Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/y0ElZmfGbhWm1YWRSAUSU4uzTE4.roa
File: y0ElZmfGbhWm1YWRSAUSU4uzTE4.roa (raw, json)
Hash identifier: +evScguf0G5x1wkjp+5R/yItbBHEEg/BFmmQimXFa0Q=
Subject key identifier: CB:41:25:66:67:C6:6E:15:A6:D5:85:91:48:05:12:53:8B:B3:4C:4E
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 018CC94D9157A83EFF1842A4D5B8240F4B3D
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/y0ElZmfGbhWm1YWRSAUSU4uzTE4.roa
Signing time: Tue 02 Jan 2024 08:32:33 +0000
ROA not before: Tue 02 Jan 2024 08:32:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62856
IP address blocks: 185.81.102.0/24 maxlen: 24
185.81.101.0/24 maxlen: 24
185.81.100.0/24 maxlen: 24
185.81.100.0/22 maxlen: 22
2a05:8780::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:91:57:a8:3e:ff:18:42:a4:d5:b8:24:0f:4b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Jan 2 08:32:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb41256667c66e15a6d58591480512538bb34c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:3f:c8:a7:a2:2c:78:11:f1:ee:fb:5f:20:
7a:36:6e:87:ba:5d:02:55:23:0f:18:72:76:9a:1d:
5d:28:87:b7:91:75:a6:29:6f:06:d3:01:f6:36:70:
cc:ed:38:b3:08:39:d9:68:f2:95:15:f7:82:e4:18:
1e:1a:06:bc:81:09:d6:4a:5b:2e:30:e9:0b:77:cf:
fb:aa:74:75:4a:d4:cd:61:97:14:d3:76:46:6d:03:
e9:c4:af:de:5d:14:f5:d0:d6:33:45:23:76:70:2b:
5e:87:fe:81:ae:95:6e:67:26:07:df:41:65:54:47:
43:6b:d8:4d:4f:84:a6:b5:69:32:bd:71:df:ae:56:
ff:ad:83:47:23:bc:0e:d8:be:c8:16:21:b8:ca:de:
5f:cf:22:05:e6:e6:3f:d4:c1:4e:12:d9:6b:f3:af:
84:03:62:bb:2f:ce:a8:c0:b0:7f:f7:d5:2d:9d:36:
01:53:d8:d6:70:db:29:9c:b4:fc:28:0d:18:08:bf:
52:76:20:1a:52:da:97:70:1f:68:3c:f2:86:5c:53:
95:2f:43:21:3b:ea:a7:fa:e4:1d:11:a1:b3:b3:e6:
fb:4d:db:fb:44:5f:d5:7a:a0:f4:a6:fa:48:ec:d8:
d6:ee:65:e6:d8:69:e1:e7:4a:4c:9e:17:06:f2:bd:
0b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:41:25:66:67:C6:6E:15:A6:D5:85:91:48:05:12:53:8B:B3:4C:4E
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/y0ElZmfGbhWm1YWRSAUSU4uzTE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.100.0/22
IPv6:
2a05:8780::/29
Signature Algorithm: sha256WithRSAEncryption
85:ed:cf:36:e1:57:78:b9:8f:73:45:b2:b9:10:a5:f8:7f:71:
e0:5b:65:85:b2:9a:36:12:26:38:69:d6:f5:ae:6a:dc:87:7a:
ba:11:61:10:74:85:23:72:56:39:11:93:bc:34:93:c4:08:50:
6a:ed:3e:bb:14:9a:e3:17:e6:88:fb:1f:99:9b:c0:4d:90:64:
1f:fa:12:fc:d1:a8:18:76:8f:40:28:b8:0a:26:ed:92:be:dd:
5a:76:7c:f5:58:bb:f9:d8:ad:93:a3:3b:db:81:39:76:d8:11:
4b:db:f7:ac:69:34:0a:c5:32:ce:28:d0:90:a2:30:80:a7:45:
8e:ec:86:41:4a:70:d9:ae:0f:20:85:fa:1b:c7:f4:5f:01:81:
09:4a:0f:82:6f:11:5d:09:54:8a:cd:4a:81:3d:7f:f3:6b:63:
cb:82:47:0d:c8:c4:17:ce:7d:26:64:62:41:bf:07:33:6e:ff:
94:0d:69:cb:fa:7c:5f:e2:59:1a:4b:22:a4:7d:19:84:4e:02:
26:d1:3c:b0:70:d7:01:28:21:14:3a:7b:b2:14:b3:ce:f2:50:
3b:7a:02:d9:e8:1d:9d:c6:0a:af:e4:ec:92:c1:96:4d:27:ca:
e2:69:1e:da:a7:28:aa:be:d9:f0:44:41:10:57:18:3c:c0:9d:
6d:5f:ec:3d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzJTZFXqD7/GEKk1bgkD0s9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MmRjMGQwOTk4YjgxMjZiYWJiOTc3NWFiNDBjMTYyZWY5
NmZhMmQwHhcNMjQwMTAyMDgzMjMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjQxMjU2NjY3YzY2ZTE1YTZkNTg1OTE0ODA1MTI1MzhiYjM0YzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHU/yKeiLHgR8e77XyB6Nm6Hul0C
VSMPGHJ2mh1dKIe3kXWmKW8G0wH2NnDM7TizCDnZaPKVFfeC5BgeGga8gQnWSlsu
MOkLd8/7qnR1StTNYZcU03ZGbQPpxK/eXRT10NYzRSN2cCteh/6BrpVuZyYH30Fl
VEdDa9hNT4SmtWkyvXHfrlb/rYNHI7wO2L7IFiG4yt5fzyIF5uY/1MFOEtlr86+E
A2K7L86owLB/99UtnTYBU9jWcNspnLT8KA0YCL9SdiAaUtqXcB9oPPKGXFOVL0Mh
O+qn+uQdEaGzs+b7Tdv7RF/VeqD0pvpI7NjW7mXm2Gnh50pMnhcG8r0LvwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMtBJWZnxm4VptWFkUgFElOLs0xOMB8GA1UdIwQY
MBaAFIUtwNCZi4EmuruXdatAwWLvlvotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xY2Q2Y2EtYzA1Mi00ZTNkLTk3NGQt
ZDMyZTU2ZDc5YjJhLzEveTBFbFptZkdiaFdtMVlXUlNBVVNVNHV6VEU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8xY2Q2Y2EtYzA1Mi00ZTNkLTk3NGQtZDMyZTU2ZDc5YjJh
LzEvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVFkMA0E
AgACMAcDBQMqBYeAMA0GCSqGSIb3DQEBCwUAA4IBAQCF7c824Vd4uY9zRbK5EKX4
f3HgW2WFspo2EiY4adb1rmrch3q6EWEQdIUjclY5EZO8NJPECFBq7T67FJrjF+aI
+x+Zm8BNkGQf+hL80agYdo9AKLgKJu2Svt1adnz1WLv52K2TozvbgTl22BFL2/es
aTQKxTLOKNCQojCAp0WO7IZBSnDZrg8ghfobx/RfAYEJSg+CbxFdCVSKzUqBPX/z
a2PLgkcNyMQXzn0mZGJBvwczbv+UDWnL+nxf4lkaSyKkfRmETgIm0TywcNcBKCEU
OnuyFLPO8lA7egLZ6B2dxgqv5OySwZZNJ8riaR7apyiqvtnwREEQVxg8wJ1tX+w9
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:46:18 2024 by rpki-client on console-fra.rpki-client.org