Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/8X80FMCDyoFkLCbC5l1YtdWAyBE.roa
File: 8X80FMCDyoFkLCbC5l1YtdWAyBE.roa (raw, json)
Hash identifier: dVtUfRg6vAbM2BbJSrh3zX5rpcOVoDwi3DEXsahX4DE=
Subject key identifier: F1:7F:34:14:C0:83:CA:81:64:2C:26:C2:E6:5D:58:B5:D5:80:C8:11
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 018CC56E185427B1A61CEDEB432D507FF0BE
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/8X80FMCDyoFkLCbC5l1YtdWAyBE.roa
Signing time: Mon 01 Jan 2024 14:29:35 +0000
ROA not before: Mon 01 Jan 2024 14:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203887
IP address blocks: 185.120.172.0/24 maxlen: 24
185.120.172.0/22 maxlen: 24
185.120.175.0/24 maxlen: 24
185.120.174.0/23 maxlen: 24
185.120.174.0/24 maxlen: 24
185.120.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:18:54:27:b1:a6:1c:ed:eb:43:2d:50:7f:f0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Jan 1 14:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f17f3414c083ca81642c26c2e65d58b5d580c811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a5:78:f2:42:18:5b:8a:11:95:1a:61:31:28:
e2:58:56:50:d7:e7:80:b5:53:cc:2a:83:5b:4e:83:
eb:5b:42:fb:3d:c5:28:e8:48:85:de:55:e3:7c:45:
8f:15:07:69:95:d8:39:54:63:5f:f3:af:1f:b5:ab:
2e:5a:52:7d:ea:13:eb:02:9a:06:53:af:f5:d6:17:
df:78:cb:10:db:a9:17:e6:dc:ab:c5:8a:4b:5a:5e:
be:5d:85:0a:58:1a:c8:38:67:d8:1b:d7:a1:90:63:
00:07:3a:e9:b5:a7:0e:c7:f4:fe:3f:8c:72:29:0d:
5f:47:93:45:30:bc:3e:4e:5b:43:25:ae:30:d8:87:
3f:cd:51:1c:51:3f:01:e0:a5:c8:16:ba:af:f8:f4:
c7:3a:c2:14:22:22:3e:9c:67:65:3b:d8:e0:85:c2:
68:58:eb:7b:6c:83:0f:45:dd:32:ad:e8:cf:d1:11:
f3:84:a5:ff:ae:35:d0:6b:d1:45:a0:de:1c:e7:66:
7c:3b:4a:e0:84:8e:c2:8b:b2:1c:77:98:e9:f7:8b:
9e:b0:18:29:8e:26:90:f5:51:f6:18:b9:3d:20:47:
3b:4b:5a:db:bf:7d:0a:22:59:8b:71:cc:fd:5a:fa:
d3:23:2c:28:32:2c:6c:03:fa:57:28:0c:3e:7d:19:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7F:34:14:C0:83:CA:81:64:2C:26:C2:E6:5D:58:B5:D5:80:C8:11
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/8X80FMCDyoFkLCbC5l1YtdWAyBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.172.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:d6:02:34:02:70:fd:8d:84:7f:df:5f:e7:3d:af:09:db:2b:
57:fa:15:99:7b:a2:9b:81:e5:8e:9f:90:ac:f3:80:de:3b:d2:
38:57:a3:41:ca:5a:be:cd:14:48:57:16:27:61:c3:31:4e:a9:
9b:eb:34:77:1c:00:c8:01:4a:37:d9:2c:eb:6b:a0:1a:ed:a6:
83:8c:d1:4a:f6:60:d1:fb:f5:25:9e:6b:ee:4e:ee:fd:59:44:
f2:48:5d:17:7b:6e:8f:b2:e2:7c:7c:cb:04:96:e4:45:fe:7c:
7b:4e:f2:65:e3:9e:b5:39:e4:5a:50:42:37:0e:2b:e1:06:17:
b9:cc:1e:c3:2f:ed:bb:6d:65:4e:a8:08:b9:4c:1f:4f:8c:6e:
39:3e:26:ef:b0:b6:0a:61:95:a5:58:0b:96:4f:52:ef:b1:df:
10:60:a2:3f:fe:58:b1:d2:dc:ce:28:68:f1:af:81:88:66:98:
32:ac:4c:44:01:f5:1a:1d:b2:3a:3b:90:08:61:db:ee:09:0a:
89:77:c2:e8:31:61:72:35:00:fc:91:6b:87:15:e1:72:20:8c:
37:68:d5:02:b4:58:da:24:39:4c:82:8f:aa:d5:40:f3:39:55:
fe:e4:83:98:cf:cd:b3:62:6a:19:5b:45:78:da:19:64:f1:50:
f1:a4:78:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbhhUJ7GmHO3rQy1Qf/C+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NWFlNjQ2ZWEzNGFkMjY4OGFjYTJmZGQxYTZmMzM0MDM1
NjQ5NWUwHhcNMjQwMTAxMTQyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTdmMzQxNGMwODNjYTgxNjQyYzI2YzJlNjVkNThiNWQ1ODBjODExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKV48kIYW4oRlRphMSjiWFZQ1+eA
tVPMKoNbToPrW0L7PcUo6EiF3lXjfEWPFQdpldg5VGNf868ftasuWlJ96hPrApoG
U6/11hffeMsQ26kX5tyrxYpLWl6+XYUKWBrIOGfYG9ehkGMABzrptacOx/T+P4xy
KQ1fR5NFMLw+TltDJa4w2Ic/zVEcUT8B4KXIFrqv+PTHOsIUIiI+nGdlO9jghcJo
WOt7bIMPRd0yrejP0RHzhKX/rjXQa9FFoN4c52Z8O0rghI7Ci7Icd5jp94uesBgp
jiaQ9VH2GLk9IEc7S1rbv30KIlmLccz9WvrTIywoMixsA/pXKAw+fRlD+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPF/NBTAg8qBZCwmwuZdWLXVgMgRMB8GA1UdIwQY
MBaAFDRa5kbqNK0miKyi/dGm8zQDVkleMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkZybVJ1bzByU2FJcktMOTBhYnpOQU5XU1Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zY2MxMzUtZjE2Ni00MmViLTgyMDMt
ZjQ5MTIwYmVkNTFjLzEvOFg4MEZNQ0R5b0ZrTENiQzVsMVl0ZFdBeUJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8zY2MxMzUtZjE2Ni00MmViLTgyMDMtZjQ5MTIwYmVkNTFj
LzEvTkZybVJ1bzByU2FJcktMOTBhYnpOQU5XU1Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXisMA0G
CSqGSIb3DQEBCwUAA4IBAQA81gI0AnD9jYR/31/nPa8J2ytX+hWZe6KbgeWOn5Cs
84DeO9I4V6NBylq+zRRIVxYnYcMxTqmb6zR3HADIAUo32Szra6Aa7aaDjNFK9mDR
+/UlnmvuTu79WUTySF0Xe26PsuJ8fMsEluRF/nx7TvJl4561OeRaUEI3DivhBhe5
zB7DL+27bWVOqAi5TB9PjG45PibvsLYKYZWlWAuWT1Lvsd8QYKI//lix0tzOKGjx
r4GIZpgyrExEAfUaHbI6O5AIYdvuCQqJd8LoMWFyNQD8kWuHFeFyIIw3aNUCtFja
JDlMgo+q1UDzOVX+5IOYz82zYmoZW0V42hlk8VDxpHg5
-----END CERTIFICATE-----
Generated at Mon Jun 17 16:27:08 2024 by rpki-client on console-fra.rpki-client.org