Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/1erGehQ9TA5BdDA7fGjvrfNq7jo.roa
File: 1erGehQ9TA5BdDA7fGjvrfNq7jo.roa (raw, json)
Hash identifier: WAD7Q1h37E4D7AhYZFQTcDK8DpE03rO23cyJceUccQc=
Subject key identifier: D5:EA:C6:7A:14:3D:4C:0E:41:74:30:3B:7C:68:EF:AD:F3:6A:EE:3A
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 018CC8013A0C1E67658389500A22A0BD5758
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/1erGehQ9TA5BdDA7fGjvrfNq7jo.roa
Signing time: Tue 02 Jan 2024 02:29:32 +0000
ROA not before: Tue 02 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 185.110.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:3a:0c:1e:67:65:83:89:50:0a:22:a0:bd:57:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Jan 2 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5eac67a143d4c0e4174303b7c68efadf36aee3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:00:4b:f9:1a:ac:ac:f8:ce:4b:2d:74:0c:5b:
0f:e2:bd:35:21:49:94:5a:df:d2:d7:e2:66:32:9f:
cf:79:38:f1:ad:5d:f5:d6:ea:04:1a:ef:f0:91:58:
03:97:de:f4:db:8b:1b:05:c4:86:d8:b6:65:e0:85:
08:a1:37:8a:71:10:c2:ce:08:2c:54:de:c0:6b:68:
ca:95:43:05:4f:0f:32:c4:84:cd:b8:b7:31:2f:86:
75:67:39:dc:b7:10:e4:95:b9:44:d0:dd:2d:07:6b:
be:ff:69:93:83:74:a6:52:fd:78:bd:38:a3:14:f5:
45:21:d2:b4:a7:37:9c:4f:da:13:7d:d9:b9:f1:d7:
db:a0:0a:fe:b0:5a:c6:ba:9c:db:5b:15:4f:90:ff:
d9:3a:1d:37:67:49:12:2e:81:e5:53:e5:18:7b:4a:
77:aa:30:9e:56:52:a7:e0:01:53:63:3f:41:16:e2:
e3:db:24:09:5e:09:6f:84:69:32:23:64:22:9f:21:
53:4e:d5:11:9a:94:7f:d4:f4:44:a9:ca:2d:d0:cb:
53:c3:fe:a9:61:a8:cb:29:cf:ad:f4:82:32:b0:93:
97:b8:3c:7e:95:92:89:59:4b:5a:ce:68:76:ad:8c:
34:64:85:7b:53:7f:c0:01:66:06:16:f4:f3:a7:31:
53:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EA:C6:7A:14:3D:4C:0E:41:74:30:3B:7C:68:EF:AD:F3:6A:EE:3A
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/1erGehQ9TA5BdDA7fGjvrfNq7jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.28.0/22
Signature Algorithm: sha256WithRSAEncryption
12:4b:82:89:f5:66:ff:40:22:ac:f4:46:60:a8:3e:6b:21:7e:
97:ff:ff:d4:f1:0c:b7:af:fb:64:70:b6:61:66:0d:2c:14:76:
37:9a:7b:fd:f0:5e:28:2c:a0:d6:76:66:9a:00:06:e3:4f:48:
ae:ec:aa:78:96:f1:0e:f8:c0:2c:6c:77:31:93:31:bf:78:bf:
70:d0:d1:28:2e:7f:15:7a:44:72:ae:4e:5f:5c:45:7a:95:3a:
ab:9a:70:c1:02:35:c4:ae:96:9b:58:c8:dd:3c:6e:2a:56:8b:
62:29:ff:05:00:e7:71:67:b5:2f:c4:ab:9c:39:05:94:35:36:
3c:17:54:a1:47:e2:34:73:df:c6:b1:6e:e7:84:92:66:b1:39:
31:98:03:54:48:8f:d7:40:4d:82:c6:0a:ca:e3:9b:cb:98:62:
b4:48:f7:ca:8a:a1:37:60:a0:46:bf:e0:af:dd:d3:3e:9d:7b:
bb:ae:e5:0d:86:35:97:15:03:6e:50:b8:69:26:9c:7e:9f:a2:
19:59:38:e3:6e:3a:71:7b:04:db:ae:07:20:1b:aa:7d:a7:1f:
16:b6:38:5c:9c:4b:2b:85:5c:6f:27:56:3c:b6:1c:c6:ea:45:
a6:f0:1a:01:40:92:98:65:85:13:5d:01:40:25:59:b9:ed:e7:
68:c4:aa:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAToMHmdlg4lQCiKgvVdYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTM1MzQyOWU3MmViMjg2Y2MxOGVjYmViOGZhNzFhMzFj
MDgxOTAwHhcNMjQwMTAyMDIyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWVhYzY3YTE0M2Q0YzBlNDE3NDMwM2I3YzY4ZWZhZGYzNmFlZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgBL+RqsrPjOSy10DFsP4r01IUmU
Wt/S1+JmMp/PeTjxrV311uoEGu/wkVgDl97024sbBcSG2LZl4IUIoTeKcRDCzggs
VN7Aa2jKlUMFTw8yxITNuLcxL4Z1ZznctxDklblE0N0tB2u+/2mTg3SmUv14vTij
FPVFIdK0pzecT9oTfdm58dfboAr+sFrGupzbWxVPkP/ZOh03Z0kSLoHlU+UYe0p3
qjCeVlKn4AFTYz9BFuLj2yQJXglvhGkyI2QinyFTTtURmpR/1PREqcot0MtTw/6p
YajLKc+t9IIysJOXuDx+lZKJWUtazmh2rYw0ZIV7U3/AAWYGFvTzpzFTeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNXqxnoUPUwOQXQwO3xo763zau46MB8GA1UdIwQY
MBaAFDUTU0KecusobMGOy+uPpxoxwIGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEt
MzkzNjk2ODlmMjdlLzEvMWVyR2VoUTlUQTVCZERBN2ZHanZyZk5xN2pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEtMzkzNjk2ODlmMjdl
LzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW4cMA0G
CSqGSIb3DQEBCwUAA4IBAQASS4KJ9Wb/QCKs9EZgqD5rIX6X///U8Qy3r/tkcLZh
Zg0sFHY3mnv98F4oLKDWdmaaAAbjT0iu7Kp4lvEO+MAsbHcxkzG/eL9w0NEoLn8V
ekRyrk5fXEV6lTqrmnDBAjXErpabWMjdPG4qVotiKf8FAOdxZ7UvxKucOQWUNTY8
F1ShR+I0c9/GsW7nhJJmsTkxmANUSI/XQE2CxgrK45vLmGK0SPfKiqE3YKBGv+Cv
3dM+nXu7ruUNhjWXFQNuULhpJpx+n6IZWTjjbjpxewTbrgcgG6p9px8WtjhcnEsr
hVxvJ1Y8thzG6kWm8BoBQJKYZYUTXQFAJVm57edoxKqB
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:55:24 2024 by rpki-client on console-ams.rpki-client.org