Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/xo4mD_xXnVolWefGDr3FTKdUYD4.roa
File: xo4mD_xXnVolWefGDr3FTKdUYD4.roa (raw, json)
Hash identifier: sklQtsBQfWMyKiaoK2Bc2nQS/uCyTh7qkAb4YlE+F7A=
Subject key identifier: C6:8E:26:0F:FC:57:9D:5A:25:59:E7:C6:0E:BD:C5:4C:A7:54:60:3E
Certificate issuer: /CN=84ffa542f3d8c9b07bf76eae8a86985a3d7b4dc7
Certificate serial: 018CC56DF201966B813A71B38BC4F4F9D23F
Authority key identifier: 84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/xo4mD_xXnVolWefGDr3FTKdUYD4.roa
Signing time: Mon 01 Jan 2024 14:29:26 +0000
ROA not before: Mon 01 Jan 2024 14:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207058
IP address blocks: 185.167.88.0/24 maxlen: 24
185.167.89.0/24 maxlen: 24
185.167.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f2:01:96:6b:81:3a:71:b3:8b:c4:f4:f9:d2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ffa542f3d8c9b07bf76eae8a86985a3d7b4dc7
Validity
Not Before: Jan 1 14:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c68e260ffc579d5a2559e7c60ebdc54ca754603e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:49:ba:6c:0e:11:6b:02:71:c2:25:27:2b:9b:
0b:a8:8b:cb:74:42:51:11:b5:95:17:65:36:ad:1a:
08:84:ab:13:61:69:9d:88:ad:85:6c:66:31:7d:d1:
55:6a:ad:ef:2c:43:87:5d:ef:71:49:d5:1b:53:8f:
13:25:76:98:71:99:3b:51:e2:9c:fc:45:01:66:c5:
1f:69:66:53:e6:a8:02:84:b8:ad:08:a8:5b:ce:c5:
b2:10:73:ec:3c:fa:13:34:21:06:9d:3e:24:e9:bd:
b3:45:54:99:69:2f:1f:41:4b:72:bd:4a:98:2c:84:
94:5a:a8:f3:aa:85:aa:94:bd:0f:4e:30:30:a0:34:
63:1c:cb:d0:b9:58:58:41:af:df:48:2d:87:0b:4e:
cc:5f:fe:7e:da:70:93:c9:9a:b6:a7:d5:62:52:93:
f7:70:a9:ef:d7:2b:3f:ba:fa:a0:5c:66:c2:b7:12:
00:e8:f9:26:70:96:4a:ce:2d:2a:3c:95:4c:52:db:
57:ee:3f:c7:49:e6:9a:df:f8:0a:cf:86:7c:29:f1:
0c:c1:66:66:6d:6d:00:90:2d:c1:75:3c:42:5b:bc:
ce:51:c1:d4:37:c5:ab:ef:e3:8a:16:9a:b2:dc:88:
4c:6c:10:8f:6f:6c:a6:a8:0b:6f:a8:e4:b2:d8:f5:
85:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8E:26:0F:FC:57:9D:5A:25:59:E7:C6:0E:BD:C5:4C:A7:54:60:3E
X509v3 Authority Key Identifier:
keyid:84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/xo4mD_xXnVolWefGDr3FTKdUYD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.88.0-185.167.90.255
Signature Algorithm: sha256WithRSAEncryption
88:7f:0d:cb:d8:a6:30:bd:f8:ca:05:f5:9d:bc:16:f2:2b:ef:
3c:3d:fd:1f:ea:90:04:a2:82:d7:64:c0:39:3f:9d:a8:4c:dd:
b7:b3:37:5f:e3:a4:34:ff:81:56:d9:6b:4d:a5:f7:2f:79:d7:
68:b5:61:5b:c1:7b:03:61:a1:48:01:6c:02:a5:7b:51:65:c7:
1b:4d:9b:c6:e3:fa:09:a5:93:f9:56:3b:aa:09:df:f8:ea:22:
78:27:dd:8c:d9:2f:78:ed:21:90:2d:72:00:89:f4:cf:8a:60:
a3:8f:46:9c:d4:be:c3:48:91:e5:64:54:26:78:95:5b:4f:53:
2f:53:d0:a2:41:c0:d6:d6:1c:30:c0:13:33:d3:7e:86:40:1e:
38:1e:03:b7:bb:ea:88:e0:46:1d:8f:54:39:2a:0a:f0:0d:8f:
0d:5f:09:08:35:ec:5d:ed:fd:cf:51:84:ab:8b:14:e7:31:17:
b6:74:34:54:8d:69:fd:99:8b:a3:45:4b:5e:5a:93:eb:71:77:
a7:f5:de:10:76:cf:10:35:c8:7f:ec:65:64:b5:f5:cf:52:80:
0c:c3:7e:02:8b:90:d2:38:e7:69:70:62:38:c8:00:e3:c5:cc:
1f:2e:18:50:b3:9d:10:3f:3a:6d:72:cd:01:dd:55:00:db:40:
66:43:a2:f9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzFbfIBlmuBOnGzi8T0+dI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZmZhNTQyZjNkOGM5YjA3YmY3NmVhZThhODY5ODVhM2Q3
YjRkYzcwHhcNMjQwMTAxMTQyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjhlMjYwZmZjNTc5ZDVhMjU1OWU3YzYwZWJkYzU0Y2E3NTQ2MDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkm6bA4RawJxwiUnK5sLqIvLdEJR
EbWVF2U2rRoIhKsTYWmdiK2FbGYxfdFVaq3vLEOHXe9xSdUbU48TJXaYcZk7UeKc
/EUBZsUfaWZT5qgChLitCKhbzsWyEHPsPPoTNCEGnT4k6b2zRVSZaS8fQUtyvUqY
LISUWqjzqoWqlL0PTjAwoDRjHMvQuVhYQa/fSC2HC07MX/5+2nCTyZq2p9ViUpP3
cKnv1ys/uvqgXGbCtxIA6PkmcJZKzi0qPJVMUttX7j/HSeaa3/gKz4Z8KfEMwWZm
bW0AkC3BdTxCW7zOUcHUN8Wr7+OKFpqy3IhMbBCPb2ymqAtvqOSy2PWFUwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMaOJg/8V51aJVnnxg69xUynVGA+MB8GA1UdIwQY
MBaAFIT/pULz2Mmwe/duroqGmFo9e03HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFAtbFF2UFl5YkI3OTI2dWlvYVlXajE3VGNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC83MWZmZjktMzQzZC00ZjA3LWE0OTEt
N2MwZmQyOWNmM2U5LzEveG80bURfeFhuVm9sV2VmR0RyM0ZUS2RVWUQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC83MWZmZjktMzQzZC00ZjA3LWE0OTEtN2MwZmQyOWNmM2U5
LzEvaFAtbFF2UFl5YkI3OTI2dWlvYVlXajE3VGNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO5p1gD
BAC5p1owDQYJKoZIhvcNAQELBQADggEBAIh/DcvYpjC9+MoF9Z28FvIr7zw9/R/q
kASigtdkwDk/nahM3bezN1/jpDT/gVbZa02l9y9512i1YVvBewNhoUgBbAKle1Fl
xxtNm8bj+gmlk/lWO6oJ3/jqIngn3YzZL3jtIZAtcgCJ9M+KYKOPRpzUvsNIkeVk
VCZ4lVtPUy9T0KJBwNbWHDDAEzPTfoZAHjgeA7e76ojgRh2PVDkqCvANjw1fCQg1
7F3t/c9RhKuLFOcxF7Z0NFSNaf2Zi6NFS15ak+txd6f13hB2zxA1yH/sZWS19c9S
gAzDfgKLkNI452lwYjjIAOPFzB8uGFCznRA/Om1yzQHdVQDbQGZDovk=
-----END CERTIFICATE-----
Generated at Sat Jun 8 07:09:12 2024 by rpki-client on console-fra.rpki-client.org