Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/ARsT5HTuBvslVOTCf9gi2Qu7OlE.roa
File: ARsT5HTuBvslVOTCf9gi2Qu7OlE.roa (raw, json)
Hash identifier: mTL5NmAFWFIgi7MBRasqPBVvX+1n/6cmmYd1YgU1Q+o=
Subject key identifier: 01:1B:13:E4:74:EE:06:FB:25:54:E4:C2:7F:D8:22:D9:0B:BB:3A:51
Certificate issuer: /CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Certificate serial: 018CC2DB4CC56EDCFB312EDBE1118F873043
Authority key identifier: B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/ARsT5HTuBvslVOTCf9gi2Qu7OlE.roa
Signing time: Mon 01 Jan 2024 02:30:01 +0000
ROA not before: Mon 01 Jan 2024 02:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205010
IP address blocks: 185.226.32.0/22 maxlen: 22
2a0c:2600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:4c:c5:6e:dc:fb:31:2e:db:e1:11:8f:87:30:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Validity
Not Before: Jan 1 02:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=011b13e474ee06fb2554e4c27fd822d90bbb3a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:58:02:5c:32:61:5e:0a:3f:b6:c8:de:8f:d6:
44:ed:e1:a8:0f:b5:16:12:5d:e2:b8:99:9e:38:8a:
4a:c8:6a:e6:99:63:a8:1d:59:89:6d:24:63:d0:ce:
46:d4:bc:e5:84:11:3e:7f:8e:13:71:47:89:36:8d:
6f:0b:2b:2f:26:7e:41:0a:fd:27:b6:86:6e:ad:c0:
69:58:4b:33:f2:f7:5c:1d:c2:3b:1b:73:3e:bc:0c:
22:b6:67:58:e2:4f:a9:bb:fd:48:ef:99:8c:61:5e:
a1:37:19:40:ea:20:98:47:26:77:26:e3:f9:2d:82:
16:aa:85:ea:a9:de:0a:40:60:be:bf:1d:99:5b:05:
d0:49:76:b2:de:79:7e:4f:3b:c5:ff:77:18:93:de:
d5:21:ef:49:da:96:df:89:14:4f:82:59:9f:9c:9d:
eb:e1:b9:d0:15:25:eb:7f:ec:cd:37:6e:de:99:b2:
4d:d0:aa:df:b8:2d:22:06:98:11:e9:53:94:03:25:
5f:ac:03:03:23:9d:d1:5d:de:ba:48:7c:64:bd:fb:
99:d1:d9:a9:a9:1d:6f:c5:c3:7f:8b:41:20:4c:94:
4e:3a:d0:07:89:16:81:6c:48:03:4f:e5:b0:8d:0c:
60:a6:9c:7d:11:cf:3d:3c:80:31:2d:b9:2e:df:11:
98:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1B:13:E4:74:EE:06:FB:25:54:E4:C2:7F:D8:22:D9:0B:BB:3A:51
X509v3 Authority Key Identifier:
keyid:B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/ARsT5HTuBvslVOTCf9gi2Qu7OlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.32.0/22
IPv6:
2a0c:2600::/29
Signature Algorithm: sha256WithRSAEncryption
57:d1:87:29:0e:9e:bc:dd:d1:63:2b:42:9f:f7:38:fb:0f:7a:
9f:8e:70:8f:08:1e:79:14:04:a5:cb:84:24:8c:a1:36:16:2b:
cf:78:28:53:a0:b9:ea:9a:97:c5:31:e2:0f:40:00:6e:57:8c:
97:2d:69:4c:48:59:1d:bb:aa:99:a8:c2:ee:39:88:53:43:99:
a2:85:0b:38:1d:87:3e:bd:65:8b:9b:d9:cf:47:0b:2b:8d:64:
a7:46:9d:7a:02:f3:9e:23:b8:86:17:b2:c9:31:5c:46:1f:94:
6d:b1:0f:d2:3d:0b:e6:ed:a4:5f:54:74:0c:9b:71:2e:ff:6d:
5e:2c:23:50:e8:a6:f1:e8:6b:d3:c1:2b:37:ec:99:48:3a:18:
47:d7:d2:69:22:bb:e8:c2:72:75:60:32:69:9c:3e:06:c8:9d:
0d:c2:90:be:5a:0c:f9:71:26:46:0c:26:81:f9:c3:e2:e0:ba:
45:4c:49:10:e9:6b:31:39:45:24:97:40:00:e9:ad:bd:14:7c:
9e:3b:3d:34:53:a5:c4:33:74:68:06:d1:0c:1c:19:ef:84:93:
89:45:04:65:ea:52:02:1a:ad:63:5f:d1:6a:1d:e0:8c:13:3f:
6a:05:bf:0b:06:e7:1a:af:7e:01:0c:a1:a2:d9:e7:0c:f5:f5:
27:4a:23:0f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzC20zFbtz7MS7b4RGPhzBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YmQ4ZWFlMTY2OWRlYjNhM2ZhNDE4NjQ5MWUwNWNiMzJj
ZTA5MmEwHhcNMjQwMTAxMDIzMDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTFiMTNlNDc0ZWUwNmZiMjU1NGU0YzI3ZmQ4MjJkOTBiYmIzYTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVgCXDJhXgo/tsjej9ZE7eGoD7UW
El3iuJmeOIpKyGrmmWOoHVmJbSRj0M5G1LzlhBE+f44TcUeJNo1vCysvJn5BCv0n
toZurcBpWEsz8vdcHcI7G3M+vAwitmdY4k+pu/1I75mMYV6hNxlA6iCYRyZ3JuP5
LYIWqoXqqd4KQGC+vx2ZWwXQSXay3nl+TzvF/3cYk97VIe9J2pbfiRRPglmfnJ3r
4bnQFSXrf+zNN27embJN0KrfuC0iBpgR6VOUAyVfrAMDI53RXd66SHxkvfuZ0dmp
qR1vxcN/i0EgTJROOtAHiRaBbEgDT+WwjQxgppx9Ec89PIAxLbku3xGYEwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAEbE+R07gb7JVTkwn/YItkLuzpRMB8GA1UdIwQY
MBaAFLe9jq4Wad6zo/pBhkkeBcsyzgkqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDcyT3JoWnAzck9qLWtHR1NSNEZ5ekxPQ1NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iMGJkYmQtODAxYy00YjBiLTlmYmUt
YWUxNWQ1MDc1OTBlLzEvQVJzVDVIVHVCdnNsVk9UQ2Y5Z2kyUXU3T2xFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iMGJkYmQtODAxYy00YjBiLTlmYmUtYWUxNWQ1MDc1OTBl
LzEvdDcyT3JoWnAzck9qLWtHR1NSNEZ5ekxPQ1NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCueIgMA0E
AgACMAcDBQMqDCYAMA0GCSqGSIb3DQEBCwUAA4IBAQBX0YcpDp683dFjK0Kf9zj7
D3qfjnCPCB55FASly4QkjKE2FivPeChToLnqmpfFMeIPQABuV4yXLWlMSFkdu6qZ
qMLuOYhTQ5mihQs4HYc+vWWLm9nPRwsrjWSnRp16AvOeI7iGF7LJMVxGH5RtsQ/S
PQvm7aRfVHQMm3Eu/21eLCNQ6Kbx6GvTwSs37JlIOhhH19JpIrvownJ1YDJpnD4G
yJ0NwpC+Wgz5cSZGDCaB+cPi4LpFTEkQ6WsxOUUkl0AA6a29FHyeOz00U6XEM3Ro
BtEMHBnvhJOJRQRl6lICGq1jX9FqHeCMEz9qBb8LBucar34BDKGi2ecM9fUnSiMP
-----END CERTIFICATE-----
Generated at Sat Jun 1 17:07:15 2024 by rpki-client on console-fra.rpki-client.org