Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6007d2-c8e3-46d7-9836-d4e5c11adaf4/1/Hox-uyyTgzfaRUusy-4J9HYlq3Y.roa
File: Hox-uyyTgzfaRUusy-4J9HYlq3Y.roa (raw, json)
Hash identifier: LuTwmQfJtIbP80icQl65spZTfgTsgR+McaBUnWlr1cw=
Subject key identifier: 1E:8C:7E:BB:2C:93:83:37:DA:45:4B:AC:CB:EE:09:F4:76:25:AB:76
Certificate issuer: /CN=ebf72bcf5b992e2858fb5dcfddf4a94321824acb
Certificate serial: 018CC492F4C1C9DFB7FA034054CC267B9689
Authority key identifier: EB:F7:2B:CF:5B:99:2E:28:58:FB:5D:CF:DD:F4:A9:43:21:82:4A:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_crz1uZLihY-13P3fSpQyGCSss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/6007d2-c8e3-46d7-9836-d4e5c11adaf4/1/Hox-uyyTgzfaRUusy-4J9HYlq3Y.roa
Signing time: Mon 01 Jan 2024 10:30:14 +0000
ROA not before: Mon 01 Jan 2024 10:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207324
IP address blocks: 195.88.181.0/24 maxlen: 24
195.95.128.0/24 maxlen: 24
195.95.130.0/24 maxlen: 24
195.85.248.0/24 maxlen: 24
2a10:6c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/6007d2-c8e3-46d7-9836-d4e5c11adaf4/1/6_crz1uZLihY-13P3fSpQyGCSss.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/6007d2-c8e3-46d7-9836-d4e5c11adaf4/1/6_crz1uZLihY-13P3fSpQyGCSss.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_crz1uZLihY-13P3fSpQyGCSss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:f4:c1:c9:df:b7:fa:03:40:54:cc:26:7b:96:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf72bcf5b992e2858fb5dcfddf4a94321824acb
Validity
Not Before: Jan 1 10:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e8c7ebb2c938337da454baccbee09f47625ab76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b4:96:f0:e5:75:43:c7:51:82:70:92:f1:10:
d2:aa:dc:d4:a3:3c:f6:16:c1:f6:08:0c:57:07:9d:
36:27:b0:f6:4b:6b:92:84:52:8b:be:a0:3b:41:17:
cd:a1:ad:05:6f:5c:a5:dd:53:87:ab:0b:9d:8b:d7:
e6:b2:37:a1:1a:ba:7a:d2:12:31:3e:c5:d3:eb:6f:
6b:2a:18:a2:d1:60:33:33:32:6b:5d:f7:10:5b:2c:
40:47:08:f2:20:f6:b5:38:e8:bd:4a:37:03:1c:70:
e7:d9:91:04:5c:46:8c:bf:f3:a0:6c:dd:ba:6b:c9:
38:df:9c:5b:e4:35:68:bc:ad:12:1c:8b:15:15:99:
5e:5f:af:93:bb:1f:d4:33:54:61:f4:70:fb:51:20:
ed:15:44:c6:ea:d9:2e:f6:ac:d7:3d:f1:0d:d6:0d:
8c:30:25:9e:17:54:d3:d4:67:a4:57:07:e3:e5:2f:
b9:1c:b0:05:38:b3:81:58:1d:48:f8:db:3c:18:c3:
91:4f:77:bb:74:28:7d:48:54:95:57:e6:e4:d7:16:
23:f4:a6:a1:69:1d:fa:2e:20:43:37:9e:b7:51:cf:
6d:8f:c7:d1:d4:ac:4e:a3:9c:27:00:e7:83:4f:89:
40:4f:20:d1:16:85:7c:c8:b0:cc:dd:c0:be:28:f1:
05:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8C:7E:BB:2C:93:83:37:DA:45:4B:AC:CB:EE:09:F4:76:25:AB:76
X509v3 Authority Key Identifier:
keyid:EB:F7:2B:CF:5B:99:2E:28:58:FB:5D:CF:DD:F4:A9:43:21:82:4A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_crz1uZLihY-13P3fSpQyGCSss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6007d2-c8e3-46d7-9836-d4e5c11adaf4/1/Hox-uyyTgzfaRUusy-4J9HYlq3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6007d2-c8e3-46d7-9836-d4e5c11adaf4/1/6_crz1uZLihY-13P3fSpQyGCSss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.248.0/24
195.88.181.0/24
195.95.128.0/24
195.95.130.0/24
IPv6:
2a10:6c0::/29
Signature Algorithm: sha256WithRSAEncryption
81:48:2f:80:46:90:66:79:a5:e6:20:1d:20:85:dc:aa:f1:c5:
a3:e0:0a:5e:86:07:99:85:ee:44:99:55:e9:8b:b9:8c:b4:27:
ed:70:09:8f:1b:05:42:d3:87:e9:8f:ea:46:8e:72:e7:09:ed:
e9:a6:a6:1e:03:07:ad:c9:cb:76:a7:6d:44:36:14:70:72:15:
36:58:6f:0f:d3:ff:7a:66:95:98:4e:9b:28:16:32:a7:06:7f:
26:ef:62:16:6a:46:61:22:78:56:20:20:a8:30:2b:6d:95:d5:
71:9e:b7:2e:a7:84:20:e6:79:d4:ea:dc:b7:17:c2:aa:a4:0f:
45:fe:1b:23:27:a6:35:13:bf:59:ef:53:cd:11:de:00:c1:18:
79:7b:b1:cc:a2:0a:98:7b:fc:da:ac:d6:64:5d:28:24:df:55:
02:56:e2:8b:da:37:8c:d7:65:b2:92:eb:28:d9:e6:81:e9:d5:
cc:89:5c:20:86:1b:5b:8f:33:bb:f9:57:6d:f8:40:88:73:d0:
4b:73:db:13:1c:3b:0a:71:60:d3:c6:07:b3:a8:10:84:25:fd:
51:aa:4d:8f:23:86:72:c7:68:b2:80:23:6a:f3:1b:b5:2f:26:
c5:49:75:ca:f1:9f:71:f5:b9:a8:de:a9:5a:86:05:cf:f9:36:
7f:86:79:dd
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYzEkvTByd+3+gNAVMwme5aJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZjcyYmNmNWI5OTJlMjg1OGZiNWRjZmRkZjRhOTQzMjE4
MjRhY2IwHhcNMjQwMTAxMTAzMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZThjN2ViYjJjOTM4MzM3ZGE0NTRiYWNjYmVlMDlmNDc2MjVhYjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLSW8OV1Q8dRgnCS8RDSqtzUozz2
FsH2CAxXB502J7D2S2uShFKLvqA7QRfNoa0Fb1yl3VOHqwudi9fmsjehGrp60hIx
PsXT629rKhii0WAzMzJrXfcQWyxARwjyIPa1OOi9SjcDHHDn2ZEEXEaMv/OgbN26
a8k435xb5DVovK0SHIsVFZleX6+Tux/UM1Rh9HD7USDtFUTG6tku9qzXPfEN1g2M
MCWeF1TT1GekVwfj5S+5HLAFOLOBWB1I+Ns8GMORT3e7dCh9SFSVV+bk1xYj9Kah
aR36LiBDN563Uc9tj8fR1KxOo5wnAOeDT4lATyDRFoV8yLDM3cC+KPEFbQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFB6Mfrssk4M32kVLrMvuCfR2Jat2MB8GA1UdIwQY
MBaAFOv3K89bmS4oWPtdz930qUMhgkrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNl9jcnoxdVpMaWhZLTEzUDNmU3BReUdDU3NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC82MDA3ZDItYzhlMy00NmQ3LTk4MzYt
ZDRlNWMxMWFkYWY0LzEvSG94LXV5eVRnemZhUlV1c3ktNEo5SFlscTNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC82MDA3ZDItYzhlMy00NmQ3LTk4MzYtZDRlNWMxMWFkYWY0
LzEvNl9jcnoxdVpMaWhZLTEzUDNmU3BReUdDU3NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAw1X4AwQA
w1i1AwQAw1+AAwQAw1+CMA0EAgACMAcDBQMqEAbAMA0GCSqGSIb3DQEBCwUAA4IB
AQCBSC+ARpBmeaXmIB0ghdyq8cWj4ApehgeZhe5EmVXpi7mMtCftcAmPGwVC04fp
j+pGjnLnCe3ppqYeAwetyct2p21ENhRwchU2WG8P0/96ZpWYTpsoFjKnBn8m72IW
akZhInhWICCoMCttldVxnrcup4Qg5nnU6ty3F8KqpA9F/hsjJ6Y1E79Z71PNEd4A
wRh5e7HMogqYe/zarNZkXSgk31UCVuKL2jeM12Wykuso2eaB6dXMiVwghhtbjzO7
+Vdt+ECIc9BLc9sTHDsKcWDTxgezqBCEJf1Rqk2PI4Zyx2iygCNq8xu1LybFSXXK
8Z9x9bmo3qlahgXP+TZ/hnnd
-----END CERTIFICATE-----
Generated at Sat May 18 02:04:51 2024 by rpki-client on console-ams.rpki-client.org