Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/4TqOc_6ulGOF_lh5VAqdR2rg2jE.roa
File: 4TqOc_6ulGOF_lh5VAqdR2rg2jE.roa (raw, json)
Hash identifier: jnqGPOJvAvclbfODd4vFO3VMHY+NYu383Iv1hqPc6Ro=
Subject key identifier: E1:3A:8E:73:FE:AE:94:63:85:FE:58:79:54:0A:9D:47:6A:E0:DA:31
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EE6A3A30E1FEFCC82D47D228F136207F6
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/4TqOc_6ulGOF_lh5VAqdR2rg2jE.roa
Signing time: Tue 16 Apr 2024 11:21:07 +0000
ROA not before: Tue 16 Apr 2024 11:21:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204354
IP address blocks: 185.251.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:a3:a3:0e:1f:ef:cc:82:d4:7d:22:8f:13:62:07:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 16 11:21:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e13a8e73feae946385fe5879540a9d476ae0da31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bf:1f:79:61:e9:c4:4b:da:a1:57:8e:4c:ff:
64:09:32:5f:01:54:71:b6:5b:98:ff:ed:e5:dc:fc:
af:8b:c2:7c:59:a6:c2:ac:e9:af:3c:29:2d:20:34:
3b:8e:c2:d2:9b:98:22:28:27:0d:95:2c:24:f1:9c:
05:16:b9:07:11:df:7c:4a:2c:c6:20:6c:13:0c:a4:
5f:64:28:1e:4a:01:d9:06:e1:5a:f9:21:48:12:6b:
be:ff:6d:75:35:1a:ad:c8:68:4a:57:19:21:24:d9:
80:86:e7:a8:13:de:98:e9:27:b2:7e:c9:4e:1f:4a:
4d:e5:3e:bb:fb:1e:95:9f:5e:43:5c:ce:6c:fe:41:
32:23:8a:44:65:a4:5d:26:d4:19:4b:7a:4e:90:c5:
90:08:3e:96:d4:74:a3:c1:24:3c:da:51:a7:17:ef:
40:c7:c7:a2:da:5d:4e:9b:74:7a:48:d8:62:5e:c1:
23:f2:46:34:f5:e0:11:14:b1:cc:7f:6f:9f:98:a7:
02:25:5a:c4:b5:7b:31:3d:d8:bb:7e:b0:9c:c5:e4:
d9:5b:d7:d8:bf:15:88:92:90:db:a4:50:db:a5:91:
4e:6f:b4:af:4d:32:d6:cd:81:80:f8:7b:8c:c3:b1:
b4:c5:43:4f:9a:89:e8:74:9e:b3:5e:b0:4b:20:f7:
c6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3A:8E:73:FE:AE:94:63:85:FE:58:79:54:0A:9D:47:6A:E0:DA:31
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/4TqOc_6ulGOF_lh5VAqdR2rg2jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.240.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:39:e7:12:5e:8c:fe:e8:3a:3d:2c:6a:de:23:b1:32:b6:93:
fe:d4:7f:71:16:bf:fa:bc:e6:e4:5c:d4:9b:1c:57:89:0d:76:
50:df:ae:96:21:b4:4e:df:de:6c:b4:05:a7:0c:a2:a3:bc:f4:
d1:bb:b6:b9:4f:e5:88:39:97:ae:5e:fd:30:f9:6a:af:18:dc:
12:1d:fa:d2:d6:9e:82:ea:30:88:a1:f8:5c:6d:e9:12:0c:f8:
19:a0:2a:07:b1:71:7a:13:18:f9:80:66:cc:77:2c:d8:b3:6d:
bd:a5:2f:ea:a8:c5:8b:c2:0e:24:76:19:7b:fd:7b:b5:36:bd:
51:0d:89:04:9f:ef:02:a2:97:7c:d7:a0:96:b4:d0:0c:9c:35:
f4:f5:9a:8a:d3:3f:8b:7a:f7:84:01:c7:b4:b9:8f:19:f6:df:
a6:cb:27:f1:15:2a:92:25:7d:3e:33:47:47:be:c3:22:fd:11:
10:72:2a:7e:9b:b2:c3:2b:06:3b:59:3d:df:68:bd:95:f8:34:
5b:66:eb:66:89:ac:3d:bd:c1:37:81:ba:a1:55:18:d3:33:e4:
e4:53:5e:d5:49:66:09:66:40:a1:66:e0:32:5c:9f:45:36:80:
3c:3d:3a:78:38:03:29:86:86:73:0a:c3:6b:2c:0b:f4:13:79:
0f:20:77:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7mo6MOH+/MgtR9Io8TYgf2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjQwNDE2MTEyMTA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTNhOGU3M2ZlYWU5NDYzODVmZTU4Nzk1NDBhOWQ0NzZhZTBkYTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb8feWHpxEvaoVeOTP9kCTJfAVRx
tluY/+3l3Pyvi8J8WabCrOmvPCktIDQ7jsLSm5giKCcNlSwk8ZwFFrkHEd98SizG
IGwTDKRfZCgeSgHZBuFa+SFIEmu+/211NRqtyGhKVxkhJNmAhueoE96Y6SeyfslO
H0pN5T67+x6Vn15DXM5s/kEyI4pEZaRdJtQZS3pOkMWQCD6W1HSjwSQ82lGnF+9A
x8ei2l1Om3R6SNhiXsEj8kY09eARFLHMf2+fmKcCJVrEtXsxPdi7frCcxeTZW9fY
vxWIkpDbpFDbpZFOb7SvTTLWzYGA+HuMw7G0xUNPmonodJ6zXrBLIPfGiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOE6jnP+rpRjhf5YeVQKnUdq4NoxMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvNFRxT2NfNnVsR09GX2xoNVZBcWRSMnJnMmpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufvwMA0G
CSqGSIb3DQEBCwUAA4IBAQAcOecSXoz+6Do9LGreI7EytpP+1H9xFr/6vObkXNSb
HFeJDXZQ366WIbRO395stAWnDKKjvPTRu7a5T+WIOZeuXv0w+WqvGNwSHfrS1p6C
6jCIofhcbekSDPgZoCoHsXF6Exj5gGbMdyzYs229pS/qqMWLwg4kdhl7/Xu1Nr1R
DYkEn+8Copd816CWtNAMnDX09ZqK0z+LeveEAce0uY8Z9t+myyfxFSqSJX0+M0dH
vsMi/REQcip+m7LDKwY7WT3faL2V+DRbZutmiaw9vcE3gbqhVRjTM+TkU17VSWYJ
ZkChZuAyXJ9FNoA8PTp4OAMphoZzCsNrLAv0E3kPIHcV
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:44:42 2024 by rpki-client on console-fra.rpki-client.org