Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/Ths9GpPZdGq7SzqyA6phiUC_f7Y.roa
File: Ths9GpPZdGq7SzqyA6phiUC_f7Y.roa (raw, json)
Hash identifier: M50YA7qLc7DuQ7S6BCJ8duRnMC3eGYfOIA1J2M+D37U=
Subject key identifier: 4E:1B:3D:1A:93:D9:74:6A:BB:4B:3A:B2:03:AA:61:89:40:BF:7F:B6
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 019232E03B58B8605BC58579701139398EBB
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/Ths9GpPZdGq7SzqyA6phiUC_f7Y.roa
Signing time: Fri 27 Sep 2024 09:46:48 +0000
ROA not before: Fri 27 Sep 2024 09:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208795
IP address blocks: 185.32.84.0/22 maxlen: 24
185.135.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:e0:3b:58:b8:60:5b:c5:85:79:70:11:39:39:8e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Sep 27 09:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e1b3d1a93d9746abb4b3ab203aa618940bf7fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:c3:70:d4:fc:00:d4:fb:76:c1:64:b5:bc:
32:50:cb:13:df:63:78:2a:77:03:37:7d:e7:66:c8:
6e:10:0d:f0:0e:6e:a0:08:d8:9e:93:65:5e:b2:da:
e8:f1:0d:d8:17:3e:d6:cd:33:9d:d8:f1:87:23:f7:
e0:14:4a:15:cc:37:b2:a1:97:d1:23:1f:d6:22:48:
f1:50:7a:0b:0f:ad:d0:d0:b2:35:86:85:b9:01:96:
3e:50:f7:66:58:6c:d6:1e:e8:4f:1b:09:8b:70:29:
ef:41:c9:c0:48:20:ad:0f:f3:1f:21:b3:50:c8:5b:
c9:53:8e:12:27:94:f6:e7:3c:a4:f6:f2:7e:34:4a:
16:42:05:26:a6:2e:1d:fc:4c:ee:39:ea:8e:11:a4:
fb:79:41:6c:d6:46:71:41:b8:e2:78:a9:ea:8f:e8:
f9:c4:54:7e:21:53:52:3f:e5:d6:ca:15:2a:af:e9:
6b:10:37:8b:b8:51:df:d8:0b:8f:f4:53:45:fc:e4:
9a:0f:86:db:b0:f5:a7:a9:34:8f:d0:ac:82:f8:5a:
ff:bd:71:1e:fc:75:50:f3:22:43:12:83:df:22:86:
8f:e5:ef:31:53:99:63:9a:c9:9c:d1:a7:2c:48:2e:
bd:a5:37:8d:e3:4b:17:bd:85:c9:29:18:fb:2f:3d:
66:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1B:3D:1A:93:D9:74:6A:BB:4B:3A:B2:03:AA:61:89:40:BF:7F:B6
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/Ths9GpPZdGq7SzqyA6phiUC_f7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.84.0/22
185.135.172.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:27:e9:d6:4b:fe:05:59:65:70:18:b6:de:9c:f9:0e:24:8b:
9b:99:dd:f3:69:1c:c0:b2:b7:51:13:6e:48:21:5d:cc:1e:13:
42:d4:db:bb:dc:7e:65:27:23:28:23:c5:0f:55:d7:a7:82:d9:
07:d2:9a:97:78:82:32:99:8f:99:66:47:9e:b2:5d:18:1f:bb:
a0:a5:a7:83:87:2a:be:c3:a6:6e:f9:28:33:3c:93:7c:af:e5:
3f:a5:c3:e5:71:6d:b1:91:86:3a:f9:b7:2e:52:0d:40:de:67:
3b:d2:48:e5:16:f7:1a:b4:33:a8:9f:3c:a3:c4:ac:73:37:19:
4e:55:a9:a8:d3:48:19:53:22:bf:14:67:64:e0:72:b3:8b:e4:
f4:5d:30:db:33:ea:9a:a1:3a:f7:60:30:8a:ab:79:f7:ff:5d:
d7:85:88:c5:a3:6d:45:0a:82:f4:af:a7:a5:15:3a:7b:c9:03:
07:1a:25:47:8a:80:51:64:37:42:86:36:00:3e:9c:39:30:fd:
f8:2d:57:89:c6:dc:fa:84:1b:41:fc:76:b6:a6:3a:b6:35:07:
cf:aa:40:fc:5c:82:6e:4d:b9:c5:1f:c3:25:4f:54:1e:af:6f:
61:01:7a:f6:8a:a4:8d:2f:58:25:9e:88:59:ca:2c:13:ed:7b:
06:a5:2b:d2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZIy4DtYuGBbxYV5cBE5OY67MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODZlM2U5MjhjN2YwYzlkYjY5NTE1ZmYzYWExZjY3OGNl
ZTQzYzAwHhcNMjQwOTI3MDk0NjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTFiM2QxYTkzZDk3NDZhYmI0YjNhYjIwM2FhNjE4OTQwYmY3ZmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW7DcNT8ANT7dsFktbwyUMsT32N4
KncDN33nZshuEA3wDm6gCNiek2Vestro8Q3YFz7WzTOd2PGHI/fgFEoVzDeyoZfR
Ix/WIkjxUHoLD63Q0LI1hoW5AZY+UPdmWGzWHuhPGwmLcCnvQcnASCCtD/MfIbNQ
yFvJU44SJ5T25zyk9vJ+NEoWQgUmpi4d/EzuOeqOEaT7eUFs1kZxQbjieKnqj+j5
xFR+IVNSP+XWyhUqr+lrEDeLuFHf2AuP9FNF/OSaD4bbsPWnqTSP0KyC+Fr/vXEe
/HVQ8yJDEoPfIoaP5e8xU5ljmsmc0acsSC69pTeN40sXvYXJKRj7Lz1m1QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE4bPRqT2XRqu0s6sgOqYYlAv3+2MB8GA1UdIwQY
MBaAFNyG4+kox/DJ22lRX/OqH2eM7kPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjIt
OWM4ZTU5YzI3NzFjLzEvVGhzOUdwUFpkR3E3U3pxeUE2cGhpVUNfZjdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjItOWM4ZTU5YzI3NzFj
LzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuSBUAwQC
uYesMA0GCSqGSIb3DQEBCwUAA4IBAQCpJ+nWS/4FWWVwGLbenPkOJIubmd3zaRzA
srdRE25IIV3MHhNC1Nu73H5lJyMoI8UPVdengtkH0pqXeIIymY+ZZkeesl0YH7ug
paeDhyq+w6Zu+SgzPJN8r+U/pcPlcW2xkYY6+bcuUg1A3mc70kjlFvcatDOonzyj
xKxzNxlOVamo00gZUyK/FGdk4HKzi+T0XTDbM+qaoTr3YDCKq3n3/13XhYjFo21F
CoL0r6elFTp7yQMHGiVHioBRZDdChjYAPpw5MP34LVeJxtz6hBtB/Ha2pjq2NQfP
qkD8XIJuTbnFH8MlT1Qer29hAXr2iqSNL1glnohZyiwT7XsGpSvS
-----END CERTIFICATE-----
Generated at Mon Nov 25 17:06:25 2024 by rpki-client on console-ams.rpki-client.org