Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/Daz06Ez4lUi39n35d2T2VO2H4sE.roa
File: Daz06Ez4lUi39n35d2T2VO2H4sE.roa (raw, json)
Hash identifier: y0wY3vLvgTtZShZRdXSvHyihHjsqc0QzAeSEmbczOcE=
Subject key identifier: 0D:AC:F4:E8:4C:F8:95:48:B7:F6:7D:F9:77:64:F6:54:ED:87:E2:C1
Certificate issuer: /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial: 018CC6B8E048B4508B8B044813FDA3E9C4B7
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/Daz06Ez4lUi39n35d2T2VO2H4sE.roa
Signing time: Mon 01 Jan 2024 20:30:53 +0000
ROA not before: Mon 01 Jan 2024 20:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28978
IP address blocks: 185.115.44.0/22 maxlen: 22
176.32.160.0/20 maxlen: 20
185.115.44.0/24 maxlen: 24
176.32.170.0/24 maxlen: 24
176.32.168.0/24 maxlen: 24
195.39.216.0/23 maxlen: 23
2a00:8a40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e0:48:b4:50:8b:8b:04:48:13:fd:a3:e9:c4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Validity
Not Before: Jan 1 20:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dacf4e84cf89548b7f67df97764f654ed87e2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:86:56:d0:ec:34:0c:57:80:03:b2:28:d2:
e5:40:0e:e8:ec:7b:88:30:c4:d5:67:42:53:b1:55:
24:ea:ab:50:d0:94:88:7d:7b:f8:8c:0f:83:8d:3e:
2e:90:46:06:2e:98:52:7a:fd:f6:e8:40:59:40:32:
fe:71:a9:0a:74:8f:42:62:0a:92:bf:67:bc:8b:d4:
a5:d8:52:9d:19:97:37:9a:84:7b:ad:13:99:f5:4f:
35:4a:31:b9:7d:03:8f:4a:3a:f1:dc:04:3b:64:39:
3b:ca:46:a9:01:c9:4e:79:ba:68:9f:cd:c2:39:6a:
bd:e1:04:48:5d:4c:e3:3d:64:55:c5:ee:09:1f:f7:
da:01:da:92:6c:20:5e:a9:cd:ce:a5:c3:e9:eb:e2:
87:45:f4:22:66:68:f1:3e:2f:c6:bc:ec:46:db:64:
cd:dc:1d:1d:44:3e:82:92:bf:2f:82:98:f8:3b:dc:
32:6f:23:18:39:96:08:5e:87:c6:49:f2:1e:05:ab:
a5:49:f4:20:1a:16:f2:78:1b:37:9e:5f:d9:3b:80:
f9:18:c2:d4:7b:bb:00:1a:f3:2e:06:62:9b:71:e7:
1a:6f:36:d5:06:73:7f:92:29:51:b0:26:25:a1:15:
5b:69:59:a8:f8:6d:98:65:02:2f:db:85:c6:5f:09:
d5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AC:F4:E8:4C:F8:95:48:B7:F6:7D:F9:77:64:F6:54:ED:87:E2:C1
X509v3 Authority Key Identifier:
keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/Daz06Ez4lUi39n35d2T2VO2H4sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.160.0/20
185.115.44.0/22
195.39.216.0/23
IPv6:
2a00:8a40::/32
Signature Algorithm: sha256WithRSAEncryption
79:97:dc:b4:8f:28:a4:fc:cd:4d:96:bb:57:c6:64:f7:cb:fa:
b0:9e:44:2a:2e:33:81:fc:6e:c3:ac:72:0e:f7:22:6c:11:46:
a7:03:39:2a:82:cb:5c:5a:83:92:c5:30:73:98:15:2f:51:7f:
f5:b4:ce:f2:29:d4:68:39:7e:f4:9f:f8:99:19:38:a8:69:9e:
ab:ae:cd:16:58:86:92:3b:a7:06:cb:88:2b:86:b7:e8:64:f5:
eb:69:d6:f0:0c:3c:ef:a6:76:30:2e:44:d6:99:31:5f:55:99:
45:24:ab:5a:90:b3:3d:b0:d5:16:b7:02:0c:c5:4f:e0:db:ba:
a1:aa:1a:ed:50:2b:0a:eb:1b:f6:4a:0f:11:83:58:ce:d0:4b:
59:44:79:40:c3:d8:79:4f:df:0c:8a:6f:a0:89:19:a8:d2:31:
c9:23:db:1d:f7:87:81:33:bd:38:46:30:c2:c5:54:bf:3e:59:
e3:98:83:e2:ad:bf:24:49:3a:7f:14:46:ca:49:d3:b6:58:8c:
03:0e:91:76:14:38:73:0d:aa:21:c5:b8:1d:98:31:e5:0e:72:
45:38:aa:19:e8:b9:16:79:4f:8f:d3:02:32:9a:c6:a4:f6:22:
1e:46:11:c5:dd:bf:59:28:ce:4a:96:b1:87:9d:9e:d2:66:2f:
fa:fe:fd:76
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzGuOBItFCLiwRIE/2j6cS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1Nzc3NTc5Y2M2Nzc4NDQ1NGJjZDkxYTA2YmQ2OTM1YWFl
ZjczZjkwHhcNMjQwMTAxMjAzMDUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGFjZjRlODRjZjg5NTQ4YjdmNjdkZjk3NzY0ZjY1NGVkODdlMmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqaGVtDsNAxXgAOyKNLlQA7o7HuI
MMTVZ0JTsVUk6qtQ0JSIfXv4jA+DjT4ukEYGLphSev326EBZQDL+cakKdI9CYgqS
v2e8i9Sl2FKdGZc3moR7rROZ9U81SjG5fQOPSjrx3AQ7ZDk7ykapAclOebpon83C
OWq94QRIXUzjPWRVxe4JH/faAdqSbCBeqc3OpcPp6+KHRfQiZmjxPi/GvOxG22TN
3B0dRD6Ckr8vgpj4O9wybyMYOZYIXofGSfIeBaulSfQgGhbyeBs3nl/ZO4D5GMLU
e7sAGvMuBmKbcecabzbVBnN/kilRsCYloRVbaVmo+G2YZQIv24XGXwnVMwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFA2s9OhM+JVIt/Z9+Xdk9lTth+LBMB8GA1UdIwQY
MBaAFNV3dXnMZ3hEVLzZGga9aTWq73P5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVhkMWVjeG5lRVJVdk5rYUJyMXBOYXJ2Y19rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81MmZiODYtZWQ3OC00ODUwLWI0MDYt
ODBhMmI2OGMzODMyLzEvRGF6MDZFejRsVWkzOW4zNWQyVDJWTzJINHNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81MmZiODYtZWQ3OC00ODUwLWI0MDYtODBhMmI2OGMzODMy
LzEvMVhkMWVjeG5lRVJVdk5rYUJyMXBOYXJ2Y19rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEsCCgAwQC
uXMsAwQBwyfYMA0EAgACMAcDBQAqAIpAMA0GCSqGSIb3DQEBCwUAA4IBAQB5l9y0
jyik/M1NlrtXxmT3y/qwnkQqLjOB/G7DrHIO9yJsEUanAzkqgstcWoOSxTBzmBUv
UX/1tM7yKdRoOX70n/iZGTioaZ6rrs0WWIaSO6cGy4grhrfoZPXradbwDDzvpnYw
LkTWmTFfVZlFJKtakLM9sNUWtwIMxU/g27qhqhrtUCsK6xv2Sg8Rg1jO0EtZRHlA
w9h5T98Mim+giRmo0jHJI9sd94eBM704RjDCxVS/PlnjmIPirb8kSTp/FEbKSdO2
WIwDDpF2FDhzDaohxbgdmDHlDnJFOKoZ6LkWeU+P0wIymsak9iIeRhHF3b9ZKM5K
lrGHnZ7SZi/6/v12
-----END CERTIFICATE-----
Generated at Fri May 17 23:36:52 2024 by rpki-client on console-fra.rpki-client.org