Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/tIMjXaRPKI7bHHY_6vkaf_zq1Lg.roa
File: tIMjXaRPKI7bHHY_6vkaf_zq1Lg.roa (raw, json)
Hash identifier: 6mREoryMCyGMiP27w6uc/MU/ObaMDE2JIImmyTF4s+o=
Subject key identifier: B4:83:23:5D:A4:4F:28:8E:DB:1C:76:3F:EA:F9:1A:7F:FC:EA:D4:B8
Certificate issuer: /CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Certificate serial: 018CC3B7264C09F5072C061B7DB6EC104D4C
Authority key identifier: 53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/tIMjXaRPKI7bHHY_6vkaf_zq1Lg.roa
Signing time: Mon 01 Jan 2024 06:30:09 +0000
ROA not before: Mon 01 Jan 2024 06:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207096
IP address blocks: 185.166.42.0/23 maxlen: 23
185.166.40.0/23 maxlen: 23
185.176.204.0/23 maxlen: 23
185.176.206.0/23 maxlen: 23
2a0a:7600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:26:4c:09:f5:07:2c:06:1b:7d:b6:ec:10:4d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Validity
Not Before: Jan 1 06:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b483235da44f288edb1c763feaf91a7ffcead4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:90:f6:f7:d0:24:2b:fc:ad:a6:6c:c6:ea:
b1:0d:d1:81:3e:94:d7:f4:a1:08:52:4d:b3:5a:fa:
ae:19:8e:2b:c0:4a:48:dc:d5:58:be:2b:97:9c:70:
b3:01:ce:d4:a9:10:eb:ac:56:66:a9:98:1f:8c:5a:
e4:57:44:3f:a6:a4:ef:d0:5d:a2:6f:c5:4d:8c:60:
a5:f7:75:39:f2:9e:42:46:14:fe:25:74:bd:2b:58:
73:74:2f:ca:db:10:b7:ca:1b:23:b4:45:10:31:c7:
7d:51:b8:98:d8:65:4c:35:c6:4a:07:ec:bc:74:26:
cb:82:12:84:ab:6e:79:f0:dc:fd:e3:f0:6b:fe:a4:
4a:79:d7:09:14:38:04:c9:e6:ab:97:ca:41:b4:60:
80:2d:53:d3:6e:4b:1b:21:a0:81:32:b8:dd:98:33:
b7:9a:eb:8e:53:0f:79:18:b0:74:c6:51:09:68:b8:
cd:95:10:af:3c:e3:b0:9f:f5:8f:2c:a5:74:f6:c6:
ad:d6:2f:d0:6f:1a:12:42:a0:12:49:15:92:c8:15:
04:36:e5:ff:40:11:e6:9b:60:8b:29:7a:b1:6a:1e:
06:36:25:c5:13:fd:46:c4:b5:9e:9a:8e:0a:c8:31:
e5:03:b4:55:50:bb:eb:f1:f9:38:2d:33:33:63:13:
f2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:83:23:5D:A4:4F:28:8E:DB:1C:76:3F:EA:F9:1A:7F:FC:EA:D4:B8
X509v3 Authority Key Identifier:
keyid:53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/tIMjXaRPKI7bHHY_6vkaf_zq1Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.40.0/22
185.176.204.0/22
IPv6:
2a0a:7600::/29
Signature Algorithm: sha256WithRSAEncryption
06:0f:48:2d:66:99:41:2e:1c:2d:10:56:d3:31:da:ee:16:82:
ef:11:c8:52:a5:93:34:79:b1:c0:6d:6b:88:74:2a:f0:4e:cd:
9b:fc:47:52:07:6e:1b:2c:d9:f1:ac:35:58:2f:a4:ca:8b:0b:
f2:3e:a7:84:39:0e:0c:e0:5e:4e:78:ae:52:0e:d5:04:b5:58:
79:f0:96:90:f7:95:46:66:7d:a5:cc:6d:9a:ba:a0:cc:5f:a8:
cc:3e:d2:fc:d4:91:e3:d3:76:94:b2:ea:0c:32:19:f8:1f:bf:
7a:b6:7c:35:0c:ba:02:ba:f0:a6:bb:aa:4f:d5:33:5c:08:e3:
aa:dc:da:c9:44:a5:43:92:fb:a0:db:0c:19:72:b0:a0:6d:73:
5d:c9:06:0b:47:7a:b1:b6:0e:2c:4d:b0:e2:1b:23:b1:34:42:
e9:84:be:f0:74:39:d0:af:5d:23:d3:15:12:ca:bc:b6:12:6f:
2e:e0:60:5c:21:6b:fd:d1:e9:bf:5c:55:1f:1c:3a:11:60:25:
d0:01:be:6c:24:24:3f:07:af:52:4d:70:e9:8a:85:fc:f5:10:
f8:a3:dc:78:df:31:da:38:03:98:d7:43:ce:2d:1f:9c:88:45:
8d:f5:3a:2b:3b:52:34:97:fd:54:58:6f:80:df:96:29:ae:70:
7c:2c:fc:9a
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzDtyZMCfUHLAYbfbbsEE1MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZDAzNTlmOWY4YjIwODE1Y2U0ZDk4OGUxMDliZjgyMzA2
ZTRjNzQwHhcNMjQwMTAxMDYzMDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDgzMjM1ZGE0NGYyODhlZGIxYzc2M2ZlYWY5MWE3ZmZjZWFkNGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomyQ9vfQJCv8raZsxuqxDdGBPpTX
9KEIUk2zWvquGY4rwEpI3NVYviuXnHCzAc7UqRDrrFZmqZgfjFrkV0Q/pqTv0F2i
b8VNjGCl93U58p5CRhT+JXS9K1hzdC/K2xC3yhsjtEUQMcd9UbiY2GVMNcZKB+y8
dCbLghKEq2558Nz94/Br/qRKedcJFDgEyearl8pBtGCALVPTbksbIaCBMrjdmDO3
muuOUw95GLB0xlEJaLjNlRCvPOOwn/WPLKV09sat1i/QbxoSQqASSRWSyBUENuX/
QBHmm2CLKXqxah4GNiXFE/1GxLWemo4KyDHlA7RVULvr8fk4LTMzYxPyxQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFLSDI12kTyiO2xx2P+r5Gn/86tS4MB8GA1UdIwQY
MBaAFFPQNZ+fiyCBXOTZiOEJv4Iwbkx0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTlBMW41LUxJSUZjNU5tSTRRbV9nakJ1VEhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80OTM1NzEtMjEwZS00ZDFhLTg4MTkt
YTZjNDljZTkwNzU2LzEvdElNalhhUlBLSTdiSEhZXzZ2a2FmX3pxMUxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80OTM1NzEtMjEwZS00ZDFhLTg4MTktYTZjNDljZTkwNzU2
LzEvVTlBMW41LUxJSUZjNU5tSTRRbV9nakJ1VEhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuaYoAwQC
ubDMMA0EAgACMAcDBQMqCnYAMA0GCSqGSIb3DQEBCwUAA4IBAQAGD0gtZplBLhwt
EFbTMdruFoLvEchSpZM0ebHAbWuIdCrwTs2b/EdSB24bLNnxrDVYL6TKiwvyPqeE
OQ4M4F5OeK5SDtUEtVh58JaQ95VGZn2lzG2auqDMX6jMPtL81JHj03aUsuoMMhn4
H796tnw1DLoCuvCmu6pP1TNcCOOq3NrJRKVDkvug2wwZcrCgbXNdyQYLR3qxtg4s
TbDiGyOxNELphL7wdDnQr10j0xUSyry2Em8u4GBcIWv90em/XFUfHDoRYCXQAb5s
JCQ/B69STXDpioX89RD4o9x43zHaOAOY10POLR+ciEWN9TorO1I0l/1UWG+A35Yp
rnB8LPya
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:08:06 2024 by rpki-client on console-ams.rpki-client.org