Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/Rgz6WVS0KGv3KGCIwqMAAhQbLos.roa
File: Rgz6WVS0KGv3KGCIwqMAAhQbLos.roa (raw, json)
Hash identifier: owkGcq3OYowosee/prBiHQU9jW2zQzQH1GSrgSLBBF8=
Subject key identifier: 46:0C:FA:59:54:B4:28:6B:F7:28:60:88:C2:A3:00:02:14:1B:2E:8B
Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Certificate serial: 018CC26D432697E6BBFF287CDFEED379B29A
Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/Rgz6WVS0KGv3KGCIwqMAAhQbLos.roa
Signing time: Mon 01 Jan 2024 00:29:49 +0000
ROA not before: Mon 01 Jan 2024 00:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44709
IP address blocks: 185.229.226.0/24 maxlen: 24
212.115.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:43:26:97:e6:bb:ff:28:7c:df:ee:d3:79:b2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Validity
Not Before: Jan 1 00:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=460cfa5954b4286bf7286088c2a30002141b2e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dc:3d:bb:cb:10:a9:f0:6a:40:bb:c7:e2:55:
0d:c8:b2:31:d0:3e:9f:ef:70:30:8b:17:1e:f1:03:
4c:36:18:5a:48:05:ea:54:3d:1d:b6:1e:00:87:a3:
36:ae:02:09:55:86:6c:6b:81:e8:56:7b:b0:de:68:
01:7f:26:93:93:02:71:cd:6d:b2:bb:38:17:a1:3d:
b3:b2:a2:53:55:15:8c:51:a0:80:94:61:b2:68:ee:
6b:7e:d8:68:2d:eb:22:b1:57:90:8f:82:68:b5:d2:
b6:01:f3:43:78:07:63:7c:ea:17:9c:e3:43:d8:d9:
78:28:ef:28:22:4a:f0:c0:97:2c:ba:59:d0:4a:ea:
e4:fc:09:7d:e5:eb:1f:dd:a6:3e:3a:72:09:d1:69:
d2:92:9c:02:80:07:2c:cd:61:93:3c:6a:06:2b:72:
d6:bc:37:dd:f7:c8:b8:ac:f0:fe:62:cc:1d:b2:4f:
e3:c7:a5:1c:d0:30:6c:cb:29:28:11:c9:ce:27:d3:
ba:15:39:33:14:79:8f:72:b9:bf:c2:dc:7e:65:95:
e4:24:1b:6a:4e:fd:7c:d1:03:98:40:26:46:73:11:
3c:c1:83:33:36:08:fa:5b:57:60:bd:f0:fd:e1:ca:
a5:fa:c1:7a:f4:1c:d0:95:64:90:83:35:7a:71:3e:
59:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0C:FA:59:54:B4:28:6B:F7:28:60:88:C2:A3:00:02:14:1B:2E:8B
X509v3 Authority Key Identifier:
keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/Rgz6WVS0KGv3KGCIwqMAAhQbLos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.226.0/24
212.115.111.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:7e:40:18:e3:00:bf:40:d1:15:45:2f:01:5e:81:b3:75:98:
89:cf:f7:c9:c1:69:7d:8a:cb:40:0a:32:e1:cc:88:17:80:ea:
b7:58:f3:cb:18:c9:0e:11:f7:f7:12:c5:04:86:c2:be:11:ae:
47:ad:d1:d4:57:b1:b1:54:c9:4c:7a:d5:76:97:bf:d8:fb:61:
13:15:9a:db:32:18:f7:3e:20:ab:f8:de:eb:d5:61:cc:46:d4:
d6:ae:76:fc:b4:b9:8c:30:85:33:a5:5e:0d:89:fb:c6:e9:62:
f3:eb:a9:ae:81:03:cc:00:d8:50:a5:b5:82:f5:ed:d1:b8:39:
21:88:8c:39:a6:2e:64:d9:e0:9a:a5:49:d3:91:d1:b6:ae:65:
a5:c8:ed:74:12:f4:04:37:fa:70:95:e2:b0:10:9a:3e:35:ef:
f1:e7:f4:6f:b0:6d:d9:b1:20:3a:64:61:e2:62:59:c5:c5:e8:
b4:e3:77:13:ae:1c:f6:28:1c:8d:1c:7e:f0:35:4e:8f:1e:95:
60:55:8e:ee:d2:e8:da:7a:f5:fd:6b:e3:94:50:ea:b8:af:a2:
be:ef:55:10:fa:2c:b3:08:9d:12:29:0e:be:0f:31:8f:fc:0e:
23:ce:ab:98:51:48:b8:ee:99:ee:a9:ea:24:37:44:e2:16:3e:
5d:ee:a9:47
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzCbUMml+a7/yh83+7TebKaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYmQwMmVhNDRhOWJlZTM1YjYzZDFhYjNlMjViMTRmMTlh
MzVhNTUwHhcNMjQwMTAxMDAyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjBjZmE1OTU0YjQyODZiZjcyODYwODhjMmEzMDAwMjE0MWIyZThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptw9u8sQqfBqQLvH4lUNyLIx0D6f
73Awixce8QNMNhhaSAXqVD0dth4Ah6M2rgIJVYZsa4HoVnuw3mgBfyaTkwJxzW2y
uzgXoT2zsqJTVRWMUaCAlGGyaO5rfthoLesisVeQj4JotdK2AfNDeAdjfOoXnOND
2Nl4KO8oIkrwwJcsulnQSurk/Al95esf3aY+OnIJ0WnSkpwCgAcszWGTPGoGK3LW
vDfd98i4rPD+Yswdsk/jx6Uc0DBsyykoEcnOJ9O6FTkzFHmPcrm/wtx+ZZXkJBtq
Tv180QOYQCZGcxE8wYMzNgj6W1dgvfD94cql+sF69BzQlWSQgzV6cT5Z4wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEYM+llUtChr9yhgiMKjAAIUGy6LMB8GA1UdIwQY
MBaAFPG9AupEqb7jW2PRqz4lsU8Zo1pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEt
ZmUwYTY1OGQ5ZGVkLzEvUmd6NldWUzBLR3YzS0dDSXdxTUFBaFFiTG9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEtZmUwYTY1OGQ5ZGVk
LzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueXiAwQA
1HNvMA0GCSqGSIb3DQEBCwUAA4IBAQDOfkAY4wC/QNEVRS8BXoGzdZiJz/fJwWl9
istACjLhzIgXgOq3WPPLGMkOEff3EsUEhsK+Ea5HrdHUV7GxVMlMetV2l7/Y+2ET
FZrbMhj3PiCr+N7r1WHMRtTWrnb8tLmMMIUzpV4NifvG6WLz66mugQPMANhQpbWC
9e3RuDkhiIw5pi5k2eCapUnTkdG2rmWlyO10EvQEN/pwleKwEJo+Ne/x5/RvsG3Z
sSA6ZGHiYlnFxei043cTrhz2KByNHH7wNU6PHpVgVY7u0ujaevX9a+OUUOq4r6K+
71UQ+iyzCJ0SKQ6+DzGP/A4jzquYUUi47pnuqeokN0TiFj5d7qlH
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:28:50 2024 by rpki-client on console-fra.rpki-client.org