Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/yYHwVbwNwMlTOb0iTlXD4WCOfuw.roa
File: yYHwVbwNwMlTOb0iTlXD4WCOfuw.roa (raw, json)
Hash identifier: cNTAPII7ULc3Z9DcYMiFsz/EhGeF+x3ahNGb1ShunQ8=
Subject key identifier: C9:81:F0:55:BC:0D:C0:C9:53:39:BD:22:4E:55:C3:E1:60:8E:7E:EC
Certificate issuer: /CN=bbca3f25d54620b50ef8520657634d3b096bac57
Certificate serial: 018DDD6A01549C9E81DA3BF66D4A622734FD
Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/yYHwVbwNwMlTOb0iTlXD4WCOfuw.roa
Signing time: Sat 24 Feb 2024 23:18:48 +0000
ROA not before: Sat 24 Feb 2024 23:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58212
IP address blocks: 2.59.132.0/22 maxlen: 24
45.145.40.0/22 maxlen: 24
45.157.232.0/22 maxlen: 24
62.192.153.0/24 maxlen: 24
94.143.231.0/24 maxlen: 24
176.96.136.0/22 maxlen: 24
185.94.29.0/24 maxlen: 24
185.219.84.0/24 maxlen: 24
185.254.96.0/22 maxlen: 24
193.41.226.0/24 maxlen: 24
193.41.237.0/24 maxlen: 24
193.42.11.0/24 maxlen: 24
193.42.12.0/24 maxlen: 24
194.48.217.0/24 maxlen: 24
2a0c:4ac0::/29 maxlen: 40
2a0d:5940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:dd:6a:01:54:9c:9e:81:da:3b:f6:6d:4a:62:27:34:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57
Validity
Not Before: Feb 24 23:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c981f055bc0dc0c95339bd224e55c3e1608e7eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:b0:db:64:91:da:5e:07:25:eb:21:de:cb:
3f:b1:f0:f2:d6:ff:94:01:42:93:3c:e8:6b:9f:80:
16:da:6b:47:19:fe:a5:d3:c0:b7:a6:35:05:c9:d9:
b0:43:be:3b:a7:d8:1a:fb:1f:0d:1a:8a:f4:b3:f7:
9e:bf:2b:37:7f:36:b5:a4:36:6b:2b:6b:74:84:02:
7c:01:dc:38:d2:70:fa:a8:b4:b0:1d:38:02:50:93:
a2:a7:52:fe:83:54:b1:ef:e4:b8:7a:80:86:a5:4d:
6a:cf:a3:6e:6b:ef:ee:83:56:e6:b9:4e:d8:9e:7a:
ed:21:95:07:79:5d:bc:8b:24:e6:53:69:f3:a9:c4:
a4:c9:40:74:94:f3:f5:5c:75:9a:43:1e:10:2d:f0:
ca:bb:76:97:93:7b:61:63:74:d6:05:1f:50:97:31:
c3:d2:7a:d2:53:01:a3:29:08:f6:ca:35:cb:10:ed:
72:63:d4:1b:72:23:b5:5d:a9:06:c5:31:98:a4:7d:
c6:ad:c7:ee:6f:99:74:b6:a5:21:31:49:55:4c:e4:
f0:0e:43:86:41:8f:d7:c8:2a:77:c1:a3:e9:61:27:
4d:11:fc:b2:21:6e:b2:28:e1:05:94:08:6b:3f:37:
95:81:e1:24:ba:37:49:2c:5e:fb:6a:97:6f:f0:76:
74:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:81:F0:55:BC:0D:C0:C9:53:39:BD:22:4E:55:C3:E1:60:8E:7E:EC
X509v3 Authority Key Identifier:
keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/yYHwVbwNwMlTOb0iTlXD4WCOfuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.132.0/22
45.145.40.0/22
45.157.232.0/22
62.192.153.0/24
94.143.231.0/24
176.96.136.0/22
185.94.29.0/24
185.219.84.0/24
185.254.96.0/22
193.41.226.0/24
193.41.237.0/24
193.42.11.0-193.42.12.255
194.48.217.0/24
IPv6:
2a0c:4ac0::/29
2a0d:5940::/29
Signature Algorithm: sha256WithRSAEncryption
16:c8:48:6d:19:99:37:e2:cb:56:9d:9c:75:03:e5:30:fc:71:
22:a6:56:ef:02:a8:74:1e:08:a2:5c:a4:67:fb:35:dd:fb:f2:
11:9a:10:5e:20:d7:8b:74:b0:f5:25:25:71:cb:9b:24:bf:8a:
0a:24:60:d4:bb:d0:c2:66:6c:dd:d2:32:0f:30:ba:19:85:63:
25:6d:e0:fd:cc:45:b4:62:d8:ac:e0:03:02:8a:68:f2:33:d7:
28:be:b7:68:a2:32:9f:a5:e7:8a:3c:bf:03:79:67:e8:cc:7f:
f9:28:88:d1:cb:b2:83:19:b7:b2:9e:8a:4b:5e:6d:dd:3b:ac:
85:1b:df:66:13:16:b8:1f:3b:f5:62:49:f5:e8:8d:79:19:0c:
ed:b0:e7:27:51:a5:7f:02:88:26:db:d8:25:25:fa:4b:f3:37:
88:15:26:0a:d9:e7:c1:33:a6:2b:c3:66:8d:69:d9:b8:0a:c1:
5e:29:42:5a:d6:9c:69:9e:63:6b:8d:c3:77:13:f6:91:18:3f:
2b:ad:a3:03:3e:f2:35:6d:66:89:85:f7:92:0d:14:b9:13:b2:
8d:2f:ad:ee:1e:b1:42:34:fe:93:84:17:96:4e:2f:94:60:50:
12:72:19:f2:46:40:d5:6a:23:37:0d:ba:94:04:6a:54:ec:7f:
28:b8:df:a1
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAY3dagFUnJ6B2jv2bUpiJzT9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiY2EzZjI1ZDU0NjIwYjUwZWY4NTIwNjU3NjM0ZDNiMDk2
YmFjNTcwHhcNMjQwMjI0MjMxODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTgxZjA1NWJjMGRjMGM5NTMzOWJkMjI0ZTU1YzNlMTYwOGU3ZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5Ww22SR2l4HJesh3ss/sfDy1v+U
AUKTPOhrn4AW2mtHGf6l08C3pjUFydmwQ747p9ga+x8NGor0s/eevys3fza1pDZr
K2t0hAJ8Adw40nD6qLSwHTgCUJOip1L+g1Sx7+S4eoCGpU1qz6Nua+/ug1bmuU7Y
nnrtIZUHeV28iyTmU2nzqcSkyUB0lPP1XHWaQx4QLfDKu3aXk3thY3TWBR9QlzHD
0nrSUwGjKQj2yjXLEO1yY9QbciO1XakGxTGYpH3Grcfub5l0tqUhMUlVTOTwDkOG
QY/XyCp3waPpYSdNEfyyIW6yKOEFlAhrPzeVgeEkujdJLF77apdv8HZ0twIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFMmB8FW8DcDJUzm9Ik5Vw+Fgjn7sMB8GA1UdIwQY
MBaAFLvKPyXVRiC1DvhSBldjTTsJa6xXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdThvX0pkVkdJTFVPLUZJR1YyTk5Pd2xyckZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi81NjFkMjQtZTkyMS00ZWM4LWE2MTEt
NGRjMjBjNWI2MjY4LzEveVlId1Zid053TWxUT2IwaVRsWEQ0V0NPZnV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi81NjFkMjQtZTkyMS00ZWM4LWE2MTEtNGRjMjBjNWI2MjY4
LzEvdThvX0pkVkdJTFVPLUZJR1YyTk5Pd2xyckZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwXAQCAAEwVgMEAgI7hAME
Ai2RKAMEAi2d6AMEAD7AmQMEAF6P5wMEArBgiAMEALleHQMEALnbVAMEArn+YAME
AMEp4gMEAMEp7TAMAwQAwSoLAwQAwSoMAwQAwjDZMBQEAgACMA4DBQMqDErAAwUD
Kg1ZQDANBgkqhkiG9w0BAQsFAAOCAQEAFshIbRmZN+LLVp2cdQPlMPxxIqZW7wKo
dB4IolykZ/s13fvyEZoQXiDXi3Sw9SUlccubJL+KCiRg1LvQwmZs3dIyDzC6GYVj
JW3g/cxFtGLYrOADAopo8jPXKL63aKIyn6Xnijy/A3ln6Mx/+SiI0cuygxm3sp6K
S15t3TushRvfZhMWuB879WJJ9eiNeRkM7bDnJ1GlfwKIJtvYJSX6S/M3iBUmCtnn
wTOmK8NmjWnZuArBXilCWtacaZ5ja43DdxP2kRg/K62jAz7yNW1miYX3kg0UuROy
jS+t7h6xQjT+k4QXlk4vlGBQEnIZ8kZA1WojNw26lARqVOx/KLjfoQ==
-----END CERTIFICATE-----
Generated at Mon Jun 3 10:49:02 2024 by rpki-client on console-ams.rpki-client.org