Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/K_XeRQ8mmBo7L9-H3KpSwHDRU6M.roa
File: K_XeRQ8mmBo7L9-H3KpSwHDRU6M.roa (raw, json)
Hash identifier: H75LPus8NTA0R5LjbDPGaD/jVGyXlxXkoIGx34LUK6E=
Subject key identifier: 2B:F5:DE:45:0F:26:98:1A:3B:2F:DF:87:DC:AA:52:C0:70:D1:53:A3
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 018CC2DAEEA7C6B2693218D5446C66D39379
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/K_XeRQ8mmBo7L9-H3KpSwHDRU6M.roa
Signing time: Mon 01 Jan 2024 02:29:36 +0000
ROA not before: Mon 01 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200845
IP address blocks: 185.240.166.0/24 maxlen: 24
185.240.165.0/24 maxlen: 24
185.240.167.0/24 maxlen: 24
45.85.180.0/22 maxlen: 22
194.31.1.0/24 maxlen: 24
194.30.165.0/24 maxlen: 24
194.30.161.0/24 maxlen: 24
194.30.183.0/24 maxlen: 24
185.227.218.0/24 maxlen: 24
185.227.217.0/24 maxlen: 24
185.227.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ee:a7:c6:b2:69:32:18:d5:44:6c:66:d3:93:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Jan 1 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bf5de450f26981a3b2fdf87dcaa52c070d153a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:5d:c8:53:2e:d8:d2:05:75:69:14:23:f3:
35:b6:16:1c:de:b4:95:ef:45:f3:5d:a5:40:f0:79:
1f:c2:a5:e0:4a:6c:4c:e6:0f:97:8d:2e:80:56:ac:
0b:51:23:ff:90:49:05:ca:3d:97:88:4b:84:3e:d0:
0f:4a:7b:8a:f1:fc:aa:f7:6b:95:39:cc:46:80:23:
aa:20:80:09:42:b9:32:d0:92:b2:83:24:1b:03:7d:
71:37:2a:aa:c7:ae:4a:7e:18:ff:15:3a:48:b1:cb:
2e:83:4e:0d:ab:fc:e1:b1:20:c1:f0:1b:90:b2:3d:
d8:d6:d4:c6:22:24:03:58:82:a1:d3:bd:0e:8a:1c:
15:a7:a9:8e:79:e1:e7:8e:84:d5:93:65:01:85:7e:
c7:51:ed:7d:8e:1f:66:f4:36:96:aa:f4:f8:46:8d:
8e:2a:72:82:16:50:1f:db:31:f6:d4:03:6e:13:87:
b5:89:a8:74:1c:3d:50:29:b4:22:99:57:10:dd:b1:
8d:31:5d:cb:66:54:d8:4c:2b:59:45:74:11:b8:c9:
22:f8:9f:8f:be:fe:1e:74:ca:41:83:4d:68:34:e9:
d1:23:11:fd:3b:f9:cc:6c:1c:0b:c3:eb:9f:8d:47:
3b:47:5a:f3:71:e8:65:e2:19:51:b8:13:17:42:2c:
03:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F5:DE:45:0F:26:98:1A:3B:2F:DF:87:DC:AA:52:C0:70:D1:53:A3
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/K_XeRQ8mmBo7L9-H3KpSwHDRU6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.180.0/22
185.227.216.0-185.227.218.255
185.240.165.0-185.240.167.255
194.30.161.0/24
194.30.165.0/24
194.30.183.0/24
194.31.1.0/24
Signature Algorithm: sha256WithRSAEncryption
78:2d:2c:f7:cb:f1:00:4b:d1:f5:21:95:b2:43:09:41:69:22:
0b:50:d4:3f:25:9e:82:5a:01:ff:8d:ef:e1:85:aa:4f:f6:e9:
3b:31:8d:9c:b2:2c:60:bc:48:63:e3:5f:dd:f2:f9:6f:51:14:
27:17:c3:bd:3f:57:31:a0:17:45:26:db:ae:1c:25:04:3b:06:
c3:2a:1c:00:ef:49:e4:8e:33:0f:08:fd:1a:f3:b7:69:f7:86:
2b:b6:75:df:04:e9:e8:24:cc:92:2e:17:ad:74:87:3e:d8:a9:
1c:9e:29:4c:95:94:1f:d3:89:21:f4:82:09:14:97:24:d3:b8:
52:ec:1b:d9:09:c8:d5:e4:cf:57:40:8d:48:e9:c7:23:85:9e:
16:5c:55:16:7c:77:20:6d:07:b0:dd:f8:e4:6a:d3:a2:fa:71:
4e:d7:14:91:51:1a:82:d5:e4:0d:28:5a:4f:7e:9c:8f:f1:59:
95:7e:45:56:46:de:f2:50:a5:a3:11:d1:22:b3:c0:18:84:9e:
9b:69:04:55:98:30:0a:48:2b:62:e0:fe:50:67:c0:a0:df:29:
ff:e2:3d:96:ce:0a:f6:5e:7d:69:86:ce:40:6b:f1:87:46:71:
5c:4d:cd:16:7b:f0:e3:fd:1c:ce:84:70:fc:62:e5:9d:b4:3c:
9e:16:45:be
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAYzC2u6nxrJpMhjVRGxm05N5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx
OWM0NDgwHhcNMjQwMTAxMDIyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmY1ZGU0NTBmMjY5ODFhM2IyZmRmODdkY2FhNTJjMDcwZDE1M2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn9dyFMu2NIFdWkUI/M1thYc3rSV
70XzXaVA8HkfwqXgSmxM5g+XjS6AVqwLUSP/kEkFyj2XiEuEPtAPSnuK8fyq92uV
OcxGgCOqIIAJQrky0JKygyQbA31xNyqqx65Kfhj/FTpIscsug04Nq/zhsSDB8BuQ
sj3Y1tTGIiQDWIKh070OihwVp6mOeeHnjoTVk2UBhX7HUe19jh9m9DaWqvT4Ro2O
KnKCFlAf2zH21ANuE4e1iah0HD1QKbQimVcQ3bGNMV3LZlTYTCtZRXQRuMki+J+P
vv4edMpBg01oNOnRIxH9O/nMbBwLw+ufjUc7R1rzcehl4hlRuBMXQiwDvwIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFCv13kUPJpgaOy/fh9yqUsBw0VOjMB8GA1UdIwQY
MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt
YWQyZmRhNDc5ODhlLzEvS19YZVJROG1tQm83TDktSDNLcFN3SERSVTZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl
LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQCLVW0MAwD
BAO549gDBAC549owDAMEALnwpQMEA7nwoAMEAMIeoQMEAMIepQMEAMIetwMEAMIf
ATANBgkqhkiG9w0BAQsFAAOCAQEAeC0s98vxAEvR9SGVskMJQWkiC1DUPyWegloB
/43v4YWqT/bpOzGNnLIsYLxIY+Nf3fL5b1EUJxfDvT9XMaAXRSbbrhwlBDsGwyoc
AO9J5I4zDwj9GvO3afeGK7Z13wTp6CTMki4XrXSHPtipHJ4pTJWUH9OJIfSCCRSX
JNO4Uuwb2QnI1eTPV0CNSOnHI4WeFlxVFnx3IG0HsN345GrTovpxTtcUkVEagtXk
DShaT36cj/FZlX5FVkbe8lCloxHRIrPAGISem2kEVZgwCkgrYuD+UGfAoN8p/+I9
ls4K9l59aYbOQGvxh0ZxXE3NFnvw4/0czoRw/GLlnbQ8nhZFvg==
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:56:16 2024 by rpki-client on console-ams.rpki-client.org