Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/C2-nvCGLaRaHm8p2QUll0ngs7Mo.roa
File: C2-nvCGLaRaHm8p2QUll0ngs7Mo.roa (raw, json)
Hash identifier: n8POOuwzN1JnqxP5be0+vKdW6FWzfEGKU02TbtUSnPw=
Subject key identifier: 0B:6F:A7:BC:21:8B:69:16:87:9B:CA:76:41:49:65:D2:78:2C:EC:CA
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649E477BE6BA645EA39A0152DB04D15
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/C2-nvCGLaRaHm8p2QUll0ngs7Mo.roa
Signing time: Mon 01 Jan 2024 18:29:40 +0000
ROA not before: Mon 01 Jan 2024 18:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62418
IP address blocks: 195.34.98.0/23 maxlen: 23
62.204.132.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:e4:77:be:6b:a6:45:ea:39:a0:15:2d:b0:4d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b6fa7bc218b6916879bca76414965d2782cecca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:b7:c6:b2:7b:01:fc:c9:64:28:0e:92:80:
9f:1d:cc:e5:20:c8:c3:01:a1:e7:53:27:63:6f:75:
3d:d2:be:76:23:ab:3c:63:bd:94:9f:b8:a6:a1:35:
96:af:6b:e6:60:43:36:19:36:c0:8f:4b:74:88:93:
f8:df:bb:f9:30:6e:e5:a4:8c:60:53:19:6a:57:34:
be:9d:ce:08:ad:86:b2:eb:c0:5e:be:e9:5d:1b:72:
e5:4d:dd:4a:d2:35:de:2b:28:a9:c3:69:13:1d:e8:
e0:a7:68:07:7b:ad:9a:fe:0a:46:71:f7:f3:49:74:
53:eb:ee:96:3b:e6:8c:9c:90:00:6e:63:9b:0d:b4:
45:8d:54:95:11:f6:b4:c9:6a:bb:b4:4b:a3:a4:26:
ab:2d:dd:33:6b:29:1f:3b:93:be:50:35:9a:41:35:
70:49:f6:8d:da:c0:dc:09:71:13:37:1e:30:e6:51:
57:59:7f:1d:74:39:5c:c7:8f:1a:c1:35:01:45:14:
66:3e:27:43:06:3c:49:0d:69:2e:99:03:51:1e:3f:
ab:c9:89:3b:25:15:62:27:58:ed:6e:6f:7e:84:69:
60:ac:60:f4:03:57:2b:aa:c6:21:05:bc:a3:ea:4a:
d1:91:ed:ce:e0:42:67:a0:f1:36:2b:f7:5a:c2:34:
47:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6F:A7:BC:21:8B:69:16:87:9B:CA:76:41:49:65:D2:78:2C:EC:CA
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/C2-nvCGLaRaHm8p2QUll0ngs7Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.132.0/23
195.34.98.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:15:b5:bd:a4:0c:2c:1b:ee:8d:c7:43:f6:55:d5:9f:0e:87:
42:4b:8d:42:cb:e0:0b:bc:87:b1:0f:e2:cf:8a:ff:0c:4a:01:
3d:1d:87:db:74:ac:29:af:91:49:e7:52:1e:6a:cd:7f:64:2d:
d6:26:de:eb:fe:82:a1:97:6f:31:d8:4b:0f:69:fd:88:30:7d:
d6:99:bd:0a:66:6f:91:a1:5f:07:ef:e5:6e:67:bc:9a:06:2c:
63:3c:f5:22:07:28:1c:c1:09:88:57:00:14:a8:74:f4:54:75:
06:ab:02:9e:93:3f:de:1b:27:66:4f:b2:90:0e:0f:9c:bf:41:
68:3d:20:8f:72:6b:d0:55:05:d4:6e:ad:9f:7a:85:22:e9:b9:
c9:60:83:81:70:12:9c:41:91:b7:26:41:06:39:e9:5c:24:b7:
61:e2:35:ca:a4:04:34:5d:65:32:ec:13:4c:51:3d:65:e9:5e:
66:17:a3:49:bb:14:14:34:b5:12:3f:54:df:16:80:a3:33:9c:
13:fa:65:bc:39:2d:ca:df:40:7d:ca:d0:b1:fe:d8:d7:a9:ee:
bf:c2:d3:64:8e:35:31:b8:e4:5a:c7:f3:74:98:8f:d6:b8:0f:
7d:3c:c4:87:d7:97:ba:3b:2a:55:7b:0f:28:4c:0a:9f:91:55:
aa:c8:17:57
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzGSeR3vmumReo5oBUtsE0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjQwMTAxMTgyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjZmYTdiYzIxOGI2OTE2ODc5YmNhNzY0MTQ5NjVkMjc4MmNlY2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryq3xrJ7AfzJZCgOkoCfHczlIMjD
AaHnUydjb3U90r52I6s8Y72Un7imoTWWr2vmYEM2GTbAj0t0iJP437v5MG7lpIxg
UxlqVzS+nc4IrYay68BevuldG3LlTd1K0jXeKyipw2kTHejgp2gHe62a/gpGcffz
SXRT6+6WO+aMnJAAbmObDbRFjVSVEfa0yWq7tEujpCarLd0zaykfO5O+UDWaQTVw
SfaN2sDcCXETNx4w5lFXWX8ddDlcx48awTUBRRRmPidDBjxJDWkumQNRHj+ryYk7
JRViJ1jtbm9+hGlgrGD0A1crqsYhBbyj6krRke3O4EJnoPE2K/dawjRHFQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAtvp7whi2kWh5vKdkFJZdJ4LOzKMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvQzItbnZDR0xhUmFIbThwMlFVbGwwbmdzN01vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBPsyEAwQB
wyJiMA0GCSqGSIb3DQEBCwUAA4IBAQAMFbW9pAwsG+6Nx0P2VdWfDodCS41Cy+AL
vIexD+LPiv8MSgE9HYfbdKwpr5FJ51Ieas1/ZC3WJt7r/oKhl28x2EsPaf2IMH3W
mb0KZm+RoV8H7+VuZ7yaBixjPPUiBygcwQmIVwAUqHT0VHUGqwKekz/eGydmT7KQ
Dg+cv0FoPSCPcmvQVQXUbq2feoUi6bnJYIOBcBKcQZG3JkEGOelcJLdh4jXKpAQ0
XWUy7BNMUT1l6V5mF6NJuxQUNLUSP1TfFoCjM5wT+mW8OS3K30B9ytCx/tjXqe6/
wtNkjjUxuORax/N0mI/WuA99PMSH15e6OypVew8oTAqfkVWqyBdX
-----END CERTIFICATE-----
Generated at Mon May 6 10:28:50 2024 by rpki-client on console-ams.rpki-client.org