Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/uOQNX7kuMAfPcFjbuzpfgQRfX0U.roa
File: uOQNX7kuMAfPcFjbuzpfgQRfX0U.roa (raw, json)
Hash identifier: 2XjRCc9Xwq+N1L5VIFgIkfoaLg4dwvDXDVsb7QrUzLQ=
Subject key identifier: B8:E4:0D:5F:B9:2E:30:07:CF:70:58:DB:BB:3A:5F:81:04:5F:5F:45
Certificate issuer: /CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Certificate serial: 018CC794FC19249B02069DFEC4B26CDC4C53
Authority key identifier: 08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/uOQNX7kuMAfPcFjbuzpfgQRfX0U.roa
Signing time: Tue 02 Jan 2024 00:31:19 +0000
ROA not before: Tue 02 Jan 2024 00:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212131
IP address blocks: 85.208.168.0/22 maxlen: 22
2a10:ae80::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:fc:19:24:9b:02:06:9d:fe:c4:b2:6c:dc:4c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Validity
Not Before: Jan 2 00:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8e40d5fb92e3007cf7058dbbb3a5f81045f5f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:52:ca:4b:26:94:14:22:d6:ab:c6:78:46:
0a:9f:b8:77:03:bd:89:f1:11:4e:ec:7f:76:45:ac:
f1:04:3a:50:74:91:6a:e6:0d:ef:c9:6b:9d:41:29:
df:97:44:3b:46:ef:18:06:92:a4:56:5b:5d:cf:c9:
d0:d2:67:05:50:d6:86:7a:da:df:5d:35:83:34:3d:
3c:ee:ec:64:8a:0b:a0:63:1d:d6:72:a6:0c:c8:7b:
25:88:c4:a3:f0:75:c2:30:7b:07:ad:5c:7b:ee:8f:
1a:4e:8d:43:08:e6:f8:e5:94:4c:14:b6:b7:ef:1d:
8e:1b:b9:a9:a7:f3:9b:29:2d:27:fd:64:fe:f9:32:
5e:71:ca:2a:40:b8:36:ca:c4:40:5f:5c:63:ee:59:
d8:25:9f:1a:7b:a2:92:3c:c3:61:18:59:34:ef:60:
da:94:d1:41:62:b6:61:56:11:06:a7:39:34:2c:3b:
d1:67:d0:92:54:e7:0e:b1:78:9c:79:85:78:24:5c:
1e:32:7b:9b:94:c4:60:08:09:14:ad:bc:60:50:78:
4b:6e:93:f5:f5:0d:95:16:76:97:23:d1:1a:77:20:
4d:e6:aa:30:24:b6:32:c7:5c:b3:de:71:62:05:ce:
b2:1a:a8:d1:8c:6c:24:0e:f6:e0:6e:c2:3b:11:f2:
f2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E4:0D:5F:B9:2E:30:07:CF:70:58:DB:BB:3A:5F:81:04:5F:5F:45
X509v3 Authority Key Identifier:
keyid:08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/uOQNX7kuMAfPcFjbuzpfgQRfX0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.168.0/22
IPv6:
2a10:ae80::/29
Signature Algorithm: sha256WithRSAEncryption
00:c3:84:89:00:29:30:50:27:6b:63:02:d0:ae:08:cd:6c:29:
72:ba:70:23:10:75:e9:7c:b8:04:d6:b1:8e:00:db:85:a2:86:
0c:44:16:3d:5c:99:47:12:5c:db:49:49:70:f4:0e:88:29:84:
1b:39:95:86:68:e8:4a:f0:1c:87:b5:eb:b0:26:c7:b0:41:02:
ab:a1:dd:82:94:9a:38:33:e4:c1:00:86:01:0a:d8:5a:a6:76:
35:01:02:cf:46:18:33:36:13:ea:d5:16:d2:aa:67:58:a8:c2:
7b:a2:0f:20:cc:b1:c4:18:56:dd:42:c1:d8:44:68:3e:59:cd:
b9:75:26:b1:31:71:5e:e6:ad:46:f7:1e:03:1c:42:f9:b9:af:
26:17:0b:df:22:a4:59:2e:ce:7c:41:d6:32:d0:75:8a:6c:de:
29:de:23:9c:19:e3:59:b4:47:10:88:82:16:24:37:ea:82:14:
79:74:c9:41:4a:bf:bf:a0:2d:8a:cf:81:89:d5:01:87:65:8c:
34:e1:49:b7:7d:94:fb:a5:5a:a6:a1:d4:98:da:2f:69:9c:0e:
4b:74:c9:df:eb:d8:5f:c3:49:16:0e:07:49:45:f8:62:ca:fd:
c3:4a:a3:10:22:c0:56:5d:ae:e7:8c:77:ce:ba:c7:61:46:0d:
21:cd:7d:af
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzHlPwZJJsCBp3+xLJs3ExTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NDNlOWMyNDg3OTU0NjkxMjI3YjFlMzIxNzVkOGY3YTFj
YzNlZjUwHhcNMjQwMTAyMDAzMTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGU0MGQ1ZmI5MmUzMDA3Y2Y3MDU4ZGJiYjNhNWY4MTA0NWY1ZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRhSyksmlBQi1qvGeEYKn7h3A72J
8RFO7H92RazxBDpQdJFq5g3vyWudQSnfl0Q7Ru8YBpKkVltdz8nQ0mcFUNaGetrf
XTWDND087uxkigugYx3WcqYMyHsliMSj8HXCMHsHrVx77o8aTo1DCOb45ZRMFLa3
7x2OG7mpp/ObKS0n/WT++TJeccoqQLg2ysRAX1xj7lnYJZ8ae6KSPMNhGFk072Da
lNFBYrZhVhEGpzk0LDvRZ9CSVOcOsXiceYV4JFweMnublMRgCAkUrbxgUHhLbpP1
9Q2VFnaXI9EadyBN5qowJLYyx1yz3nFiBc6yGqjRjGwkDvbgbsI7EfLyIQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLjkDV+5LjAHz3BY27s6X4EEX19FMB8GA1UdIwQY
MBaAFAhD6cJIeVRpEiex4yF12PehzD71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VQcHdraDVWR2tTSjdIaklYWFk5NkhNUHZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wYzRlMjAtZDU5MS00MTVlLWEwNmYt
MDA4YTUwOGJhZTlkLzEvdU9RTlg3a3VNQWZQY0ZqYnV6cGZnUVJmWDBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8wYzRlMjAtZDU5MS00MTVlLWEwNmYtMDA4YTUwOGJhZTlk
LzEvQ0VQcHdraDVWR2tTSjdIaklYWFk5NkhNUHZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCVdCoMA0E
AgACMAcDBQMqEK6AMA0GCSqGSIb3DQEBCwUAA4IBAQAAw4SJACkwUCdrYwLQrgjN
bClyunAjEHXpfLgE1rGOANuFooYMRBY9XJlHElzbSUlw9A6IKYQbOZWGaOhK8ByH
teuwJsewQQKrod2ClJo4M+TBAIYBCthapnY1AQLPRhgzNhPq1RbSqmdYqMJ7og8g
zLHEGFbdQsHYRGg+Wc25dSaxMXFe5q1G9x4DHEL5ua8mFwvfIqRZLs58QdYy0HWK
bN4p3iOcGeNZtEcQiIIWJDfqghR5dMlBSr+/oC2Kz4GJ1QGHZYw04Um3fZT7pVqm
odSY2i9pnA5LdMnf69hfw0kWDgdJRfhiyv3DSqMQIsBWXa7njHfOusdhRg0hzX2v
-----END CERTIFICATE-----
Generated at Fri May 17 07:15:51 2024 by rpki-client on console-ams.rpki-client.org