Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/17UHvbk-ffTDSHPqn1mVoY0M98o.roa
File: 17UHvbk-ffTDSHPqn1mVoY0M98o.roa (raw, json)
Hash identifier: vfPaWwPCgvdqqoVexPulwGTfozzg5iE+Q9DELk4ELjw=
Subject key identifier: D7:B5:07:BD:B9:3E:7D:F4:C3:48:73:EA:9F:59:95:A1:8D:0C:F7:CA
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 018CC5DCB16B72E3ABD01780D76908651DB8
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/17UHvbk-ffTDSHPqn1mVoY0M98o.roa
Signing time: Mon 01 Jan 2024 16:30:23 +0000
ROA not before: Mon 01 Jan 2024 16:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 185.26.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:b1:6b:72:e3:ab:d0:17:80:d7:69:08:65:1d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Jan 1 16:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7b507bdb93e7df4c34873ea9f5995a18d0cf7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:05:f6:54:99:20:3d:39:a8:4c:99:ff:d3:20:
69:e6:d4:1b:99:2d:71:af:8c:a7:1f:30:36:1b:a9:
0e:d2:75:cf:b4:bf:4e:a9:0a:b5:52:96:27:13:65:
0b:92:0e:56:69:f0:b5:41:ee:ef:68:04:e7:19:5c:
52:53:8a:ba:99:17:e6:b3:cb:f4:51:5d:51:b4:5d:
38:95:cf:55:cf:f8:bf:3c:65:bc:e4:0b:ed:a2:75:
0c:4b:2c:bf:63:ea:25:9c:d5:db:dd:bf:dd:67:d0:
d8:9a:18:f9:3e:29:23:89:22:e3:4e:10:68:de:97:
bf:ef:87:30:d8:93:67:b0:92:9b:34:f9:0a:07:a9:
b4:ff:51:a3:65:6f:77:6e:87:34:b9:6c:a4:52:8f:
40:3b:e5:be:f6:a0:53:8b:42:9c:65:97:21:dd:10:
ee:13:b1:9e:b7:bf:c2:49:e4:ab:40:9e:51:65:8f:
88:a1:e1:5c:2b:ad:52:0c:db:e2:13:da:a0:14:f2:
d6:f9:60:cd:4a:87:91:87:bb:78:52:4b:44:15:1b:
92:80:17:51:b5:4c:fa:dc:0c:ed:b0:c5:e5:9f:00:
2f:b1:ca:0c:3e:d0:8f:b7:2f:dc:3b:b7:32:07:42:
93:b4:fe:e1:06:99:91:af:e4:38:ea:a0:18:7b:8d:
53:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B5:07:BD:B9:3E:7D:F4:C3:48:73:EA:9F:59:95:A1:8D:0C:F7:CA
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/17UHvbk-ffTDSHPqn1mVoY0M98o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.158.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:29:19:0d:98:aa:23:74:f9:f9:7a:7f:8a:78:9c:84:4c:44:
db:dd:e1:05:41:92:e3:55:34:4e:a6:5f:d8:72:06:56:5b:51:
cc:54:c1:f6:76:ee:47:48:0b:d6:e0:23:d6:04:ac:d8:c2:0c:
4a:8e:fa:4d:54:51:77:63:57:6b:fb:07:d6:7d:38:8b:53:27:
d0:81:ef:62:9e:ca:ac:f3:15:3b:f7:bf:b9:dd:5d:1e:bd:66:
15:a0:08:d9:86:2b:89:93:5f:05:f8:40:af:a9:2b:42:8b:b6:
0a:f5:e0:a5:47:a9:1f:93:fc:b8:7f:08:0c:92:58:5a:2c:b7:
d5:83:9c:b4:ce:39:f7:ac:a4:37:d8:7e:e4:7d:a4:35:6e:a1:
2d:0a:80:ae:02:56:8f:6f:a8:fa:e5:b8:92:d5:8c:93:c1:d2:
fa:81:bf:f4:62:2c:32:ac:33:2c:69:6c:92:38:56:5e:1b:4c:
50:c6:f5:59:14:f2:a9:3e:5c:88:ad:c2:27:a9:e8:65:fe:a1:
e0:7a:49:01:bd:a3:fe:a9:83:54:c6:1b:61:d6:0e:7f:3f:36:
cf:8b:ea:7b:0e:fe:94:72:b1:66:4f:ab:f7:68:58:c1:c1:07:
ba:8c:04:08:b1:91:3a:cc:40:3f:a3:a6:b4:79:67:e7:4b:78:
41:8b:61:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3LFrcuOr0BeA12kIZR24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODk1ZmYwZTk5YTc3YzAxN2U4YTM4MzI5MmNiNWM2Zjgy
NjExMjAwHhcNMjQwMTAxMTYzMDIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2I1MDdiZGI5M2U3ZGY0YzM0ODczZWE5ZjU5OTVhMThkMGNmN2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQX2VJkgPTmoTJn/0yBp5tQbmS1x
r4ynHzA2G6kO0nXPtL9OqQq1UpYnE2ULkg5WafC1Qe7vaATnGVxSU4q6mRfms8v0
UV1RtF04lc9Vz/i/PGW85AvtonUMSyy/Y+olnNXb3b/dZ9DYmhj5PikjiSLjThBo
3pe/74cw2JNnsJKbNPkKB6m0/1GjZW93boc0uWykUo9AO+W+9qBTi0KcZZch3RDu
E7Get7/CSeSrQJ5RZY+IoeFcK61SDNviE9qgFPLW+WDNSoeRh7t4UktEFRuSgBdR
tUz63AztsMXlnwAvscoMPtCPty/cO7cyB0KTtP7hBpmRr+Q46qAYe41TywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNe1B725Pn30w0hz6p9ZlaGNDPfKMB8GA1UdIwQY
MBaAFE+JX/DpmnfAF+ijgykstcb4JhEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zMzI4ZGEtYWE0ZS00NDViLTlkYTkt
ZDA1Mzc0NWMyYWNjLzEvMTdVSHZiay1mZlREU0hQcW4xbVZvWTBNOThvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8zMzI4ZGEtYWE0ZS00NDViLTlkYTktZDA1Mzc0NWMyYWNj
LzEvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRqeMA0G
CSqGSIb3DQEBCwUAA4IBAQC3KRkNmKojdPn5en+KeJyETETb3eEFQZLjVTROpl/Y
cgZWW1HMVMH2du5HSAvW4CPWBKzYwgxKjvpNVFF3Y1dr+wfWfTiLUyfQge9insqs
8xU797+53V0evWYVoAjZhiuJk18F+ECvqStCi7YK9eClR6kfk/y4fwgMklhaLLfV
g5y0zjn3rKQ32H7kfaQ1bqEtCoCuAlaPb6j65biS1YyTwdL6gb/0YiwyrDMsaWyS
OFZeG0xQxvVZFPKpPlyIrcInqehl/qHgekkBvaP+qYNUxhth1g5/PzbPi+p7Dv6U
crFmT6v3aFjBwQe6jAQIsZE6zEA/o6a0eWfnS3hBi2E3
-----END CERTIFICATE-----
Generated at Wed May 15 18:27:15 2024 by rpki-client on console-ams.rpki-client.org