Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/v4z5Ez-NN-DEvbZaUDhQtfh6mI0.roa
File: v4z5Ez-NN-DEvbZaUDhQtfh6mI0.roa (raw, json)
Hash identifier: iYmzuoNhvitPqQQb3reqF3E0UQXPjfLhqoT+3aAaJWI=
Subject key identifier: BF:8C:F9:13:3F:8D:37:E0:C4:BD:B6:5A:50:38:50:B5:F8:7A:98:8D
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 018CC64B29CC4B6B8A1F40D658C37FF3F22A
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/v4z5Ez-NN-DEvbZaUDhQtfh6mI0.roa
Signing time: Mon 01 Jan 2024 18:31:03 +0000
ROA not before: Mon 01 Jan 2024 18:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59729
IP address blocks: 185.82.216.0/22 maxlen: 22
195.123.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:29:cc:4b:6b:8a:1f:40:d6:58:c3:7f:f3:f2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Jan 1 18:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf8cf9133f8d37e0c4bdb65a503850b5f87a988d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:0e:1f:fd:8f:2d:04:a8:6d:ee:a1:d6:88:
3b:10:aa:fd:63:85:f8:9d:48:02:d8:65:86:06:c7:
82:1d:7e:e4:c5:27:37:f2:c0:da:6b:38:04:b8:6a:
8f:35:6e:2f:23:5b:f1:98:4a:a6:2f:1d:d8:38:29:
3f:8c:e0:16:a8:8f:af:d6:e4:82:ff:5a:53:a3:e0:
cb:21:20:5a:83:14:f2:e3:f3:d3:8d:26:ad:5c:37:
d1:81:75:3a:49:5e:72:8e:c7:72:a4:4d:e5:bd:ce:
c9:f4:80:de:a9:d8:1c:40:23:e7:5c:dc:2a:ec:3c:
14:94:ed:92:b6:86:ad:cb:34:a1:aa:7e:9c:55:72:
27:51:ca:cb:40:1c:71:7b:d7:e8:48:cd:ac:eb:d7:
60:4a:81:71:bb:0b:e3:93:c9:c6:52:07:83:f3:2c:
2e:d5:3c:6d:b5:bd:01:b9:3b:fb:a9:0e:bc:18:f9:
83:af:5d:fb:94:ef:b3:ab:50:02:d7:65:2b:1d:62:
1e:e2:5d:29:bc:c6:c7:47:f9:5b:cf:92:b9:b3:c1:
ad:e5:a7:da:70:ea:92:31:c5:7f:1b:26:52:96:65:
48:4e:99:2a:88:24:78:bf:db:18:de:8c:c6:60:00:
a0:2e:93:5f:a9:3c:56:48:e3:96:98:18:ef:9c:73:
a1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8C:F9:13:3F:8D:37:E0:C4:BD:B6:5A:50:38:50:B5:F8:7A:98:8D
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/v4z5Ez-NN-DEvbZaUDhQtfh6mI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.216.0/22
195.123.224.0/21
Signature Algorithm: sha256WithRSAEncryption
47:4f:cd:b1:25:95:83:ee:f2:f8:e1:58:df:4a:e6:bd:2a:78:
98:19:c1:fe:9f:db:38:fc:0e:a4:24:44:0e:3a:2e:df:88:96:
34:89:9d:d1:4a:48:48:dd:c8:f9:f7:c7:cc:1f:29:23:eb:3c:
b7:ce:a1:05:9c:a6:8c:df:71:f0:6e:a0:c5:0a:36:f4:cd:c4:
09:a7:84:59:3c:bc:e2:68:6f:cb:fe:84:eb:70:d1:18:61:c1:
27:c6:62:8c:f0:5d:62:bd:2e:37:47:d5:00:ab:b8:3f:a6:b7:
88:43:91:e9:bc:48:f1:27:5f:ac:95:21:7f:10:1e:40:08:9f:
9d:86:e0:4d:4c:6b:6f:2a:1d:d1:a2:35:fb:22:05:6e:e8:25:
60:b4:bb:b8:4f:f0:f6:2d:12:15:25:47:cc:56:1e:3c:f6:70:
48:0a:fc:5a:a1:72:17:50:1e:3c:c4:cf:a4:c5:32:d0:ee:2a:
6d:8e:60:f0:68:40:ad:2f:a8:64:c4:69:23:e8:2e:5d:cc:91:
8c:0f:e9:cd:a3:26:be:7e:fe:3a:d7:94:f8:4c:ef:61:e1:ec:
34:22:69:ba:0d:9b:04:11:83:c9:d0:c1:f1:5e:53:23:3c:2f:
e5:92:d8:d9:af:ed:05:47:16:5c:b5:15:da:a4:cf:44:58:ce:
fe:7d:69:b0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzGSynMS2uKH0DWWMN/8/IqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZDk4ZThmZWM2ODA3NzVhMTU3MjY2ZTBjNmI3OGIxNDFh
MzRmNWUwHhcNMjQwMTAxMTgzMTAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjhjZjkxMzNmOGQzN2UwYzRiZGI2NWE1MDM4NTBiNWY4N2E5ODhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDgOH/2PLQSobe6h1og7EKr9Y4X4
nUgC2GWGBseCHX7kxSc38sDaazgEuGqPNW4vI1vxmEqmLx3YOCk/jOAWqI+v1uSC
/1pTo+DLISBagxTy4/PTjSatXDfRgXU6SV5yjsdypE3lvc7J9IDeqdgcQCPnXNwq
7DwUlO2StoatyzShqn6cVXInUcrLQBxxe9foSM2s69dgSoFxuwvjk8nGUgeD8ywu
1Txttb0BuTv7qQ68GPmDr137lO+zq1AC12UrHWIe4l0pvMbHR/lbz5K5s8Gt5afa
cOqSMcV/GyZSlmVITpkqiCR4v9sY3ozGYACgLpNfqTxWSOOWmBjvnHOhXQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL+M+RM/jTfgxL22WlA4ULX4epiNMB8GA1UdIwQY
MBaAFJTZjo/saAd1oVcmbgxreLFBo09eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzkt
ODdkMTdkZjc0YzdlLzEvdjR6NUV6LU5OLURFdmJaYVVEaFF0Zmg2bUkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzktODdkMTdkZjc0Yzdl
LzEvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuVLYAwQD
w3vgMA0GCSqGSIb3DQEBCwUAA4IBAQBHT82xJZWD7vL44VjfSua9KniYGcH+n9s4
/A6kJEQOOi7fiJY0iZ3RSkhI3cj598fMHykj6zy3zqEFnKaM33HwbqDFCjb0zcQJ
p4RZPLziaG/L/oTrcNEYYcEnxmKM8F1ivS43R9UAq7g/preIQ5HpvEjxJ1+slSF/
EB5ACJ+dhuBNTGtvKh3RojX7IgVu6CVgtLu4T/D2LRIVJUfMVh489nBICvxaoXIX
UB48xM+kxTLQ7iptjmDwaECtL6hkxGkj6C5dzJGMD+nNoya+fv4615T4TO9h4ew0
Imm6DZsEEYPJ0MHxXlMjPC/lktjZr+0FRxZctRXapM9EWM7+fWmw
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:00:41 2024 by rpki-client on console-ams.rpki-client.org