Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/_t8XawAzMMEIsI1hBOjjaEm5C4s.roa
File: _t8XawAzMMEIsI1hBOjjaEm5C4s.roa (raw, json)
Hash identifier: ARRaAOph6CXNbsDFGklB87pjDRr7/r6pl4yR3UC+HdA=
Subject key identifier: FE:DF:17:6B:00:33:30:C1:08:B0:8D:61:04:E8:E3:68:49:B9:0B:8B
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 018CC9BC996443EE28C5E764D03C6452FF08
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/_t8XawAzMMEIsI1hBOjjaEm5C4s.roa
Signing time: Tue 02 Jan 2024 10:33:49 +0000
ROA not before: Tue 02 Jan 2024 10:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51025
IP address blocks: 185.115.3.0/24 maxlen: 24
185.115.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:99:64:43:ee:28:c5:e7:64:d0:3c:64:52:ff:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Jan 2 10:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fedf176b003330c108b08d6104e8e36849b90b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:69:6b:06:3f:82:a2:4d:9b:7a:bc:9b:44:eb:
a4:23:14:40:14:bc:d2:69:f4:c6:ba:9e:d3:53:cc:
73:6b:0d:3a:9e:16:11:2e:bd:8e:0b:4a:b4:fd:e7:
d9:7a:76:21:e4:10:d3:09:26:1f:a7:4d:69:22:12:
d6:fe:d2:19:4f:1a:c4:3a:98:35:c9:3e:e1:c2:7b:
3c:7b:91:28:f4:62:e5:1d:21:3e:92:1a:a4:94:01:
92:42:05:34:39:67:4e:30:18:cf:4a:b3:cd:25:2a:
8f:e4:c7:4e:49:93:6c:b2:0b:fa:7f:df:70:27:4c:
d1:56:50:a3:ad:00:b5:7a:32:88:75:93:ee:2b:95:
ce:32:9a:05:96:fe:a7:14:dd:e9:52:66:d8:3e:50:
a8:32:01:47:f3:52:05:42:b3:26:11:0f:3f:1c:09:
a4:fe:d3:9b:63:7a:cf:c8:03:af:4d:04:f7:93:86:
b8:6a:7e:82:ae:3c:cf:de:c8:0e:23:d0:69:4e:9a:
e0:a7:11:a5:0a:51:61:b7:d5:4c:c1:4f:51:f0:6e:
c3:8c:76:0f:23:0a:95:08:ca:19:ba:43:1c:bc:59:
2b:be:46:16:20:5b:57:5b:76:95:35:79:e2:cd:d7:
cb:b6:58:87:9c:cf:c6:2b:14:4a:ae:12:4b:f9:66:
09:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DF:17:6B:00:33:30:C1:08:B0:8D:61:04:E8:E3:68:49:B9:0B:8B
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/_t8XawAzMMEIsI1hBOjjaEm5C4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.0.0/22
Signature Algorithm: sha256WithRSAEncryption
52:0b:8e:cf:c2:2e:f4:1d:1f:56:51:d8:8c:e6:28:12:75:14:
91:0a:27:26:f2:70:f8:f0:23:6d:a3:db:6d:b7:fb:d4:45:b1:
ae:2d:2e:41:69:d6:31:0d:4c:b5:4e:f2:01:fb:c5:eb:ff:96:
a0:f2:26:f8:c2:fc:ba:14:ee:e5:6a:87:9a:22:a5:0e:9e:82:
c5:c2:58:b5:44:5a:25:f6:c7:dc:b4:b2:94:31:3c:f4:8d:37:
44:24:93:c2:79:39:f5:ed:0f:80:44:29:96:d3:4c:50:a4:5e:
75:7f:df:96:04:97:ac:da:2d:65:c5:7c:9f:95:2d:20:47:a9:
38:5e:64:07:64:a2:71:4f:df:07:50:d8:68:b7:c2:3c:1f:11:
94:27:ef:09:be:9f:28:24:14:5d:03:9a:d7:f7:24:48:7c:e8:
d1:dc:42:57:5b:9b:2b:25:f9:ec:28:ae:69:7a:5b:ae:aa:82:
2e:6e:df:f9:f7:ad:dc:4d:95:2a:fb:fb:97:9d:ca:32:bf:45:
75:72:03:61:07:fc:f5:3e:19:d9:f1:40:74:bb:23:8e:96:75:
61:2f:69:79:35:28:0d:fd:6d:27:5c:8f:0b:63:8b:93:29:cf:
0b:cb:d6:b4:19:22:9c:dd:1f:c3:a1:6c:7d:ee:e2:25:30:99:
51:22:c6:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvJlkQ+4oxedk0DxkUv8IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNjVkYWIyMzk0MGNiMzk0ZjlhYWE2NjRmZWE0ZDZmOGY0
MmUzMTgwHhcNMjQwMTAyMTAzMzQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWRmMTc2YjAwMzMzMGMxMDhiMDhkNjEwNGU4ZTM2ODQ5YjkwYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmlrBj+Cok2berybROukIxRAFLzS
afTGup7TU8xzaw06nhYRLr2OC0q0/efZenYh5BDTCSYfp01pIhLW/tIZTxrEOpg1
yT7hwns8e5Eo9GLlHSE+khqklAGSQgU0OWdOMBjPSrPNJSqP5MdOSZNssgv6f99w
J0zRVlCjrQC1ejKIdZPuK5XOMpoFlv6nFN3pUmbYPlCoMgFH81IFQrMmEQ8/HAmk
/tObY3rPyAOvTQT3k4a4an6CrjzP3sgOI9BpTprgpxGlClFht9VMwU9R8G7DjHYP
IwqVCMoZukMcvFkrvkYWIFtXW3aVNXnizdfLtliHnM/GKxRKrhJL+WYJtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP7fF2sAMzDBCLCNYQTo42hJuQuLMB8GA1UdIwQY
MBaAFH5l2rI5QMs5T5qqZk/qTW+PQuMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYt
ODQ5Y2ZjYWJiNjU3LzEvX3Q4WGF3QXpNTUVJc0kxaEJPamphRW01QzRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYtODQ5Y2ZjYWJiNjU3
LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXMAMA0G
CSqGSIb3DQEBCwUAA4IBAQBSC47Pwi70HR9WUdiM5igSdRSRCicm8nD48CNto9tt
t/vURbGuLS5BadYxDUy1TvIB+8Xr/5ag8ib4wvy6FO7laoeaIqUOnoLFwli1RFol
9sfctLKUMTz0jTdEJJPCeTn17Q+ARCmW00xQpF51f9+WBJes2i1lxXyflS0gR6k4
XmQHZKJxT98HUNhot8I8HxGUJ+8Jvp8oJBRdA5rX9yRIfOjR3EJXW5srJfnsKK5p
eluuqoIubt/5963cTZUq+/uXncoyv0V1cgNhB/z1PhnZ8UB0uyOOlnVhL2l5NSgN
/W0nXI8LY4uTKc8Ly9a0GSKc3R/DoWx97uIlMJlRIsap
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:44:56 2024 by rpki-client on console-ams.rpki-client.org