen: 24
185.156.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1a:7f:68:88:bd:80:36:ce:da:39:0a:36:79:c0:2a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
Validity
Not Before: Mar 7 19:59:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff1338b3409e6e54c6885259b0a770ff4f170d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c3:d6:e5:3f:9c:2c:4f:aa:e4:69:27:39:fd:
92:83:c6:66:6e:53:59:00:02:40:0a:ca:7a:44:5c:
be:9e:f3:e1:f1:59:51:09:9c:8d:5e:f2:54:be:e4:
3f:d2:79:65:97:cd:fc:2b:cf:67:54:39:91:67:a8:
d4:34:04:53:34:bb:6c:7d:ee:42:d5:e2:36:af:5c:
89:73:1b:21:ba:d8:c9:9d:9e:00:66:d3:ba:93:d4:
08:26:9e:6b:66:de:a9:14:d9:35:06:67:73:68:d7:
8b:10:67:31:c9:10:b4:36:ac:ef:6e:23:eb:24:86:
50:83:eb:d7:b2:fb:14:de:d9:72:e6:1e:3a:43:d3:
53:e7:3a:48:88:8c:93:b7:57:d0:eb:9c:3f:dc:e7:
2c:5b:78:58:4b:90:f7:54:d3:6c:6b:70:c7:38:29:
72:1e:60:93:b0:f6:02:8e:8a:1f:93:a5:be:1e:7e:
6c:cf:58:20:a4:cc:93:b3:69:ff:69:ec:cb:01:43:
ba:13:d2:07:49:22:1e:e9:80:2d:df:92:79:66:d7:
ea:17:2a:30:bd:a4:84:a1:70:aa:58:a4:44:1d:fd:
90:b0:b7:f4:d7:9f:7f:d8:19:c6:cb:5e:66:a4:ea:
1e:d3:e0:5b:0e:b2:3a:2d:36:cb:fe:67:81:14:79:
ee:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:13:38:B3:40:9E:6E:54:C6:88:52:59:B0:A7:70:FF:4F:17:0D:50
X509v3 Authority Key Identifier:
keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/_xM4s0CeblTGiFJZsKdw_08XDVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.24.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:b5:0a:b6:94:c0:80:12:be:f7:17:8b:b2:08:ce:ac:bc:1b:
d2:5f:cd:4c:c5:53:21:f3:1e:70:9a:04:1e:da:a9:b9:bf:92:
88:22:3c:25:18:3d:2b:3d:4f:7c:dd:ea:ca:1b:7d:f5:50:60:
2c:a0:f8:b4:e3:3e:69:a2:a6:5e:cc:13:d8:6f:5d:e9:9b:6e:
8a:22:fc:ef:49:42:cb:a4:2d:8b:14:b5:00:f3:23:77:4b:3e:
20:3b:57:02:aa:57:8e:60:7a:0c:98:cc:32:bd:1a:a5:e1:43:
44:0b:04:01:ef:38:f8:49:c2:80:3b:ac:fa:c9:1a:f9:a6:2e:
76:c9:01:fb:95:93:a3:c2:fa:63:bf:b9:8f:e2:b8:00:02:d1:
70:48:29:e8:f5:3c:b0:96:87:cd:21:80:ea:59:67:08:f6:9b:
27:2d:8b:fc:10:ce:ad:5b:04:34:c0:f8:9a:cb:78:a7:ac:b3:
f8:86:33:cd:78:43:4a:66:56:bd:39:35:5d:53:bd:33:76:9b:
de:ab:44:2b:5e:06:da:92:8c:4f:25:e4:76:e1:c5:8c:20:36:
8a:a4:2d:bd:54:55:a7:fe:53:72:c2:0b:8c:03:58:36:8e:ed:
1a:12:c9:c9:fd:1e:93:8d:f2:d1:a7:f4:46:4f:e3:bd:21:e3:
28:81:33:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4af2iIvYA2zto5CjZ5wCqFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDU0ZTRhNzg4ZDY5NjdhMmVlZjNhNjY5MjYyMjYyNmY1
NGVmYWQwHhcNMjQwMzA3MTk1OTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjEzMzhiMzQwOWU2ZTU0YzY4ODUyNTliMGE3NzBmZjRmMTcwZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcPW5T+cLE+q5GknOf2Sg8ZmblNZ
AAJACsp6RFy+nvPh8VlRCZyNXvJUvuQ/0nlll838K89nVDmRZ6jUNARTNLtsfe5C
1eI2r1yJcxshutjJnZ4AZtO6k9QIJp5rZt6pFNk1BmdzaNeLEGcxyRC0NqzvbiPr
JIZQg+vXsvsU3tly5h46Q9NT5zpIiIyTt1fQ65w/3OcsW3hYS5D3VNNsa3DHOCly
HmCTsPYCjoofk6W+Hn5sz1ggpMyTs2n/aezLAUO6E9IHSSIe6YAt35J5ZtfqFyow
vaSEoXCqWKREHf2QsLf0159/2BnGy15mpOoe0+BbDrI6LTbL/meBFHnuBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP8TOLNAnm5UxohSWbCncP9PFw1QMB8GA1UdIwQY
MBaAFCfVTkp4jWlnou7zpmkmImJvVO+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjlWT1NuaU5hV2VpN3ZPbWFTWWlZbTlVNzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84MzIxNDctMzEwZS00YmI1LTk5ZGEt
ZTk5YThkYzMwMjU1LzEvX3hNNHMwQ2VibFRHaUZKWnNLZHdfMDhYRFZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84MzIxNDctMzEwZS00YmI1LTk5ZGEtZTk5YThkYzMwMjU1
LzEvSjlWT1NuaU5hV2VpN3ZPbWFTWWlZbTlVNzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZwYMA0G
CSqGSIb3DQEBCwUAA4IBAQCNtQq2lMCAEr73F4uyCM6svBvSX81MxVMh8x5wmgQe
2qm5v5KIIjwlGD0rPU983erKG331UGAsoPi04z5poqZezBPYb13pm26KIvzvSULL
pC2LFLUA8yN3Sz4gO1cCqleOYHoMmMwyvRql4UNECwQB7zj4ScKAO6z6yRr5pi52
yQH7lZOjwvpjv7mP4rgAAtFwSCno9TywlofNIYDqWWcI9psnLYv8EM6tWwQ0wPia
y3inrLP4hjPNeENKZla9OTVdU70zdpveq0QrXgbakoxPJeR24cWMIDaKpC29VFWn
/lNywguMA1g2ju0aEsnJ/R6TjfLRp/RGT+O9IeMogTNj
-----END CERTIFICATE-----
Generated at Wed Nov 27 09:32:24 2024 by rpki-client on console-ams.rpki-client.org