Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/2oBTcYV3KDFrYYsba7m8nKVZJbA.roa
File: 2oBTcYV3KDFrYYsba7m8nKVZJbA.roa (raw, json)
Hash identifier: +PX5++YU/06StGLjPSdPpzOeFqoc2E+moVCGqhs4uvU=
Subject key identifier: DA:80:53:71:85:77:28:31:6B:61:8B:1B:6B:B9:BC:9C:A5:59:25:B0
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 018CC492D6C9A9796073D27BCEA2C5EC815A
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/2oBTcYV3KDFrYYsba7m8nKVZJbA.roa
Signing time: Mon 01 Jan 2024 10:30:06 +0000
ROA not before: Mon 01 Jan 2024 10:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 94.159.96.0/24 maxlen: 24
94.159.97.0/24 maxlen: 24
94.159.98.0/24 maxlen: 24
94.159.93.0/24 maxlen: 24
94.159.94.0/24 maxlen: 24
94.159.95.0/24 maxlen: 24
94.159.103.0/24 maxlen: 24
94.159.104.0/24 maxlen: 24
94.159.105.0/24 maxlen: 24
94.159.100.0/24 maxlen: 24
94.159.101.0/24 maxlen: 24
94.159.102.0/24 maxlen: 24
94.159.99.0/24 maxlen: 24
94.159.107.0/24 maxlen: 24
94.159.108.0/24 maxlen: 24
94.159.106.0/24 maxlen: 24
94.159.71.0/24 maxlen: 24
94.159.84.0/24 maxlen: 24
94.159.81.0/24 maxlen: 24
94.159.86.0/24 maxlen: 24
94.159.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:d6:c9:a9:79:60:73:d2:7b:ce:a2:c5:ec:81:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Jan 1 10:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da805371857728316b618b1b6bb9bc9ca55925b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:08:40:6c:d3:0d:03:85:30:f0:11:de:f6:c1:
d1:15:34:30:76:4b:5c:d2:44:6c:65:e7:34:6b:6b:
9b:24:67:7e:7b:f6:72:56:48:74:a9:cc:fa:0f:8e:
bb:03:8e:a1:bf:64:ce:8c:9a:6e:2e:8c:60:55:23:
c7:00:de:fc:92:64:d2:a5:8f:ec:5e:d4:8e:a8:22:
e6:99:bc:d7:a4:38:9a:6a:77:dc:4a:61:3d:f6:59:
95:03:da:87:94:e0:ca:f4:99:30:fe:e6:86:c6:c9:
6d:5a:fe:f5:8c:52:88:99:c9:dd:f3:32:51:fe:2a:
a9:20:b3:cc:fc:c3:25:67:3b:19:57:5c:02:47:ca:
a5:c2:ca:75:1b:73:61:a5:2e:83:32:2f:d6:6c:bc:
eb:56:8f:83:f8:ee:b5:71:d8:e2:ae:1d:82:ee:5a:
62:a6:5f:62:d4:7d:bc:7e:1c:07:9a:21:04:02:d9:
73:02:e0:8e:11:6f:7a:82:14:4c:cb:6b:90:ad:ae:
54:72:29:f8:1d:1c:c1:a0:02:fb:b5:7b:f8:69:01:
46:da:bc:70:dd:8c:90:9b:a0:f2:5c:ae:dd:b4:9b:
d3:17:ae:22:95:8c:be:52:da:bd:0b:ba:d9:1c:55:
0d:fd:6e:e3:a5:09:97:57:87:09:60:51:56:c2:84:
d2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:80:53:71:85:77:28:31:6B:61:8B:1B:6B:B9:BC:9C:A5:59:25:B0
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/2oBTcYV3KDFrYYsba7m8nKVZJbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.159.71.0/24
94.159.81.0/24
94.159.84.0/24
94.159.86.0/23
94.159.93.0-94.159.108.255
Signature Algorithm: sha256WithRSAEncryption
00:37:24:b8:65:8b:b3:2c:0f:18:23:9f:45:d3:c2:70:c8:69:
fd:05:3e:fe:b9:78:68:8b:0f:77:ab:c8:79:0e:98:90:7e:cb:
79:fb:17:84:9c:d5:01:15:b9:ca:ba:ed:a3:3b:a2:6d:7e:30:
13:03:39:82:a0:db:e8:cc:a7:e4:b0:43:ed:ee:75:08:21:3b:
79:35:78:52:4c:f5:6a:79:88:25:98:16:19:4d:a6:66:9c:97:
9f:09:cf:ed:55:55:91:51:c8:8c:9c:75:46:8c:42:97:aa:5a:
8a:2e:bc:e1:8b:a0:d3:c4:db:74:9e:c2:0a:69:61:ce:ec:2a:
72:fb:50:59:bd:97:5e:84:f4:cb:0d:0b:54:02:35:d7:33:4b:
ed:4b:99:17:8b:63:0a:a9:e5:56:58:4b:d1:cd:30:c2:72:08:
60:3f:05:5c:0a:47:6c:a3:04:32:f9:47:dd:cd:46:50:f8:9e:
c8:ad:89:d9:3f:47:40:c6:c6:4c:b1:2d:f6:dd:41:c7:f7:6c:
4d:9e:30:7a:7b:8e:4b:60:e2:27:b8:c9:24:d3:fa:8c:da:6b:
0f:de:f5:ef:0c:3b:da:c7:a6:b4:1f:76:b7:fa:e4:2d:c4:c2:
2b:17:8f:6d:82:d7:82:d3:4e:30:7b:87:0a:ca:bc:56:69:db:
1d:03:70:ff
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYzEktbJqXlgc9J7zqLF7IFaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi
ZDQ2NWQwHhcNMjQwMTAxMTAzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTgwNTM3MTg1NzcyODMxNmI2MThiMWI2YmI5YmM5Y2E1NTkyNWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AhAbNMNA4Uw8BHe9sHRFTQwdktc
0kRsZec0a2ubJGd+e/ZyVkh0qcz6D467A46hv2TOjJpuLoxgVSPHAN78kmTSpY/s
XtSOqCLmmbzXpDiaanfcSmE99lmVA9qHlODK9Jkw/uaGxsltWv71jFKImcnd8zJR
/iqpILPM/MMlZzsZV1wCR8qlwsp1G3NhpS6DMi/WbLzrVo+D+O61cdjirh2C7lpi
pl9i1H28fhwHmiEEAtlzAuCOEW96ghRMy2uQra5Ucin4HRzBoAL7tXv4aQFG2rxw
3YyQm6DyXK7dtJvTF64ilYy+Utq9C7rZHFUN/W7jpQmXV4cJYFFWwoTSgQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFNqAU3GFdygxa2GLG2u5vJylWSWwMB8GA1UdIwQY
MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt
MzkxMGE1OWExMTIxLzEvMm9CVGNZVjNLREZyWVlzYmE3bThuS1ZaSmJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx
LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAXp9HAwQA
Xp9RAwQAXp9UAwQBXp9WMAwDBABen10DBABen2wwDQYJKoZIhvcNAQELBQADggEB
AAA3JLhli7MsDxgjn0XTwnDIaf0FPv65eGiLD3eryHkOmJB+y3n7F4Sc1QEVucq6
7aM7om1+MBMDOYKg2+jMp+SwQ+3udQghO3k1eFJM9Wp5iCWYFhlNpmacl58Jz+1V
VZFRyIycdUaMQpeqWoouvOGLoNPE23SewgppYc7sKnL7UFm9l16E9MsNC1QCNdcz
S+1LmReLYwqp5VZYS9HNMMJyCGA/BVwKR2yjBDL5R93NRlD4nsitidk/R0DGxkyx
LfbdQcf3bE2eMHp7jktg4ie4ySTT+ozaaw/e9e8MO9rHprQfdrf65C3EwisXj22C
14LTTjB7hwrKvFZp2x0DcP8=
-----END CERTIFICATE-----
Generated at Sun Jun 23 15:01:29 2024 by rpki-client on console-ams.rpki-client.org