Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/oZmOKN10fNxHj-slUzle1ben-Dw.roa
File: oZmOKN10fNxHj-slUzle1ben-Dw.roa (raw, json)
Hash identifier: khvhljVV6MJpmzKDRgvBWGNXzi5PvrsiPeNI0GF1hUU=
Subject key identifier: A1:99:8E:28:DD:74:7C:DC:47:8F:EB:25:53:39:5E:D5:B7:A7:F8:3C
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 018CC6B88A2A3D01EAF4C11E1E0FE242CDC2
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/oZmOKN10fNxHj-slUzle1ben-Dw.roa
Signing time: Mon 01 Jan 2024 20:30:31 +0000
ROA not before: Mon 01 Jan 2024 20:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206566
IP address blocks: 185.183.8.0/22 maxlen: 22
2a0a:ff80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:8a:2a:3d:01:ea:f4:c1:1e:1e:0f:e2:42:cd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Jan 1 20:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1998e28dd747cdc478feb2553395ed5b7a7f83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c5:e9:8d:c0:83:2b:d3:04:c4:aa:6d:59:f0:
34:24:1e:69:ae:b2:22:f2:f5:d8:17:7a:7b:c5:53:
72:df:06:75:48:52:76:01:92:ad:83:05:58:db:39:
ae:e0:98:1c:f9:b3:a0:5e:1f:09:d5:d9:86:b2:e3:
c7:65:27:8b:e9:cc:5e:2c:f7:c1:59:bd:dc:09:d4:
b2:e2:e1:78:02:84:0d:24:ca:a7:ee:e9:27:f6:39:
51:54:a6:bb:7b:ee:58:c8:db:57:6b:36:70:8e:ca:
81:f3:68:ce:b2:ea:fa:71:d5:c1:b6:10:08:0d:54:
69:ff:c3:b4:74:8e:ba:07:c3:6f:ac:aa:bc:09:86:
b8:81:64:09:5b:4e:48:fc:7d:2b:22:23:7f:4d:f3:
5c:4f:d5:c2:d5:a3:81:3b:8d:66:64:48:69:fd:be:
15:63:59:13:e9:9a:ab:15:ba:07:fc:c6:a3:f3:11:
2d:6e:9f:f1:59:20:ec:fe:07:39:e9:ce:da:f0:03:
e0:12:98:0e:9e:52:dc:ab:ee:5e:9b:7b:3f:fb:1b:
72:47:18:9e:dc:a5:d4:53:a8:ed:2f:04:89:9d:a3:
a5:2a:cf:b7:0f:4b:c0:d5:8c:2c:29:18:fc:1f:41:
d8:e7:fe:db:d4:80:60:e8:a0:e2:e9:3b:3f:bc:2e:
f6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:99:8E:28:DD:74:7C:DC:47:8F:EB:25:53:39:5E:D5:B7:A7:F8:3C
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/oZmOKN10fNxHj-slUzle1ben-Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.8.0/22
IPv6:
2a0a:ff80::/32
Signature Algorithm: sha256WithRSAEncryption
65:27:68:69:17:d9:76:6b:cf:e5:23:3e:8f:07:0b:1b:11:8a:
91:bc:b9:e2:69:02:a9:6b:cd:a0:d3:67:7f:00:bd:2d:6e:b2:
a3:08:f9:32:33:4f:81:9d:c3:aa:09:33:be:cc:6e:0b:7b:4c:
c9:d9:b7:c0:08:b2:da:ac:37:19:2c:e8:24:04:08:33:54:dc:
d9:49:09:d9:85:f0:b9:fe:4d:17:d8:4b:b6:40:f8:74:ff:58:
94:45:77:0a:f8:89:41:17:1e:4a:04:a7:6e:b7:4a:50:4c:11:
e4:bf:ec:20:be:86:98:37:ae:78:8e:a2:2c:3d:96:77:78:f7:
40:8f:6f:9b:fe:6a:bc:83:4e:69:71:76:b8:15:0e:a2:f9:32:
97:91:f8:e5:57:c3:10:ce:d1:7a:b3:30:45:ea:8c:d1:3a:98:
6e:a4:31:39:44:6a:e3:f4:a6:43:66:7e:fc:2b:a3:0b:ef:fe:
03:bd:fd:55:92:1b:c9:5b:83:d5:4b:3a:36:2b:8c:ae:9c:b0:
aa:17:34:41:b0:62:2c:34:9f:1e:ef:60:43:5d:e7:a3:1e:05:
6e:95:9d:45:42:e6:e0:05:e9:8e:92:e1:d7:06:83:fe:e0:d7:
b3:ae:88:7a:93:f4:74:82:e1:73:3b:99:16:d7:0a:e9:c4:de:
09:46:16:45
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzGuIoqPQHq9MEeHg/iQs3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZmIwMDRlMzk3ZGRmMDRlN2QwNWYzNjQzYTAzNmYyMTgz
NmZmMTAwHhcNMjQwMTAxMjAzMDMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTk5OGUyOGRkNzQ3Y2RjNDc4ZmViMjU1MzM5NWVkNWI3YTdmODNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8XpjcCDK9MExKptWfA0JB5prrIi
8vXYF3p7xVNy3wZ1SFJ2AZKtgwVY2zmu4Jgc+bOgXh8J1dmGsuPHZSeL6cxeLPfB
Wb3cCdSy4uF4AoQNJMqn7ukn9jlRVKa7e+5YyNtXazZwjsqB82jOsur6cdXBthAI
DVRp/8O0dI66B8NvrKq8CYa4gWQJW05I/H0rIiN/TfNcT9XC1aOBO41mZEhp/b4V
Y1kT6ZqrFboH/Maj8xEtbp/xWSDs/gc56c7a8APgEpgOnlLcq+5em3s/+xtyRxie
3KXUU6jtLwSJnaOlKs+3D0vA1YwsKRj8H0HY5/7b1IBg6KDi6Ts/vC727QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKGZjijddHzcR4/rJVM5XtW3p/g8MB8GA1UdIwQY
MBaAFDf7AE45fd8E59BfNkOgNvIYNv8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEt
YjUzYjY0Y2YwZDk1LzEvb1ptT0tOMTBmTnhIai1zbFV6bGUxYmVuLUR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEtYjUzYjY0Y2YwZDk1
LzEvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubcIMA0E
AgACMAcDBQAqCv+AMA0GCSqGSIb3DQEBCwUAA4IBAQBlJ2hpF9l2a8/lIz6PBwsb
EYqRvLniaQKpa82g02d/AL0tbrKjCPkyM0+BncOqCTO+zG4Le0zJ2bfACLLarDcZ
LOgkBAgzVNzZSQnZhfC5/k0X2Eu2QPh0/1iURXcK+IlBFx5KBKdut0pQTBHkv+wg
voaYN654jqIsPZZ3ePdAj2+b/mq8g05pcXa4FQ6i+TKXkfjlV8MQztF6szBF6ozR
OphupDE5RGrj9KZDZn78K6ML7/4Dvf1VkhvJW4PVSzo2K4yunLCqFzRBsGIsNJ8e
72BDXeejHgVulZ1FQubgBemOkuHXBoP+4Nezroh6k/R0guFzO5kW1wrpxN4JRhZF
-----END CERTIFICATE-----
Generated at Sun Jun 16 08:04:22 2024 by rpki-client on console-fra.rpki-client.org