Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/qEamaLnnc3q2Bms9cK640GFRmW0.roa
File: qEamaLnnc3q2Bms9cK640GFRmW0.roa (raw, json)
Hash identifier: V+ZZOjO93mvCrcxmQJOEClrhvKm/LHfQtEtH/Pj8XJI=
Subject key identifier: A8:46:A6:68:B9:E7:73:7A:B6:06:6B:3D:70:AE:B8:D0:61:51:99:6D
Certificate issuer: /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Certificate serial: 018D7998398F55EF829DCF1AA7A6864256A3
Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/qEamaLnnc3q2Bms9cK640GFRmW0.roa
Signing time: Mon 05 Feb 2024 14:07:15 +0000
ROA not before: Mon 05 Feb 2024 14:07:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15924
IP address blocks: 185.156.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:98:39:8f:55:ef:82:9d:cf:1a:a7:a6:86:42:56:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Validity
Not Before: Feb 5 14:07:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a846a668b9e7737ab6066b3d70aeb8d06151996d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5a:a2:da:ec:8d:39:d1:d4:68:49:9a:ae:b5:
b4:db:03:c7:9f:b8:9b:20:a7:1f:84:f4:92:d1:0c:
ea:86:f1:db:a8:0d:78:d9:c8:72:84:de:2c:43:7b:
3c:d3:81:c0:09:b2:30:10:dc:69:da:97:09:8e:f1:
ad:a0:98:32:1a:d6:bf:4a:a5:b0:82:a4:56:5c:3f:
b9:6b:bb:bb:e8:0f:36:d0:d3:3d:27:ad:0e:1c:f0:
4d:a4:b2:95:88:7f:af:11:f1:6f:01:4b:89:9f:a0:
21:64:ef:75:73:07:0d:93:63:82:8e:e4:fa:34:71:
0a:f8:a5:15:ca:b8:6a:dd:ad:f8:7b:23:8a:b3:bc:
ba:26:7c:81:78:d2:7b:c7:97:44:a2:5a:09:d2:66:
a3:54:f0:87:c0:fe:d2:af:0e:69:1b:ff:97:1a:89:
31:d1:f4:53:d3:7e:bc:60:3c:cb:5f:0b:a0:dc:97:
ca:79:c7:51:df:2f:4f:58:6e:e7:52:66:43:66:5a:
ac:2f:43:56:ed:1b:20:53:84:39:d5:3d:d0:dd:23:
72:98:bd:b0:43:a4:a7:95:62:d2:43:ee:5d:10:17:
72:f9:3a:a3:95:b3:6c:4b:1b:7d:69:41:16:4b:f5:
49:e2:d5:86:8e:f5:cb:79:2b:a8:f9:00:9d:8b:db:
65:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:46:A6:68:B9:E7:73:7A:B6:06:6B:3D:70:AE:B8:D0:61:51:99:6D
X509v3 Authority Key Identifier:
keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/qEamaLnnc3q2Bms9cK640GFRmW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.4.0/24
Signature Algorithm: sha256WithRSAEncryption
11:59:66:79:c1:6c:04:4b:f2:3e:fc:c4:4e:52:50:6a:36:69:
57:a5:89:a0:37:d5:85:c7:cf:d7:32:d1:eb:56:7c:3c:72:9a:
54:ed:03:8d:fc:54:bf:36:5c:7b:a1:9a:b4:7e:31:7b:e6:f1:
da:6a:fe:e7:a5:cf:f1:d0:1a:a3:66:9c:50:74:1e:3b:4e:6c:
58:dc:85:15:c8:70:45:db:99:de:f0:54:91:66:0e:41:1d:b0:
ea:d9:64:31:0f:b0:c6:8b:fc:c9:aa:fa:9f:ad:1b:36:ed:c9:
a3:e6:06:6e:73:ef:31:a8:19:8b:4f:44:69:9c:7d:ae:91:99:
a7:93:9a:d9:0e:90:57:92:7f:4f:d7:3a:79:70:ea:62:c4:5e:
77:3a:04:4d:b7:e8:9a:8e:69:76:2e:0a:00:b7:d5:5d:18:03:
9d:86:9e:ae:cc:ac:8a:45:e2:5e:8e:84:2c:45:f6:70:18:ca:
b6:d1:24:fd:4b:bd:0a:53:2f:39:b3:06:33:2c:a5:6e:3e:2c:
aa:81:6d:4d:20:9c:30:8a:36:55:ac:0a:35:3e:37:44:c1:49:
f9:b8:24:c8:b9:d1:64:ea:94:c6:44:34:7b:e4:ed:83:28:42:
55:24:9f:5c:7e:e4:6a:10:f5:23:c8:a0:cf:a0:f0:4c:cc:3a:
c5:99:5c:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY15mDmPVe+Cnc8ap6aGQlajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZGU2MTg4MjJiOGFmNmY5ZWNhZmZjZDdkNTQ1OWI3Y2Mx
MTQ0OWEwHhcNMjQwMjA1MTQwNzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODQ2YTY2OGI5ZTc3MzdhYjYwNjZiM2Q3MGFlYjhkMDYxNTE5OTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVqi2uyNOdHUaEmarrW02wPHn7ib
IKcfhPSS0QzqhvHbqA142chyhN4sQ3s804HACbIwENxp2pcJjvGtoJgyGta/SqWw
gqRWXD+5a7u76A820NM9J60OHPBNpLKViH+vEfFvAUuJn6AhZO91cwcNk2OCjuT6
NHEK+KUVyrhq3a34eyOKs7y6JnyBeNJ7x5dEoloJ0majVPCHwP7Srw5pG/+XGokx
0fRT0368YDzLXwug3JfKecdR3y9PWG7nUmZDZlqsL0NW7RsgU4Q51T3Q3SNymL2w
Q6SnlWLSQ+5dEBdy+TqjlbNsSxt9aUEWS/VJ4tWGjvXLeSuo+QCdi9tlLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKhGpmi553N6tgZrPXCuuNBhUZltMB8GA1UdIwQY
MBaAFNDeYYgiuK9vnsr/zX1UWbfMEUSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81YWNkNzgtZDY3MC00MTkyLWI1NjQt
MDQwZTA2NDRmYmU4LzEvcUVhbWFMbm5jM3EyQm1zOWNLNjQwR0ZSbVcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81YWNkNzgtZDY3MC00MTkyLWI1NjQtMDQwZTA2NDRmYmU4
LzEvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZwEMA0G
CSqGSIb3DQEBCwUAA4IBAQARWWZ5wWwES/I+/MROUlBqNmlXpYmgN9WFx8/XMtHr
Vnw8cppU7QON/FS/Nlx7oZq0fjF75vHaav7npc/x0BqjZpxQdB47TmxY3IUVyHBF
25ne8FSRZg5BHbDq2WQxD7DGi/zJqvqfrRs27cmj5gZuc+8xqBmLT0RpnH2ukZmn
k5rZDpBXkn9P1zp5cOpixF53OgRNt+iajml2LgoAt9VdGAOdhp6uzKyKReJejoQs
RfZwGMq20ST9S70KUy85swYzLKVuPiyqgW1NIJwwijZVrAo1PjdEwUn5uCTIudFk
6pTGRDR75O2DKEJVJJ9cfuRqEPUjyKDPoPBMzDrFmVzk
-----END CERTIFICATE-----
Generated at Wed May 22 18:20:24 2024 by rpki-client on console-ams.rpki-client.org