Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/2gPomQy9QTo3bM8bK1fEK1O85ow.roa
File: 2gPomQy9QTo3bM8bK1fEK1O85ow.roa (raw, json)
Hash identifier: BxGBndT8Qkar3eXS4vJkZUwNpVXy/vWb1dp8Q2moo00=
Subject key identifier: DA:03:E8:99:0C:BD:41:3A:37:6C:CF:1B:2B:57:C4:2B:53:BC:E6:8C
Certificate issuer: /CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Certificate serial: 018CC7958C32732E775DBCE750653D7CA09A
Authority key identifier: E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/2gPomQy9QTo3bM8bK1fEK1O85ow.roa
Signing time: Tue 02 Jan 2024 00:31:55 +0000
ROA not before: Tue 02 Jan 2024 00:31:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55195
IP address blocks: 185.159.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:8c:32:73:2e:77:5d:bc:e7:50:65:3d:7c:a0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Validity
Not Before: Jan 2 00:31:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da03e8990cbd413a376ccf1b2b57c42b53bce68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:e2:63:80:b3:b8:06:b4:a6:1d:a0:46:41:
03:1c:f1:3b:6e:21:ff:03:33:06:36:49:70:8a:96:
6c:06:89:2d:54:be:61:3d:70:cf:35:fd:a4:27:64:
04:e9:81:bf:91:17:6b:e2:89:66:05:84:3b:1f:8f:
14:8a:3d:18:a5:2b:13:d6:18:f4:38:61:d9:ba:fd:
73:97:bb:39:80:2f:cf:5b:ed:15:73:cd:ca:85:24:
eb:53:5d:db:a4:10:6e:4c:7d:87:1e:21:90:6f:93:
55:6c:e7:c2:83:01:92:07:cf:53:9f:82:1c:d0:cc:
4f:f9:04:e6:32:3f:ed:8b:4d:eb:90:b2:97:9b:27:
c3:3d:79:cf:94:d8:05:9d:0e:41:35:5b:bd:04:f8:
d6:a6:03:ed:50:88:e4:90:8f:86:7b:e5:3a:d4:36:
3f:b0:db:88:9b:26:bb:c0:0f:c0:90:2b:59:33:af:
79:7b:a3:51:39:b1:5b:7c:bc:24:f8:0b:b5:06:0c:
11:9b:c4:48:73:d8:6d:2c:4f:0f:bd:2f:93:f7:d8:
f9:85:5b:82:72:b7:f3:3c:dc:3e:06:b9:41:20:21:
5f:75:93:01:28:f4:fd:fd:ae:19:19:14:6c:16:60:
5f:6a:0b:38:36:07:83:46:a1:a4:43:40:e6:04:49:
f7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:03:E8:99:0C:BD:41:3A:37:6C:CF:1B:2B:57:C4:2B:53:BC:E6:8C
X509v3 Authority Key Identifier:
keyid:E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/2gPomQy9QTo3bM8bK1fEK1O85ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.197.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:25:d7:fc:cc:21:d3:ca:bd:42:7e:db:99:b7:8e:92:14:fe:
2c:25:85:01:f5:33:f3:78:12:f6:e1:07:b1:e1:82:ed:0e:01:
dc:3b:d6:47:5d:0f:d4:8c:8b:ae:9d:c7:bf:b2:43:e4:49:93:
eb:1a:3e:2b:3b:0d:0a:ec:41:a9:08:3a:e3:c7:ac:89:81:7e:
49:f2:ff:4b:66:a2:64:fe:12:17:64:f1:e8:5d:5b:f5:5f:ba:
31:5b:09:ba:c4:ce:1b:98:97:a7:e8:be:0f:1b:61:45:da:e8:
b7:de:a6:e1:6e:f2:38:9e:06:8f:76:cb:c5:28:63:75:72:b4:
ad:b4:b6:0e:62:1b:1c:08:ae:c1:93:0f:9a:e1:be:58:69:a9:
e3:59:4e:26:b6:84:f5:98:25:2a:29:27:b1:52:dc:f8:50:71:
38:91:1d:b8:2b:14:b8:4b:d1:98:7e:b7:6c:55:7a:73:33:8f:
da:89:94:2a:2b:ab:d7:9b:dd:a6:72:ff:13:bc:d1:f9:d0:7b:
d5:41:d6:e5:df:f8:56:b5:c4:0f:02:78:ca:76:bf:fe:fd:58:
e9:e0:8b:83:60:f9:d9:71:7a:94:94:10:41:04:54:2d:b6:e9:
fa:ef:e7:b4:cc:ca:f8:86:c4:d1:5f:47:56:d4:94:27:32:c2:
20:9f:a0:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlYwycy53XbznUGU9fKCaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1Y2JkZTc1ZDUzNmU5MWIyOGEyMzQ2OTM0OWQxY2YyOGI4
ODRhM2IwHhcNMjQwMTAyMDAzMTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTAzZTg5OTBjYmQ0MTNhMzc2Y2NmMWIyYjU3YzQyYjUzYmNlNjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC/iY4CzuAa0ph2gRkEDHPE7biH/
AzMGNklwipZsBoktVL5hPXDPNf2kJ2QE6YG/kRdr4olmBYQ7H48Uij0YpSsT1hj0
OGHZuv1zl7s5gC/PW+0Vc83KhSTrU13bpBBuTH2HHiGQb5NVbOfCgwGSB89Tn4Ic
0MxP+QTmMj/ti03rkLKXmyfDPXnPlNgFnQ5BNVu9BPjWpgPtUIjkkI+Ge+U61DY/
sNuImya7wA/AkCtZM695e6NRObFbfLwk+Au1BgwRm8RIc9htLE8PvS+T99j5hVuC
crfzPNw+BrlBICFfdZMBKPT9/a4ZGRRsFmBfags4NgeDRqGkQ0DmBEn3hQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNoD6JkMvUE6N2zPGytXxCtTvOaMMB8GA1UdIwQY
MBaAFOXL3nXVNukbKKI0aTSdHPKLiEo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWN2ZWRkVTI2UnNvb2pScE5KMGM4b3VJU2pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wMTVlOTAtNTIwNC00ZDA5LThiMjYt
ZmNlYWNiZDczODQ1LzEvMmdQb21ReTlRVG8zYk04YksxZkVLMU84NW93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wMTVlOTAtNTIwNC00ZDA5LThiMjYtZmNlYWNiZDczODQ1
LzEvNWN2ZWRkVTI2UnNvb2pScE5KMGM4b3VJU2pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ/FMA0G
CSqGSIb3DQEBCwUAA4IBAQCgJdf8zCHTyr1CftuZt46SFP4sJYUB9TPzeBL24Qex
4YLtDgHcO9ZHXQ/UjIuunce/skPkSZPrGj4rOw0K7EGpCDrjx6yJgX5J8v9LZqJk
/hIXZPHoXVv1X7oxWwm6xM4bmJen6L4PG2FF2ui33qbhbvI4ngaPdsvFKGN1crSt
tLYOYhscCK7Bkw+a4b5YaanjWU4mtoT1mCUqKSexUtz4UHE4kR24KxS4S9GYfrds
VXpzM4/aiZQqK6vXm92mcv8TvNH50HvVQdbl3/hWtcQPAnjKdr/+/Vjp4IuDYPnZ
cXqUlBBBBFQttun67+e0zMr4hsTRX0dW1JQnMsIgn6C1
-----END CERTIFICATE-----
Generated at Mon May 13 06:18:05 2024 by rpki-client on console-fra.rpki-client.org