Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/db2bd4-af34-441d-8ca9-9f7ed5ca675e/1/sKqvvhIgjBdH7zAxzGApDEeA6sU.roa
File: sKqvvhIgjBdH7zAxzGApDEeA6sU.roa (raw, json)
Hash identifier: PslWwCWeFcvgbFy+ZeEApW6KRGwtPx8kFUMi2LW1IFA=
Subject key identifier: B0:AA:AF:BE:12:20:8C:17:47:EF:30:31:CC:60:29:0C:47:80:EA:C5
Certificate issuer: /CN=d8aa1c7a68b220441ab5f1b375b223de8c614e79
Certificate serial: 018CC424E18A7D630324DBD589750DE52F1D
Authority key identifier: D8:AA:1C:7A:68:B2:20:44:1A:B5:F1:B3:75:B2:23:DE:8C:61:4E:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KocemiyIEQatfGzdbIj3oxhTnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/db2bd4-af34-441d-8ca9-9f7ed5ca675e/1/sKqvvhIgjBdH7zAxzGApDEeA6sU.roa
Signing time: Mon 01 Jan 2024 08:30:00 +0000
ROA not before: Mon 01 Jan 2024 08:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48882
IP address blocks: 91.218.16.0/22 maxlen: 22
95.215.50.0/24 maxlen: 24
95.215.51.0/24 maxlen: 24
95.215.48.0/24 maxlen: 24
95.215.49.0/24 maxlen: 24
31.133.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/db2bd4-af34-441d-8ca9-9f7ed5ca675e/1/2KocemiyIEQatfGzdbIj3oxhTnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/db2bd4-af34-441d-8ca9-9f7ed5ca675e/1/2KocemiyIEQatfGzdbIj3oxhTnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KocemiyIEQatfGzdbIj3oxhTnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 10:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:e1:8a:7d:63:03:24:db:d5:89:75:0d:e5:2f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aa1c7a68b220441ab5f1b375b223de8c614e79
Validity
Not Before: Jan 1 08:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0aaafbe12208c1747ef3031cc60290c4780eac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:ad:eb:c3:5e:73:4e:75:b5:77:00:c4:52:
5b:76:34:10:ea:78:63:91:0e:05:e5:9f:58:72:f7:
14:cc:0f:8b:de:ad:0f:b5:21:ff:49:c7:c0:48:2f:
e2:80:d6:b3:33:b2:75:5c:55:6a:6f:a1:59:89:b5:
51:2e:51:4a:19:33:15:45:3b:aa:16:f1:99:e3:59:
51:57:0f:ea:8a:d3:3e:57:cc:e8:5c:4f:fa:86:66:
71:80:ab:ff:0b:1b:d2:7f:b1:6c:e0:60:cd:16:17:
70:72:3c:6e:6b:0c:aa:14:bd:aa:70:d1:24:d3:30:
de:62:43:e6:82:31:2e:1c:0f:13:ed:fd:09:2f:de:
f2:81:ea:35:cc:96:a8:4d:a1:a0:14:b8:40:e4:e4:
68:15:4c:75:4e:dc:53:6a:1f:7d:02:5c:cf:55:af:
69:07:0b:09:c0:b3:0b:07:73:f2:d3:4e:ad:11:39:
50:53:b9:b2:18:28:96:a6:eb:72:a0:67:7f:78:40:
dd:98:1f:95:b4:98:c7:07:64:10:74:74:ce:5f:cb:
ee:32:f2:96:60:91:46:d2:09:c9:09:b0:75:bf:55:
0a:06:a5:90:22:97:0e:89:12:c0:0c:2d:81:c3:8f:
31:cb:49:d8:a1:93:67:04:c7:f1:d1:d4:f1:61:fc:
8f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AA:AF:BE:12:20:8C:17:47:EF:30:31:CC:60:29:0C:47:80:EA:C5
X509v3 Authority Key Identifier:
keyid:D8:AA:1C:7A:68:B2:20:44:1A:B5:F1:B3:75:B2:23:DE:8C:61:4E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KocemiyIEQatfGzdbIj3oxhTnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/db2bd4-af34-441d-8ca9-9f7ed5ca675e/1/sKqvvhIgjBdH7zAxzGApDEeA6sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/db2bd4-af34-441d-8ca9-9f7ed5ca675e/1/2KocemiyIEQatfGzdbIj3oxhTnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.64.0/20
91.218.16.0/22
95.215.48.0/22
Signature Algorithm: sha256WithRSAEncryption
67:a4:60:f4:93:e1:be:ca:55:de:42:5d:a4:18:64:83:f4:b5:
b1:be:8d:2f:1e:bf:f8:0b:df:8c:01:6b:c6:2d:83:6f:10:50:
a3:72:0a:c7:81:05:6b:1e:e9:f3:d2:86:43:9a:19:a7:7e:a6:
d6:19:17:6b:e7:60:4b:2e:93:42:b3:61:9d:9b:04:f5:e4:6b:
96:32:46:67:fb:34:cf:d4:13:95:75:70:85:28:66:42:6b:31:
2d:69:55:7b:39:c8:77:6e:cb:ae:76:b6:00:d7:5f:8c:5f:3b:
c3:4d:25:bd:4e:4a:19:39:db:3b:e8:37:f1:66:44:8d:66:99:
08:f2:fe:f5:cb:29:3e:9d:1a:55:48:fe:e9:f2:aa:9e:35:ef:
42:c7:24:14:ce:63:9f:df:45:9b:bd:66:52:6d:67:c4:e1:41:
71:ed:a0:53:99:cb:ff:24:35:b2:70:4b:2f:13:0f:d7:2d:21:
fa:3f:14:51:35:03:d5:6d:0c:66:29:34:b4:79:1b:35:f0:8a:
c9:0e:d2:35:ca:da:ab:a0:8a:14:3d:52:90:4e:e7:eb:22:3d:
c0:ca:ac:99:37:de:18:26:0e:d1:34:96:3a:49:b2:17:e5:f5:
9e:28:83:c5:c0:0d:a3:4b:82:a7:65:3f:9d:33:e3:2d:7d:94:
c1:56:32:ba
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzEJOGKfWMDJNvViXUN5S8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YWExYzdhNjhiMjIwNDQxYWI1ZjFiMzc1YjIyM2RlOGM2
MTRlNzkwHhcNMjQwMTAxMDgzMDAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGFhYWZiZTEyMjA4YzE3NDdlZjMwMzFjYzYwMjkwYzQ3ODBlYWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFyt68Nec051tXcAxFJbdjQQ6nhj
kQ4F5Z9YcvcUzA+L3q0PtSH/ScfASC/igNazM7J1XFVqb6FZibVRLlFKGTMVRTuq
FvGZ41lRVw/qitM+V8zoXE/6hmZxgKv/CxvSf7Fs4GDNFhdwcjxuawyqFL2qcNEk
0zDeYkPmgjEuHA8T7f0JL97ygeo1zJaoTaGgFLhA5ORoFUx1TtxTah99AlzPVa9p
BwsJwLMLB3Py006tETlQU7myGCiWputyoGd/eEDdmB+VtJjHB2QQdHTOX8vuMvKW
YJFG0gnJCbB1v1UKBqWQIpcOiRLADC2Bw48xy0nYoZNnBMfx0dTxYfyPhQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLCqr74SIIwXR+8wMcxgKQxHgOrFMB8GA1UdIwQY
MBaAFNiqHHposiBEGrXxs3WyI96MYU55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMktvY2VtaXlJRVFhdGZHemRiSWozb3hoVG5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kYjJiZDQtYWYzNC00NDFkLThjYTkt
OWY3ZWQ1Y2E2NzVlLzEvc0txdnZoSWdqQmRIN3pBeHpHQXBERWVBNnNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kYjJiZDQtYWYzNC00NDFkLThjYTktOWY3ZWQ1Y2E2NzVl
LzEvMktvY2VtaXlJRVFhdGZHemRiSWozb3hoVG5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEH4VAAwQC
W9oQAwQCX9cwMA0GCSqGSIb3DQEBCwUAA4IBAQBnpGD0k+G+ylXeQl2kGGSD9LWx
vo0vHr/4C9+MAWvGLYNvEFCjcgrHgQVrHunz0oZDmhmnfqbWGRdr52BLLpNCs2Gd
mwT15GuWMkZn+zTP1BOVdXCFKGZCazEtaVV7Och3bsuudrYA11+MXzvDTSW9TkoZ
Ods76DfxZkSNZpkI8v71yyk+nRpVSP7p8qqeNe9CxyQUzmOf30WbvWZSbWfE4UFx
7aBTmcv/JDWycEsvEw/XLSH6PxRRNQPVbQxmKTS0eRs18IrJDtI1ytqroIoUPVKQ
TufrIj3AyqyZN94YJg7RNJY6SbIX5fWeKIPFwA2jS4KnZT+dM+MtfZTBVjK6
-----END CERTIFICATE-----
Generated at Sun Jun 2 16:05:50 2024 by rpki-client on console-ams.rpki-client.org