Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/CBXPUiHgTa6QgA1hlHX3yzYqL2w.roa
File: CBXPUiHgTa6QgA1hlHX3yzYqL2w.roa (raw, json)
Hash identifier: dPTwL+4hnByE89Ezq7pv6LMnDkHZiqDeRIR6SprizqI=
Subject key identifier: 08:15:CF:52:21:E0:4D:AE:90:80:0D:61:94:75:F7:CB:36:2A:2F:6C
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018CC94E3372D30D1E9EF49646CA2710A793
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/CBXPUiHgTa6QgA1hlHX3yzYqL2w.roa
Signing time: Tue 02 Jan 2024 08:33:14 +0000
ROA not before: Tue 02 Jan 2024 08:33:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39847
IP address blocks: 89.185.160.0/19 maxlen: 19
178.18.176.0/20 maxlen: 20
185.150.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:33:72:d3:0d:1e:9e:f4:96:46:ca:27:10:a7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 08:33:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0815cf5221e04dae90800d619475f7cb362a2f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:a6:e5:db:58:49:77:b1:51:8f:b5:15:47:
20:ea:50:43:d6:b8:dc:b1:ed:52:1b:9e:41:f6:33:
37:10:57:44:2e:f5:42:81:cc:09:05:a0:63:ac:e8:
79:32:f4:6d:d4:4c:33:79:c8:2c:b3:c7:f1:fb:2a:
03:0a:c4:24:24:dd:ed:e0:ea:e8:24:08:79:3a:80:
be:6e:89:70:75:ef:66:a4:9e:17:d6:4a:df:6c:07:
f3:9f:cf:48:56:c4:7b:69:4c:42:f4:eb:1f:98:41:
93:8e:2d:d4:b4:14:62:ad:af:41:b2:4b:aa:9c:be:
60:a6:57:3c:13:4e:6a:25:cb:d8:c3:29:a8:42:26:
31:76:ac:8b:79:ed:c9:7c:76:b6:47:c7:80:2a:00:
28:95:c4:b3:a8:d9:ba:00:cb:c1:c2:93:0e:8f:f1:
5f:d0:a3:47:b8:be:d9:3a:ef:2e:2d:3d:9f:f0:30:
ec:d4:81:b8:fa:d1:d6:89:6b:c6:cd:97:7e:3e:95:
39:3c:8a:a6:f9:24:c6:7b:7f:0e:26:55:0d:b3:03:
1e:26:e6:0c:ae:01:f0:ef:7c:60:f4:b3:34:52:7d:
a3:dd:92:83:37:08:ae:37:f6:01:4b:e7:02:7c:d4:
a4:c4:be:20:20:6e:36:33:66:0a:bd:b3:a0:80:02:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:15:CF:52:21:E0:4D:AE:90:80:0D:61:94:75:F7:CB:36:2A:2F:6C
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/CBXPUiHgTa6QgA1hlHX3yzYqL2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.160.0/19
178.18.176.0/20
185.150.120.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:f4:89:c5:27:bd:38:76:05:a2:28:eb:27:ad:5b:39:ac:42:
f9:ac:4f:83:e4:9a:e9:e6:d8:8d:e0:70:64:95:d2:41:30:e2:
84:ee:56:72:f8:15:eb:ba:5c:c1:e7:8a:70:44:cc:12:af:28:
4d:2c:d9:c7:18:fd:e2:9a:80:53:35:e4:01:57:8e:38:4b:ea:
33:d4:dd:ab:5e:6a:7f:75:a6:e1:af:32:87:20:39:0d:25:a6:
db:44:ff:55:4d:7e:74:5e:a1:ea:66:92:bc:aa:7e:07:94:2f:
29:b0:12:ce:13:f1:c6:6d:9a:62:56:c3:d9:22:12:1b:55:ce:
eb:bd:8d:4a:08:a6:0b:50:1e:57:1d:1f:42:64:17:c7:31:d1:
43:b4:24:e0:2a:b5:3c:82:3b:f7:c8:e8:6d:51:33:ed:07:f3:
8a:b8:69:d0:f8:88:fa:86:74:8b:af:e6:fc:7f:41:e2:02:ef:
20:72:d7:c5:05:1e:ba:58:4f:dc:04:79:2b:96:d4:c3:3a:ea:
ba:20:82:c3:5a:1b:db:9b:5f:3c:0f:24:7d:1e:ac:ae:67:6a:
c3:1a:6b:96:1f:2f:0f:25:35:69:f3:a7:46:fc:68:f4:0b:36:
ae:37:57:86:73:36:d6:7e:60:89:b9:eb:1b:e4:43:3f:a7:7a:
4e:08:8e:a4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzJTjNy0w0envSWRsonEKeTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz
YzQwM2UwHhcNMjQwMTAyMDgzMzE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODE1Y2Y1MjIxZTA0ZGFlOTA4MDBkNjE5NDc1ZjdjYjM2MmEyZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDam5dtYSXexUY+1FUcg6lBD1rjc
se1SG55B9jM3EFdELvVCgcwJBaBjrOh5MvRt1Ewzecgss8fx+yoDCsQkJN3t4Oro
JAh5OoC+bolwde9mpJ4X1krfbAfzn89IVsR7aUxC9OsfmEGTji3UtBRira9Bskuq
nL5gplc8E05qJcvYwymoQiYxdqyLee3JfHa2R8eAKgAolcSzqNm6AMvBwpMOj/Ff
0KNHuL7ZOu8uLT2f8DDs1IG4+tHWiWvGzZd+PpU5PIqm+STGe38OJlUNswMeJuYM
rgHw73xg9LM0Un2j3ZKDNwiuN/YBS+cCfNSkxL4gIG42M2YKvbOggALzpQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAgVz1Ih4E2ukIANYZR198s2Ki9sMB8GA1UdIwQY
MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvQ0JYUFVpSGdUYTZRZ0ExaGxIWDN5ellxTDJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFWbmgAwQE
shKwAwQCuZZ4MA0GCSqGSIb3DQEBCwUAA4IBAQBM9InFJ704dgWiKOsnrVs5rEL5
rE+D5Jrp5tiN4HBkldJBMOKE7lZy+BXrulzB54pwRMwSryhNLNnHGP3imoBTNeQB
V444S+oz1N2rXmp/dabhrzKHIDkNJabbRP9VTX50XqHqZpK8qn4HlC8psBLOE/HG
bZpiVsPZIhIbVc7rvY1KCKYLUB5XHR9CZBfHMdFDtCTgKrU8gjv3yOhtUTPtB/OK
uGnQ+Ij6hnSLr+b8f0HiAu8gctfFBR66WE/cBHkrltTDOuq6IILDWhvbm188DyR9
HqyuZ2rDGmuWHy8PJTVp86dG/Gj0CzauN1eGczbWfmCJuesb5EM/p3pOCI6k
-----END CERTIFICATE-----
Generated at Sat Jun 8 10:29:41 2024 by rpki-client on console-ams.rpki-client.org