Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WVv73UQ26zbe29ct9EG2vVRvhDM.roa
File: WVv73UQ26zbe29ct9EG2vVRvhDM.roa (raw, json)
Hash identifier: YGe3mRGv5nKlvGNthpqlQFJz2iHOnbwsM8o258HTG1Y=
Subject key identifier: 59:5B:FB:DD:44:36:EB:36:DE:DB:D7:2D:F4:41:B6:BD:54:6F:84:33
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0190C0269DAD021EDB2778D3B84D159265AD
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WVv73UQ26zbe29ct9EG2vVRvhDM.roa
Signing time: Wed 17 Jul 2024 10:04:34 +0000
ROA not before: Wed 17 Jul 2024 10:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54339
IP address blocks: 185.194.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c0:26:9d:ad:02:1e:db:27:78:d3:b8:4d:15:92:65:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 17 10:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=595bfbdd4436eb36dedbd72df441b6bd546f8433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:99:b0:f7:64:29:ab:e0:40:ea:3b:64:f1:13:
35:75:e9:27:04:6e:b0:78:05:90:e6:e9:c7:90:1d:
6f:64:6c:12:ce:2b:eb:28:72:89:f5:d9:60:01:2f:
9f:55:0b:a9:f1:21:61:b6:52:a6:f8:51:af:e4:aa:
7d:17:11:67:a3:6c:e3:59:d2:35:05:82:ec:2f:d5:
d5:f6:ba:58:32:58:e9:ea:1e:bd:42:33:66:a4:eb:
ff:af:20:28:97:6f:7c:5e:80:50:77:3b:e6:d8:d5:
fa:42:45:dc:cf:4e:22:9c:5e:1a:01:33:16:25:e0:
b2:40:2e:9e:5a:86:89:56:c5:a6:99:b9:5b:c9:ed:
24:f7:05:e0:45:8f:47:08:b8:45:76:91:ee:8d:13:
bd:2d:3c:f2:04:3f:67:89:7b:19:ff:ac:04:34:a7:
8f:f4:12:40:2c:ee:0a:c2:ed:24:3d:7e:17:e4:d7:
f2:6c:19:29:80:e8:7d:60:89:9c:ba:1a:05:53:23:
d3:ee:6d:07:e8:0d:b7:48:76:fb:5d:fd:42:6e:7b:
df:c8:d6:d5:00:d1:6e:fc:9c:cf:e1:d0:48:96:17:
93:91:9c:68:af:2b:02:71:39:bc:10:00:4a:1b:c9:
16:b0:72:93:f9:1f:08:9e:b3:5b:4c:b4:e2:e1:29:
57:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5B:FB:DD:44:36:EB:36:DE:DB:D7:2D:F4:41:B6:BD:54:6F:84:33
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WVv73UQ26zbe29ct9EG2vVRvhDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.29.0/24
Signature Algorithm: sha256WithRSAEncryption
49:11:5c:0c:0f:70:8d:4e:18:da:ca:f5:01:69:f9:d0:0f:12:
1e:e6:e0:7a:d7:5f:00:84:fb:d3:88:96:2b:a1:34:95:63:15:
c1:0f:2c:66:6c:eb:be:4a:86:2b:45:4c:c9:79:50:87:37:23:
9c:ca:2f:56:fb:89:ba:2d:18:09:4b:10:ee:72:1c:af:1e:d0:
7e:5c:a3:51:7a:6b:41:66:d2:41:5b:c4:28:f5:ee:68:04:30:
52:1d:cd:04:a5:38:e5:a6:95:eb:42:5b:13:67:a0:9c:26:f0:
75:fb:42:ef:48:76:fb:57:27:26:0e:e7:13:95:ca:fe:73:d7:
c2:bd:34:f8:62:b8:27:04:11:f1:c1:90:b4:38:9b:61:eb:4e:
3f:e7:2e:ec:80:d0:87:dc:3e:55:7f:27:53:15:0f:8a:2b:25:
01:d2:ea:44:03:18:11:36:80:87:dc:92:3c:18:7d:e3:78:f6:
3b:0b:d5:09:48:c7:3c:6f:83:59:58:c1:ab:c7:1e:5b:23:65:
89:d4:18:d9:69:30:63:34:19:a9:47:2e:ce:ff:ae:d7:7c:64:
9f:cf:2a:e7:54:a0:24:d9:ef:e7:7a:12:45:dc:3f:2e:e3:55:
a7:34:b2:a6:55:b2:99:42:c9:61:6e:fa:70:bf:78:8d:cc:d1:
4f:85:71:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDAJp2tAh7bJ3jTuE0VkmWtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwNzE3MTAwNDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTViZmJkZDQ0MzZlYjM2ZGVkYmQ3MmRmNDQxYjZiZDU0NmY4NDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pmw92Qpq+BA6jtk8RM1deknBG6w
eAWQ5unHkB1vZGwSzivrKHKJ9dlgAS+fVQup8SFhtlKm+FGv5Kp9FxFno2zjWdI1
BYLsL9XV9rpYMljp6h69QjNmpOv/ryAol298XoBQdzvm2NX6QkXcz04inF4aATMW
JeCyQC6eWoaJVsWmmblbye0k9wXgRY9HCLhFdpHujRO9LTzyBD9niXsZ/6wENKeP
9BJALO4Kwu0kPX4X5NfybBkpgOh9YImcuhoFUyPT7m0H6A23SHb7Xf1CbnvfyNbV
ANFu/JzP4dBIlheTkZxorysCcTm8EABKG8kWsHKT+R8InrNbTLTi4SlXGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFlb+91ENus23tvXLfRBtr1Ub4QzMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvV1Z2NzNVUTI2emJlMjljdDlFRzJ2VlJ2aERNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucIdMA0G
CSqGSIb3DQEBCwUAA4IBAQBJEVwMD3CNThjayvUBafnQDxIe5uB6118AhPvTiJYr
oTSVYxXBDyxmbOu+SoYrRUzJeVCHNyOcyi9W+4m6LRgJSxDuchyvHtB+XKNRemtB
ZtJBW8Qo9e5oBDBSHc0EpTjlppXrQlsTZ6CcJvB1+0LvSHb7VycmDucTlcr+c9fC
vTT4YrgnBBHxwZC0OJth604/5y7sgNCH3D5VfydTFQ+KKyUB0upEAxgRNoCH3JI8
GH3jePY7C9UJSMc8b4NZWMGrxx5bI2WJ1BjZaTBjNBmpRy7O/67XfGSfzyrnVKAk
2e/nehJF3D8u41WnNLKmVbKZQslhbvpwv3iNzNFPhXHZ
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:41:48 2024 by rpki-client on console-fra.rpki-client.org