Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/hSFk2rjI1wkVqPD4RBTDdAmMLos.roa
File: hSFk2rjI1wkVqPD4RBTDdAmMLos.roa (raw, json)
Hash identifier: iojePfKpwYIaT/LmxnJlPy36VGj+1Qz5RW4P3fm1dHE=
Subject key identifier: 85:21:64:DA:B8:C8:D7:09:15:A8:F0:F8:44:14:C3:74:09:8C:2E:8B
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 018CC49397058F4282687E360D12BD4DFE50
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/hSFk2rjI1wkVqPD4RBTDdAmMLos.roa
Signing time: Mon 01 Jan 2024 10:30:55 +0000
ROA not before: Mon 01 Jan 2024 10:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203993
IP address blocks: 185.54.92.0/22 maxlen: 24
2a00:8640::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:97:05:8f:42:82:68:7e:36:0d:12:bd:4d:fe:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Jan 1 10:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=852164dab8c8d70915a8f0f84414c374098c2e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b6:09:0c:e5:fa:21:0a:28:ba:c0:d6:9f:73:
d8:df:bb:e5:6c:37:49:02:fa:03:f1:e6:3b:3d:c5:
bc:19:14:b3:7d:9b:28:f7:c0:1c:28:40:c0:b4:0c:
c0:c1:32:79:ec:77:2c:00:51:b3:b3:26:16:6f:ee:
15:3e:5e:bb:20:53:2c:78:9c:a4:d0:d0:06:ca:be:
4d:ff:70:e7:b7:08:df:c2:c1:18:7e:96:35:9e:01:
e1:4a:c4:df:8c:c4:bc:76:f8:e3:9a:86:04:0f:b2:
5b:a0:6c:0a:2c:1c:6c:ea:68:e7:1c:f7:81:75:a4:
13:c2:a8:2a:73:fb:6b:5a:e3:38:66:5f:03:41:ae:
f8:e6:b7:82:50:59:99:48:55:f1:d0:0b:b9:20:37:
85:86:fe:29:c2:1a:bd:84:4c:5e:48:14:90:6e:a5:
01:91:0a:9c:54:05:bd:3b:e6:7d:88:d1:87:24:bf:
ed:99:ec:c9:41:d1:9a:65:85:e0:06:1e:64:ec:0f:
a9:c8:35:de:b1:a0:5a:a5:9c:55:8f:77:1d:bd:e6:
71:ae:57:e1:50:6b:c3:f3:02:da:d8:d2:95:cf:19:
74:fa:e1:c1:7d:10:13:25:ab:96:5d:a9:e3:e3:73:
dc:26:75:12:a0:a7:e4:f2:f5:91:84:d5:02:4f:41:
0d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:21:64:DA:B8:C8:D7:09:15:A8:F0:F8:44:14:C3:74:09:8C:2E:8B
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/hSFk2rjI1wkVqPD4RBTDdAmMLos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.92.0/22
IPv6:
2a00:8640::/29
Signature Algorithm: sha256WithRSAEncryption
30:75:ce:66:29:97:cc:b2:ef:5b:e7:b5:c1:f7:ae:97:4c:93:
fc:52:55:17:79:cf:66:51:c6:9a:ba:71:0e:85:a9:8c:e0:c4:
20:a9:93:29:12:f8:0a:a5:35:d2:5e:0d:bc:ee:56:a2:c8:45:
14:13:90:5a:27:b6:09:72:8c:fb:2f:b9:50:24:d4:f0:53:62:
85:14:fb:75:3d:a3:3f:da:10:6f:eb:36:ed:ef:b8:7a:88:f9:
05:03:0e:2b:d2:ca:46:82:ff:a7:de:81:c0:af:79:17:28:6f:
fa:88:a1:0f:90:27:19:22:f9:56:a6:1d:9a:ad:0e:a8:7f:78:
b9:bb:6f:ca:0c:6b:49:1d:89:ad:d3:fe:be:03:63:60:83:83:
1b:87:1a:f0:c2:af:0d:64:5f:78:d3:d9:10:db:9b:16:cf:56:
15:4a:1b:ab:c2:71:a5:e4:30:be:6c:b6:41:7d:33:3a:85:5b:
8b:0c:4d:35:a2:da:87:c2:14:3f:67:7b:fe:b0:4a:f6:81:72:
38:c5:bf:8d:5f:96:54:19:e8:05:99:0d:83:bf:b8:55:55:0a:
45:10:26:82:2a:d0:86:7e:ec:dc:89:ac:0f:8c:a7:ab:bc:f6:
71:aa:d5:d6:ec:46:94:55:36:77:34:a0:86:94:04:61:5f:70:
30:8f:81:9e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzEk5cFj0KCaH42DRK9Tf5QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MGIyODNhMDUxMzk0MGQ1MjBhNjgwYjhiM2QxNGRiYzM2
Nzc3MGQwHhcNMjQwMTAxMTAzMDU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTIxNjRkYWI4YzhkNzA5MTVhOGYwZjg0NDE0YzM3NDA5OGMyZThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7YJDOX6IQoousDWn3PY37vlbDdJ
AvoD8eY7PcW8GRSzfZso98AcKEDAtAzAwTJ57HcsAFGzsyYWb+4VPl67IFMseJyk
0NAGyr5N/3DntwjfwsEYfpY1ngHhSsTfjMS8dvjjmoYED7JboGwKLBxs6mjnHPeB
daQTwqgqc/trWuM4Zl8DQa745reCUFmZSFXx0Au5IDeFhv4pwhq9hExeSBSQbqUB
kQqcVAW9O+Z9iNGHJL/tmezJQdGaZYXgBh5k7A+pyDXesaBapZxVj3cdveZxrlfh
UGvD8wLa2NKVzxl0+uHBfRATJauWXanj43PcJnUSoKfk8vWRhNUCT0ENIwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIUhZNq4yNcJFajw+EQUw3QJjC6LMB8GA1UdIwQY
MBaAFDgLKDoFE5QNUgpoC4s9FNvDZ3cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEt
Y2NmNjQ1NGJiMjRjLzEvaFNGazJyakkxd2tWcVBENFJCVERkQW1NTG9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEtY2NmNjQ1NGJiMjRj
LzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTZcMA0E
AgACMAcDBQMqAIZAMA0GCSqGSIb3DQEBCwUAA4IBAQAwdc5mKZfMsu9b57XB966X
TJP8UlUXec9mUcaaunEOhamM4MQgqZMpEvgKpTXSXg287laiyEUUE5BaJ7YJcoz7
L7lQJNTwU2KFFPt1PaM/2hBv6zbt77h6iPkFAw4r0spGgv+n3oHAr3kXKG/6iKEP
kCcZIvlWph2arQ6of3i5u2/KDGtJHYmt0/6+A2Ngg4Mbhxrwwq8NZF9409kQ25sW
z1YVShurwnGl5DC+bLZBfTM6hVuLDE01otqHwhQ/Z3v+sEr2gXI4xb+NX5ZUGegF
mQ2Dv7hVVQpFECaCKtCGfuzciawPjKervPZxqtXW7EaUVTZ3NKCGlARhX3Awj4Ge
-----END CERTIFICATE-----
Generated at Fri May 17 23:51:28 2024 by rpki-client on console-fra.rpki-client.org