Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/RrMM3ri0FRRCzuoNLvUPoDgaqF4.roa
File: RrMM3ri0FRRCzuoNLvUPoDgaqF4.roa (raw, json)
Hash identifier: hMVZVmFVI4ra678CTcL89+JmkY+qmpahTlkvg3vUFus=
Subject key identifier: 46:B3:0C:DE:B8:B4:15:14:42:CE:EA:0D:2E:F5:0F:A0:38:1A:A8:5E
Certificate issuer: /CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
Certificate serial: 018CC9BC40F29C38E5EEC6A123ADD5B1F556
Authority key identifier: 8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/RrMM3ri0FRRCzuoNLvUPoDgaqF4.roa
Signing time: Tue 02 Jan 2024 10:33:26 +0000
ROA not before: Tue 02 Jan 2024 10:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20570
IP address blocks: 185.225.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:40:f2:9c:38:e5:ee:c6:a1:23:ad:d5:b1:f5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
Validity
Not Before: Jan 2 10:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46b30cdeb8b4151442ceea0d2ef50fa0381aa85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b2:fb:48:aa:bc:4c:f6:59:46:c7:e8:db:cc:
3d:79:9a:3c:e4:ec:3c:9f:fe:61:2d:76:0a:18:ac:
df:b5:ac:60:4a:87:ee:eb:28:f3:94:76:cd:db:1a:
66:25:df:cf:a9:4c:8e:04:b5:07:a3:75:c8:f5:10:
2e:f3:be:9f:31:95:11:44:e4:0a:8b:6b:33:d1:37:
f9:06:97:3f:46:59:01:96:5c:77:e8:e1:b9:c1:5e:
0b:18:0b:2d:5b:1c:41:a4:1e:a8:e0:3b:eb:9e:0c:
4e:73:bd:ae:28:14:8c:a1:4b:33:f5:a5:74:79:6c:
6e:d4:a9:e1:45:ff:96:b2:d0:5d:4e:64:4d:00:33:
3b:c8:7f:57:17:9e:a1:53:69:19:06:72:5c:f4:60:
65:33:7b:2a:53:f4:60:8a:40:a0:50:1a:0d:93:8b:
05:6e:fb:c7:e4:e8:89:5e:54:f9:4c:d4:6c:82:78:
c4:ae:2e:4c:d2:81:2f:a5:45:9a:1a:5d:ce:fd:8d:
ec:24:7a:86:bf:3f:52:10:3e:82:a9:50:11:d3:b0:
cd:9c:6a:6f:ab:74:d1:d9:0f:cb:c3:08:89:ef:8b:
63:72:61:3b:5c:75:d4:81:87:57:99:42:fd:a8:86:
a7:21:0f:0b:20:b9:1b:f4:2a:46:bb:31:25:d5:75:
31:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B3:0C:DE:B8:B4:15:14:42:CE:EA:0D:2E:F5:0F:A0:38:1A:A8:5E
X509v3 Authority Key Identifier:
keyid:8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/RrMM3ri0FRRCzuoNLvUPoDgaqF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.10.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:dc:e4:60:03:44:dd:6a:f1:4b:bc:7e:10:ba:13:83:75:a1:
dd:4b:52:c9:f8:69:96:99:cf:ab:42:2f:22:35:3d:73:14:05:
ea:e8:67:07:7d:9b:a5:ac:a7:7a:ea:23:b1:5e:4d:21:d5:be:
e1:d0:82:ef:5a:30:b9:43:c7:ae:3f:3f:9d:81:87:19:8d:73:
18:17:aa:ca:1b:a9:27:f2:92:93:f6:05:fb:b1:6f:31:31:35:
55:6e:31:2f:8c:b3:24:8e:9c:9c:23:9c:c9:ed:1a:01:f5:0f:
eb:94:fa:b0:c3:dc:67:eb:8b:94:f9:a7:b4:b1:3b:49:40:6d:
6b:ae:5d:94:ab:d8:fd:04:fa:4c:2c:fa:6a:3f:b7:77:55:6a:
4c:8e:f1:8d:d5:d4:0d:b4:08:10:c2:76:71:aa:cc:e8:c5:cb:
71:53:3b:ab:4d:6d:5c:9e:a3:c9:d3:7d:27:c3:62:67:89:a6:
f4:7c:76:44:2f:d0:a7:e4:09:8b:c5:95:d1:1d:3c:64:86:41:
e8:08:11:6e:ac:34:97:e3:9d:bd:bf:f9:ba:8e:d7:99:9f:a0:
f7:d3:53:8d:21:90:f8:fd:01:3b:1f:26:85:47:0a:71:0c:cc:
aa:8f:39:3a:39:37:b9:a0:50:59:b5:b2:f7:d2:35:57:be:7e:
73:f2:38:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvEDynDjl7sahI63VsfVWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYTlhZWI0MjZjMjhhMzQ4MDg3NzZmOTU2ODkzNWQzYjll
YzllMDgwHhcNMjQwMTAyMTAzMzI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmIzMGNkZWI4YjQxNTE0NDJjZWVhMGQyZWY1MGZhMDM4MWFhODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobL7SKq8TPZZRsfo28w9eZo85Ow8
n/5hLXYKGKzftaxgSofu6yjzlHbN2xpmJd/PqUyOBLUHo3XI9RAu876fMZURROQK
i2sz0Tf5Bpc/RlkBllx36OG5wV4LGAstWxxBpB6o4DvrngxOc72uKBSMoUsz9aV0
eWxu1KnhRf+WstBdTmRNADM7yH9XF56hU2kZBnJc9GBlM3sqU/RgikCgUBoNk4sF
bvvH5OiJXlT5TNRsgnjEri5M0oEvpUWaGl3O/Y3sJHqGvz9SED6CqVAR07DNnGpv
q3TR2Q/LwwiJ74tjcmE7XHXUgYdXmUL9qIanIQ8LILkb9CpGuzEl1XUxHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEazDN64tBUUQs7qDS71D6A4GqheMB8GA1UdIwQY
MBaAFI+prrQmwoo0gId2+VaJNdO57J4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajZtdXRDYkNpalNBaDNiNVZvazEwN25zbmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83Nzc5MmItZTIwZS00YmY3LWIxMjYt
MzU5Zjc5MzYxZTk5LzEvUnJNTTNyaTBGUlJDenVvTkx2VVBvRGdhcUY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83Nzc5MmItZTIwZS00YmY3LWIxMjYtMzU5Zjc5MzYxZTk5
LzEvajZtdXRDYkNpalNBaDNiNVZvazEwN25zbmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueEKMA0G
CSqGSIb3DQEBCwUAA4IBAQBc3ORgA0TdavFLvH4QuhODdaHdS1LJ+GmWmc+rQi8i
NT1zFAXq6GcHfZulrKd66iOxXk0h1b7h0ILvWjC5Q8euPz+dgYcZjXMYF6rKG6kn
8pKT9gX7sW8xMTVVbjEvjLMkjpycI5zJ7RoB9Q/rlPqww9xn64uU+ae0sTtJQG1r
rl2Uq9j9BPpMLPpqP7d3VWpMjvGN1dQNtAgQwnZxqszoxctxUzurTW1cnqPJ030n
w2Jniab0fHZEL9Cn5AmLxZXRHTxkhkHoCBFurDSX4529v/m6jteZn6D301ONIZD4
/QE7HyaFRwpxDMyqjzk6OTe5oFBZtbL30jVXvn5z8jis
-----END CERTIFICATE-----
Generated at Sat Jun 1 14:09:24 2024 by rpki-client on console-ams.rpki-client.org