Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bd_n8bRqD-CBBXSZsRGTJXcyPXk.roa
File: bd_n8bRqD-CBBXSZsRGTJXcyPXk.roa (raw, json)
Hash identifier: uyOO9O0f0D5XK4s1ljWLEYqhMHL5/dL8f4w0Kv7o0Wo=
Subject key identifier: 6D:DF:E7:F1:B4:6A:0F:E0:81:05:74:99:B1:11:93:25:77:32:3D:79
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01918EC41D83E245E14370637EF0EFD5A85E
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bd_n8bRqD-CBBXSZsRGTJXcyPXk.roa
Signing time: Mon 26 Aug 2024 12:58:22 +0000
ROA not before: Mon 26 Aug 2024 12:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8249
IP address blocks: 185.35.120.0/22 maxlen: 22
195.144.192.0/19 maxlen: 19
195.144.192.0/20 maxlen: 20
195.144.208.0/22 maxlen: 22
195.144.214.0/23 maxlen: 23
195.144.216.0/23 maxlen: 23
195.144.218.0/24 maxlen: 24
195.144.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:c4:1d:83:e2:45:e1:43:70:63:7e:f0:ef:d5:a8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Aug 26 12:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ddfe7f1b46a0fe081057499b111932577323d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:56:29:45:c4:12:e9:23:ad:a7:82:11:d7:cf:
73:2e:44:64:7f:b2:53:10:bd:be:cd:2d:84:9a:f5:
77:44:d1:d2:94:4a:8b:56:fe:f7:1e:a2:3b:d2:cc:
c7:26:0e:10:52:cf:c5:5a:11:d3:41:d6:41:ce:d0:
a9:74:a6:dd:c2:da:de:a8:24:c4:61:ea:68:17:65:
e3:b5:e5:89:22:8e:f9:bf:18:79:8b:0c:c2:8f:e3:
b0:0f:ef:8d:91:f9:fa:2e:07:64:25:82:80:27:d8:
61:3a:e8:63:4c:25:42:89:1a:7c:05:30:1a:8c:23:
88:2e:c4:3f:cc:dc:38:f7:ac:ed:a3:9a:ff:8c:6b:
0e:cf:5d:77:b0:28:99:b8:4e:41:34:ea:09:7a:04:
b1:fe:d8:68:05:24:e0:7b:34:09:2b:84:83:7d:61:
3a:74:4e:ac:ee:f1:e0:05:7c:3c:2e:d7:de:d4:b6:
0a:8a:2b:00:eb:17:9b:e9:91:55:9b:55:5a:71:9f:
7b:1e:c8:6a:ab:87:dd:d8:47:8a:0b:e0:0b:bd:da:
d9:78:20:f6:d4:ad:70:de:ad:db:b5:ff:0b:f9:e4:
a0:b6:a3:71:19:3f:88:8f:fc:6d:bd:5d:67:1d:bc:
35:31:67:67:5a:96:2c:f6:8c:97:6e:9a:3d:08:35:
25:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DF:E7:F1:B4:6A:0F:E0:81:05:74:99:B1:11:93:25:77:32:3D:79
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bd_n8bRqD-CBBXSZsRGTJXcyPXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.120.0/22
195.144.192.0/19
Signature Algorithm: sha256WithRSAEncryption
88:f1:19:f1:6b:a8:74:3e:7f:02:be:77:b2:6f:b2:c6:cf:b7:
13:ad:6c:b2:67:a1:31:86:f0:25:11:47:94:97:89:4e:ae:dd:
aa:bd:17:2d:fb:a8:07:34:65:b6:fa:22:26:c5:3d:1f:b4:11:
29:3e:95:e2:b9:c5:f9:6b:f7:ae:dc:fa:2e:8e:1f:67:d4:3e:
01:6f:fc:53:66:c5:23:c7:29:6c:f8:3d:07:ae:d5:6b:d4:86:
af:46:28:d9:ee:49:c1:c6:c4:7d:c3:73:9a:d2:a1:8d:b7:78:
0d:72:50:75:9e:5e:2b:94:dd:3d:1d:f9:57:31:f6:ce:90:b6:
24:76:13:ec:0e:2a:b9:e9:d0:7f:01:b3:44:7c:c7:9c:6b:2b:
cd:b0:3b:c9:f9:cf:e2:ea:19:23:7a:1d:1f:ce:50:b2:bb:5e:
b9:ff:1c:e0:b4:49:ac:8b:0c:aa:9f:2e:30:b1:ac:e9:c2:d7:
ee:bc:41:b3:f7:6b:81:e9:e3:97:11:17:b1:c9:00:68:32:71:
0a:cb:78:02:69:c9:e1:7e:25:33:a7:c8:34:c2:f8:3e:89:53:
bb:c8:b5:e0:89:51:2b:45:e9:a9:19:05:fe:a2:95:a0:9b:80:
9e:b4:2e:05:7d:d2:53:d3:5c:3c:c4:81:4b:ba:7f:2c:ce:5f:
de:b6:05:34
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZGOxB2D4kXhQ3BjfvDv1aheMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjQwODI2MTI1ODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGRmZTdmMWI0NmEwZmUwODEwNTc0OTliMTExOTMyNTc3MzIzZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilYpRcQS6SOtp4IR189zLkRkf7JT
EL2+zS2EmvV3RNHSlEqLVv73HqI70szHJg4QUs/FWhHTQdZBztCpdKbdwtreqCTE
YepoF2XjteWJIo75vxh5iwzCj+OwD++Nkfn6LgdkJYKAJ9hhOuhjTCVCiRp8BTAa
jCOILsQ/zNw496zto5r/jGsOz113sCiZuE5BNOoJegSx/thoBSTgezQJK4SDfWE6
dE6s7vHgBXw8Ltfe1LYKiisA6xeb6ZFVm1VacZ97Hshqq4fd2EeKC+ALvdrZeCD2
1K1w3q3btf8L+eSgtqNxGT+Ij/xtvV1nHbw1MWdnWpYs9oyXbpo9CDUlJwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG3f5/G0ag/ggQV0mbERkyV3Mj15MB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvYmRfbjhiUnFELUNCQlhTWnNSR1RKWGN5UFhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuSN4AwQF
w5DAMA0GCSqGSIb3DQEBCwUAA4IBAQCI8Rnxa6h0Pn8Cvneyb7LGz7cTrWyyZ6Ex
hvAlEUeUl4lOrt2qvRct+6gHNGW2+iImxT0ftBEpPpXiucX5a/eu3Poujh9n1D4B
b/xTZsUjxyls+D0HrtVr1IavRijZ7knBxsR9w3Oa0qGNt3gNclB1nl4rlN09HflX
MfbOkLYkdhPsDiq56dB/AbNEfMecayvNsDvJ+c/i6hkjeh0fzlCyu165/xzgtEms
iwyqny4wsazpwtfuvEGz92uB6eOXERexyQBoMnEKy3gCacnhfiUzp8g0wvg+iVO7
yLXgiVErRempGQX+opWgm4CetC4FfdJT01w8xIFLun8szl/etgU0
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:43:26 2024 by rpki-client on console-fra.rpki-client.org