Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/lJeA9YT6QAPdchx7eVwOtpcXCi8.roa
File: lJeA9YT6QAPdchx7eVwOtpcXCi8.roa (raw, json)
Hash identifier: kmcExwTWTuv5UO9Y1X4Jm9k8HPdDRM82I7a7Ay6Ejeg=
Subject key identifier: 94:97:80:F5:84:FA:40:03:DD:72:1C:7B:79:5C:0E:B6:97:17:0A:2F
Certificate issuer: /CN=3816e19b24a7e8cff189fabac28852cd8748a380
Certificate serial: 018CC7949B50C684EABE7D66A00B42E83DF5
Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/lJeA9YT6QAPdchx7eVwOtpcXCi8.roa
Signing time: Tue 02 Jan 2024 00:30:54 +0000
ROA not before: Tue 02 Jan 2024 00:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50597
IP address blocks: 85.194.250.0/24 maxlen: 24
85.194.248.0/22 maxlen: 22
85.194.249.0/24 maxlen: 24
85.194.251.0/24 maxlen: 24
85.194.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:9b:50:c6:84:ea:be:7d:66:a0:0b:42:e8:3d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380
Validity
Not Before: Jan 2 00:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=949780f584fa4003dd721c7b795c0eb697170a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:68:37:87:42:0e:90:68:6e:2d:7f:46:54:c6:
17:e5:c3:cd:c3:2f:d6:b1:cb:3f:5d:ac:5e:9b:d5:
f0:01:b7:91:00:da:86:5e:7d:fd:d8:24:a1:a6:d0:
bf:32:ca:90:94:7c:8e:29:67:16:55:a0:cc:0a:bb:
1a:d0:b3:cd:f2:3e:f3:00:cb:0d:43:84:87:5f:8e:
09:83:70:0d:e7:45:a4:52:b3:d0:ed:dc:59:4b:66:
66:3a:0e:a2:8a:13:8d:62:36:f1:0d:78:1d:61:5d:
78:d3:3c:cc:c8:e1:1e:82:02:88:b4:ce:77:40:f9:
4b:10:9a:83:d1:73:9b:b6:7b:af:6a:05:dc:a6:c5:
1a:6b:b2:e4:94:1c:8e:81:b7:a2:18:4d:f8:b1:95:
7a:71:96:cf:05:be:52:f8:50:7f:e1:3b:12:9b:55:
d1:37:34:ca:d1:68:62:d4:a8:23:d5:eb:82:a6:58:
ea:d9:b5:94:d8:c4:1a:cf:d4:1d:9a:a5:a8:f2:9d:
b8:b9:47:30:87:25:5b:1f:27:4d:60:98:15:5f:58:
2c:eb:63:4f:7b:c1:60:e3:f9:de:e9:f3:88:9b:21:
16:21:e3:7e:55:b2:0c:d7:e0:4c:f0:12:e2:40:f0:
ad:38:45:b3:3f:97:81:7e:18:c9:d9:a2:f9:39:2d:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:97:80:F5:84:FA:40:03:DD:72:1C:7B:79:5C:0E:B6:97:17:0A:2F
X509v3 Authority Key Identifier:
keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/lJeA9YT6QAPdchx7eVwOtpcXCi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.194.248.0/22
Signature Algorithm: sha256WithRSAEncryption
13:2a:98:0e:54:e1:2e:f3:88:08:8f:1d:2b:f8:63:3d:57:fa:
62:1d:8a:c3:50:7e:11:14:0c:8a:b2:d1:05:ba:fd:f9:43:f4:
24:30:ce:73:dd:00:93:2c:c0:49:08:fe:98:79:c9:9d:3f:af:
86:7c:76:5c:5f:88:c4:a7:64:7c:fb:05:33:08:49:51:6d:00:
40:89:0b:d5:80:31:91:1a:c6:ff:0a:4b:7f:6b:43:01:01:1f:
c3:8b:fb:93:d8:7a:3a:0e:aa:40:0f:ad:b1:72:ec:3a:22:a5:
33:cb:53:b7:2f:a2:15:a2:0f:94:4e:e9:20:ca:b8:17:ad:d5:
09:10:4c:02:67:08:e9:6e:5e:bc:51:f8:97:0c:5d:63:ac:8c:
31:68:00:77:be:37:e4:df:6e:e6:d2:f2:a7:3e:30:77:ab:9c:
ef:df:06:39:af:e6:90:e7:01:83:0d:e7:be:64:02:87:0b:4f:
5e:82:ee:b3:8c:75:b3:68:09:db:10:12:4e:58:c7:fa:35:bd:
f3:15:bc:5e:8c:88:ba:66:4e:27:7f:f1:fe:d7:ba:86:fb:d2:
2e:f6:56:0a:74:ab:07:10:f6:c4:01:1c:35:ef:9f:2d:77:6f:
e9:6d:93:83:ad:17:46:21:22:de:8c:81:f9:69:d4:d9:95:b8:
91:01:2e:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlJtQxoTqvn1moAtC6D31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MTZlMTliMjRhN2U4Y2ZmMTg5ZmFiYWMyODg1MmNkODc0
OGEzODAwHhcNMjQwMTAyMDAzMDU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDk3ODBmNTg0ZmE0MDAzZGQ3MjFjN2I3OTVjMGViNjk3MTcwYTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2g3h0IOkGhuLX9GVMYX5cPNwy/W
scs/Xaxem9XwAbeRANqGXn392CShptC/MsqQlHyOKWcWVaDMCrsa0LPN8j7zAMsN
Q4SHX44Jg3AN50WkUrPQ7dxZS2ZmOg6iihONYjbxDXgdYV140zzMyOEeggKItM53
QPlLEJqD0XObtnuvagXcpsUaa7LklByOgbeiGE34sZV6cZbPBb5S+FB/4TsSm1XR
NzTK0Whi1Kgj1euCpljq2bWU2MQaz9QdmqWo8p24uUcwhyVbHydNYJgVX1gs62NP
e8Fg4/ne6fOImyEWIeN+VbIM1+BM8BLiQPCtOEWzP5eBfhjJ2aL5OS0SbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJSXgPWE+kAD3XIce3lcDraXFwovMB8GA1UdIwQY
MBaAFDgW4Zskp+jP8Yn6usKIUs2HSKOAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kNjEyNzUtZTAwYS00YmZiLWJlOGEt
MTZiMzZkMDgwMWU5LzEvbEplQTlZVDZRQVBkY2h4N2VWd090cGNYQ2k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9kNjEyNzUtZTAwYS00YmZiLWJlOGEtMTZiMzZkMDgwMWU5
LzEvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVcL4MA0G
CSqGSIb3DQEBCwUAA4IBAQATKpgOVOEu84gIjx0r+GM9V/piHYrDUH4RFAyKstEF
uv35Q/QkMM5z3QCTLMBJCP6YecmdP6+GfHZcX4jEp2R8+wUzCElRbQBAiQvVgDGR
Gsb/Ckt/a0MBAR/Di/uT2Ho6DqpAD62xcuw6IqUzy1O3L6IVog+UTukgyrgXrdUJ
EEwCZwjpbl68UfiXDF1jrIwxaAB3vjfk327m0vKnPjB3q5zv3wY5r+aQ5wGDDee+
ZAKHC09egu6zjHWzaAnbEBJOWMf6Nb3zFbxejIi6Zk4nf/H+17qG+9Iu9lYKdKsH
EPbEARw1758td2/pbZODrRdGISLejIH5adTZlbiRAS6o
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:58:31 2024 by rpki-client on console-ams.rpki-client.org