Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/oX4o2t3IyCGtopPmMRaLBz2wCog.roa
File: oX4o2t3IyCGtopPmMRaLBz2wCog.roa (raw, json)
Hash identifier: vFveu7fYsODvIAUSFj1Ct/bp0SvKtsDD2w3/gftbob0=
Subject key identifier: A1:7E:28:DA:DD:C8:C8:21:AD:A2:93:E6:31:16:8B:07:3D:B0:0A:88
Certificate issuer: /CN=54f87b5a62c1ff0f522812e9add1756bc73384c5
Certificate serial: 018CC26CF25DCDCC93D8BEAAB667D30483D5
Authority key identifier: 54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/oX4o2t3IyCGtopPmMRaLBz2wCog.roa
Signing time: Mon 01 Jan 2024 00:29:28 +0000
ROA not before: Mon 01 Jan 2024 00:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20546
IP address blocks: 185.192.168.0/24 maxlen: 24
185.192.169.0/24 maxlen: 24
93.191.164.0/24 maxlen: 24
93.191.165.0/24 maxlen: 24
93.191.166.0/24 maxlen: 24
93.191.160.0/24 maxlen: 24
93.191.161.0/24 maxlen: 24
93.191.162.0/24 maxlen: 24
93.191.163.0/24 maxlen: 24
93.191.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f2:5d:cd:cc:93:d8:be:aa:b6:67:d3:04:83:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f87b5a62c1ff0f522812e9add1756bc73384c5
Validity
Not Before: Jan 1 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a17e28daddc8c821ada293e631168b073db00a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:cb:4a:3c:bf:9b:55:0a:b7:74:3b:cb:9b:
29:c5:1d:fa:61:7d:94:73:b2:68:93:4e:69:ae:46:
ce:8a:e5:74:90:45:99:bc:cc:44:59:e9:17:ae:1f:
03:bf:ed:51:8d:c6:d6:57:4e:49:6c:75:84:9c:90:
2a:43:c5:91:76:89:08:40:5b:e2:f0:fb:c0:f5:d4:
49:9a:49:5f:20:28:5c:b0:64:19:95:5c:78:dc:e7:
24:7b:d0:80:c3:ae:9a:de:86:e8:b0:23:79:1a:66:
11:b4:64:f1:2b:b4:7b:c3:e3:55:14:a3:f4:2c:4d:
7b:40:69:49:39:7a:6c:29:79:ca:9e:21:93:6a:9d:
83:a8:f2:f4:c3:33:b4:a7:8b:d2:87:a8:4f:ac:87:
03:75:5f:a3:7e:22:ca:60:e5:6b:49:64:31:c0:db:
c6:fa:23:37:e7:02:46:d4:65:07:55:5d:5c:15:c0:
64:e9:43:4e:d5:75:d4:6c:4b:60:19:0b:6b:94:c3:
8f:a8:54:67:bb:9d:66:7c:d4:29:86:44:49:df:3a:
e7:e3:a5:98:83:c2:0c:2c:3c:71:64:92:5b:44:95:
fb:09:1c:96:cb:6e:19:42:15:3d:14:aa:7a:44:eb:
e2:0b:ee:65:00:9d:3f:1d:ea:83:b8:0b:f1:21:9e:
fe:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7E:28:DA:DD:C8:C8:21:AD:A2:93:E6:31:16:8B:07:3D:B0:0A:88
X509v3 Authority Key Identifier:
keyid:54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/oX4o2t3IyCGtopPmMRaLBz2wCog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.160.0/21
185.192.168.0/23
Signature Algorithm: sha256WithRSAEncryption
61:81:a6:e1:50:c6:43:4f:2c:71:0f:8d:4f:59:0c:6b:b5:e3:
53:71:ac:b7:d6:3f:c5:9e:94:b4:d2:46:fc:1c:fb:60:7f:32:
97:81:4a:f8:7c:eb:58:5d:ab:a7:10:b3:f8:92:20:17:7c:74:
31:65:00:33:91:84:c3:a0:ff:c3:81:9c:47:8d:9f:f5:b6:a0:
55:a1:da:b9:be:86:6b:8e:75:2c:4e:4c:d2:d8:36:16:d3:81:
76:1d:b9:f7:f7:65:4d:11:c6:31:8e:52:22:a4:f5:07:fd:8d:
b5:1b:02:32:dc:ba:e8:3d:45:0a:f5:6a:23:1a:8c:92:dc:9b:
51:dd:c2:2e:c7:0c:09:dc:76:73:96:a1:fa:33:5d:56:81:b7:
02:ef:c2:ae:f5:64:fa:82:10:3a:db:a7:8d:06:ff:fa:f7:10:
8e:b5:c8:e1:e3:51:aa:09:c0:10:6d:c6:59:75:3b:ed:e5:cb:
6a:f9:89:2e:b1:42:b9:4f:31:35:48:f8:27:37:9a:bb:62:63:
ee:df:42:2f:f1:aa:2d:05:0d:e5:69:f2:23:3f:c2:5c:c1:b4:
5a:4d:2c:b5:67:6a:e0:1c:04:df:e8:cb:da:ea:25:c1:75:19:
1c:7d:48:9c:df:09:ce:02:64:b4:e3:b9:af:47:b3:bd:2c:6d:
1b:a4:d6:c1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzCbPJdzcyT2L6qtmfTBIPVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Zjg3YjVhNjJjMWZmMGY1MjI4MTJlOWFkZDE3NTZiYzcz
Mzg0YzUwHhcNMjQwMTAxMDAyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTdlMjhkYWRkYzhjODIxYWRhMjkzZTYzMTE2OGIwNzNkYjAwYTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTLLSjy/m1UKt3Q7y5spxR36YX2U
c7Jok05prkbOiuV0kEWZvMxEWekXrh8Dv+1RjcbWV05JbHWEnJAqQ8WRdokIQFvi
8PvA9dRJmklfIChcsGQZlVx43Ocke9CAw66a3obosCN5GmYRtGTxK7R7w+NVFKP0
LE17QGlJOXpsKXnKniGTap2DqPL0wzO0p4vSh6hPrIcDdV+jfiLKYOVrSWQxwNvG
+iM35wJG1GUHVV1cFcBk6UNO1XXUbEtgGQtrlMOPqFRnu51mfNQphkRJ3zrn46WY
g8IMLDxxZJJbRJX7CRyWy24ZQhU9FKp6ROviC+5lAJ0/HeqDuAvxIZ7+xwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKF+KNrdyMghraKT5jEWiwc9sAqIMB8GA1UdIwQY
MBaAFFT4e1piwf8PUigS6a3RdWvHM4TFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlBoN1dtTEJfdzlTS0JMcHJkRjFhOGN6aE1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yY2M0MTktOGUzNC00MWE5LWIyNDMt
ODU1NDE4ZmZlZDQxLzEvb1g0bzJ0M0l5Q0d0b3BQbU1SYUxCejJ3Q29nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8yY2M0MTktOGUzNC00MWE5LWIyNDMtODU1NDE4ZmZlZDQx
LzEvVlBoN1dtTEJfdzlTS0JMcHJkRjFhOGN6aE1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDXb+gAwQB
ucCoMA0GCSqGSIb3DQEBCwUAA4IBAQBhgabhUMZDTyxxD41PWQxrteNTcay31j/F
npS00kb8HPtgfzKXgUr4fOtYXaunELP4kiAXfHQxZQAzkYTDoP/DgZxHjZ/1tqBV
odq5voZrjnUsTkzS2DYW04F2Hbn392VNEcYxjlIipPUH/Y21GwIy3LroPUUK9Woj
GoyS3JtR3cIuxwwJ3HZzlqH6M11WgbcC78Ku9WT6ghA626eNBv/69xCOtcjh41Gq
CcAQbcZZdTvt5ctq+YkusUK5TzE1SPgnN5q7YmPu30Iv8aotBQ3lafIjP8JcwbRa
TSy1Z2rgHATf6Mva6iXBdRkcfUic3wnOAmS047mvR7O9LG0bpNbB
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:53:11 2024 by rpki-client on console-fra.rpki-client.org