Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/2GXuCurRAHWsSi2BTl8KqBoiDR4.roa
File: 2GXuCurRAHWsSi2BTl8KqBoiDR4.roa (raw, json)
Hash identifier: HkB5+4lE9Y47YSofLnusnf2mlaKOjSAKYlCxpITsIlU=
Subject key identifier: D8:65:EE:0A:EA:D1:00:75:AC:4A:2D:81:4E:5F:0A:A8:1A:22:0D:1E
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FE7ED2A87E7418B867DCE97821933
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/2GXuCurRAHWsSi2BTl8KqBoiDR4.roa
Signing time: Tue 02 Jan 2024 04:30:26 +0000
ROA not before: Tue 02 Jan 2024 04:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12978
IP address blocks: 85.153.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 20:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:e7:ed:2a:87:e7:41:8b:86:7d:ce:97:82:19:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d865ee0aead10075ac4a2d814e5f0aa81a220d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c7:51:c6:ee:83:83:1c:21:9f:e3:de:81:bb:
23:3d:23:a8:60:04:7b:90:4f:4a:c9:ec:59:8a:c3:
9a:9c:ae:28:e1:f8:12:ba:8f:9c:9b:9d:a2:cb:40:
85:a1:f1:8e:c4:4f:ec:46:30:d3:9f:a1:bb:8c:8d:
c6:1b:5b:2a:d6:fd:ec:64:7f:aa:59:27:8d:4c:76:
8d:a1:90:90:ea:7a:35:3a:72:47:0b:66:7a:e7:45:
72:75:1d:82:17:df:25:28:47:e0:14:ab:b5:42:b2:
0b:be:93:46:2b:05:b1:4b:fd:11:6b:f2:b9:ec:f7:
6d:77:0d:4a:76:e2:6a:ce:69:02:20:97:99:80:b3:
67:6c:5f:6c:f7:b1:fd:63:21:15:28:ff:8d:38:6d:
5d:c1:b0:d2:61:52:89:e5:d0:4f:4c:88:35:d4:61:
20:d2:dd:5e:c1:90:e8:0a:9f:13:f9:02:9a:16:7b:
e3:86:41:ab:18:98:dd:43:0d:9d:6a:91:62:24:24:
88:c9:e6:a3:14:91:3f:7c:d0:6e:cb:0a:90:26:17:
bb:ac:e0:ac:c1:f6:f1:83:8d:29:9b:01:4d:78:21:
64:7e:c1:c6:15:26:4a:57:6d:fc:bf:b2:9d:26:9c:
5d:15:46:b7:22:f2:fc:bd:d0:07:26:93:a9:5e:69:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:65:EE:0A:EA:D1:00:75:AC:4A:2D:81:4E:5F:0A:A8:1A:22:0D:1E
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/2GXuCurRAHWsSi2BTl8KqBoiDR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.160.0/24
Signature Algorithm: sha256WithRSAEncryption
73:38:1f:3d:ad:27:23:89:cc:8a:54:d1:48:86:34:65:fa:df:
ea:34:a2:25:7f:f2:f8:a0:fe:88:f2:45:f6:38:0c:92:83:79:
de:6e:c4:01:ea:78:07:cc:af:4a:89:d7:3c:f4:b4:34:28:35:
0a:d4:15:7c:9c:96:6f:c0:d9:1c:53:93:b7:44:7a:a3:48:ea:
1f:85:97:51:15:18:92:5d:31:48:11:e0:10:4c:71:c3:63:69:
c3:89:28:a3:e5:1c:68:5a:eb:e3:b3:f3:53:23:e0:63:63:c6:
d6:e8:e4:c4:3b:3c:a5:e0:a7:5b:95:85:99:d3:13:4d:ce:69:
de:49:b3:61:39:2f:83:30:17:1f:19:47:fe:71:2a:67:b2:00:
c7:6b:92:f7:7e:8f:c3:7a:4e:9c:65:94:e5:a5:9a:31:eb:da:
06:09:01:40:de:40:5b:df:ba:7f:f6:98:b7:87:38:d0:e9:b5:
b6:a0:ad:05:73:55:40:95:e5:4d:f7:ca:6b:8f:9a:62:78:db:
0f:d6:51:c6:b2:a9:95:fc:85:0c:f0:6b:76:64:13:07:47:5c:
0c:b9:60:4c:e1:73:b1:4d:e5:9c:d8:3f:75:4d:a9:a0:db:ea:
a5:8f:53:93:e1:15:ef:9a:60:b5:44:bc:e6:0e:a6:6d:3d:67:
46:f4:21:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb+ftKofnQYuGfc6XghkzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm
YmQzZTkwHhcNMjQwMTAyMDQzMDI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODY1ZWUwYWVhZDEwMDc1YWM0YTJkODE0ZTVmMGFhODFhMjIwZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsdRxu6Dgxwhn+PegbsjPSOoYAR7
kE9KyexZisOanK4o4fgSuo+cm52iy0CFofGOxE/sRjDTn6G7jI3GG1sq1v3sZH+q
WSeNTHaNoZCQ6no1OnJHC2Z650VydR2CF98lKEfgFKu1QrILvpNGKwWxS/0Ra/K5
7Pdtdw1KduJqzmkCIJeZgLNnbF9s97H9YyEVKP+NOG1dwbDSYVKJ5dBPTIg11GEg
0t1ewZDoCp8T+QKaFnvjhkGrGJjdQw2dapFiJCSIyeajFJE/fNBuywqQJhe7rOCs
wfbxg40pmwFNeCFkfsHGFSZKV238v7KdJpxdFUa3IvL8vdAHJpOpXmnK/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNhl7grq0QB1rEotgU5fCqgaIg0eMB8GA1UdIwQY
MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt
ZjJiZTlmNmM2NjRjLzEvMkdYdUN1clJBSFdzU2kyQlRsOEtxQm9pRFI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj
LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVZmgMA0G
CSqGSIb3DQEBCwUAA4IBAQBzOB89rScjicyKVNFIhjRl+t/qNKIlf/L4oP6I8kX2
OAySg3nebsQB6ngHzK9Kidc89LQ0KDUK1BV8nJZvwNkcU5O3RHqjSOofhZdRFRiS
XTFIEeAQTHHDY2nDiSij5RxoWuvjs/NTI+BjY8bW6OTEOzyl4KdblYWZ0xNNzmne
SbNhOS+DMBcfGUf+cSpnsgDHa5L3fo/Dek6cZZTlpZox69oGCQFA3kBb37p/9pi3
hzjQ6bW2oK0Fc1VAleVN98prj5pieNsP1lHGsqmV/IUM8Gt2ZBMHR1wMuWBM4XOx
TeWc2D91Tamg2+qlj1OT4RXvmmC1RLzmDqZtPWdG9CET
-----END CERTIFICATE-----
Generated at Fri Jun 28 05:03:00 2024 by rpki-client on console-fra.rpki-client.org