Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wEpGxGfzZVQjk7yf-FWzmoTqDFs.roa
File: wEpGxGfzZVQjk7yf-FWzmoTqDFs.roa (raw, json)
Hash identifier: OM6F0urEdN4WWo+Pj4A0sW7wVQedqFDYIbs0VnQoxQg=
Subject key identifier: C0:4A:46:C4:67:F3:65:54:23:93:BC:9F:F8:55:B3:9A:84:EA:0C:5B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC802A07A0F422F29B44F8770BFBE7EDB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wEpGxGfzZVQjk7yf-FWzmoTqDFs.roa
Signing time: Tue 02 Jan 2024 02:31:04 +0000
ROA not before: Tue 02 Jan 2024 02:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400040
IP address blocks: 185.194.28.0/24 maxlen: 24
45.8.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:a0:7a:0f:42:2f:29:b4:4f:87:70:bf:be:7e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c04a46c467f365542393bc9ff855b39a84ea0c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:b8:e8:c5:ff:97:02:c0:c2:c2:f4:b1:c2:
7f:6e:8b:28:6c:e8:62:d7:e1:cc:ad:dc:ba:53:00:
89:f3:0c:36:c6:59:92:af:6d:7b:16:3f:a6:da:57:
c5:30:42:80:ee:1a:ba:d8:cc:bf:51:6b:29:1f:37:
fe:45:c7:d6:fb:59:7f:6b:a3:96:e4:4c:77:3f:23:
16:d1:66:fa:65:bb:cb:43:05:f7:13:cf:a9:fc:e3:
bd:80:d5:11:0b:a4:77:49:ed:b9:a7:ef:2b:ec:e6:
83:27:5c:36:95:12:4a:57:77:8e:fe:6a:08:a4:3a:
63:cc:98:6f:14:22:7d:51:44:9e:7d:34:f4:f4:8c:
52:f6:d8:d5:8e:ac:ac:e2:68:37:e4:22:73:c9:9a:
27:7a:02:95:4c:df:07:48:56:3f:ab:79:e1:07:83:
dc:9f:b0:1c:8c:f9:96:c0:e2:ac:a3:cd:c3:48:57:
db:b0:06:3a:b2:8f:7a:0a:b2:59:ba:a3:65:51:dd:
ba:84:42:a2:e6:05:d1:50:74:90:66:cc:48:a7:86:
5c:ea:e9:06:24:d8:32:7a:d6:1c:b2:f2:82:64:a9:
6c:91:bb:09:ef:3f:57:b2:ce:49:42:ba:68:8e:1f:
9c:73:b1:de:4e:05:52:fb:8c:7b:80:e3:57:7a:19:
f0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4A:46:C4:67:F3:65:54:23:93:BC:9F:F8:55:B3:9A:84:EA:0C:5B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wEpGxGfzZVQjk7yf-FWzmoTqDFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.20.0/24
185.194.28.0/24
Signature Algorithm: sha256WithRSAEncryption
75:54:f9:f7:b1:3e:38:03:6c:a0:88:c8:c3:97:7e:d0:24:b9:
42:d1:07:e3:a9:ff:9e:4a:d5:0b:14:6c:86:7f:b0:a5:75:cb:
ac:73:11:04:c0:21:3c:08:78:5a:4e:24:b9:6a:4a:a3:1e:60:
c0:e1:2e:7a:65:7c:81:c0:27:45:8b:24:b7:a3:36:a7:e5:ce:
6b:62:73:b3:e4:30:60:2e:bd:12:64:c8:ff:c3:11:ed:40:e1:
72:b0:c6:85:94:14:b4:55:08:69:ec:6e:65:c7:19:18:50:28:
2c:c0:86:aa:66:12:9a:c0:8b:42:c5:44:94:be:1d:e6:f2:b7:
8e:5f:74:8b:06:26:c9:3f:71:84:14:a4:2c:59:c7:fe:a3:74:
ef:b8:d9:96:47:b2:e5:ad:c0:cf:53:e1:57:db:bc:79:ae:05:
30:d1:98:71:69:a7:b9:cf:99:4d:65:88:0b:62:1c:ee:15:f1:
1c:22:dd:db:f0:60:cb:d6:c3:16:f0:4b:d6:75:1f:2e:6c:d5:
0d:fc:1d:47:9e:02:ea:69:7d:43:d2:bb:ed:76:48:cf:64:1a:
81:33:29:37:a4:52:7f:2c:96:bc:ad:c3:3b:16:78:a2:7e:cd:
46:d0:85:09:b0:c4:47:2e:c9:f7:61:b8:50:e9:57:6c:cf:74:
98:96:69:ed
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzIAqB6D0IvKbRPh3C/vn7bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwMTAyMDIzMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDRhNDZjNDY3ZjM2NTU0MjM5M2JjOWZmODU1YjM5YTg0ZWEwYzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms246MX/lwLAwsL0scJ/bosobOhi
1+HMrdy6UwCJ8ww2xlmSr217Fj+m2lfFMEKA7hq62My/UWspHzf+RcfW+1l/a6OW
5Ex3PyMW0Wb6ZbvLQwX3E8+p/OO9gNURC6R3Se25p+8r7OaDJ1w2lRJKV3eO/moI
pDpjzJhvFCJ9UUSefTT09IxS9tjVjqys4mg35CJzyZonegKVTN8HSFY/q3nhB4Pc
n7AcjPmWwOKso83DSFfbsAY6so96CrJZuqNlUd26hEKi5gXRUHSQZsxIp4Zc6ukG
JNgyetYcsvKCZKlskbsJ7z9Xss5JQrpojh+cc7HeTgVS+4x7gONXehnwywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMBKRsRn82VUI5O8n/hVs5qE6gxbMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvd0VwR3hHZnpaVlFqazd5Zi1GV3ptb1RxREZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQgUAwQA
ucIcMA0GCSqGSIb3DQEBCwUAA4IBAQB1VPn3sT44A2ygiMjDl37QJLlC0Qfjqf+e
StULFGyGf7CldcuscxEEwCE8CHhaTiS5akqjHmDA4S56ZXyBwCdFiyS3ozan5c5r
YnOz5DBgLr0SZMj/wxHtQOFysMaFlBS0VQhp7G5lxxkYUCgswIaqZhKawItCxUSU
vh3m8reOX3SLBibJP3GEFKQsWcf+o3TvuNmWR7LlrcDPU+FX27x5rgUw0Zhxaae5
z5lNZYgLYhzuFfEcIt3b8GDL1sMW8EvWdR8ubNUN/B1HngLqaX1D0rvtdkjPZBqB
Myk3pFJ/LJa8rcM7Fniifs1G0IUJsMRHLsn3YbhQ6Vdsz3SYlmnt
-----END CERTIFICATE-----
Generated at Sat May 4 03:58:12 2024 by rpki-client on console-fra.rpki-client.org