Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/0EVLCrQXIiCfFcv9UUB9PaS_K4s.roa
File: 0EVLCrQXIiCfFcv9UUB9PaS_K4s.roa (raw, json)
Hash identifier: 5eOZNSo8OGY4uK4ctDjUvbgmYcGpMzoSJOmhQlszoPg=
Subject key identifier: D0:45:4B:0A:B4:17:22:20:9F:15:CB:FD:51:40:7D:3D:A4:BF:2B:8B
Certificate issuer: /CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
Certificate serial: 018CC94DDD809E60D5332F794250DE2DCD1D
Authority key identifier: EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/0EVLCrQXIiCfFcv9UUB9PaS_K4s.roa
Signing time: Tue 02 Jan 2024 08:32:52 +0000
ROA not before: Tue 02 Jan 2024 08:32:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198651
IP address blocks: 185.153.200.0/24 maxlen: 24
185.153.202.0/24 maxlen: 24
185.153.203.0/24 maxlen: 24
2a07:8980::/29 maxlen: 29
2a07:8980:102::/48 maxlen: 48
2a07:8982::/32 maxlen: 32
2a07:8980:18::/48 maxlen: 48
2a07:8983::/36 maxlen: 36
2a07:8983:1000::/36 maxlen: 36
2a07:8980:101::/48 maxlen: 48
2a07:8981::/32 maxlen: 32
2a07:8980:1a::/48 maxlen: 48
2a07:8980::/32 maxlen: 32
2a07:8980:1000::/48 maxlen: 48
2a07:8980:6000::/48 maxlen: 48
2a07:8980:43::/48 maxlen: 48
2a07:8980:44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:dd:80:9e:60:d5:33:2f:79:42:50:de:2d:cd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
Validity
Not Before: Jan 2 08:32:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0454b0ab41722209f15cbfd51407d3da4bf2b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:95:c1:c9:35:e1:db:79:b3:e1:0f:ee:5d:
b6:1a:6e:72:02:21:fb:c6:b0:73:8a:fb:d4:84:94:
88:77:30:5c:8b:a4:7d:be:95:cd:31:ed:55:fc:9e:
86:99:82:26:61:3e:bd:22:60:d5:27:61:25:6f:90:
76:0e:06:1b:df:cb:05:28:54:4b:15:90:00:51:47:
a1:26:92:71:bf:e6:2e:da:73:b7:7b:0b:ce:8e:42:
39:31:d3:05:1e:f6:99:1d:f5:6f:71:d1:bc:e3:1d:
47:ce:00:86:93:11:a0:84:e1:fb:c5:6e:06:b2:3c:
7b:02:c9:2b:92:6f:e1:f9:44:c5:87:94:88:b2:fc:
66:ca:74:7c:ab:7c:e8:3b:37:b3:ed:9c:db:35:a5:
04:0e:72:7e:7b:1e:7b:93:f0:f7:b0:a5:87:d4:b9:
2e:f0:88:c9:d5:cd:dd:e5:01:78:9c:ee:34:3f:34:
13:b8:fa:d5:34:e8:28:41:92:5a:3c:ec:eb:24:5d:
e2:f8:01:50:77:63:4c:a9:51:4a:2e:bc:22:f4:36:
45:33:a2:68:01:cc:5f:f7:c8:3a:c7:f8:2e:d9:25:
91:7f:77:44:fc:e2:87:9c:b4:b8:fd:9b:45:25:de:
7e:85:26:2d:5f:b2:57:c3:83:48:f2:d4:35:9a:a8:
48:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:45:4B:0A:B4:17:22:20:9F:15:CB:FD:51:40:7D:3D:A4:BF:2B:8B
X509v3 Authority Key Identifier:
keyid:EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/0EVLCrQXIiCfFcv9UUB9PaS_K4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.200.0/24
185.153.202.0/23
IPv6:
2a07:8980::/29
Signature Algorithm: sha256WithRSAEncryption
78:13:50:52:bd:3c:44:b4:af:21:25:18:9f:a3:7f:85:98:49:
8e:bd:71:e8:13:bc:74:bf:3b:fa:9b:3a:30:09:7b:c5:9b:90:
69:eb:b9:10:53:4c:11:65:3e:c0:2f:90:74:fb:99:28:9e:6a:
af:5b:9a:c8:24:40:ef:5a:10:d7:15:7c:ce:79:29:5f:f0:bd:
0a:eb:48:78:2c:fc:c5:ff:d7:20:11:c9:fe:a7:2a:c8:63:b4:
f8:48:cd:68:36:d8:dc:10:d8:1f:13:9a:94:47:1b:fa:e5:56:
15:05:92:ee:fe:02:2a:b3:3e:47:36:6d:33:6a:de:b7:db:a8:
8c:f5:d9:a9:35:06:54:e1:96:92:8b:b4:44:f4:4b:59:4d:15:
e3:d3:86:83:3a:fc:29:81:34:33:e8:9d:f2:3c:73:59:dc:1b:
6a:e5:c5:ea:2c:77:17:b8:5f:e5:5b:ae:50:77:2d:5f:16:4e:
78:10:6d:10:10:c5:99:1f:6f:49:b0:4f:14:69:25:bc:f5:e7:
e1:51:30:69:db:f5:c9:34:95:86:ee:f6:7f:39:23:da:6d:14:
0d:35:52:4b:a0:f1:36:a8:7b:6d:5e:4d:ce:cb:4f:3b:dc:e7:
41:37:e6:ef:28:e1:fe:3b:6e:22:0f:34:8f:d6:b5:7c:a8:b7:
65:24:d7:d1
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzJTd2AnmDVMy95QlDeLc0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYWMxMjJhOTI5MTdjZjk1M2ZmNWM1ZGU2YTFmZmUxMTk5
ZjEyMmMwHhcNMjQwMTAyMDgzMjUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDQ1NGIwYWI0MTcyMjIwOWYxNWNiZmQ1MTQwN2QzZGE0YmYyYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA6Vwck14dt5s+EP7l22Gm5yAiH7
xrBzivvUhJSIdzBci6R9vpXNMe1V/J6GmYImYT69ImDVJ2Elb5B2DgYb38sFKFRL
FZAAUUehJpJxv+Yu2nO3ewvOjkI5MdMFHvaZHfVvcdG84x1HzgCGkxGghOH7xW4G
sjx7Askrkm/h+UTFh5SIsvxmynR8q3zoOzez7ZzbNaUEDnJ+ex57k/D3sKWH1Lku
8IjJ1c3d5QF4nO40PzQTuPrVNOgoQZJaPOzrJF3i+AFQd2NMqVFKLrwi9DZFM6Jo
Acxf98g6x/gu2SWRf3dE/OKHnLS4/ZtFJd5+hSYtX7JXw4NI8tQ1mqhIMQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFNBFSwq0FyIgnxXL/VFAfT2kvyuLMB8GA1UdIwQY
MBaAFO6sEiqSkXz5U/9cXeah/+EZnxIsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3F3U0twS1JmUGxUXzF4ZDVxSF80Um1mRWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84ZWU0NTEtZjYyNi00MzI0LTk4ZmUt
NDFkMmNjN2I3MDM0LzEvMEVWTENyUVhJaUNmRmN2OVVVQjlQYVNfSzRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC84ZWU0NTEtZjYyNi00MzI0LTk4ZmUtNDFkMmNjN2I3MDM0
LzEvN3F3U0twS1JmUGxUXzF4ZDVxSF80Um1mRWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuZnIAwQB
uZnKMA0EAgACMAcDBQMqB4mAMA0GCSqGSIb3DQEBCwUAA4IBAQB4E1BSvTxEtK8h
JRifo3+FmEmOvXHoE7x0vzv6mzowCXvFm5Bp67kQU0wRZT7AL5B0+5konmqvW5rI
JEDvWhDXFXzOeSlf8L0K60h4LPzF/9cgEcn+pyrIY7T4SM1oNtjcENgfE5qURxv6
5VYVBZLu/gIqsz5HNm0zat6326iM9dmpNQZU4ZaSi7RE9EtZTRXj04aDOvwpgTQz
6J3yPHNZ3Btq5cXqLHcXuF/lW65Qdy1fFk54EG0QEMWZH29JsE8UaSW89efhUTBp
2/XJNJWG7vZ/OSPabRQNNVJLoPE2qHttXk3Oy0873OdBN+bvKOH+O24iDzSP1rV8
qLdlJNfR
-----END CERTIFICATE-----
Generated at Sun Apr 28 10:34:31 2024 by rpki-client on console-ams.rpki-client.org