Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/_6sadjLQlXl3N4-XdXTrTuYpr5I.roa
File: _6sadjLQlXl3N4-XdXTrTuYpr5I.roa (raw, json)
Hash identifier: jcsu3Dg0587mvud1aozHirwJ5TtruWg/HOGmaG4nO/k=
Subject key identifier: FF:AB:1A:76:32:D0:95:79:77:37:8F:97:75:74:EB:4E:E6:29:AF:92
Certificate issuer: /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial: 01933AB3EC8A60BE4B45B3C3F97D5234A084
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/_6sadjLQlXl3N4-XdXTrTuYpr5I.roa
Signing time: Sun 17 Nov 2024 15:18:10 +0000
ROA not before: Sun 17 Nov 2024 15:18:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215853
IP address blocks: 185.240.180.0/24 maxlen: 24
185.240.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3a:b3:ec:8a:60:be:4b:45:b3:c3:f9:7d:52:34:a0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Validity
Not Before: Nov 17 15:18:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffab1a7632d0957977378f977574eb4ee629af92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:2f:e6:96:bd:79:1f:39:de:08:f4:89:af:
95:01:ac:3d:22:95:f9:bf:26:77:2f:91:93:5b:20:
5c:69:ec:15:c4:02:f2:98:9f:49:56:8c:d7:f9:50:
31:e4:b7:6a:dc:26:2d:5a:3f:d8:8a:b0:db:b2:7b:
25:01:a2:7e:b2:0f:d7:77:ce:61:b9:4d:18:19:77:
1b:32:50:21:cf:0f:44:4e:d0:0a:33:84:cf:6c:b1:
c4:44:1c:67:35:13:dd:88:b1:e6:96:c7:d3:d5:e1:
b5:11:7b:c2:34:ac:44:bd:d7:5f:0a:02:0a:16:02:
8d:1d:09:59:50:78:e4:03:10:52:1f:35:33:be:f3:
b4:a3:48:a6:f9:ce:21:6f:ff:bc:1a:fc:fb:83:d4:
5b:36:8c:43:59:62:b7:ea:7c:e0:7e:7d:35:06:6e:
a9:31:af:d6:0e:84:5c:a6:c8:df:e3:fb:05:fc:8f:
4c:b3:54:7c:f9:74:f3:55:c4:f9:57:57:b3:23:48:
97:98:e6:21:22:ec:e6:b1:a7:7e:38:b5:66:a9:3d:
3b:09:57:dd:77:60:cf:90:35:aa:27:5a:2f:cd:af:
30:f9:0c:6c:97:eb:e5:76:24:9e:3f:30:35:12:b0:
3c:13:23:61:b8:c6:89:b4:74:55:e2:f7:a4:d4:5e:
6d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AB:1A:76:32:D0:95:79:77:37:8F:97:75:74:EB:4E:E6:29:AF:92
X509v3 Authority Key Identifier:
keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/_6sadjLQlXl3N4-XdXTrTuYpr5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.180.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:93:38:f3:5f:49:c0:22:98:b0:eb:cb:b9:b4:56:34:60:47:
6b:ac:a0:81:58:5e:df:a7:4e:60:b2:a4:a9:0d:99:d5:32:8e:
25:82:33:84:bc:99:5d:6e:09:e9:8a:cf:cf:dc:b9:7e:85:0a:
29:9a:f5:fa:17:44:a8:c4:cd:de:98:04:79:14:75:63:69:60:
4b:f3:cd:64:8e:bf:bf:4a:bb:ac:fa:ac:bd:02:cd:6f:72:5a:
73:58:4e:90:a4:de:8a:66:41:1b:24:7e:6b:9d:76:5a:80:98:
7e:76:ba:5a:26:cb:0c:93:10:7e:e4:d7:50:f0:47:37:cc:96:
1d:36:85:ac:89:c1:5b:f7:f5:e7:4a:bd:de:f2:c2:7f:81:92:
52:2d:6f:4b:03:4d:cd:3d:f7:03:f4:ac:5c:38:eb:f7:3c:88:
b9:88:d5:f5:b7:80:d9:bd:68:aa:9c:28:8c:84:91:59:9f:cf:
84:76:95:94:ae:ea:32:36:d0:e1:b3:c9:c6:cd:18:d6:51:23:
99:53:c1:ed:5c:70:af:19:96:8b:96:5d:d9:a6:6e:42:8c:00:
1b:1a:ca:08:22:68:62:57:fb:e3:83:29:32:63:d2:6f:4f:dd:
12:3e:ae:fd:f6:a2:b0:50:ab:f4:4c:98:3f:83:fd:8d:66:0b:
d1:ac:4b:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZM6s+yKYL5LRbPD+X1SNKCEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZGMzY2IxZTA3ZDcxNGI3MjVmNTFhNjZkMWRjZmQ4N2Fl
MWM1MWEwHhcNMjQxMTE3MTUxODEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmFiMWE3NjMyZDA5NTc5NzczNzhmOTc3NTc0ZWI0ZWU2MjlhZjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvcv5pa9eR853gj0ia+VAaw9IpX5
vyZ3L5GTWyBcaewVxALymJ9JVozX+VAx5Ldq3CYtWj/YirDbsnslAaJ+sg/Xd85h
uU0YGXcbMlAhzw9ETtAKM4TPbLHERBxnNRPdiLHmlsfT1eG1EXvCNKxEvddfCgIK
FgKNHQlZUHjkAxBSHzUzvvO0o0im+c4hb/+8Gvz7g9RbNoxDWWK36nzgfn01Bm6p
Ma/WDoRcpsjf4/sF/I9Ms1R8+XTzVcT5V1ezI0iXmOYhIuzmsad+OLVmqT07CVfd
d2DPkDWqJ1ovza8w+Qxsl+vldiSePzA1ErA8EyNhuMaJtHRV4vek1F5t0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP+rGnYy0JV5dzePl3V0607mKa+SMB8GA1UdIwQY
MBaAFBXcPLHgfXFLcl9Rpm0dz9h64cUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmR3OHNlQjljVXR5WDFHbWJSM1AySHJoeFJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9hOWNjNWQtNjllMC00NTk3LWFkNjQt
ZmUyY2I0MzFjZjJmLzEvXzZzYWRqTFFsWGwzTjQtWGRYVHJUdVlwcjVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9hOWNjNWQtNjllMC00NTk3LWFkNjQtZmUyY2I0MzFjZjJm
LzEvRmR3OHNlQjljVXR5WDFHbWJSM1AySHJoeFJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufC0MA0G
CSqGSIb3DQEBCwUAA4IBAQDYkzjzX0nAIpiw68u5tFY0YEdrrKCBWF7fp05gsqSp
DZnVMo4lgjOEvJldbgnpis/P3Ll+hQopmvX6F0SoxM3emAR5FHVjaWBL881kjr+/
Srus+qy9As1vclpzWE6QpN6KZkEbJH5rnXZagJh+drpaJssMkxB+5NdQ8Ec3zJYd
NoWsicFb9/XnSr3e8sJ/gZJSLW9LA03NPfcD9KxcOOv3PIi5iNX1t4DZvWiqnCiM
hJFZn8+EdpWUruoyNtDhs8nGzRjWUSOZU8HtXHCvGZaLll3Zpm5CjAAbGsoIImhi
V/vjgykyY9JvT90SPq799qKwUKv0TJg/g/2NZgvRrEur
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:31 2024 by rpki-client on console-ams.rpki-client.org