Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/Abyn5J8Lj0FZMp6p1DeMxTPCkok.roa
File: Abyn5J8Lj0FZMp6p1DeMxTPCkok.roa (raw, json)
Hash identifier: HJiNzKiFdHDOxC5SJlZoyo48N+fbZ/tUM2+K+vYkGYY=
Subject key identifier: 01:BC:A7:E4:9F:0B:8F:41:59:32:9E:A9:D4:37:8C:C5:33:C2:92:89
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 019306FC59AC3C3BDA8AA6A2B918D53611D6
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/Abyn5J8Lj0FZMp6p1DeMxTPCkok.roa
Signing time: Thu 07 Nov 2024 14:17:01 +0000
ROA not before: Thu 07 Nov 2024 14:17:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203993
IP address blocks: 185.54.92.0/22 maxlen: 24
185.54.92.0/23 maxlen: 23
2a00:8640::/29 maxlen: 48
2a00:8640::/32 maxlen: 32
2a00:8642::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:06:fc:59:ac:3c:3b:da:8a:a6:a2:b9:18:d5:36:11:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Nov 7 14:17:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01bca7e49f0b8f4159329ea9d4378cc533c29289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:88:f9:bd:42:81:30:7b:49:e4:78:6e:34:e7:
79:4b:75:98:85:88:9e:c5:6f:f9:af:92:18:25:0e:
9d:ef:f6:be:51:c6:ab:49:e7:bf:99:43:01:19:8c:
85:6f:d4:c8:7d:15:29:71:55:c0:d0:dd:70:b4:ad:
f0:33:b6:9b:fa:20:80:46:17:aa:00:b5:a7:3a:0c:
0d:e4:c2:70:d4:22:cb:7e:b4:44:6d:af:29:dc:44:
59:77:6a:c8:51:24:9f:77:80:69:e4:2b:b3:ce:5e:
fb:08:69:a4:34:ed:ff:ed:85:ec:ca:0e:d5:0b:42:
3b:ac:9e:3a:6f:62:76:28:49:0d:fe:4e:6d:41:00:
ab:7d:d0:84:54:7c:af:7c:05:4d:a3:59:9d:68:d2:
9f:f1:bc:99:52:d9:58:e5:08:0e:76:46:37:7a:ac:
26:08:c3:77:43:da:77:cd:9c:2f:09:46:ae:cf:40:
c4:bb:21:36:7f:b5:44:34:88:d6:3a:11:87:19:67:
d9:33:3e:a0:60:70:bf:ea:7a:c5:35:9c:f9:34:e4:
4d:3c:42:66:b5:23:7f:d4:5c:fa:0d:c5:8f:38:0c:
84:ec:b9:ee:44:4e:9c:c2:57:07:72:20:2e:f1:62:
55:3d:49:10:05:46:8a:62:89:cf:b8:bc:ea:44:36:
ba:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BC:A7:E4:9F:0B:8F:41:59:32:9E:A9:D4:37:8C:C5:33:C2:92:89
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/Abyn5J8Lj0FZMp6p1DeMxTPCkok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.92.0/22
IPv6:
2a00:8640::/29
Signature Algorithm: sha256WithRSAEncryption
9b:3d:b7:26:a8:dd:36:f9:11:c2:80:e1:b2:df:73:f9:97:9c:
04:e4:2e:48:9f:b7:24:7f:77:b2:73:8d:d4:70:14:3a:ab:c0:
52:7c:80:0b:5d:3d:06:f9:8b:a1:3a:9c:d0:64:7c:df:fd:31:
e7:4c:6e:c4:f5:ec:05:0f:1f:2b:11:49:57:fc:ee:6b:0f:79:
5d:e8:1a:1b:79:eb:de:c4:ab:77:d4:e3:c4:35:e4:b6:8d:c7:
c5:52:d3:2d:3e:17:a1:df:18:55:96:06:be:66:cd:c9:6c:ca:
d5:b2:36:75:6c:66:2a:c3:4d:7e:58:d0:fb:d3:2f:dc:f9:62:
e9:9a:8d:be:bf:14:c0:b5:50:3f:dd:a7:f8:64:74:f2:50:17:
f0:c3:9a:23:48:60:e2:ad:78:2a:b9:ee:7c:c9:5d:97:9d:8b:
36:94:74:ac:52:c2:3a:48:52:97:1c:bb:c6:8b:88:b5:86:45:
21:c0:67:75:87:70:23:3a:5f:44:ec:8f:e8:82:4e:e2:1b:6e:
fc:11:73:f8:9f:8a:d4:53:78:7c:e8:c5:56:e4:6f:da:43:bc:
fa:f6:d5:bb:0e:c5:3a:30:fa:50:5b:4c:52:73:6d:2f:f0:d0:
f2:28:3d:8b:52:c1:dc:72:ef:9b:3e:b6:2e:56:51:40:a2:7f:
e8:69:b8:b0
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZMG/FmsPDvaiqaiuRjVNhHWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MGIyODNhMDUxMzk0MGQ1MjBhNjgwYjhiM2QxNGRiYzM2
Nzc3MGQwHhcNMjQxMTA3MTQxNzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWJjYTdlNDlmMGI4ZjQxNTkzMjllYTlkNDM3OGNjNTMzYzI5Mjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIj5vUKBMHtJ5HhuNOd5S3WYhYie
xW/5r5IYJQ6d7/a+UcarSee/mUMBGYyFb9TIfRUpcVXA0N1wtK3wM7ab+iCARheq
ALWnOgwN5MJw1CLLfrREba8p3ERZd2rIUSSfd4Bp5Cuzzl77CGmkNO3/7YXsyg7V
C0I7rJ46b2J2KEkN/k5tQQCrfdCEVHyvfAVNo1mdaNKf8byZUtlY5QgOdkY3eqwm
CMN3Q9p3zZwvCUauz0DEuyE2f7VENIjWOhGHGWfZMz6gYHC/6nrFNZz5NORNPEJm
tSN/1Fz6DcWPOAyE7LnuRE6cwlcHciAu8WJVPUkQBUaKYonPuLzqRDa6qwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAG8p+SfC49BWTKeqdQ3jMUzwpKJMB8GA1UdIwQY
MBaAFDgLKDoFE5QNUgpoC4s9FNvDZ3cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEt
Y2NmNjQ1NGJiMjRjLzEvQWJ5bjVKOExqMEZaTXA2cDFEZU14VFBDa29rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEtY2NmNjQ1NGJiMjRj
LzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTZcMA0E
AgACMAcDBQMqAIZAMA0GCSqGSIb3DQEBCwUAA4IBAQCbPbcmqN02+RHCgOGy33P5
l5wE5C5In7ckf3eyc43UcBQ6q8BSfIALXT0G+YuhOpzQZHzf/THnTG7E9ewFDx8r
EUlX/O5rD3ld6BobeevexKt31OPENeS2jcfFUtMtPheh3xhVlga+Zs3JbMrVsjZ1
bGYqw01+WND70y/c+WLpmo2+vxTAtVA/3af4ZHTyUBfww5ojSGDirXgque58yV2X
nYs2lHSsUsI6SFKXHLvGi4i1hkUhwGd1h3AjOl9E7I/ogk7iG278EXP4n4rUU3h8
6MVW5G/aQ7z69tW7DsU6MPpQW0xSc20v8NDyKD2LUsHccu+bPrYuVlFAon/oabiw
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:50:03 2024 by rpki-client on console-ams.rpki-client.org