Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/4iuGq-VWGgHQhLj4nds89YHROaI.roa
File: 4iuGq-VWGgHQhLj4nds89YHROaI.roa (raw, json)
Hash identifier: 87WRFQXToutiGRbBy/iffGVB/EGVXGZhDbxq70sSagQ=
Subject key identifier: E2:2B:86:AB:E5:56:1A:01:D0:84:B8:F8:9D:DB:3C:F5:81:D1:39:A2
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 018CC8022FE3829AC11AF3AEE91AB8ED0A7A
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/4iuGq-VWGgHQhLj4nds89YHROaI.roa
Signing time: Tue 02 Jan 2024 02:30:35 +0000
ROA not before: Tue 02 Jan 2024 02:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 185.154.81.0/24 maxlen: 24
185.154.82.0/24 maxlen: 24
185.154.83.0/24 maxlen: 24
185.154.80.0/24 maxlen: 24
185.154.80.0/22 maxlen: 24
2a05:f500:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:2f:e3:82:9a:c1:1a:f3:ae:e9:1a:b8:ed:0a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Jan 2 02:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e22b86abe5561a01d084b8f89ddb3cf581d139a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:88:18:11:57:3b:dc:fa:ca:67:70:c4:88:bc:
bd:be:03:f7:44:ad:30:d1:fb:91:40:a9:dd:bf:aa:
d3:8a:bc:6f:b5:79:74:70:68:0a:2c:9e:fe:69:73:
49:05:0e:2e:f4:59:1c:71:ac:78:8a:e7:59:b5:c7:
bc:0c:de:05:f1:86:54:ab:92:ce:8a:8b:68:3c:f8:
ca:93:15:20:13:43:7b:55:41:bc:cb:68:95:9b:03:
a8:b8:84:4b:4a:62:38:1b:62:55:73:20:d8:ac:34:
3b:50:53:b3:d9:14:9e:37:de:d6:52:d3:0b:45:36:
93:c3:61:61:76:85:11:82:bb:5b:41:fc:41:da:67:
ba:be:f7:5f:1d:96:3e:92:1a:da:7c:38:e9:86:03:
4b:bd:63:c5:70:4b:2d:96:c7:60:38:f1:01:c8:12:
2d:1f:89:19:51:8a:cf:ad:09:21:02:e8:87:62:4b:
6a:7b:bd:5b:e1:e9:aa:68:6d:fe:03:7a:ae:41:70:
1e:d5:ce:01:3d:a6:12:5d:6a:1c:d3:20:e0:35:5c:
e8:f9:ef:5b:6e:42:e0:d2:c8:6b:3f:b4:aa:36:1a:
59:70:5b:0e:60:f7:8c:1d:94:19:45:cd:f2:90:89:
47:16:bc:f7:ef:eb:42:ec:aa:eb:5b:f1:d7:a0:87:
ae:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2B:86:AB:E5:56:1A:01:D0:84:B8:F8:9D:DB:3C:F5:81:D1:39:A2
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/4iuGq-VWGgHQhLj4nds89YHROaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.80.0/22
IPv6:
2a05:f500:2::/48
Signature Algorithm: sha256WithRSAEncryption
a5:1b:d8:ad:f4:a1:e9:1c:5e:3b:2c:c9:6f:6d:92:71:05:cd:
8b:f4:c1:56:23:c8:10:9b:75:6e:38:60:56:2d:93:d4:e2:15:
00:4a:34:c7:54:22:ae:b3:3f:2e:af:99:40:d3:a3:f9:7f:b5:
3f:62:ac:1f:9c:95:67:02:35:4f:17:4a:bd:55:d4:f0:50:6e:
f8:6d:e4:c2:c0:fc:d3:99:60:35:c9:bc:12:af:3a:bb:5a:a3:
c4:d1:7a:b2:d6:2e:40:41:1a:b7:13:87:1d:6e:c6:da:47:58:
3c:40:81:5a:5f:4d:fe:02:b0:be:05:cd:66:00:ac:6c:17:d1:
23:66:ac:86:00:50:2f:84:6e:c6:67:c7:9e:b8:a4:4a:cd:91:
f1:22:af:e0:0e:e6:ba:f2:d0:d9:25:54:d3:4a:0b:b2:c4:ed:
83:05:5d:1e:14:95:7d:f9:a0:37:75:14:dc:f9:ce:89:c0:9d:
c5:4d:3d:07:0e:2c:11:7c:28:8e:d3:55:3d:5b:bb:6e:ed:9d:
66:0d:bb:cb:10:5e:34:f0:54:50:e6:f5:d3:af:81:1f:59:7b:
8f:11:28:7b:01:16:f3:1d:f8:42:e4:ff:d5:3a:d8:1f:b0:42:
bc:b8:6d:63:83:04:25:ad:7f:d1:12:c7:cb:63:35:15:47:86:
b9:3c:c2:a7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzIAi/jgprBGvOu6Rq47Qp6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NTllYjYwNDAxOTNkZjA2ODEzNTA5MDVlNjM5ZDBlNThk
NWY5ZGYwHhcNMjQwMTAyMDIzMDM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjJiODZhYmU1NTYxYTAxZDA4NGI4Zjg5ZGRiM2NmNTgxZDEzOWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4gYEVc73PrKZ3DEiLy9vgP3RK0w
0fuRQKndv6rTirxvtXl0cGgKLJ7+aXNJBQ4u9Fkccax4iudZtce8DN4F8YZUq5LO
iotoPPjKkxUgE0N7VUG8y2iVmwOouIRLSmI4G2JVcyDYrDQ7UFOz2RSeN97WUtML
RTaTw2FhdoURgrtbQfxB2me6vvdfHZY+khrafDjphgNLvWPFcEstlsdgOPEByBIt
H4kZUYrPrQkhAuiHYktqe71b4emqaG3+A3quQXAe1c4BPaYSXWoc0yDgNVzo+e9b
bkLg0shrP7SqNhpZcFsOYPeMHZQZRc3ykIlHFrz37+tC7KrrW/HXoIeucQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOIrhqvlVhoB0IS4+J3bPPWB0TmiMB8GA1UdIwQY
MBaAFBZZ62BAGT3waBNQkF5jnQ5Y1fnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2Qt
NTQ0ODU1Y2M0ZjU3LzEvNGl1R3EtVldHZ0hRaExqNG5kczg5WUhST2FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2QtNTQ0ODU1Y2M0ZjU3
LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuZpQMA8E
AgACMAkDBwAqBfUAAAIwDQYJKoZIhvcNAQELBQADggEBAKUb2K30oekcXjssyW9t
knEFzYv0wVYjyBCbdW44YFYtk9TiFQBKNMdUIq6zPy6vmUDTo/l/tT9irB+clWcC
NU8XSr1V1PBQbvht5MLA/NOZYDXJvBKvOrtao8TRerLWLkBBGrcThx1uxtpHWDxA
gVpfTf4CsL4FzWYArGwX0SNmrIYAUC+EbsZnx564pErNkfEir+AO5rry0NklVNNK
C7LE7YMFXR4UlX35oDd1FNz5zonAncVNPQcOLBF8KI7TVT1bu27tnWYNu8sQXjTw
VFDm9dOvgR9Ze48RKHsBFvMd+ELk/9U62B+wQry4bWODBCWtf9ESx8tjNRVHhrk8
wqc=
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:24:42 2024 by rpki-client on console-fra.rpki-client.org