Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/1w8aTD013opsDDsCDIyMaQXF2eY.roa
File: 1w8aTD013opsDDsCDIyMaQXF2eY.roa (raw, json)
Hash identifier: P5HRvB1g3lLUVpTm9yKbpJd5sVg6euIafgYq6PluSrk=
Subject key identifier: D7:0F:1A:4C:3D:35:DE:8A:6C:0C:3B:02:0C:8C:8C:69:05:C5:D9:E6
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 018F4C5AEBFD118F29D2DEB61BFA7FF5FF89
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/1w8aTD013opsDDsCDIyMaQXF2eY.roa
Signing time: Mon 06 May 2024 05:22:58 +0000
ROA not before: Mon 06 May 2024 05:22:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398826
IP address blocks: 104.160.18.0/24 maxlen: 24
104.160.19.0/24 maxlen: 24
104.160.20.0/24 maxlen: 24
104.160.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 22:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4c:5a:eb:fd:11:8f:29:d2:de:b6:1b:fa:7f:f5:ff:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: May 6 05:22:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d70f1a4c3d35de8a6c0c3b020c8c8c6905c5d9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:e9:77:60:a0:c2:bc:58:ed:58:8d:63:c0:
c2:8d:2d:a7:98:1c:ab:50:31:f0:32:f9:8f:c5:90:
b5:01:4e:88:c7:0a:aa:ac:62:4e:26:6c:d8:b4:78:
fa:47:d8:be:d0:82:8c:45:93:15:32:02:f7:6e:57:
d6:e4:ad:a7:68:f8:16:05:7e:87:ab:22:53:5c:84:
70:f8:36:a8:50:c3:9f:da:08:ba:d7:67:42:5a:03:
c5:5e:19:a0:c9:34:d5:85:8e:df:2a:45:68:da:ee:
25:83:96:c5:06:15:59:16:44:a9:9f:76:3d:3e:66:
95:9a:33:9f:1b:3e:cc:1d:73:e0:b0:f3:17:47:b3:
c9:1c:a6:57:27:c2:8b:cc:c5:8f:61:cd:16:e2:0a:
fd:8f:cc:e9:bc:37:9f:c4:6e:5d:f4:ee:ee:12:87:
02:3a:ed:cb:e5:e1:4d:40:e2:73:23:6d:a6:03:ba:
a6:fb:6d:7a:01:83:8f:eb:55:17:13:57:ae:40:6e:
ba:3b:c8:0e:3a:e4:1f:60:8e:11:3c:ab:91:1c:20:
01:fd:5c:95:e0:f4:33:ba:6c:30:ab:8e:fb:72:5d:
aa:b5:79:ac:4e:f5:17:ef:a3:5f:62:8a:2c:8e:c6:
4e:77:5c:ae:95:bb:01:f7:21:6d:f4:ad:79:1f:8d:
b1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0F:1A:4C:3D:35:DE:8A:6C:0C:3B:02:0C:8C:8C:69:05:C5:D9:E6
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/1w8aTD013opsDDsCDIyMaQXF2eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.160.18.0-104.160.21.255
Signature Algorithm: sha256WithRSAEncryption
0c:b5:b9:e8:55:cf:4e:16:94:43:ae:df:26:f5:a0:96:e0:bf:
ba:5c:3f:8a:79:c1:e6:04:98:d0:6f:a3:a2:6b:d8:96:e3:94:
2b:c1:e2:25:39:b9:ef:c1:ce:86:56:3f:22:96:7e:67:a4:0a:
e5:dd:1d:26:a6:ff:8b:ee:ff:d8:4e:7f:13:f6:b5:42:a5:19:
89:42:0f:c5:fe:fa:cc:1a:aa:2a:3f:07:63:44:0e:9d:aa:10:
07:7f:70:af:c5:7f:8a:06:9e:45:fd:e4:03:af:39:cb:d9:eb:
dd:0e:47:d4:40:d9:1e:44:92:57:7e:30:9d:c0:3e:23:de:aa:
e6:d8:66:f9:cf:56:c5:7a:cb:7d:77:4b:34:92:87:45:d2:39:
74:f2:67:f0:ac:ae:65:a2:0a:2b:b2:9e:08:6e:ee:f9:9e:cc:
d1:95:f5:a0:71:13:8f:e7:03:97:2a:84:49:c9:ec:9a:7a:ab:
a2:35:28:d3:a1:3e:04:51:0d:88:9a:a9:2e:71:6b:83:76:d7:
77:35:91:95:7f:21:f9:45:16:db:bd:c1:d6:e6:0c:31:22:08:
5f:aa:04:e1:11:24:51:e7:1b:ff:dc:a2:9d:4b:de:cf:46:0c:
32:9a:e4:6f:f6:d0:58:1f:53:0d:2f:cd:08:2b:ed:4d:72:1f:
8a:89:b1:95
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAY9MWuv9EY8p0t62G/p/9f+JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy
MDdmZDIwHhcNMjQwNTA2MDUyMjU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzBmMWE0YzNkMzVkZThhNmMwYzNiMDIwYzhjOGM2OTA1YzVkOWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQzpd2CgwrxY7ViNY8DCjS2nmByr
UDHwMvmPxZC1AU6IxwqqrGJOJmzYtHj6R9i+0IKMRZMVMgL3blfW5K2naPgWBX6H
qyJTXIRw+DaoUMOf2gi612dCWgPFXhmgyTTVhY7fKkVo2u4lg5bFBhVZFkSpn3Y9
PmaVmjOfGz7MHXPgsPMXR7PJHKZXJ8KLzMWPYc0W4gr9j8zpvDefxG5d9O7uEocC
Ou3L5eFNQOJzI22mA7qm+216AYOP61UXE1euQG66O8gOOuQfYI4RPKuRHCAB/VyV
4PQzumwwq477cl2qtXmsTvUX76NfYoosjsZOd1yulbsB9yFt9K15H42xIwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNcPGkw9Nd6KbAw7AgyMjGkFxdnmMB8GA1UdIwQY
MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt
MTVmMTNlM2Y3ZDg1LzEvMXc4YVREMDEzb3BzRERzQ0RJeU1hUVhGMmVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1
LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFooBID
BAFooBQwDQYJKoZIhvcNAQELBQADggEBAAy1uehVz04WlEOu3yb1oJbgv7pcP4p5
weYEmNBvo6Jr2JbjlCvB4iU5ue/BzoZWPyKWfmekCuXdHSam/4vu/9hOfxP2tUKl
GYlCD8X++swaqio/B2NEDp2qEAd/cK/Ff4oGnkX95AOvOcvZ690OR9RA2R5Ekld+
MJ3APiPequbYZvnPVsV6y313SzSSh0XSOXTyZ/CsrmWiCiuynghu7vmezNGV9aBx
E4/nA5cqhEnJ7Jp6q6I1KNOhPgRRDYiaqS5xa4N213c1kZV/IflFFtu9wdbmDDEi
CF+qBOERJFHnG//cop1L3s9GDDKa5G/20FgfUw0vzQgr7U1yH4qJsZU=
-----END CERTIFICATE-----
Generated at Mon Jul 1 07:27:28 2024 by rpki-client on console-ams.rpki-client.org