Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/sSBpkmChwpmm3XWQSSWAUg6zc_E.roa
File: sSBpkmChwpmm3XWQSSWAUg6zc_E.roa (raw, json)
Hash identifier: 5RMAguQj5G8BN/C/7s7YYbsv7rye46GYBJZjzNKS+X4=
Subject key identifier: B1:20:69:92:60:A1:C2:99:A6:DD:75:90:49:25:80:52:0E:B3:73:F1
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 018CC2DAEF7BE86F5F1EB104C17240E8FC30
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/sSBpkmChwpmm3XWQSSWAUg6zc_E.roa
Signing time: Mon 01 Jan 2024 02:29:37 +0000
ROA not before: Mon 01 Jan 2024 02:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203936
IP address blocks: 185.240.88.0/23 maxlen: 23
185.240.90.0/23 maxlen: 23
89.34.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jul 2024 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ef:7b:e8:6f:5f:1e:b1:04:c1:72:40:e8:fc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Jan 1 02:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b120699260a1c299a6dd7590492580520eb373f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7d:64:85:d7:55:25:fa:ad:37:3f:c3:54:3b:
d5:49:90:e9:a3:3d:44:a4:6e:b7:7f:b9:80:6e:0f:
16:be:71:f4:95:d4:da:52:ce:42:4f:37:0a:10:6a:
48:6f:96:30:10:5e:cc:90:8c:f2:86:75:e2:a8:5f:
ed:a4:7c:8f:ac:4e:d0:a1:9b:9f:e5:98:ad:13:e8:
e1:09:0e:a5:e0:f4:56:14:6e:00:88:7f:89:f2:99:
3f:1b:e8:bd:06:49:dd:86:88:c7:41:41:21:0c:ee:
a9:8d:fe:d9:8f:78:e2:e3:0b:bf:ac:c5:89:8a:59:
63:3e:e7:59:63:1c:15:a4:b5:bd:9e:74:09:c4:00:
fc:a5:66:97:a2:0f:80:68:47:ac:1b:9a:93:5a:d0:
a3:32:6e:c5:c8:e9:b3:40:e7:fc:61:39:ed:7a:d9:
6e:fb:da:d4:38:25:5f:50:2c:e9:9f:3d:8e:c8:ec:
ca:00:68:bc:d6:5e:9d:88:80:09:2d:42:1c:f6:20:
5f:d5:59:f9:b3:9c:2b:61:97:7a:69:f1:d3:1b:3b:
aa:c6:fd:d1:f0:2f:78:ee:39:e9:00:a4:7f:d2:2a:
dc:a6:4c:e2:96:53:f3:fc:3b:de:92:7b:d8:e7:bb:
82:a2:69:67:0f:d5:20:1e:2e:1e:b9:cd:de:10:fc:
29:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:20:69:92:60:A1:C2:99:A6:DD:75:90:49:25:80:52:0E:B3:73:F1
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/sSBpkmChwpmm3XWQSSWAUg6zc_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.76.0/24
185.240.88.0/22
Signature Algorithm: sha256WithRSAEncryption
30:f7:97:c8:68:d3:c8:7f:c9:38:7a:fe:4e:82:c7:b1:fa:50:
64:1f:6c:df:50:58:f9:d7:a8:d3:08:23:0f:29:20:39:fc:c7:
2e:3f:98:31:d0:9a:03:be:df:93:42:b7:9d:d8:2a:e9:28:a6:
76:2c:de:7f:ca:1c:a8:ab:15:6a:63:2c:03:16:e2:bb:08:0a:
9b:c0:d1:2a:e6:6b:d9:ae:34:2a:65:91:94:59:c3:27:94:7f:
c8:58:f1:48:38:00:57:ff:c1:89:6e:5e:1d:41:fc:35:1b:2e:
bf:34:2c:15:48:67:6e:b1:99:c1:9c:3a:72:20:f5:a4:14:3b:
92:5e:d1:c1:0f:14:22:2c:f4:ca:a4:7b:f4:10:92:6c:5f:27:
df:69:aa:3d:ec:00:fa:2d:d4:d9:aa:36:23:9e:4c:21:fa:07:
52:d9:be:d2:9b:a8:69:cc:40:8c:d2:89:ac:35:7b:2f:35:b6:
9a:b4:35:99:f1:b7:d3:5e:5d:d6:d9:24:b7:c0:68:cb:dc:e2:
88:88:d7:aa:4a:f3:d2:52:f1:f3:f4:f6:62:68:d1:94:65:c5:
5b:83:a9:39:dc:f1:66:e8:97:9b:c1:e3:01:31:c6:44:6f:b7:
7c:9c:c2:53:98:50:0e:a8:11:6d:96:c5:93:be:99:01:69:2f:
00:d5:1a:82
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzC2u976G9fHrEEwXJA6PwwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx
OWM0NDgwHhcNMjQwMTAxMDIyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTIwNjk5MjYwYTFjMjk5YTZkZDc1OTA0OTI1ODA1MjBlYjM3M2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH1khddVJfqtNz/DVDvVSZDpoz1E
pG63f7mAbg8WvnH0ldTaUs5CTzcKEGpIb5YwEF7MkIzyhnXiqF/tpHyPrE7QoZuf
5ZitE+jhCQ6l4PRWFG4AiH+J8pk/G+i9BkndhojHQUEhDO6pjf7Zj3ji4wu/rMWJ
illjPudZYxwVpLW9nnQJxAD8pWaXog+AaEesG5qTWtCjMm7FyOmzQOf8YTntetlu
+9rUOCVfUCzpnz2OyOzKAGi81l6diIAJLUIc9iBf1Vn5s5wrYZd6afHTGzuqxv3R
8C947jnpAKR/0ircpkzillPz/DveknvY57uComlnD9UgHi4euc3eEPwp5wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLEgaZJgocKZpt11kEklgFIOs3PxMB8GA1UdIwQY
MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt
YWQyZmRhNDc5ODhlLzEvc1NCcGttQ2h3cG1tM1hXUVNTV0FVZzZ6Y19FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl
LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSJMAwQC
ufBYMA0GCSqGSIb3DQEBCwUAA4IBAQAw95fIaNPIf8k4ev5Ogsex+lBkH2zfUFj5
16jTCCMPKSA5/McuP5gx0JoDvt+TQred2CrpKKZ2LN5/yhyoqxVqYywDFuK7CAqb
wNEq5mvZrjQqZZGUWcMnlH/IWPFIOABX/8GJbl4dQfw1Gy6/NCwVSGdusZnBnDpy
IPWkFDuSXtHBDxQiLPTKpHv0EJJsXyffaao97AD6LdTZqjYjnkwh+gdS2b7Sm6hp
zECM0omsNXsvNbaatDWZ8bfTXl3W2SS3wGjL3OKIiNeqSvPSUvHz9PZiaNGUZcVb
g6k53PFm6JebweMBMcZEb7d8nMJTmFAOqBFtlsWTvpkBaS8A1RqC
-----END CERTIFICATE-----
Generated at Sun Jul 7 06:00:41 2024 by rpki-client on console-ams.rpki-client.org