Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_UFo6id-Wexox_W1kM2V4Q9_elQ.roa
File: _UFo6id-Wexox_W1kM2V4Q9_elQ.roa (raw, json)
Hash identifier: CzivMDeY7u1/NjtzwKmAzTwmYQNhIlcszHZniaVjpxo=
Subject key identifier: FD:41:68:EA:27:7E:59:EC:68:C7:F5:B5:90:CD:95:E1:0F:7F:7A:54
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8028179A3B258AB5AC211716499AC4B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_UFo6id-Wexox_W1kM2V4Q9_elQ.roa
Signing time: Tue 02 Jan 2024 02:30:56 +0000
ROA not before: Tue 02 Jan 2024 02:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60609
IP address blocks: 185.150.78.0/23 maxlen: 23
185.150.76.0/24 maxlen: 24
194.26.174.0/24 maxlen: 24
194.26.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:81:79:a3:b2:58:ab:5a:c2:11:71:64:99:ac:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd4168ea277e59ec68c7f5b590cd95e10f7f7a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e0:7d:6a:02:e7:e8:8c:a8:dd:e7:88:0f:37:
96:36:22:56:48:8b:c8:da:21:98:8a:74:64:40:49:
7b:d6:eb:b6:67:fa:dd:5c:fa:da:74:24:9e:c5:f7:
72:eb:de:49:fc:da:3d:64:0a:0f:f2:e8:67:2e:23:
29:d2:1a:8d:b6:74:03:53:f5:c2:78:d1:4b:93:ec:
da:74:98:04:19:6d:61:a2:5a:b2:d8:b8:93:15:0c:
76:6a:cb:96:3f:a8:34:36:e1:10:04:b0:2f:81:2b:
03:4a:3a:c3:4f:9a:4d:45:11:99:30:dd:e1:88:17:
3a:ec:46:9f:5a:c8:e3:21:d0:7d:12:b7:a2:42:04:
d3:2e:70:bf:6b:97:6f:f0:e6:23:1a:23:b9:aa:1e:
c8:81:b6:6b:7d:96:a7:58:41:13:0f:77:bc:8e:b8:
6b:d4:4d:b5:23:d0:7b:d5:cf:98:6c:5e:d4:bd:dd:
b5:a6:1c:7b:fe:77:ea:3c:92:4d:7c:cc:50:95:a9:
53:8b:3a:c4:ed:13:95:19:cd:6f:c9:a2:7d:7c:91:
1a:6d:4f:d5:8b:d1:de:ba:5c:97:8a:df:7f:71:34:
83:8b:91:54:ba:00:f2:a8:2c:88:ea:e4:f8:cc:2a:
4e:44:8a:f5:51:f2:35:ab:4b:ac:aa:82:fb:7b:0c:
72:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:41:68:EA:27:7E:59:EC:68:C7:F5:B5:90:CD:95:E1:0F:7F:7A:54
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_UFo6id-Wexox_W1kM2V4Q9_elQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.76.0/24
185.150.78.0/23
194.26.174.0/23
Signature Algorithm: sha256WithRSAEncryption
af:71:73:1b:cf:3b:c8:79:61:c0:ee:b1:b9:0c:be:49:f3:84:
83:0a:6c:55:40:35:f7:bf:38:8f:3f:6f:07:9a:be:c2:d3:26:
5f:2c:8d:11:42:35:9c:1a:22:eb:dc:83:04:02:7a:15:28:ed:
d5:91:7c:5c:ae:e5:f6:e9:21:08:a1:ee:4b:b6:93:4f:c7:35:
be:3a:99:51:4d:76:d2:17:26:86:95:a5:db:d5:84:31:44:75:
4f:2a:60:d0:80:5f:9a:b6:2b:89:38:20:99:19:aa:61:4c:65:
61:85:2f:67:f8:fb:9b:32:15:01:55:73:86:8d:23:68:e0:66:
2b:14:07:8d:c3:8e:ca:7b:c0:e4:9b:08:2c:8d:a6:01:91:be:
c5:28:50:95:84:a2:e9:27:a6:ef:ba:c5:f7:e5:ac:5f:96:5f:
51:b4:e6:1f:27:73:77:a6:6a:60:13:46:92:a8:d2:84:f2:80:
c4:31:04:b3:0c:9e:4b:8e:34:9a:2f:5f:90:a1:fc:5c:32:12:
83:83:bd:87:65:33:7f:c8:be:8a:2d:4d:89:a0:25:a5:2f:6b:
4b:e6:06:3f:0f:b8:5e:3b:0a:66:8c:17:9d:dc:ce:b8:5b:f8:
0b:8a:d5:7e:ce:86:73:fe:8b:37:4e:a6:ad:f1:d5:b1:ed:b2:
fb:28:d4:8b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzIAoF5o7JYq1rCEXFkmaxLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwMTAyMDIzMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDQxNjhlYTI3N2U1OWVjNjhjN2Y1YjU5MGNkOTVlMTBmN2Y3YTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieB9agLn6Iyo3eeIDzeWNiJWSIvI
2iGYinRkQEl71uu2Z/rdXPradCSexfdy695J/No9ZAoP8uhnLiMp0hqNtnQDU/XC
eNFLk+zadJgEGW1holqy2LiTFQx2asuWP6g0NuEQBLAvgSsDSjrDT5pNRRGZMN3h
iBc67EafWsjjIdB9EreiQgTTLnC/a5dv8OYjGiO5qh7IgbZrfZanWEETD3e8jrhr
1E21I9B71c+YbF7Uvd21phx7/nfqPJJNfMxQlalTizrE7ROVGc1vyaJ9fJEabU/V
i9HeulyXit9/cTSDi5FUugDyqCyI6uT4zCpORIr1UfI1q0usqoL7ewxyawIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFP1BaOonflnsaMf1tZDNleEPf3pUMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvX1VGbzZpZC1XZXhveF9XMWtNMlY0UTlfZWxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuZZMAwQB
uZZOAwQBwhquMA0GCSqGSIb3DQEBCwUAA4IBAQCvcXMbzzvIeWHA7rG5DL5J84SD
CmxVQDX3vziPP28Hmr7C0yZfLI0RQjWcGiLr3IMEAnoVKO3VkXxcruX26SEIoe5L
tpNPxzW+OplRTXbSFyaGlaXb1YQxRHVPKmDQgF+atiuJOCCZGaphTGVhhS9n+Pub
MhUBVXOGjSNo4GYrFAeNw47Ke8DkmwgsjaYBkb7FKFCVhKLpJ6bvusX35axfll9R
tOYfJ3N3pmpgE0aSqNKE8oDEMQSzDJ5LjjSaL1+QofxcMhKDg72HZTN/yL6KLU2J
oCWlL2tL5gY/D7heOwpmjBed3M64W/gLitV+zoZz/os3Tqat8dWx7bL7KNSL
-----END CERTIFICATE-----
Generated at Tue Apr 30 06:24:47 2024 by rpki-client on console-fra.rpki-client.org