Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/prbbD5wEd-DG5z1Bz-Cyk3yVpsU.roa
File: prbbD5wEd-DG5z1Bz-Cyk3yVpsU.roa (raw, json)
Hash identifier: EAqfWelU3iDjBMUbTP4OxznDTeBzFvRVVGxcG5hw1dw=
Subject key identifier: A6:B6:DB:0F:9C:04:77:E0:C6:E7:3D:41:CF:E0:B2:93:7C:95:A6:C5
Certificate issuer: /CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
Certificate serial: 018CC56DE400137BED84A4BAD2E5F5A4ECE9
Authority key identifier: C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/prbbD5wEd-DG5z1Bz-Cyk3yVpsU.roa
Signing time: Mon 01 Jan 2024 14:29:22 +0000
ROA not before: Mon 01 Jan 2024 14:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198776
IP address blocks: 78.110.44.0/22 maxlen: 22
185.220.132.0/22 maxlen: 22
185.117.64.0/22 maxlen: 22
2a0b:f740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e4:00:13:7b:ed:84:a4:ba:d2:e5:f5:a4:ec:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
Validity
Not Before: Jan 1 14:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6b6db0f9c0477e0c6e73d41cfe0b2937c95a6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:e1:78:54:35:d2:0f:b3:4a:26:5a:67:22:
ce:20:8d:f2:64:2f:e7:af:8d:87:06:03:c8:f8:5b:
5d:fc:73:5a:d6:77:e9:fc:44:43:6e:f6:ec:74:51:
d5:2d:1c:5b:c1:b6:39:59:a6:71:74:7a:7e:2a:8d:
56:3d:1a:45:b9:4e:6b:fd:0c:25:73:2a:5c:de:0f:
e3:d4:0f:5c:88:55:d1:68:04:4b:c0:12:89:09:62:
5f:ab:9a:ba:22:52:3b:07:62:70:72:6a:d7:92:36:
c1:93:92:a6:ec:c4:2f:8b:5e:c3:90:1e:00:b3:cb:
c1:f2:8c:76:83:17:f2:db:4d:72:58:d5:57:f0:19:
08:ef:15:d0:52:81:40:f2:81:3a:af:8b:ef:fe:f4:
5f:2a:c1:08:3b:16:07:02:95:0e:9f:7b:dc:c5:cb:
62:25:dd:22:1e:e5:09:05:b5:c0:8a:31:ef:9a:ef:
82:d4:f7:20:06:b3:82:8e:b2:de:98:36:39:31:c2:
d0:23:b4:54:ff:fc:bd:38:ab:a1:16:b5:17:96:27:
82:5c:93:b5:99:e5:7d:e5:9d:cd:ad:b2:b0:6f:36:
c4:4e:fa:10:33:5b:d0:ca:e6:16:69:1b:75:c2:32:
18:9c:38:43:38:69:ea:eb:0a:c9:bd:18:51:4a:64:
b3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B6:DB:0F:9C:04:77:E0:C6:E7:3D:41:CF:E0:B2:93:7C:95:A6:C5
X509v3 Authority Key Identifier:
keyid:C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/prbbD5wEd-DG5z1Bz-Cyk3yVpsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.44.0/22
185.117.64.0/22
185.220.132.0/22
IPv6:
2a0b:f740::/29
Signature Algorithm: sha256WithRSAEncryption
26:95:3f:39:99:7d:91:8d:66:26:ea:b8:94:fb:cc:5e:32:ea:
bd:2f:55:0b:d4:41:08:29:64:cf:0a:e0:b1:d4:40:80:96:ec:
e3:75:d5:75:ed:ff:36:4e:00:d8:68:32:8c:37:f1:c9:7c:88:
81:27:b1:c1:6f:59:57:9a:7a:1e:b4:e9:0c:a8:6f:55:7f:20:
61:76:db:e5:ee:0f:c7:d4:c6:b2:05:33:96:f7:f6:a1:2d:73:
3d:4f:d3:80:f9:a1:57:0c:29:23:88:8a:fc:03:5c:58:c3:24:
ba:2b:f4:ae:29:be:c0:b8:61:62:f4:f4:e8:91:e1:21:1f:24:
6b:3d:35:bc:66:9f:8a:04:4a:1a:32:35:f9:48:19:8a:b5:8a:
5b:23:3d:67:8e:ad:ef:ac:01:79:6a:eb:3e:b6:db:27:69:3d:
83:3e:04:59:a5:53:d4:28:12:d3:9c:66:c0:a4:df:4f:b0:4f:
f1:40:b6:4d:c7:cf:84:4a:0b:13:e9:92:5e:33:e5:ca:8a:fc:
5a:41:2e:3a:8e:e0:3c:24:56:b2:87:52:ac:99:0a:fd:0c:85:
44:a1:ee:a0:9d:38:01:46:86:80:9c:af:96:ab:fb:11:89:f5:
75:e1:53:85:24:7f:78:74:46:90:8c:69:a0:c8:dd:86:93:61:
54:a4:b5:4d
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzFbeQAE3vthKS60uX1pOzpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDI1NDlkOGQwMDY3YTM3MjMyM2NjNzZkOGVlMDEwMmI3
NGQ4MzMwHhcNMjQwMTAxMTQyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmI2ZGIwZjljMDQ3N2UwYzZlNzNkNDFjZmUwYjI5MzdjOTVhNmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf3heFQ10g+zSiZaZyLOII3yZC/n
r42HBgPI+Ftd/HNa1nfp/ERDbvbsdFHVLRxbwbY5WaZxdHp+Ko1WPRpFuU5r/Qwl
cypc3g/j1A9ciFXRaARLwBKJCWJfq5q6IlI7B2JwcmrXkjbBk5Km7MQvi17DkB4A
s8vB8ox2gxfy201yWNVX8BkI7xXQUoFA8oE6r4vv/vRfKsEIOxYHApUOn3vcxcti
Jd0iHuUJBbXAijHvmu+C1PcgBrOCjrLemDY5McLQI7RU//y9OKuhFrUXlieCXJO1
meV95Z3NrbKwbzbETvoQM1vQyuYWaRt1wjIYnDhDOGnq6wrJvRhRSmSz5wIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFKa22w+cBHfgxuc9Qc/gspN8labFMB8GA1UdIwQY
MBaAFMLSVJ2NAGejcjI8x22O4BArdNgzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RKVW5ZMEFaNk55TWp6SGJZN2dFQ3QwMkRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9lODhmNzEtMjM4Mi00NDEzLWI1NjIt
MTk3MTc4ZmYxOGYyLzEvcHJiYkQ1d0VkLURHNXoxQnotQ3lrM3lWcHNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9lODhmNzEtMjM4Mi00NDEzLWI1NjItMTk3MTc4ZmYxOGYy
LzEvd3RKVW5ZMEFaNk55TWp6SGJZN2dFQ3QwMkRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCTm4sAwQC
uXVAAwQCudyEMA0EAgACMAcDBQMqC/dAMA0GCSqGSIb3DQEBCwUAA4IBAQAmlT85
mX2RjWYm6riU+8xeMuq9L1UL1EEIKWTPCuCx1ECAluzjddV17f82TgDYaDKMN/HJ
fIiBJ7HBb1lXmnoetOkMqG9VfyBhdtvl7g/H1MayBTOW9/ahLXM9T9OA+aFXDCkj
iIr8A1xYwyS6K/SuKb7AuGFi9PTokeEhHyRrPTW8Zp+KBEoaMjX5SBmKtYpbIz1n
jq3vrAF5aus+ttsnaT2DPgRZpVPUKBLTnGbApN9PsE/xQLZNx8+ESgsT6ZJeM+XK
ivxaQS46juA8JFayh1KsmQr9DIVEoe6gnTgBRoaAnK+Wq/sRifV14VOFJH94dEaQ
jGmgyN2Gk2FUpLVN
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:43 2024 by rpki-client on console-fra.rpki-client.org