Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/Cr0ySWL9DBWQ6nqFvv9RlR1XxM4.roa
File: Cr0ySWL9DBWQ6nqFvv9RlR1XxM4.roa (raw, json)
Hash identifier: 50+DIilDdXuaRh2B0P8jo8AVek0+XzkX/CrRee+03No=
Subject key identifier: 0A:BD:32:49:62:FD:0C:15:90:EA:7A:85:BE:FF:51:95:1D:57:C4:CE
Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Certificate serial: 018D11A6CE4A22B6CF659ECA32E88B3443AA
Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/Cr0ySWL9DBWQ6nqFvv9RlR1XxM4.roa
Signing time: Tue 16 Jan 2024 09:42:40 +0000
ROA not before: Tue 16 Jan 2024 09:42:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.120.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:11:a6:ce:4a:22:b6:cf:65:9e:ca:32:e8:8b:34:43:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Validity
Not Before: Jan 16 09:42:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0abd324962fd0c1590ea7a85beff51951d57c4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:e1:cc:f2:88:cb:ea:21:de:61:b2:a6:c3:
9d:17:38:cc:b6:a4:ea:52:a0:40:41:dc:50:f4:30:
a7:e8:1d:39:54:09:78:4c:79:a1:87:87:85:8b:50:
6f:76:4f:d2:09:5b:3e:a1:88:5d:62:0f:c8:37:d2:
fd:52:94:ff:40:d4:73:dc:a9:cd:b8:2b:72:76:dd:
45:72:c5:b7:91:92:1c:12:ae:0e:ee:12:7f:1b:df:
df:ba:81:46:35:be:06:df:31:86:3d:7f:ba:10:cb:
10:53:14:1d:e5:83:b5:ac:36:69:c5:c7:42:7e:f3:
ed:9b:b3:a7:20:b3:f8:ba:64:83:00:41:1d:ee:ba:
b6:87:73:aa:45:ca:19:c3:5b:9a:2a:1c:8b:8f:98:
82:7c:5d:d7:f1:8f:ed:7e:fc:eb:90:92:51:e1:8b:
f4:7f:c6:d0:7a:89:22:17:93:c3:82:6f:61:f1:d6:
a7:8d:46:e7:08:b1:00:1c:2c:b2:96:9c:19:23:ab:
0a:f5:61:97:f8:61:98:88:f1:84:2d:c8:1b:db:f9:
9d:e9:39:76:de:55:90:8e:d1:27:52:e1:43:1c:af:
e8:f3:ef:e0:5d:cf:26:41:a6:c9:fb:b3:ce:38:93:
7c:26:4f:3a:ae:af:c4:e6:f9:05:89:98:73:9c:38:
41:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BD:32:49:62:FD:0C:15:90:EA:7A:85:BE:FF:51:95:1D:57:C4:CE
X509v3 Authority Key Identifier:
keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/Cr0ySWL9DBWQ6nqFvv9RlR1XxM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.92.0/22
Signature Algorithm: sha256WithRSAEncryption
12:fa:dd:88:50:c5:66:8d:a3:67:08:8b:ea:97:61:db:2f:71:
06:47:01:c1:c3:d0:e2:20:8d:33:28:14:d8:ce:f3:66:a2:2e:
e2:7e:69:dd:46:7e:95:2e:ad:f4:99:e7:a0:97:2b:63:76:a9:
e1:aa:11:d1:74:1d:07:17:88:3b:63:6a:59:9c:b8:57:2e:18:
c0:a7:41:19:cf:45:85:ea:20:f2:b6:6c:82:86:e4:be:a2:4c:
12:eb:25:9f:4c:16:a5:e6:d7:de:c0:b8:b3:62:c5:96:ae:48:
95:94:e0:a9:89:0c:34:d4:02:10:5a:e3:dc:09:28:12:7c:67:
bf:82:41:eb:d0:35:01:a5:d3:c7:c0:ec:f6:fa:ba:39:1d:5e:
ed:e8:ac:53:36:03:53:df:81:27:2e:0d:22:53:37:45:02:ea:
90:07:67:fd:7e:7e:6b:b7:5e:bd:12:63:a5:0a:0a:a9:79:90:
0c:29:03:95:d5:4e:6b:f0:5f:20:cd:0e:79:4a:80:ed:f1:b4:
56:5a:10:d6:b5:29:28:7b:7f:b3:ff:3d:4a:14:b3:33:e4:ce:
8c:4d:c0:f1:24:d1:40:f3:f3:2d:a8:30:3e:c1:ec:24:8e:ae:
63:30:3e:e3:bf:6b:cb:54:6d:b4:2d:f9:6b:08:ef:fd:50:76:
fb:a9:03:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0Rps5KIrbPZZ7KMuiLNEOqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMzA5MjFkMjhjNzhlZGU4MTg0MmY3MTJlNmNmNzJiZGU1
YTYwODAwHhcNMjQwMTE2MDk0MjQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWJkMzI0OTYyZmQwYzE1OTBlYTdhODViZWZmNTE5NTFkNTdjNGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEHhzPKIy+oh3mGypsOdFzjMtqTq
UqBAQdxQ9DCn6B05VAl4THmhh4eFi1Bvdk/SCVs+oYhdYg/IN9L9UpT/QNRz3KnN
uCtydt1FcsW3kZIcEq4O7hJ/G9/fuoFGNb4G3zGGPX+6EMsQUxQd5YO1rDZpxcdC
fvPtm7OnILP4umSDAEEd7rq2h3OqRcoZw1uaKhyLj5iCfF3X8Y/tfvzrkJJR4Yv0
f8bQeokiF5PDgm9h8danjUbnCLEAHCyylpwZI6sK9WGX+GGYiPGELcgb2/md6Tl2
3lWQjtEnUuFDHK/o8+/gXc8mQabJ+7POOJN8Jk86rq/E5vkFiZhznDhBvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAq9Mkli/QwVkOp6hb7/UZUdV8TOMB8GA1UdIwQY
MBaAFKswkh0ox47egYQvcS5s9yveWmCAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXpDU0hTakhqdDZCaEM5eExtejNLOTVhWUlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zY2Q3ZmYtMjBkMi00Y2VjLWFlY2Et
MzU0Mzk5NzI0YjFlLzEvQ3IweVNXTDlEQldRNm5xRnZ2OVJsUjFYeE00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zY2Q3ZmYtMjBkMi00Y2VjLWFlY2EtMzU0Mzk5NzI0YjFl
LzEvcXpDU0hTakhqdDZCaEM5eExtejNLOTVhWUlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXhcMA0G
CSqGSIb3DQEBCwUAA4IBAQAS+t2IUMVmjaNnCIvql2HbL3EGRwHBw9DiII0zKBTY
zvNmoi7ifmndRn6VLq30meeglytjdqnhqhHRdB0HF4g7Y2pZnLhXLhjAp0EZz0WF
6iDytmyChuS+okwS6yWfTBal5tfewLizYsWWrkiVlOCpiQw01AIQWuPcCSgSfGe/
gkHr0DUBpdPHwOz2+ro5HV7t6KxTNgNT34EnLg0iUzdFAuqQB2f9fn5rt169EmOl
CgqpeZAMKQOV1U5r8F8gzQ55SoDt8bRWWhDWtSkoe3+z/z1KFLMz5M6MTcDxJNFA
8/MtqDA+wewkjq5jMD7jv2vLVG20LflrCO/9UHb7qQPY
-----END CERTIFICATE-----
Generated at Thu May 2 15:16:22 2024 by rpki-client on console-fra.rpki-client.org