Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/8pJgLWYwGlvgVL6OSGxx6kVKNpY.roa
File: 8pJgLWYwGlvgVL6OSGxx6kVKNpY.roa (raw, json)
Hash identifier: mr27OFiWHZzcC9RfU0Px0xTMLFeYdX52TM6Qsk6ZOR0=
Subject key identifier: F2:92:60:2D:66:30:1A:5B:E0:54:BE:8E:48:6C:71:EA:45:4A:36:96
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B72762BA5DCDEF1F8EC84367F65022
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/8pJgLWYwGlvgVL6OSGxx6kVKNpY.roa
Signing time: Mon 01 Jan 2024 06:30:09 +0000
ROA not before: Mon 01 Jan 2024 06:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2280
IP address blocks: 90.84.154.0/24 maxlen: 24
90.84.155.0/24 maxlen: 24
90.84.154.0/23 maxlen: 23
90.84.11.0/24 maxlen: 24
90.84.16.0/21 maxlen: 24
90.84.15.0/24 maxlen: 24
90.84.14.0/24 maxlen: 24
90.84.240.0/21 maxlen: 24
90.84.251.0/24 maxlen: 24
90.84.253.0/24 maxlen: 24
90.84.252.0/24 maxlen: 24
90.84.40.0/21 maxlen: 24
90.84.254.0/24 maxlen: 24
90.84.39.0/24 maxlen: 24
90.84.168.0/21 maxlen: 24
90.84.176.0/21 maxlen: 24
90.84.184.0/24 maxlen: 24
90.84.184.0/21 maxlen: 24
90.84.192.0/21 maxlen: 24
2a01:c9c0:8000::/48 maxlen: 48
2a01:c9c0:800f::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:27:62:ba:5d:cd:ef:1f:8e:c8:43:67:f6:50:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f292602d66301a5be054be8e486c71ea454a3696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:90:22:ed:36:2c:6b:d5:05:7d:a1:31:c6:
45:2f:ec:70:d0:39:6f:d6:36:f1:33:f7:5b:bb:88:
da:77:b7:49:19:cb:be:25:78:10:42:43:84:2e:5b:
8b:4d:a9:75:40:5b:fd:4b:67:b6:f7:60:5c:f7:de:
22:39:2d:55:80:75:ec:24:a7:27:1c:00:d2:e9:62:
8d:2f:23:75:2a:f4:20:9a:f2:6d:a8:26:52:1e:a0:
bf:2b:85:7e:dc:a6:d9:7a:26:c8:fa:56:52:18:63:
6f:2b:38:ee:14:79:e6:ed:b3:3e:38:7d:8c:d8:62:
c1:b7:d7:32:e2:3d:cf:66:7b:83:18:43:f9:f2:43:
2d:4b:54:38:eb:0f:ff:01:3c:80:07:e2:4f:c0:3d:
70:44:d4:66:6e:64:68:dc:7a:14:12:e3:76:87:77:
51:66:67:06:e5:13:46:01:61:45:e2:2c:b4:9f:36:
d5:9a:65:5d:83:d5:a2:d0:4a:08:d6:cc:95:34:79:
ce:28:51:8b:7a:ac:a2:33:e2:01:c3:f1:48:44:c0:
cd:39:32:7a:29:89:29:90:c3:8d:eb:ae:02:b2:bb:
87:17:4d:15:ec:ac:14:72:ea:7b:f9:fa:59:f6:31:
c4:bf:9c:37:bd:ac:58:db:74:59:b6:3f:23:38:b3:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:92:60:2D:66:30:1A:5B:E0:54:BE:8E:48:6C:71:EA:45:4A:36:96
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/8pJgLWYwGlvgVL6OSGxx6kVKNpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.84.11.0/24
90.84.14.0-90.84.23.255
90.84.39.0-90.84.47.255
90.84.154.0/23
90.84.168.0-90.84.199.255
90.84.240.0/21
90.84.251.0-90.84.254.255
IPv6:
2a01:c9c0:8000::/48
2a01:c9c0:800f::/48
Signature Algorithm: sha256WithRSAEncryption
94:f5:c1:73:24:ae:9b:2d:a2:03:61:ef:54:1f:9a:c9:c3:af:
97:3c:e4:ca:42:9d:48:2e:68:a6:49:44:f8:66:f4:1a:b2:42:
1d:6c:e8:bc:9b:75:8a:9a:9d:04:68:fb:ba:aa:e9:a8:22:d0:
ac:3a:c9:90:67:d8:73:73:b5:73:cb:e6:ab:8d:1e:35:41:b7:
34:80:a6:fe:e6:4f:50:22:55:ea:da:ff:46:7f:57:da:31:12:
6a:8d:bc:e7:ed:4a:1f:b2:1a:24:5b:2c:d6:0a:41:2a:9b:08:
fe:c0:bd:74:7d:c8:35:9c:3d:c8:35:f2:07:35:6f:67:bb:04:
b2:52:e5:02:ee:42:ed:52:b6:3e:e3:85:d6:0f:43:05:01:59:
6f:f8:4d:a8:6b:ae:c2:48:80:1f:6b:84:cc:69:08:96:dc:46:
27:54:c1:d0:6a:d8:db:30:30:4b:53:de:72:8a:16:ac:b8:bb:
8c:39:53:da:ea:a6:b7:f0:c9:33:50:f6:ac:0a:a7:70:21:50:
d6:47:66:d1:e0:1f:9a:fa:a5:e6:2f:e0:ca:10:78:4b:8e:62:
4d:f3:ab:c8:f5:32:3d:00:ce:3a:dc:ba:40:f0:7c:81:a4:aa:
bc:21:1b:fe:f1:8a:3c:c1:34:b6:5f:46:1a:ba:fb:60:c2:a6:
b3:87:0c:b5
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgISAYzDtydiul3N7x+OyENn9lAiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjQwMTAxMDYzMDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjkyNjAyZDY2MzAxYTViZTA1NGJlOGU0ODZjNzFlYTQ1NGEzNjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyOQIu02LGvVBX2hMcZFL+xw0Dlv
1jbxM/dbu4jad7dJGcu+JXgQQkOELluLTal1QFv9S2e292Bc994iOS1VgHXsJKcn
HADS6WKNLyN1KvQgmvJtqCZSHqC/K4V+3KbZeibI+lZSGGNvKzjuFHnm7bM+OH2M
2GLBt9cy4j3PZnuDGEP58kMtS1Q46w//ATyAB+JPwD1wRNRmbmRo3HoUEuN2h3dR
ZmcG5RNGAWFF4iy0nzbVmmVdg9Wi0EoI1syVNHnOKFGLeqyiM+IBw/FIRMDNOTJ6
KYkpkMON664CsruHF00V7KwUcup7+fpZ9jHEv5w3vaxY23RZtj8jOLOavQIDAQAB
o4ICZzCCAmMwHQYDVR0OBBYEFPKSYC1mMBpb4FS+jkhscepFSjaWMB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvOHBKZ0xXWXdHbHZnVkw2T1NHeHg2a1ZLTnBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBQBAIAATBKAwQAWlQLMAwD
BAFaVA4DBANaVBAwDAMEAFpUJwMEBFpUIAMEAVpUmjAMAwQDWlSoAwQDWlTAAwQD
WlTwMAwDBABaVPsDBABaVP4wGAQCAAIwEgMHACoBycCAAAMHACoBycCADzANBgkq
hkiG9w0BAQsFAAOCAQEAlPXBcySumy2iA2HvVB+aycOvlzzkykKdSC5opklE+Gb0
GrJCHWzovJt1ipqdBGj7uqrpqCLQrDrJkGfYc3O1c8vmq40eNUG3NICm/uZPUCJV
6tr/Rn9X2jESao285+1KH7IaJFss1gpBKpsI/sC9dH3INZw9yDXyBzVvZ7sEslLl
Au5C7VK2PuOF1g9DBQFZb/hNqGuuwkiAH2uEzGkIltxGJ1TB0GrY2zAwS1PecooW
rLi7jDlT2uqmt/DJM1D2rAqncCFQ1kdm0eAfmvql5i/gyhB4S45iTfOryPUyPQDO
Oty6QPB8gaSqvCEb/vGKPME0tl9GGrr7YMKms4cMtQ==
-----END CERTIFICATE-----
Generated at Sun May 19 21:17:40 2024 by rpki-client on console-ams.rpki-client.org