Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/tMoGrs2rNXzZX_qyeg_HYoZKFS8.roa
File: tMoGrs2rNXzZX_qyeg_HYoZKFS8.roa (raw, json)
Hash identifier: lIEHf9mP1TE6iFZ1/kstbUEzK64oGn0ll7nmaklh5WQ=
Subject key identifier: B4:CA:06:AE:CD:AB:35:7C:D9:5F:FA:B2:7A:0F:C7:62:86:4A:15:2F
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018CC94E0354F3C5251FC065FE58ED468FE1
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/tMoGrs2rNXzZX_qyeg_HYoZKFS8.roa
Signing time: Tue 02 Jan 2024 08:33:02 +0000
ROA not before: Tue 02 Jan 2024 08:33:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41953
IP address blocks: 185.202.84.0/22 maxlen: 22
92.114.111.0/24 maxlen: 24
89.40.196.0/22 maxlen: 22
93.113.47.0/24 maxlen: 24
93.115.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:03:54:f3:c5:25:1f:c0:65:fe:58:ed:46:8f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 2 08:33:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4ca06aecdab357cd95ffab27a0fc762864a152f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:72:93:bb:be:90:2d:ae:3c:cc:cb:ad:7a:
3f:22:89:61:d8:9d:77:48:09:5f:39:f7:23:40:d1:
59:33:da:12:01:23:da:9a:68:61:46:6b:4f:78:e9:
83:ea:14:14:b6:e1:ba:04:a6:19:f6:ae:18:e3:6d:
b6:4e:df:dd:29:bc:8e:d9:d9:cd:87:15:16:2d:75:
76:64:a4:dd:e6:c6:2f:67:0f:55:62:0d:59:d2:c3:
94:08:4a:76:7b:6e:e8:4a:81:a6:dd:c6:1a:77:17:
3f:23:56:4d:b1:44:4e:42:a4:f0:ec:aa:f4:7e:3c:
20:7e:00:33:c2:6c:a1:6b:a1:e5:3a:d2:ae:7f:f3:
18:d0:fa:c6:a0:bd:4d:47:dd:d9:ef:df:71:f2:5e:
6d:11:6e:2a:b8:3e:d4:41:a8:d2:25:00:75:cb:21:
29:48:61:3e:f9:61:f5:ff:d5:df:34:f8:19:b8:b8:
29:d3:af:8c:e4:31:93:36:9c:dc:f9:d1:ae:cd:da:
15:79:30:5c:a1:9b:87:0f:42:fc:56:55:60:81:3e:
8f:fd:4d:ce:61:00:10:b3:ab:3e:f0:05:1e:13:0f:
ad:17:24:a0:30:dc:9b:fc:9b:40:5a:69:98:62:5d:
83:e2:5a:4a:d5:98:02:d5:eb:c8:a7:80:25:f9:0b:
57:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CA:06:AE:CD:AB:35:7C:D9:5F:FA:B2:7A:0F:C7:62:86:4A:15:2F
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/tMoGrs2rNXzZX_qyeg_HYoZKFS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.196.0/22
92.114.111.0/24
93.113.47.0/24
93.115.34.0/24
185.202.84.0/22
Signature Algorithm: sha256WithRSAEncryption
28:59:31:62:93:98:e9:b1:68:fc:aa:c4:05:22:5c:27:2f:99:
c5:b0:ee:f4:41:ac:ea:8c:a2:e4:93:cb:37:b7:fa:5b:a2:d9:
ee:db:1b:a9:c7:cc:91:a5:a1:44:60:81:2f:b8:31:ee:92:f1:
27:71:f8:0e:45:14:02:83:f1:ad:13:85:ec:40:48:09:d9:ef:
b1:54:ad:0b:6e:26:63:9a:3e:c7:8c:a5:7f:50:e5:ee:20:f2:
d6:8f:87:28:e5:5e:af:de:e0:d9:65:f4:13:68:a5:07:0a:c9:
3d:47:8d:78:5e:c2:e7:61:de:a6:99:f6:1b:b1:5a:55:c8:5c:
ba:52:30:a8:da:a4:fa:88:e0:82:43:b0:fa:e8:45:76:2e:62:
a2:67:26:04:2f:fd:b2:39:8b:5a:04:f2:24:73:fe:85:d4:78:
f4:87:ef:a0:45:bb:26:f2:24:d3:3b:90:8b:8c:5a:a6:b6:e9:
69:db:41:a3:93:a8:b4:24:fa:b4:85:41:d0:22:cb:cd:f2:45:
5c:d0:9c:f7:89:47:a1:c5:79:d7:36:e9:b4:bb:29:70:8f:bc:
3f:11:17:c9:2a:08:4e:2d:75:b7:b8:4b:2e:d9:c6:fe:f1:bd:
2e:e0:15:cb:17:df:33:24:5e:cf:0d:1f:c4:62:e0:c9:89:d2:
86:be:2d:e9
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzJTgNU88UlH8Bl/ljtRo/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjQwMTAyMDgzMzAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGNhMDZhZWNkYWIzNTdjZDk1ZmZhYjI3YTBmYzc2Mjg2NGExNTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Adyk7u+kC2uPMzLrXo/Iolh2J13
SAlfOfcjQNFZM9oSASPammhhRmtPeOmD6hQUtuG6BKYZ9q4Y4222Tt/dKbyO2dnN
hxUWLXV2ZKTd5sYvZw9VYg1Z0sOUCEp2e27oSoGm3cYadxc/I1ZNsUROQqTw7Kr0
fjwgfgAzwmyha6HlOtKuf/MY0PrGoL1NR93Z799x8l5tEW4quD7UQajSJQB1yyEp
SGE++WH1/9XfNPgZuLgp06+M5DGTNpzc+dGuzdoVeTBcoZuHD0L8VlVggT6P/U3O
YQAQs6s+8AUeEw+tFySgMNyb/JtAWmmYYl2D4lpK1ZgC1evIp4Al+QtXUwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFLTKBq7NqzV82V/6snoPx2KGShUvMB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvdE1vR3JzMnJOWHpaWF9xeWVnX0hZb1pLRlM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz
LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCWSjEAwQA
XHJvAwQAXXEvAwQAXXMiAwQCucpUMA0GCSqGSIb3DQEBCwUAA4IBAQAoWTFik5jp
sWj8qsQFIlwnL5nFsO70QazqjKLkk8s3t/pbotnu2xupx8yRpaFEYIEvuDHukvEn
cfgORRQCg/GtE4XsQEgJ2e+xVK0LbiZjmj7HjKV/UOXuIPLWj4co5V6v3uDZZfQT
aKUHCsk9R414XsLnYd6mmfYbsVpVyFy6UjCo2qT6iOCCQ7D66EV2LmKiZyYEL/2y
OYtaBPIkc/6F1Hj0h++gRbsm8iTTO5CLjFqmtulp20Gjk6i0JPq0hUHQIsvN8kVc
0Jz3iUehxXnXNum0uylwj7w/ERfJKghOLXW3uEsu2cb+8b0u4BXLF98zJF7PDR/E
YuDJidKGvi3p
-----END CERTIFICATE-----
Generated at Tue Nov 26 00:33:06 2024 by rpki-client on console-ams.rpki-client.org