Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XwKThHTnBoU-1uluB72mmyWNVzc.roa
File: XwKThHTnBoU-1uluB72mmyWNVzc.roa (raw, json)
Hash identifier: hoJnda9fyAdwo70yy0CWScDagukfXPHnb4V/ey2zViE=
Subject key identifier: 5F:02:93:84:74:E7:06:85:3E:D6:E9:6E:07:BD:A6:9B:25:8D:57:37
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018E4244BE42E7C84C7B4EE33A57FD877773
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XwKThHTnBoU-1uluB72mmyWNVzc.roa
Signing time: Fri 15 Mar 2024 13:19:45 +0000
ROA not before: Fri 15 Mar 2024 13:19:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24440
IP address blocks: 185.194.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:42:44:be:42:e7:c8:4c:7b:4e:e3:3a:57:fd:87:77:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 15 13:19:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f02938474e706853ed6e96e07bda69b258d5737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:5c:69:7d:46:85:59:4b:56:e2:bf:63:4f:
00:d6:00:89:29:bb:35:8d:fb:d1:99:4a:e3:f6:37:
88:b3:2c:0f:61:2d:07:ae:d6:58:50:3b:48:1f:a9:
68:ba:a1:fb:c6:d0:b6:67:50:26:35:ec:67:9e:db:
c9:32:28:17:92:48:be:c5:a1:d9:68:22:10:c4:17:
37:2f:dd:4a:08:d8:5a:f1:d4:95:62:83:41:a2:97:
58:11:46:dd:ef:2b:10:79:a6:a4:f7:69:bc:c8:82:
38:87:8a:82:c6:5a:66:c8:d8:71:90:fe:16:6e:b5:
6c:95:64:ba:5e:12:95:cc:bf:c8:43:29:01:c4:0d:
21:81:b2:4f:a5:0e:06:38:cd:b9:7b:05:6e:65:0e:
a8:88:71:58:5f:80:d7:bb:8b:f6:ba:a2:90:07:e2:
41:a2:d3:fc:2b:fa:1b:9a:e0:66:0f:ab:59:1a:e3:
e4:e4:cc:79:f3:97:77:64:69:7e:c5:84:04:8e:4f:
e0:14:19:1d:32:5f:07:fd:71:b9:1f:56:ae:6c:3d:
37:b9:2d:1b:53:cd:ef:7c:ad:bb:cb:e8:d5:21:07:
9a:7f:51:27:b9:a6:5d:49:18:ec:3c:52:d2:52:71:
20:cf:22:00:10:c1:84:02:2e:7a:09:07:9f:97:cc:
1b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:02:93:84:74:E7:06:85:3E:D6:E9:6E:07:BD:A6:9B:25:8D:57:37
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XwKThHTnBoU-1uluB72mmyWNVzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.29.0/24
Signature Algorithm: sha256WithRSAEncryption
21:45:28:89:82:84:3f:1e:c3:94:8d:d6:d8:21:92:9d:db:c9:
a1:bf:15:75:45:d5:51:af:a4:8b:38:c2:b4:7a:8e:a6:6f:92:
23:3e:55:ab:2d:f2:31:8e:da:cc:eb:fe:1e:80:01:19:30:32:
a3:64:fd:dd:4b:56:f4:32:34:ae:42:ce:9e:b8:93:c6:a3:eb:
fb:04:1a:56:94:47:b4:cd:97:d9:c6:b7:9e:31:32:fe:44:40:
7d:59:4a:0c:1e:a7:af:2e:43:95:23:68:f1:22:17:f4:55:1f:
5b:8b:7e:ea:6c:b3:71:34:87:bf:39:2f:45:f9:bf:63:6b:5a:
2b:50:50:55:2d:81:53:7a:09:55:92:c7:08:26:c9:ae:d7:84:
d6:73:23:5a:a6:45:2c:de:e9:02:c8:8d:9e:e0:c6:44:7d:b3:
f3:0b:a4:e3:76:8d:91:d7:d2:47:30:d7:80:21:b4:07:40:2c:
f0:a2:9a:36:30:c9:91:c2:72:b7:84:c4:ec:11:6a:9b:bd:3e:
f5:23:ed:d5:4e:2f:86:43:ed:38:f0:5f:24:47:91:5f:1f:1e:
5d:d0:0c:bd:28:f2:f7:41:4b:2d:a3:cb:71:e9:c6:b3:2b:d9:
2f:ac:49:b7:31:69:8d:7c:00:34:6d:6d:88:5f:ff:7a:1a:e4:
91:60:63:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY5CRL5C58hMe07jOlf9h3dzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwMzE1MTMxOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjAyOTM4NDc0ZTcwNjg1M2VkNmU5NmUwN2JkYTY5YjI1OGQ1NzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwFcaX1GhVlLVuK/Y08A1gCJKbs1
jfvRmUrj9jeIsywPYS0HrtZYUDtIH6louqH7xtC2Z1AmNexnntvJMigXkki+xaHZ
aCIQxBc3L91KCNha8dSVYoNBopdYEUbd7ysQeaak92m8yII4h4qCxlpmyNhxkP4W
brVslWS6XhKVzL/IQykBxA0hgbJPpQ4GOM25ewVuZQ6oiHFYX4DXu4v2uqKQB+JB
otP8K/obmuBmD6tZGuPk5Mx585d3ZGl+xYQEjk/gFBkdMl8H/XG5H1aubD03uS0b
U83vfK27y+jVIQeaf1EnuaZdSRjsPFLSUnEgzyIAEMGEAi56CQefl8wb5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF8Ck4R05waFPtbpbge9ppsljVc3MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvWHdLVGhIVG5Cb1UtMXVsdUI3Mm1teVdOVnpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucIdMA0G
CSqGSIb3DQEBCwUAA4IBAQAhRSiJgoQ/HsOUjdbYIZKd28mhvxV1RdVRr6SLOMK0
eo6mb5IjPlWrLfIxjtrM6/4egAEZMDKjZP3dS1b0MjSuQs6euJPGo+v7BBpWlEe0
zZfZxreeMTL+REB9WUoMHqevLkOVI2jxIhf0VR9bi37qbLNxNIe/OS9F+b9ja1or
UFBVLYFTeglVkscIJsmu14TWcyNapkUs3ukCyI2e4MZEfbPzC6Tjdo2R19JHMNeA
IbQHQCzwopo2MMmRwnK3hMTsEWqbvT71I+3VTi+GQ+048F8kR5FfHx5d0Ay9KPL3
QUsto8tx6cazK9kvrEm3MWmNfAA0bW2IX/96GuSRYGOq
-----END CERTIFICATE-----
Generated at Sat May 4 12:53:08 2024 by rpki-client on console-ams.rpki-client.org