Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/J1VfPd1GqRbuHXUu9h6YodtoU8I.roa
File: J1VfPd1GqRbuHXUu9h6YodtoU8I.roa (raw, json)
Hash identifier: 1H4pfHzrbUB0vYbZNf74w2ecyK35+O/sds4q6shFU4Y=
Subject key identifier: 27:55:5F:3D:DD:46:A9:16:EE:1D:75:2E:F6:1E:98:A1:DB:68:53:C2
Certificate issuer: /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Certificate serial: 018CC94D3E2DCEE610B8234A2DFA6ABD47BB
Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/J1VfPd1GqRbuHXUu9h6YodtoU8I.roa
Signing time: Tue 02 Jan 2024 08:32:11 +0000
ROA not before: Tue 02 Jan 2024 08:32:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58080
IP address blocks: 185.128.164.0/22 maxlen: 22
185.136.192.0/24 maxlen: 24
185.136.192.0/22 maxlen: 22
185.136.194.0/24 maxlen: 24
185.136.193.0/24 maxlen: 24
185.136.195.0/24 maxlen: 24
185.128.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:3e:2d:ce:e6:10:b8:23:4a:2d:fa:6a:bd:47:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Validity
Not Before: Jan 2 08:32:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27555f3ddd46a916ee1d752ef61e98a1db6853c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:7f:ad:6e:e3:12:91:e1:88:86:87:31:0d:
3d:08:24:bc:52:10:df:ff:b4:a5:48:0a:c6:3b:27:
4d:19:f9:3a:18:6b:36:d1:90:a9:f3:6f:be:a0:42:
9f:47:73:a1:e9:84:e8:c1:fe:c6:ac:d8:d6:fc:68:
93:84:a6:5c:9d:b5:06:e5:24:bc:1b:f4:dc:1a:eb:
88:a4:67:ca:e4:bc:ed:53:4c:45:e8:37:76:ad:da:
4a:05:45:8b:98:77:52:30:3d:93:43:a4:69:4a:75:
a8:a7:b0:23:b1:ff:52:df:8f:93:9b:55:fb:1a:ca:
4b:a2:58:69:43:99:fd:4d:e8:f4:a2:22:08:db:43:
ca:b4:46:c8:e6:4e:75:d4:f2:46:27:c5:0e:5f:cd:
bd:c5:0e:ed:91:8f:92:aa:e6:e2:81:6b:e8:35:a5:
40:bf:98:79:b2:3e:9c:17:52:d5:c1:a3:9b:72:e8:
a6:bf:08:ac:65:8d:5d:97:c3:95:98:1c:64:33:2d:
ce:28:b8:16:13:92:8b:ff:5f:53:8c:91:ba:6e:10:
f8:7b:fb:02:49:2f:d9:55:b3:c8:25:c1:eb:61:03:
b9:a6:b9:cf:0c:fc:ed:0d:36:a7:3a:f2:e4:83:2c:
44:7b:e9:21:d0:58:dd:27:38:cd:f5:36:b4:7b:36:
dd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:55:5F:3D:DD:46:A9:16:EE:1D:75:2E:F6:1E:98:A1:DB:68:53:C2
X509v3 Authority Key Identifier:
keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/J1VfPd1GqRbuHXUu9h6YodtoU8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.154.0/23
185.128.164.0/22
185.136.192.0/22
Signature Algorithm: sha256WithRSAEncryption
74:18:4d:3d:e8:4d:5d:24:3a:d0:b1:8d:c3:c9:7e:e9:fd:ee:
08:96:df:4b:52:c9:1f:c0:ef:e7:bd:65:54:89:51:f7:94:db:
da:46:83:2b:0b:84:00:3c:90:d7:84:43:a9:ad:22:96:ed:e4:
16:bc:ff:3d:85:fa:18:45:f1:0e:2c:6a:e5:be:7a:98:ca:57:
7d:67:54:0c:7e:ef:6b:37:06:46:da:b6:52:c4:09:45:ba:85:
50:2d:dd:32:9a:bb:b1:f7:25:13:d3:5f:7d:0b:67:9d:30:8c:
b7:95:24:09:a7:6f:03:5e:a7:20:7c:43:75:24:7d:39:97:c5:
2b:1c:83:05:c8:65:fb:90:ce:89:12:59:26:0a:af:91:81:fa:
6d:25:6a:b9:9c:ad:71:2b:92:0e:29:8f:cc:63:33:6d:0d:21:
e1:c5:bd:08:5f:b3:cf:3a:09:1a:96:f9:20:6a:b0:65:8c:30:
d8:7d:ad:f1:f3:4a:5c:48:3d:72:44:38:d5:78:fa:3f:70:74:
11:7e:73:13:db:c0:10:53:2c:7a:df:b1:26:2a:ee:8c:e2:e4:
a9:69:1d:83:67:80:53:9e:86:aa:ca:dc:74:39:77:52:6d:2c:
46:42:28:d3:ca:45:07:65:04:11:50:30:7b:bc:7b:c6:f0:cd:
0b:e3:26:d4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzJTT4tzuYQuCNKLfpqvUe7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNGYxZTZiMDExZjRkNjMzMWExMjc5NTVhNTQ4ZmE1MDUy
NTgwYTUwHhcNMjQwMTAyMDgzMjExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzU1NWYzZGRkNDZhOTE2ZWUxZDc1MmVmNjFlOThhMWRiNjg1M2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms1/rW7jEpHhiIaHMQ09CCS8UhDf
/7SlSArGOydNGfk6GGs20ZCp82++oEKfR3Oh6YTowf7GrNjW/GiThKZcnbUG5SS8
G/TcGuuIpGfK5LztU0xF6Dd2rdpKBUWLmHdSMD2TQ6RpSnWop7Ajsf9S34+Tm1X7
GspLolhpQ5n9Tej0oiII20PKtEbI5k511PJGJ8UOX829xQ7tkY+SqubigWvoNaVA
v5h5sj6cF1LVwaObcuimvwisZY1dl8OVmBxkMy3OKLgWE5KL/19TjJG6bhD4e/sC
SS/ZVbPIJcHrYQO5prnPDPztDTanOvLkgyxEe+kh0FjdJzjN9Ta0ezbdFwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCdVXz3dRqkW7h11LvYemKHbaFPCMB8GA1UdIwQY
MBaAFLxPHmsBH01jMaEnlVpUj6UFJYClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkU4ZWF3RWZUV014b1NlVldsU1BwUVVsZ0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82NmEyMzctOWJjNS00YWJkLTliOGIt
YzU1NDc2NzU5ZDBjLzEvSjFWZlBkMUdxUmJ1SFhVdTloNllvZHRvVThJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi82NmEyMzctOWJjNS00YWJkLTliOGItYzU1NDc2NzU5ZDBj
LzEvdkU4ZWF3RWZUV014b1NlVldsU1BwUVVsZ0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBuYCaAwQC
uYCkAwQCuYjAMA0GCSqGSIb3DQEBCwUAA4IBAQB0GE096E1dJDrQsY3DyX7p/e4I
lt9LUskfwO/nvWVUiVH3lNvaRoMrC4QAPJDXhEOprSKW7eQWvP89hfoYRfEOLGrl
vnqYyld9Z1QMfu9rNwZG2rZSxAlFuoVQLd0ymrux9yUT0199C2edMIy3lSQJp28D
XqcgfEN1JH05l8UrHIMFyGX7kM6JElkmCq+RgfptJWq5nK1xK5IOKY/MYzNtDSHh
xb0IX7PPOgkalvkgarBljDDYfa3x80pcSD1yRDjVePo/cHQRfnMT28AQUyx637Em
Ku6M4uSpaR2DZ4BTnoaqytx0OXdSbSxGQijTykUHZQQRUDB7vHvG8M0L4ybU
-----END CERTIFICATE-----
Generated at Sat Jun 8 10:05:05 2024 by rpki-client on console-ams.rpki-client.org