Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/BoimVhnhC0jX94ed2093LozwScg.roa
File: BoimVhnhC0jX94ed2093LozwScg.roa (raw, json)
Hash identifier: SEJKsSgzYwBBhduM34hvG2TAi8+xQ87Bs67zkkjb4jM=
Subject key identifier: 06:88:A6:56:19:E1:0B:48:D7:F7:87:9D:DB:4F:77:2E:8C:F0:49:C8
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 018CC94D90F76BF9E9DD3DCB702E6241576C
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/BoimVhnhC0jX94ed2093LozwScg.roa
Signing time: Tue 02 Jan 2024 08:32:32 +0000
ROA not before: Tue 02 Jan 2024 08:32:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59662
IP address blocks: 185.81.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:90:f7:6b:f9:e9:dd:3d:cb:70:2e:62:41:57:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Jan 2 08:32:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0688a65619e10b48d7f7879ddb4f772e8cf049c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e5:a5:e3:4e:69:9f:ac:f2:cf:0b:a8:2b:8c:
ad:e0:5d:db:c1:e9:91:31:ec:6b:aa:3a:11:2c:7e:
f1:50:ea:3f:aa:ce:f5:c0:89:11:3a:0b:da:0f:0f:
71:76:48:ca:fa:94:91:d0:d4:32:00:a1:e6:4d:ae:
fc:36:3b:35:6b:3f:85:76:ce:fb:72:40:aa:a1:26:
44:9e:73:86:89:91:0b:18:81:23:74:46:4b:f2:3f:
41:ad:d9:8c:64:37:0c:03:8c:34:8b:00:cf:c1:06:
a4:50:c7:8a:98:2d:53:19:f7:f9:3e:d8:cb:38:75:
4a:62:e4:84:2f:1e:47:46:05:69:7b:be:d4:7f:e8:
27:e3:15:e6:4c:01:97:a3:e3:c6:f8:d2:15:e7:02:
5e:f3:14:f5:94:00:22:fc:fa:32:69:02:23:70:16:
0e:1a:6f:85:4f:a9:8e:a0:f8:22:38:98:2e:83:47:
af:8e:04:c4:ab:d2:28:36:e6:7b:e1:a9:27:c1:e3:
26:1b:ca:12:4c:7a:ce:bf:e7:2a:64:49:48:9e:6d:
60:36:4b:cb:cf:4e:d5:20:a6:0b:70:fe:b8:b4:32:
ec:39:f1:5e:62:5f:ff:d7:cf:95:14:1b:2e:da:e5:
a6:7e:16:52:ef:59:22:a0:9a:d2:d4:6c:4d:84:70:
34:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:88:A6:56:19:E1:0B:48:D7:F7:87:9D:DB:4F:77:2E:8C:F0:49:C8
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/BoimVhnhC0jX94ed2093LozwScg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.103.0/24
Signature Algorithm: sha256WithRSAEncryption
88:75:2c:55:0f:b0:15:e8:71:85:4c:c7:30:91:14:89:f0:66:
70:93:4f:1e:36:83:77:5f:03:9c:52:1e:74:df:31:21:17:1c:
0a:69:c1:d7:61:d9:93:32:0b:d4:77:00:da:04:a7:c3:36:73:
86:6b:96:a7:63:61:da:69:35:62:20:5d:ee:ef:81:2c:d3:dc:
c4:0d:00:ac:2c:88:f3:fd:4b:0b:4c:cd:9b:2b:01:ac:a8:22:
0a:97:fb:d9:fd:16:88:75:f6:92:6b:99:4e:f0:e9:2a:ac:39:
11:94:a3:19:14:c2:94:29:f1:3a:77:00:ec:64:86:f9:2a:15:
19:21:a2:67:b8:92:34:26:39:d4:6b:f2:0a:fa:2d:70:89:93:
c7:f2:aa:c5:51:64:82:5b:a9:39:03:ac:9e:21:67:e8:a9:ba:
64:e6:eb:80:b8:59:9f:28:0a:73:e5:53:d7:ad:a0:68:6d:01:
e8:1b:4f:51:37:4d:94:34:f3:30:2c:90:18:8e:e8:46:f1:02:
fb:0a:34:d2:10:ca:89:0d:fa:5a:44:1d:27:5a:02:91:94:9c:
bd:c9:c6:9d:c4:a2:5e:23:a5:22:09:e6:e0:2c:04:67:2c:40:
0e:67:e5:8f:73:7a:84:7c:5e:79:c7:a6:54:99:eb:89:c0:8a:
c1:b3:4f:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTZD3a/np3T3LcC5iQVdsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MmRjMGQwOTk4YjgxMjZiYWJiOTc3NWFiNDBjMTYyZWY5
NmZhMmQwHhcNMjQwMTAyMDgzMjMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjg4YTY1NjE5ZTEwYjQ4ZDdmNzg3OWRkYjRmNzcyZThjZjA0OWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouWl405pn6zyzwuoK4yt4F3bwemR
MexrqjoRLH7xUOo/qs71wIkROgvaDw9xdkjK+pSR0NQyAKHmTa78Njs1az+Fds77
ckCqoSZEnnOGiZELGIEjdEZL8j9BrdmMZDcMA4w0iwDPwQakUMeKmC1TGff5PtjL
OHVKYuSELx5HRgVpe77Uf+gn4xXmTAGXo+PG+NIV5wJe8xT1lAAi/PoyaQIjcBYO
Gm+FT6mOoPgiOJgug0evjgTEq9IoNuZ74aknweMmG8oSTHrOv+cqZElInm1gNkvL
z07VIKYLcP64tDLsOfFeYl//18+VFBsu2uWmfhZS71kioJrS1GxNhHA0mwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAaIplYZ4QtI1/eHndtPdy6M8EnIMB8GA1UdIwQY
MBaAFIUtwNCZi4EmuruXdatAwWLvlvotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xY2Q2Y2EtYzA1Mi00ZTNkLTk3NGQt
ZDMyZTU2ZDc5YjJhLzEvQm9pbVZobmhDMGpYOTRlZDIwOTNMb3p3U2NnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8xY2Q2Y2EtYzA1Mi00ZTNkLTk3NGQtZDMyZTU2ZDc5YjJh
LzEvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVFnMA0G
CSqGSIb3DQEBCwUAA4IBAQCIdSxVD7AV6HGFTMcwkRSJ8GZwk08eNoN3XwOcUh50
3zEhFxwKacHXYdmTMgvUdwDaBKfDNnOGa5anY2HaaTViIF3u74Es09zEDQCsLIjz
/UsLTM2bKwGsqCIKl/vZ/RaIdfaSa5lO8OkqrDkRlKMZFMKUKfE6dwDsZIb5KhUZ
IaJnuJI0JjnUa/IK+i1wiZPH8qrFUWSCW6k5A6yeIWfoqbpk5uuAuFmfKApz5VPX
raBobQHoG09RN02UNPMwLJAYjuhG8QL7CjTSEMqJDfpaRB0nWgKRlJy9ycadxKJe
I6UiCebgLARnLEAOZ+WPc3qEfF55x6ZUmeuJwIrBs08e
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:02:42 2024 by rpki-client on console-ams.rpki-client.org