Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/bAdJeDELcX7iZSe1Lt3b2OBmBEs.roa
File: bAdJeDELcX7iZSe1Lt3b2OBmBEs.roa (raw, json)
Hash identifier: mtheu+1p88m2luoqeL8YbYjbUvb0A7SZ1yT7yfINW+g=
Subject key identifier: 6C:07:49:78:31:0B:71:7E:E2:65:27:B5:2E:DD:DB:D8:E0:66:04:4B
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 018CC3B687AC9BDEFF78A16CAA8447EA5FF5
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/bAdJeDELcX7iZSe1Lt3b2OBmBEs.roa
Signing time: Mon 01 Jan 2024 06:29:28 +0000
ROA not before: Mon 01 Jan 2024 06:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134450
IP address blocks: 185.160.64.0/24 maxlen: 32
77.246.152.0/22 maxlen: 32
185.153.148.0/24 maxlen: 32
194.150.72.0/24 maxlen: 32
185.161.68.0/24 maxlen: 32
185.201.189.0/24 maxlen: 32
185.201.191.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:87:ac:9b:de:ff:78:a1:6c:aa:84:47:ea:5f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 1 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c074978310b717ee26527b52edddbd8e066044b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9b:0e:07:ec:53:6a:af:86:ad:1b:f9:ff:6e:
77:e4:d8:34:9c:c1:8f:79:d0:e4:4c:f8:2a:3c:f6:
53:45:c3:4a:48:cc:0d:eb:e9:dd:f2:e4:b9:9d:0b:
dd:a8:3d:9a:1f:c9:41:fe:8d:ce:dc:06:72:44:5b:
c1:31:ab:c9:e4:c7:f2:fe:75:4e:6e:24:f3:35:f3:
d0:99:ed:c9:f2:c8:f4:4d:37:bb:7b:91:28:65:a7:
49:2d:69:21:35:4d:b9:ac:f8:13:96:76:79:48:83:
13:45:44:9c:eb:01:d4:e2:a5:eb:0b:61:f5:c6:db:
f8:b3:93:ed:fa:81:59:4c:fb:62:de:17:7f:37:af:
cd:57:66:61:ba:b6:dc:93:d4:80:d9:9c:a8:b0:7c:
6a:06:f5:d3:7e:72:74:b8:7e:fb:51:2b:a3:38:78:
30:a0:2e:9f:88:9b:24:10:ce:7f:10:e4:7f:8f:e6:
9b:e3:b1:77:dd:48:b2:80:3c:24:34:c1:f0:6c:64:
ac:47:5b:a5:d9:88:bd:44:6c:e5:fe:87:74:37:4c:
c5:c5:f6:0d:a3:50:9b:13:3f:cb:0e:18:7e:48:a2:
61:e2:81:82:24:5e:4b:c3:7a:12:76:d2:4b:65:82:
dc:95:69:8e:d5:47:82:50:0b:f2:42:e0:3c:34:08:
04:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:07:49:78:31:0B:71:7E:E2:65:27:B5:2E:DD:DB:D8:E0:66:04:4B
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/bAdJeDELcX7iZSe1Lt3b2OBmBEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.152.0/22
185.153.148.0/24
185.160.64.0/24
185.161.68.0/24
185.201.189.0/24
185.201.191.0/24
194.150.72.0/24
Signature Algorithm: sha256WithRSAEncryption
26:31:33:ca:0d:26:b0:8d:19:ba:6b:dc:36:c2:cc:5c:62:72:
73:a7:15:2a:49:35:17:ca:21:1d:20:33:08:fc:d4:ab:87:b8:
11:dc:58:e9:14:71:c6:35:ab:58:e4:0a:06:08:ae:47:0d:44:
21:86:81:9e:ee:27:a8:e9:5c:cc:2d:c9:2e:d8:6a:e5:2c:02:
f1:fc:f4:6b:03:13:46:7c:de:2c:9d:ae:34:79:05:bc:ea:2b:
6e:36:f0:95:3b:3f:34:67:65:29:4f:af:97:d4:1f:e0:1e:44:
64:df:ea:99:9a:49:02:48:11:69:8d:0b:4a:67:49:7a:f8:93:
05:64:8e:e5:78:60:c1:3a:69:df:7b:b2:93:35:fa:04:b9:62:
74:42:23:6f:d1:b7:eb:ed:68:9b:5b:d8:7c:98:16:04:b1:7b:
30:5e:ec:be:0b:3b:75:d9:60:b2:a9:56:f1:ea:57:1d:6e:9a:
f2:16:bb:f2:bc:e6:b0:bd:48:28:ae:21:f2:3c:9f:e7:67:ce:
fd:67:fe:f3:8b:92:51:f8:6b:6b:c7:89:45:da:4f:1f:e4:07:
54:94:a4:75:74:92:31:f0:b9:15:87:80:9a:27:81:66:59:4d:
60:0c:66:5b:8e:c6:41:9f:bf:6c:7d:17:b8:69:20:6a:f7:5b:
81:e4:24:47
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYzDtoesm97/eKFsqoRH6l/1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx
OWE3NGUwHhcNMjQwMTAxMDYyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzA3NDk3ODMxMGI3MTdlZTI2NTI3YjUyZWRkZGJkOGUwNjYwNDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJsOB+xTaq+GrRv5/2535Ng0nMGP
edDkTPgqPPZTRcNKSMwN6+nd8uS5nQvdqD2aH8lB/o3O3AZyRFvBMavJ5Mfy/nVO
biTzNfPQme3J8sj0TTe7e5EoZadJLWkhNU25rPgTlnZ5SIMTRUSc6wHU4qXrC2H1
xtv4s5Pt+oFZTPti3hd/N6/NV2Zhurbck9SA2ZyosHxqBvXTfnJ0uH77USujOHgw
oC6fiJskEM5/EOR/j+ab47F33UiygDwkNMHwbGSsR1ul2Yi9RGzl/od0N0zFxfYN
o1CbEz/LDhh+SKJh4oGCJF5Lw3oSdtJLZYLclWmO1UeCUAvyQuA8NAgEwQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFGwHSXgxC3F+4mUntS7d29jgZgRLMB8GA1UdIwQY
MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct
OTViMDhlMzY2MGNmLzEvYkFkSmVERUxjWDdpWlNlMUx0M2IyT0JtQkVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm
LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCTfaYAwQA
uZmUAwQAuaBAAwQAuaFEAwQAucm9AwQAucm/AwQAwpZIMA0GCSqGSIb3DQEBCwUA
A4IBAQAmMTPKDSawjRm6a9w2wsxcYnJzpxUqSTUXyiEdIDMI/NSrh7gR3FjpFHHG
NatY5AoGCK5HDUQhhoGe7ieo6VzMLcku2GrlLALx/PRrAxNGfN4sna40eQW86itu
NvCVOz80Z2UpT6+X1B/gHkRk3+qZmkkCSBFpjQtKZ0l6+JMFZI7leGDBOmnfe7KT
NfoEuWJ0QiNv0bfr7WibW9h8mBYEsXswXuy+Czt12WCyqVbx6lcdbpryFrvyvOaw
vUgoriHyPJ/nZ879Z/7zi5JR+Gtrx4lF2k8f5AdUlKR1dJIx8LkVh4CaJ4FmWU1g
DGZbjsZBn79sfRe4aSBq91uB5CRH
-----END CERTIFICATE-----
Generated at Mon Jun 17 10:45:33 2024 by rpki-client on console-fra.rpki-client.org