Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/jARvkSbeYIhQGtDNJotkyRHUCRI.roa
File: jARvkSbeYIhQGtDNJotkyRHUCRI.roa (raw, json)
Hash identifier: GdEZfMcAthU+UzblGc3OSxkyCf3scMp9I4+iyIxkxYM=
Subject key identifier: 8C:04:6F:91:26:DE:60:88:50:1A:D0:CD:26:8B:64:C9:11:D4:09:12
Certificate issuer: /CN=3816e19b24a7e8cff189fabac28852cd8748a380
Certificate serial: 018D17F902D0A72469D728C0E1B8FB8865B6
Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/jARvkSbeYIhQGtDNJotkyRHUCRI.roa
Signing time: Wed 17 Jan 2024 15:10:11 +0000
ROA not before: Wed 17 Jan 2024 15:10:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 85.194.248.0/22 maxlen: 24
185.33.45.0/24 maxlen: 24
185.33.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:17:f9:02:d0:a7:24:69:d7:28:c0:e1:b8:fb:88:65:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380
Validity
Not Before: Jan 17 15:10:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c046f9126de6088501ad0cd268b64c911d40912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:10:ca:5f:af:7a:22:1d:65:b9:e8:9a:8c:55:
1e:81:b0:d4:2e:5e:87:db:a7:f3:06:5f:8d:ee:98:
86:e2:8f:a2:d9:20:1e:38:60:3a:27:98:9e:cf:fc:
d7:18:af:13:e8:fb:70:fa:ad:ed:48:6c:27:3b:ab:
4b:75:1b:77:92:71:21:90:59:bd:dc:ad:8f:ea:00:
8d:3e:53:0b:77:f5:92:f5:7b:ac:38:83:06:a7:6b:
bb:06:bb:e4:12:f4:e4:1a:ac:98:25:41:88:ee:64:
31:77:49:95:b4:56:97:40:62:9d:c2:2f:af:23:a9:
1d:56:40:8e:2f:50:38:d8:4e:09:f0:19:a5:08:cc:
3e:44:ab:e3:9b:96:fd:e2:d3:c1:28:6c:0f:e5:dd:
8e:90:17:6f:ad:9f:58:6d:a8:cf:13:08:8d:31:90:
40:15:3a:0c:a8:5c:f1:0a:26:70:87:f6:3c:6f:83:
a6:75:86:07:17:66:be:29:d5:03:b6:97:7b:67:0a:
98:0f:2f:ea:a9:24:e2:cf:d3:20:65:f3:fd:02:ef:
04:9e:38:c8:b4:50:d4:98:11:d5:35:e7:b6:65:15:
22:ae:d6:8c:13:02:15:56:68:7f:34:b4:ab:5e:ed:
ea:45:e6:21:db:45:4e:e5:5a:d9:82:d0:c4:e1:d4:
a1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:04:6F:91:26:DE:60:88:50:1A:D0:CD:26:8B:64:C9:11:D4:09:12
X509v3 Authority Key Identifier:
keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/jARvkSbeYIhQGtDNJotkyRHUCRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.194.248.0/22
185.33.45.0-185.33.46.255
Signature Algorithm: sha256WithRSAEncryption
46:e0:69:1a:44:cd:bd:d2:f9:9d:4e:bd:3e:29:7e:ad:15:f9:
65:bd:25:fd:ff:91:6a:8f:6f:d2:8d:30:0b:1c:2d:c1:e5:3f:
91:27:a7:2f:28:7b:7b:e6:1b:f0:9f:7d:5e:78:20:c1:9f:53:
f1:bf:c4:2b:57:1e:04:ae:e3:67:dd:43:9d:62:9d:4a:5d:70:
09:df:bf:a7:98:46:f3:12:1e:0b:54:03:98:f6:f1:07:c9:bb:
e9:86:db:17:4f:bc:fd:a9:e1:89:40:64:ab:92:29:bf:bf:92:
f3:67:44:f7:fc:6c:eb:45:7a:e4:58:2e:30:23:44:26:62:44:
f2:9a:56:ed:0b:e7:4a:a4:e4:85:98:2d:64:fe:96:c8:a3:32:
9d:36:1c:dd:a7:e5:49:ea:39:c3:e4:3d:7f:6d:23:e9:f0:53:
ea:10:71:0e:32:9e:bf:b7:5b:0a:7a:87:29:9a:42:65:aa:a2:
67:66:1a:40:d7:97:28:98:c5:c0:ff:2e:dc:94:df:8d:51:74:
c8:95:73:1b:9f:ff:13:0b:51:a8:73:b7:fa:60:55:e5:f0:8c:
1c:44:9d:87:90:58:b4:6f:4c:65:7b:1e:f3:2a:d4:fb:f3:b7:
67:52:c8:c0:0a:d8:24:f0:9f:e5:bd:50:a7:96:75:73:ca:e3:
fa:10:71:0d
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAY0X+QLQpyRp1yjA4bj7iGW2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MTZlMTliMjRhN2U4Y2ZmMTg5ZmFiYWMyODg1MmNkODc0
OGEzODAwHhcNMjQwMTE3MTUxMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzA0NmY5MTI2ZGU2MDg4NTAxYWQwY2QyNjhiNjRjOTExZDQwOTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBDKX696Ih1lueiajFUegbDULl6H
26fzBl+N7piG4o+i2SAeOGA6J5iez/zXGK8T6Ptw+q3tSGwnO6tLdRt3knEhkFm9
3K2P6gCNPlMLd/WS9XusOIMGp2u7BrvkEvTkGqyYJUGI7mQxd0mVtFaXQGKdwi+v
I6kdVkCOL1A42E4J8BmlCMw+RKvjm5b94tPBKGwP5d2OkBdvrZ9YbajPEwiNMZBA
FToMqFzxCiZwh/Y8b4OmdYYHF2a+KdUDtpd7ZwqYDy/qqSTiz9MgZfP9Au8EnjjI
tFDUmBHVNee2ZRUirtaMEwIVVmh/NLSrXu3qReYh20VO5VrZgtDE4dShwwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFIwEb5Em3mCIUBrQzSaLZMkR1AkSMB8GA1UdIwQY
MBaAFDgW4Zskp+jP8Yn6usKIUs2HSKOAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kNjEyNzUtZTAwYS00YmZiLWJlOGEt
MTZiMzZkMDgwMWU5LzEvakFSdmtTYmVZSWhRR3RETkpvdGt5UkhVQ1JJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9kNjEyNzUtZTAwYS00YmZiLWJlOGEtMTZiMzZkMDgwMWU5
LzEvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCVcL4MAwD
BAC5IS0DBAC5IS4wDQYJKoZIhvcNAQELBQADggEBAEbgaRpEzb3S+Z1OvT4pfq0V
+WW9Jf3/kWqPb9KNMAscLcHlP5Enpy8oe3vmG/CffV54IMGfU/G/xCtXHgSu42fd
Q51inUpdcAnfv6eYRvMSHgtUA5j28QfJu+mG2xdPvP2p4YlAZKuSKb+/kvNnRPf8
bOtFeuRYLjAjRCZiRPKaVu0L50qk5IWYLWT+lsijMp02HN2n5UnqOcPkPX9tI+nw
U+oQcQ4ynr+3Wwp6hymaQmWqomdmGkDXlyiYxcD/LtyU341RdMiVcxuf/xMLUahz
t/pgVeXwjBxEnYeQWLRvTGV7HvMq1Pvzt2dSyMAK2CTwn+W9UKeWdXPK4/oQcQ0=
-----END CERTIFICATE-----
Generated at Thu May 2 17:53:18 2024 by rpki-client on console-ams.rpki-client.org