Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/lAO0AZh-tkGV3_2xFRuCgdN0NcI.roa
File: lAO0AZh-tkGV3_2xFRuCgdN0NcI.roa (raw, json)
Hash identifier: ASJ0F4GYGgPXBtlh6PmVHEsxbuyA84xSIRYBfx0A/qI=
Subject key identifier: 94:03:B4:01:98:7E:B6:41:95:DF:FD:B1:15:1B:82:81:D3:74:35:C2
Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial: 018CC26D0AF190D3E57EE6D991F55A279318
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/lAO0AZh-tkGV3_2xFRuCgdN0NcI.roa
Signing time: Mon 01 Jan 2024 00:29:35 +0000
ROA not before: Mon 01 Jan 2024 00:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49086
IP address blocks: 80.228.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:0a:f1:90:d3:e5:7e:e6:d9:91:f5:5a:27:93:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
Validity
Not Before: Jan 1 00:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9403b401987eb64195dffdb1151b8281d37435c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ca:3a:43:00:c7:3f:23:7c:f3:55:e1:2d:b6:
9c:7f:3c:38:ae:ed:34:5a:e1:0b:f6:21:1a:73:97:
6f:ea:cc:28:21:17:10:f1:81:b8:1d:41:67:b5:a7:
8e:cf:b9:66:22:d4:cf:de:8c:66:eb:12:b3:d7:d4:
d4:9d:47:a6:cd:d8:f1:8b:b0:a9:cc:ca:44:e2:55:
4e:15:83:fc:25:01:14:1a:01:5f:75:5d:45:52:fe:
17:a9:ec:f3:68:4e:fe:fd:75:da:5f:80:b4:d5:d8:
0a:b3:a5:66:15:37:6c:b5:43:3c:f9:7b:48:5d:8e:
22:21:01:d9:f6:1d:76:5c:0a:8d:3a:03:4a:91:d0:
b9:4d:43:ad:35:f2:34:d4:91:c3:71:2b:65:57:10:
d5:fb:c2:b1:12:df:11:a4:75:cc:cd:f1:d6:ef:40:
f6:c1:90:1c:f7:a1:3e:9f:ef:78:a9:6c:4f:53:de:
b4:5a:0f:71:36:43:73:fa:f9:37:59:53:fb:08:6d:
1f:01:06:60:80:59:38:e4:07:c9:6e:57:ec:35:79:
15:7f:32:83:bd:83:68:46:d3:ba:2e:cc:a5:37:83:
72:d5:60:7f:0d:85:73:91:69:8b:30:ca:fe:ba:0c:
93:84:06:8e:d3:c9:cd:dd:d7:5b:c4:be:ed:3a:4a:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:03:B4:01:98:7E:B6:41:95:DF:FD:B1:15:1B:82:81:D3:74:35:C2
X509v3 Authority Key Identifier:
keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/lAO0AZh-tkGV3_2xFRuCgdN0NcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.228.2.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:dd:9d:52:4b:e5:d6:15:38:fc:7b:e5:63:95:88:7e:50:10:
c2:8c:a7:f2:73:38:2a:a6:df:7b:5a:a7:51:31:06:2f:ad:0d:
60:32:21:04:32:15:d5:2a:9c:f6:d1:2a:d9:ea:a8:a9:5f:13:
46:72:07:98:f7:23:41:7c:dd:02:5b:a6:c9:4c:8f:56:dd:02:
23:a5:f5:cd:1d:c9:63:13:79:a1:67:80:4e:aa:b9:dd:cd:9b:
27:4f:85:50:17:c2:f2:e5:bd:a6:cc:93:e6:fc:02:e4:89:af:
f9:a2:08:5a:ea:9d:2e:30:52:ed:8b:b4:0d:4e:ef:1c:7b:10:
a3:2a:9c:d2:4c:39:33:1c:55:32:d4:48:cd:d1:69:e8:32:bb:
67:c3:d3:d8:63:cf:38:de:d3:be:d5:be:2e:b5:01:0b:fe:59:
33:2f:f3:34:ce:b0:b9:a5:8a:71:8e:3b:ed:31:e7:7f:d0:49:
6c:63:4f:43:be:b4:f4:0f:a4:2e:21:ce:5c:9a:79:e0:3c:3c:
b7:6b:ec:89:5e:05:ee:26:07:09:a5:8a:14:9a:90:f5:c8:60:
7e:89:e5:a2:f9:07:31:9b:53:10:36:b7:e3:14:86:67:48:3c:
61:b3:6d:83:6f:58:fa:ae:2b:91:a9:a1:84:5d:f1:9f:f6:7c:
00:5c:2b:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbQrxkNPlfubZkfVaJ5MYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTVkYWRkYjg3MWI5ZDZhNTNjZDZiNDdmNzc2MjUwODM3
Zjc3NzQwHhcNMjQwMTAxMDAyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDAzYjQwMTk4N2ViNjQxOTVkZmZkYjExNTFiODI4MWQzNzQzNWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Mo6QwDHPyN881XhLbacfzw4ru00
WuEL9iEac5dv6swoIRcQ8YG4HUFntaeOz7lmItTP3oxm6xKz19TUnUemzdjxi7Cp
zMpE4lVOFYP8JQEUGgFfdV1FUv4XqezzaE7+/XXaX4C01dgKs6VmFTdstUM8+XtI
XY4iIQHZ9h12XAqNOgNKkdC5TUOtNfI01JHDcStlVxDV+8KxEt8RpHXMzfHW70D2
wZAc96E+n+94qWxPU960Wg9xNkNz+vk3WVP7CG0fAQZggFk45AfJblfsNXkVfzKD
vYNoRtO6LsylN4Ny1WB/DYVzkWmLMMr+ugyThAaO08nN3ddbxL7tOkqQPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJQDtAGYfrZBld/9sRUbgoHTdDXCMB8GA1UdIwQY
MBaAFLFV2t24cbnWpTzWtH93YlCDf3d0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmIt
NTQ2OGIyY2YwYTc3LzEvbEFPMEFaaC10a0dWM18yeEZSdUNnZE4wTmNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmItNTQ2OGIyY2YwYTc3
LzEvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUOQCMA0G
CSqGSIb3DQEBCwUAA4IBAQCs3Z1SS+XWFTj8e+VjlYh+UBDCjKfyczgqpt97WqdR
MQYvrQ1gMiEEMhXVKpz20SrZ6qipXxNGcgeY9yNBfN0CW6bJTI9W3QIjpfXNHclj
E3mhZ4BOqrndzZsnT4VQF8Ly5b2mzJPm/ALkia/5ogha6p0uMFLti7QNTu8cexCj
KpzSTDkzHFUy1EjN0WnoMrtnw9PYY8843tO+1b4utQEL/lkzL/M0zrC5pYpxjjvt
Med/0ElsY09DvrT0D6QuIc5cmnngPDy3a+yJXgXuJgcJpYoUmpD1yGB+ieWi+Qcx
m1MQNrfjFIZnSDxhs22Db1j6riuRqaGEXfGf9nwAXCso
-----END CERTIFICATE-----
Generated at Fri Jun 7 12:56:38 2024 by rpki-client on console-ams.rpki-client.org