Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/fEqeX3nfr9koO_5AfXh_rLSWMDY.roa
File: fEqeX3nfr9koO_5AfXh_rLSWMDY.roa (raw, json)
Hash identifier: A3K/9HsWacPR6n7WkkfHVkAnLfCaSN0s2HtV1RpzWDM=
Subject key identifier: 7C:4A:9E:5F:79:DF:AF:D9:28:3B:FE:40:7D:78:7F:AC:B4:96:30:36
Certificate issuer: /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Certificate serial: 018CC6B91EE97B2286D01C4C313B582CC25E
Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/fEqeX3nfr9koO_5AfXh_rLSWMDY.roa
Signing time: Mon 01 Jan 2024 20:31:10 +0000
ROA not before: Mon 01 Jan 2024 20:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52129
IP address blocks: 185.132.181.0/24 maxlen: 24
185.132.180.0/22 maxlen: 22
185.132.182.0/24 maxlen: 24
185.132.183.0/24 maxlen: 24
185.132.180.0/24 maxlen: 24
2a0a:2b00:10::/44 maxlen: 44
2a0a:2b00::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:1e:e9:7b:22:86:d0:1c:4c:31:3b:58:2c:c2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Validity
Not Before: Jan 1 20:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c4a9e5f79dfafd9283bfe407d787facb4963036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a5:78:6f:8f:99:5d:3a:4f:2c:41:a1:74:63:
14:23:ce:8b:9a:5c:57:91:b0:16:27:fa:b6:7b:d0:
b5:ca:7e:dd:db:f0:28:ff:3e:6c:8a:62:62:ad:ef:
91:91:9b:23:a5:4a:fe:82:b3:40:cc:4c:ad:3d:52:
08:05:91:50:15:36:10:9f:7f:b8:8e:88:56:fb:61:
09:d0:43:d6:65:a6:60:b9:d5:d3:3e:ce:ec:5e:1f:
67:89:1f:27:d7:20:82:6b:d5:5d:22:f3:25:08:12:
2f:36:ca:ee:80:2e:7e:7d:1d:cc:65:1f:83:3a:19:
8b:5d:e3:21:78:e3:5c:8a:d2:c0:0b:7c:3d:a8:e3:
8c:3e:ed:b4:65:b6:6a:72:1d:f4:00:45:fc:c9:05:
18:69:ad:fe:54:e9:7b:52:5e:18:cc:92:eb:b9:02:
b6:16:92:ff:d1:ef:3b:9b:37:52:60:90:84:93:a8:
f7:89:1f:56:94:d6:91:09:1f:2b:d3:5a:2c:d0:f1:
87:c3:6b:2d:d3:3b:fd:fa:fb:82:e1:bb:a6:5e:39:
c3:8c:f8:f6:85:0d:aa:18:77:9f:ae:40:bb:c2:64:
c4:37:ef:ed:9e:a8:d7:a4:d3:41:5a:55:0d:f4:5d:
35:43:e9:79:5e:7e:7c:61:3f:23:94:02:9d:fd:3b:
2d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4A:9E:5F:79:DF:AF:D9:28:3B:FE:40:7D:78:7F:AC:B4:96:30:36
X509v3 Authority Key Identifier:
keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/fEqeX3nfr9koO_5AfXh_rLSWMDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.180.0/22
IPv6:
2a0a:2b00::/43
Signature Algorithm: sha256WithRSAEncryption
47:3b:fa:83:2e:ae:af:e8:6e:c0:71:cd:66:e8:b4:63:b7:92:
6f:00:75:3a:a1:e9:b5:84:b7:60:e0:ba:a4:47:4f:b7:ad:63:
53:f5:e4:d1:28:3c:21:5b:f1:62:b5:63:f1:88:f5:9a:ae:ea:
92:07:7f:e9:1c:8e:c0:32:b0:58:97:bf:17:f1:09:ba:cc:89:
00:96:96:54:34:c3:86:6d:43:0c:e6:06:26:fd:09:bd:a7:fb:
3a:1f:4c:61:60:5d:94:39:e7:df:cb:cc:d2:c2:6c:4c:a9:26:
16:46:0f:8b:4a:db:fc:9d:96:e0:a0:60:31:a7:0a:1c:22:3d:
a2:e8:df:9c:01:6e:3e:44:e6:2e:c8:af:8a:9a:7b:8c:70:f8:
0e:95:63:4e:85:2a:8d:42:1d:83:31:05:a4:50:ec:1a:c8:89:
79:50:70:7f:11:3d:61:33:c6:5d:6b:5e:46:6d:53:86:55:f1:
57:f2:f9:af:99:b4:0c:97:73:e5:41:83:22:66:3c:8e:5f:5b:
50:e9:e5:c8:73:00:d6:d1:e4:07:b6:fe:e9:17:de:da:f5:49:
24:51:35:7b:d7:98:58:fa:30:7a:7e:5f:30:8d:b0:4c:0d:31:
fa:c3:24:c4:6d:d8:75:17:75:dc:d5:6f:0f:75:cd:34:eb:34:
9f:90:42:39
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzGuR7peyKG0BxMMTtYLMJeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYjhmZjJmM2EwYmZjNDFlYWRjMThhZjllNTJhY2QxMDA1
MjQxNDkwHhcNMjQwMTAxMjAzMTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzRhOWU1Zjc5ZGZhZmQ5MjgzYmZlNDA3ZDc4N2ZhY2I0OTYzMDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKV4b4+ZXTpPLEGhdGMUI86LmlxX
kbAWJ/q2e9C1yn7d2/Ao/z5simJire+RkZsjpUr+grNAzEytPVIIBZFQFTYQn3+4
johW+2EJ0EPWZaZgudXTPs7sXh9niR8n1yCCa9VdIvMlCBIvNsrugC5+fR3MZR+D
OhmLXeMheONcitLAC3w9qOOMPu20ZbZqch30AEX8yQUYaa3+VOl7Ul4YzJLruQK2
FpL/0e87mzdSYJCEk6j3iR9WlNaRCR8r01os0PGHw2st0zv9+vuC4bumXjnDjPj2
hQ2qGHefrkC7wmTEN+/tnqjXpNNBWlUN9F01Q+l5Xn58YT8jlAKd/TstVQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHxKnl9536/ZKDv+QH14f6y0ljA2MB8GA1UdIwQY
MBaAFN+4/y86C/xB6twYr55SrNEAUkFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82Yjg3YWYtYTIxMi00ODBkLWE0ZDQt
YTNkZjNiNjljZTVhLzEvZkVxZVgzbmZyOWtvT181QWZYaF9yTFNXTURZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC82Yjg3YWYtYTIxMi00ODBkLWE0ZDQtYTNkZjNiNjljZTVh
LzEvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuYS0MA8E
AgACMAkDBwUqCisAAAAwDQYJKoZIhvcNAQELBQADggEBAEc7+oMurq/obsBxzWbo
tGO3km8AdTqh6bWEt2DguqRHT7etY1P15NEoPCFb8WK1Y/GI9Zqu6pIHf+kcjsAy
sFiXvxfxCbrMiQCWllQ0w4ZtQwzmBib9Cb2n+zofTGFgXZQ559/LzNLCbEypJhZG
D4tK2/ydluCgYDGnChwiPaLo35wBbj5E5i7Ir4qae4xw+A6VY06FKo1CHYMxBaRQ
7BrIiXlQcH8RPWEzxl1rXkZtU4ZV8Vfy+a+ZtAyXc+VBgyJmPI5fW1Dp5chzANbR
5Ae2/ukX3tr1SSRRNXvXmFj6MHp+XzCNsEwNMfrDJMRt2HUXddzVbw91zTTrNJ+Q
Qjk=
-----END CERTIFICATE-----
Generated at Sat Jun 1 09:53:07 2024 by rpki-client on console-ams.rpki-client.org