Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/hSpsCQgWfnrnKce5PgyNioLCJZ4.roa
File: hSpsCQgWfnrnKce5PgyNioLCJZ4.roa (raw, json)
Hash identifier: /XAgBxMuNxMw+M3WuW7BiIVnZtBgfUBjsoeAR0f0deE=
Subject key identifier: 85:2A:6C:09:08:16:7E:7A:E7:29:C7:B9:3E:0C:8D:8A:82:C2:25:9E
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 018CC5012D558E8AF9DA130A8732337B8A6A
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/hSpsCQgWfnrnKce5PgyNioLCJZ4.roa
Signing time: Mon 01 Jan 2024 12:30:37 +0000
ROA not before: Mon 01 Jan 2024 12:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 262287
IP address blocks: 185.236.94.0/23 maxlen: 23
185.236.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:2d:55:8e:8a:f9:da:13:0a:87:32:33:7b:8a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Jan 1 12:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=852a6c0908167e7ae729c7b93e0c8d8a82c2259e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:66:ff:2a:84:bd:4b:9e:15:be:01:36:4e:
c6:86:93:c3:78:1d:3d:16:43:b3:41:5b:99:97:04:
9a:a5:7c:67:f8:9b:6c:57:e4:f6:d7:2f:e4:ed:0c:
9e:cd:01:cc:ef:9f:cd:89:7d:c6:cb:83:94:01:f1:
4d:c4:a3:10:06:5d:90:e0:6f:53:f8:ff:40:0a:53:
04:48:eb:25:07:a4:25:01:1e:be:9d:80:30:82:c4:
4a:48:1c:b9:60:96:01:00:8f:3c:f7:fd:ab:08:ed:
b5:6e:7d:f4:50:23:e8:eb:1c:48:f5:43:26:8a:91:
9e:7b:ae:72:a7:17:05:78:9b:f5:56:e5:aa:6d:8c:
3e:f7:f7:2c:b2:58:c4:b6:c1:5c:ea:90:68:9d:36:
25:86:39:58:4e:7e:2b:cb:e0:f8:0f:17:47:a6:f2:
7f:21:51:c0:47:fb:d6:93:9d:ac:c6:a0:21:13:aa:
5c:c3:aa:f9:fa:29:a3:6d:16:15:d2:6f:c4:d2:18:
f6:07:76:bf:51:cc:cb:b7:b7:c9:0e:66:12:fa:47:
ca:7a:d1:4c:be:87:2f:5e:ca:1d:03:45:d3:99:d3:
36:42:2e:ae:14:cc:24:7c:47:5c:f2:0c:bb:fb:85:
94:bf:85:5e:56:ff:7f:16:31:5f:e6:c0:7b:6e:56:
22:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2A:6C:09:08:16:7E:7A:E7:29:C7:B9:3E:0C:8D:8A:82:C2:25:9E
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/hSpsCQgWfnrnKce5PgyNioLCJZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.92.0/22
Signature Algorithm: sha256WithRSAEncryption
36:d7:85:89:e8:73:8c:16:ea:eb:cf:79:e9:30:89:29:29:13:
9b:01:1a:91:bd:9a:5a:86:c1:2f:d9:09:86:c8:92:1f:38:77:
ca:39:ba:cc:76:b1:66:f1:c4:c4:4c:8f:17:c3:93:32:71:82:
8e:bf:20:4c:95:f4:1c:84:51:dc:5a:06:36:80:7f:1f:51:d5:
db:03:8e:ce:47:a9:79:55:75:98:51:b8:3c:b1:72:a4:b3:98:
21:05:e8:b0:20:15:68:44:83:0b:ad:79:cc:47:69:b9:80:c0:
e8:8c:b6:46:07:eb:29:bc:40:6a:1f:2b:72:dc:6e:af:46:21:
30:6f:ad:4a:bb:cb:76:e1:f8:e9:ea:a0:3e:4e:b8:77:4e:d7:
1a:a3:2f:b4:44:db:f0:39:50:67:cc:e1:9c:ed:4e:de:ef:bd:
14:c0:69:a6:c0:a5:5c:6b:e9:d3:41:8a:41:a0:c2:ac:d3:02:
1d:6a:25:fb:fb:1d:00:c5:ee:b1:1b:8b:bb:ab:62:a3:57:e7:
2c:2d:17:9b:36:a8:c9:c8:9f:3c:94:be:87:ea:2a:af:b6:5b:
d0:1b:3c:84:ea:4d:bb:20:5e:3b:82:34:f9:39:7b:14:20:de:
f9:7f:1c:1d:eb:c9:f1:5e:07:b5:ee:c5:18:d8:16:74:7f:c9:
74:41:eb:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAS1Vjor52hMKhzIze4pqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz
MGJiYmEwHhcNMjQwMTAxMTIzMDM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTJhNmMwOTA4MTY3ZTdhZTcyOWM3YjkzZTBjOGQ4YTgyYzIyNTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKNm/yqEvUueFb4BNk7GhpPDeB09
FkOzQVuZlwSapXxn+JtsV+T21y/k7QyezQHM75/NiX3Gy4OUAfFNxKMQBl2Q4G9T
+P9AClMESOslB6QlAR6+nYAwgsRKSBy5YJYBAI889/2rCO21bn30UCPo6xxI9UMm
ipGee65ypxcFeJv1VuWqbYw+9/cssljEtsFc6pBonTYlhjlYTn4ry+D4DxdHpvJ/
IVHAR/vWk52sxqAhE6pcw6r5+imjbRYV0m/E0hj2B3a/UczLt7fJDmYS+kfKetFM
vocvXsodA0XTmdM2Qi6uFMwkfEdc8gy7+4WUv4VeVv9/FjFf5sB7blYiGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIUqbAkIFn565ynHuT4MjYqCwiWeMB8GA1UdIwQY
MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt
YmU0NWYwZDJhYmJiLzEvaFNwc0NRZ1dmbnJuS2NlNVBneU5pb0xDSlo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi
LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuexcMA0G
CSqGSIb3DQEBCwUAA4IBAQA214WJ6HOMFurrz3npMIkpKRObARqRvZpahsEv2QmG
yJIfOHfKObrMdrFm8cTETI8Xw5MycYKOvyBMlfQchFHcWgY2gH8fUdXbA47OR6l5
VXWYUbg8sXKks5ghBeiwIBVoRIMLrXnMR2m5gMDojLZGB+spvEBqHyty3G6vRiEw
b61Ku8t24fjp6qA+Trh3Ttcaoy+0RNvwOVBnzOGc7U7e770UwGmmwKVca+nTQYpB
oMKs0wIdaiX7+x0Axe6xG4u7q2KjV+csLRebNqjJyJ88lL6H6iqvtlvQGzyE6k27
IF47gjT5OXsUIN75fxwd68nxXge17sUY2BZ0f8l0Qeuh
-----END CERTIFICATE-----
Generated at Wed May 1 13:42:55 2024 by rpki-client on console-fra.rpki-client.org