Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/08RHhl08KB2T-E5ZzhzJkiLojgE.roa
File: 08RHhl08KB2T-E5ZzhzJkiLojgE.roa (raw, json)
Hash identifier: STjnlbWphVz2DEeWw3oFes5k3yGFLF/KEQiznOTZlrc=
Subject key identifier: D3:C4:47:86:5D:3C:28:1D:93:F8:4E:59:CE:1C:C9:92:22:E8:8E:01
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 018CC5DC607493D9D4D1D735F4445D4B32A4
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/08RHhl08KB2T-E5ZzhzJkiLojgE.roa
Signing time: Mon 01 Jan 2024 16:30:03 +0000
ROA not before: Mon 01 Jan 2024 16:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 195.189.245.0/24 maxlen: 24
185.248.28.0/22 maxlen: 24
2a0d:dd80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:60:74:93:d9:d4:d1:d7:35:f4:44:5d:4b:32:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Jan 1 16:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3c447865d3c281d93f84e59ce1cc99222e88e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:ee:a6:84:b2:67:67:2a:2b:44:6f:e8:bd:
f5:16:a3:7c:46:dd:4b:25:24:3e:10:55:d9:32:94:
89:0d:09:b1:a3:ca:d0:76:59:74:ce:4b:50:88:c8:
fb:3c:94:bc:11:fc:dc:a3:1e:e0:52:35:96:6e:ed:
b3:51:89:1e:73:2f:e3:2f:eb:fc:29:fb:e8:b6:0c:
2f:a0:12:0e:b2:42:85:cd:2b:96:9a:69:61:b5:03:
ca:57:6a:6a:e4:c2:cd:c1:21:d5:10:0c:ca:47:50:
8d:f4:e9:ed:be:7a:cf:9c:bb:df:bb:7b:0b:e0:d8:
08:1b:8a:22:b3:f5:69:98:3f:2c:c9:0f:79:c0:33:
36:db:8c:89:b9:73:f6:41:4f:d2:2e:42:98:e2:34:
aa:a2:59:d8:f7:81:80:9d:76:e0:63:21:b3:c8:2a:
f2:51:d9:78:98:4b:87:cc:a4:91:3f:6d:6b:85:cf:
9a:a6:b7:96:5f:fe:af:f6:0c:e2:50:e2:03:0c:74:
81:5c:a3:03:18:33:d8:d1:c7:11:e5:ca:48:07:e3:
3b:b5:b9:3b:a6:ea:da:f8:4b:c7:df:80:b8:49:d8:
2e:76:8a:26:7b:1c:5b:d5:98:b2:6f:30:63:5b:c6:
38:a0:59:56:f9:cd:e4:35:22:1e:61:9b:92:fe:f0:
c7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C4:47:86:5D:3C:28:1D:93:F8:4E:59:CE:1C:C9:92:22:E8:8E:01
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/08RHhl08KB2T-E5ZzhzJkiLojgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.28.0/22
195.189.245.0/24
IPv6:
2a0d:dd80::/29
Signature Algorithm: sha256WithRSAEncryption
8a:4e:6e:68:2a:4b:d3:71:76:ea:97:e0:83:01:af:3d:88:88:
54:98:5e:70:3c:ec:37:5b:e0:20:2e:b8:ee:ee:99:35:02:c6:
3f:bf:99:7f:c5:81:09:4c:9e:bf:94:fc:bb:d8:ec:61:dd:60:
43:c7:1d:83:25:b0:19:37:1f:1e:bc:28:29:bc:61:93:6d:1b:
c6:f1:7e:6d:3c:a4:91:f1:ef:72:b7:2b:56:44:a5:78:4e:ae:
79:50:da:0d:46:fa:d7:20:4c:ba:b9:3b:43:d1:c6:3c:41:5f:
e8:8d:30:0f:a3:97:b7:0b:3f:c0:59:20:90:45:f6:60:17:0f:
b0:6d:0b:31:51:e0:47:c4:98:93:d5:6f:d6:5f:3d:bd:6f:39:
01:6e:83:0c:8f:55:87:5c:eb:b5:3b:03:af:65:f9:fb:ad:7a:
ae:58:4d:3a:39:41:5d:53:90:37:22:60:f4:f0:e3:96:c3:74:
ca:05:11:a0:47:c9:ea:49:6b:d5:17:f5:f1:ff:ee:2a:ac:8f:
93:80:00:84:32:30:e4:c0:0d:96:92:f7:1c:ff:09:b5:68:0d:
fd:b4:2a:4d:1d:56:b2:5b:cd:6e:bf:4f:1b:e2:2d:bd:01:6b:
9b:06:7d:49:16:85:e5:ac:28:88:82:2e:32:d9:74:06:71:0b:
4d:6e:59:ee
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzF3GB0k9nU0dc19ERdSzKkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNDczMTg4NGJhMGY1NzNmYTYxOGI2ZTdhZDUwM2ExMmM5
NjVhZjMwHhcNMjQwMTAxMTYzMDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2M0NDc4NjVkM2MyODFkOTNmODRlNTljZTFjYzk5MjIyZTg4ZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTfupoSyZ2cqK0Rv6L31FqN8Rt1L
JSQ+EFXZMpSJDQmxo8rQdll0zktQiMj7PJS8Efzcox7gUjWWbu2zUYkecy/jL+v8
KfvotgwvoBIOskKFzSuWmmlhtQPKV2pq5MLNwSHVEAzKR1CN9OntvnrPnLvfu3sL
4NgIG4ois/VpmD8syQ95wDM224yJuXP2QU/SLkKY4jSqolnY94GAnXbgYyGzyCry
Udl4mEuHzKSRP21rhc+apreWX/6v9gziUOIDDHSBXKMDGDPY0ccR5cpIB+M7tbk7
pura+EvH34C4Sdgudoomexxb1ZiybzBjW8Y4oFlW+c3kNSIeYZuS/vDH8wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFNPER4ZdPCgdk/hOWc4cyZIi6I4BMB8GA1UdIwQY
MBaAFLtHMYhLoPVz+mGLbnrVA6EsllrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYt
ODM1YTU4NDJiOTRjLzEvMDhSSGhsMDhLQjJULUU1WnpoekpraUxvamdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYtODM1YTU4NDJiOTRj
LzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCufgcAwQA
w731MA0EAgACMAcDBQMqDd2AMA0GCSqGSIb3DQEBCwUAA4IBAQCKTm5oKkvTcXbq
l+CDAa89iIhUmF5wPOw3W+AgLrju7pk1AsY/v5l/xYEJTJ6/lPy72Oxh3WBDxx2D
JbAZNx8evCgpvGGTbRvG8X5tPKSR8e9ytytWRKV4Tq55UNoNRvrXIEy6uTtD0cY8
QV/ojTAPo5e3Cz/AWSCQRfZgFw+wbQsxUeBHxJiT1W/WXz29bzkBboMMj1WHXOu1
OwOvZfn7rXquWE06OUFdU5A3ImD08OOWw3TKBRGgR8nqSWvVF/Xx/+4qrI+TgACE
MjDkwA2Wkvcc/wm1aA39tCpNHVayW81uv08b4i29AWubBn1JFoXlrCiIgi4y2XQG
cQtNblnu
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:09:19 2024 by rpki-client on console-ams.rpki-client.org