Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/hTTCmh1UcyopJFkoyUgMTXQ7a8w.roa
File: hTTCmh1UcyopJFkoyUgMTXQ7a8w.roa (raw, json)
Hash identifier: aOsb36izmWB8oDavAmPCDcdTUfb7xZPzMNLSX2x/qtA=
Subject key identifier: 85:34:C2:9A:1D:54:73:2A:29:24:59:28:C9:48:0C:4D:74:3B:6B:CC
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 018CC56E1E72763032EB1E671CD9C7247B35
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/hTTCmh1UcyopJFkoyUgMTXQ7a8w.roa
Signing time: Mon 01 Jan 2024 14:29:37 +0000
ROA not before: Mon 01 Jan 2024 14:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43833
IP address blocks: 185.250.196.0/23 maxlen: 23
89.29.203.0/24 maxlen: 24
193.177.212.0/22 maxlen: 22
80.254.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:1e:72:76:30:32:eb:1e:67:1c:d9:c7:24:7b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Jan 1 14:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8534c29a1d54732a29245928c9480c4d743b6bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:99:ea:f9:8e:43:fd:22:77:59:82:af:22:
97:68:21:a4:fe:84:de:1b:41:23:6b:e2:48:bb:a4:
eb:6c:d2:59:84:c5:d2:97:6e:d9:15:1e:06:20:e1:
ff:39:14:de:f6:38:00:c1:88:75:ac:d6:31:63:1a:
11:2f:98:d4:f5:bf:9e:76:55:6f:41:4a:7d:c6:9e:
9e:65:a6:94:e2:20:74:11:e9:39:71:fa:b8:4e:84:
0f:5e:b9:50:e7:ae:a5:1e:d5:26:4b:48:cd:f3:50:
74:b1:37:a8:f0:bd:42:88:5d:1b:20:46:0f:c4:f7:
16:1a:6f:b4:d7:d8:81:54:5a:c9:bd:29:d7:4d:a7:
d6:a7:81:5c:1a:3b:75:2f:4b:c4:ec:ec:3c:b4:27:
49:80:ff:44:32:82:1c:e7:f8:7e:77:22:6d:80:ce:
cd:52:55:33:d2:50:82:09:87:05:5c:01:3d:51:ae:
1a:e1:a9:59:b9:f3:6c:c7:13:25:ea:62:e3:3f:97:
7d:49:1f:72:ff:70:ea:10:01:27:c2:90:c6:01:4b:
c9:a0:92:1f:5f:ec:5b:0f:31:6b:8c:b3:03:17:b2:
6c:6b:a4:b9:1e:26:d5:2c:d2:3e:8e:94:07:b1:4b:
b9:82:2a:29:04:46:12:84:06:7e:bd:59:2b:26:5e:
04:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:34:C2:9A:1D:54:73:2A:29:24:59:28:C9:48:0C:4D:74:3B:6B:CC
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/hTTCmh1UcyopJFkoyUgMTXQ7a8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.224.0/22
89.29.203.0/24
185.250.196.0/23
193.177.212.0/22
Signature Algorithm: sha256WithRSAEncryption
15:61:d0:07:fb:3b:e0:32:43:9b:e5:9c:e0:32:92:fd:80:66:
73:18:86:e7:b2:ab:bf:f2:a3:29:9d:a7:c4:9e:b5:8a:6d:6d:
6c:62:41:b7:b1:c2:1b:3a:5a:71:9b:2a:61:2d:f2:b3:7d:44:
bd:49:76:07:c4:0f:2b:8c:08:c7:cf:7e:23:29:85:67:e8:75:
7a:cd:ce:7f:bc:cd:03:d4:a1:d8:8c:c3:24:0c:de:82:07:67:
e1:2f:ef:d1:ea:00:23:66:cf:f6:5a:bb:81:46:28:45:fd:13:
d5:1c:98:c1:7e:bc:5a:86:4e:eb:48:4a:25:7b:77:93:ea:29:
5a:70:dd:6c:c7:b6:83:05:f1:60:58:a9:30:da:e3:dc:fc:f1:
cb:a1:d8:94:03:42:47:96:28:f7:18:87:b6:2f:72:0f:7a:4d:
28:82:07:6a:c0:e7:7d:6b:93:78:8d:ac:f1:9d:ce:c3:b3:f5:
14:11:ca:57:e4:86:07:f6:aa:2a:d0:25:f8:d6:6e:6c:c0:14:
a0:30:6e:ab:96:c1:83:bf:ed:8d:3d:6c:34:2a:d7:ae:80:1b:
e8:e3:4a:4b:c8:4d:42:fd:c7:7d:f4:d5:cb:c0:90:3f:df:81:
ea:62:99:9f:ce:2f:40:50:67:b3:0a:11:6c:91:02:19:42:46:
c0:57:90:48
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzFbh5ydjAy6x5nHNnHJHs1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MmM0MTVkMTc3NWFlOTk5M2U5MDBhNzUzNmI0NmFiMTQ0
YTlhYTIwHhcNMjQwMTAxMTQyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTM0YzI5YTFkNTQ3MzJhMjkyNDU5MjhjOTQ4MGM0ZDc0M2I2YmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqaZ6vmOQ/0id1mCryKXaCGk/oTe
G0Eja+JIu6TrbNJZhMXSl27ZFR4GIOH/ORTe9jgAwYh1rNYxYxoRL5jU9b+edlVv
QUp9xp6eZaaU4iB0Eek5cfq4ToQPXrlQ566lHtUmS0jN81B0sTeo8L1CiF0bIEYP
xPcWGm+019iBVFrJvSnXTafWp4FcGjt1L0vE7Ow8tCdJgP9EMoIc5/h+dyJtgM7N
UlUz0lCCCYcFXAE9Ua4a4alZufNsxxMl6mLjP5d9SR9y/3DqEAEnwpDGAUvJoJIf
X+xbDzFrjLMDF7Jsa6S5HibVLNI+jpQHsUu5giopBEYShAZ+vVkrJl4EgwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIU0wpodVHMqKSRZKMlIDE10O2vMMB8GA1UdIwQY
MBaAFOksQV0Xda6Zk+kAp1NrRqsUSpqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQt
MWQ5MzRhMDQ4NDc0LzEvaFRUQ21oMVVjeW9wSkZrb3lVZ01UWFE3YTh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQtMWQ5MzRhMDQ4NDc0
LzEvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCUP7gAwQA
WR3LAwQBufrEAwQCwbHUMA0GCSqGSIb3DQEBCwUAA4IBAQAVYdAH+zvgMkOb5Zzg
MpL9gGZzGIbnsqu/8qMpnafEnrWKbW1sYkG3scIbOlpxmyphLfKzfUS9SXYHxA8r
jAjHz34jKYVn6HV6zc5/vM0D1KHYjMMkDN6CB2fhL+/R6gAjZs/2WruBRihF/RPV
HJjBfrxahk7rSEole3eT6ilacN1sx7aDBfFgWKkw2uPc/PHLodiUA0JHlij3GIe2
L3IPek0oggdqwOd9a5N4jazxnc7Ds/UUEcpX5IYH9qoq0CX41m5swBSgMG6rlsGD
v+2NPWw0KteugBvo40pLyE1C/cd99NXLwJA/34HqYpmfzi9AUGezChFskQIZQkbA
V5BI
-----END CERTIFICATE-----
Generated at Sat May 25 19:03:08 2024 by rpki-client on console-fra.rpki-client.org