Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/hL_RRurU-Zd3xOm3j4hCcDT6vVo.roa
File: hL_RRurU-Zd3xOm3j4hCcDT6vVo.roa (raw, json)
Hash identifier: vAnJGBjSEoXJXKtkkTvqGAGk7F3yPEoo085X5KTzjrw=
Subject key identifier: 84:BF:D1:46:EA:D4:F9:97:77:C4:E9:B7:8F:88:42:70:34:FA:BD:5A
Certificate issuer: /CN=a794cd2f9174e4216931a105db261acaa3938a7c
Certificate serial: 018CC56EDD43CA316DEF5C9C09BC2FD9BA16
Authority key identifier: A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/hL_RRurU-Zd3xOm3j4hCcDT6vVo.roa
Signing time: Mon 01 Jan 2024 14:30:26 +0000
ROA not before: Mon 01 Jan 2024 14:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8601
IP address blocks: 195.138.166.0/24 maxlen: 24
195.138.160.0/19 maxlen: 19
195.138.164.0/24 maxlen: 24
195.138.160.0/22 maxlen: 22
195.138.165.0/24 maxlen: 24
195.138.170.0/24 maxlen: 24
195.138.167.0/24 maxlen: 24
195.138.171.0/24 maxlen: 24
195.138.168.0/24 maxlen: 24
195.138.172.0/24 maxlen: 24
195.138.169.0/24 maxlen: 24
195.138.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:dd:43:ca:31:6d:ef:5c:9c:09:bc:2f:d9:ba:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a794cd2f9174e4216931a105db261acaa3938a7c
Validity
Not Before: Jan 1 14:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84bfd146ead4f99777c4e9b78f88427034fabd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e6:c2:85:6f:4d:d8:ea:94:07:16:79:ad:5f:
3a:25:3e:12:f8:a0:b7:7e:1f:42:90:8f:90:a5:8e:
81:69:de:d7:2a:3e:ab:d6:1b:23:97:07:26:7a:6d:
a3:c4:01:60:54:c9:74:fa:a0:47:f7:a5:c4:90:a9:
f2:14:8c:a4:1d:94:fc:ce:86:f5:3e:1e:53:50:92:
65:f2:20:b6:fe:4c:d1:eb:86:63:4a:82:94:5b:3a:
b1:26:2e:d4:e4:eb:92:ba:2f:0b:df:7f:8a:8a:be:
b1:77:41:49:19:ee:cf:65:13:eb:36:ed:6d:b6:f1:
7f:12:37:29:e7:15:07:8d:9d:5b:e0:00:a3:71:de:
e3:31:55:32:f7:79:39:75:3d:e1:8a:83:ce:62:c8:
e2:4c:9a:8e:90:ca:8f:19:74:25:f7:43:4c:24:28:
38:6c:82:a4:15:78:12:54:00:17:45:05:a6:65:83:
9c:44:d8:b2:e0:0f:99:53:b1:cd:fc:c3:ee:64:2a:
7d:ec:10:f8:9f:1c:5b:99:a7:41:d1:a4:f0:de:84:
da:d5:23:1f:28:a7:d6:cb:8e:0c:1d:65:ff:63:f0:
fd:3d:8e:d9:f4:6a:0a:85:50:2e:f4:f7:31:e5:ac:
7c:12:ce:b0:3e:c7:23:8a:be:2a:24:0d:80:e7:74:
16:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BF:D1:46:EA:D4:F9:97:77:C4:E9:B7:8F:88:42:70:34:FA:BD:5A
X509v3 Authority Key Identifier:
keyid:A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/hL_RRurU-Zd3xOm3j4hCcDT6vVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a6:d3:02:3e:81:9f:44:7a:ad:d2:d1:d0:2f:6e:74:11:35:b0:
aa:2c:e1:3f:97:86:80:e0:8f:8a:03:b4:ca:df:02:6e:5e:e8:
d0:b2:ce:a3:92:a8:1f:ac:77:83:09:42:9c:50:de:06:f8:b9:
46:02:a0:3f:29:5d:db:f5:47:98:35:aa:fe:44:9d:dc:c6:ed:
03:2c:a3:5c:fa:ba:86:cd:a0:2a:31:7f:34:06:b7:7b:d1:af:
44:96:10:11:9b:f2:36:b1:13:ed:78:0d:8f:d9:dd:f2:17:89:
90:7e:4f:08:9e:dd:e7:ae:0f:17:87:4d:16:f7:42:83:85:21:
3c:9f:e8:1d:f3:8a:c8:d1:95:4e:0f:2b:85:60:cc:6d:34:a9:
cd:2b:66:4e:16:e7:6b:a3:f8:91:a9:f7:9f:d4:b7:f5:c1:f2:
43:1c:ad:78:b8:a8:96:9d:01:b5:35:61:4a:fe:9c:fc:2e:2c:
17:d9:78:74:18:70:ec:82:8a:70:76:6a:3a:a3:d9:27:b1:0c:
d0:e3:9f:9c:43:be:4e:07:8f:94:e1:94:e0:eb:3a:a9:99:83:
ca:af:b0:c6:87:76:32:4d:5d:35:b8:e4:65:9a:c0:6c:7d:b4:
df:a1:bd:db:68:86:74:19:b9:a9:64:9c:7c:21:f4:52:10:a1:
b5:9d:f3:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbt1DyjFt71ycCbwv2boWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OTRjZDJmOTE3NGU0MjE2OTMxYTEwNWRiMjYxYWNhYTM5
MzhhN2MwHhcNMjQwMTAxMTQzMDI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGJmZDE0NmVhZDRmOTk3NzdjNGU5Yjc4Zjg4NDI3MDM0ZmFiZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqebChW9N2OqUBxZ5rV86JT4S+KC3
fh9CkI+QpY6Bad7XKj6r1hsjlwcmem2jxAFgVMl0+qBH96XEkKnyFIykHZT8zob1
Ph5TUJJl8iC2/kzR64ZjSoKUWzqxJi7U5OuSui8L33+Kir6xd0FJGe7PZRPrNu1t
tvF/Ejcp5xUHjZ1b4ACjcd7jMVUy93k5dT3hioPOYsjiTJqOkMqPGXQl90NMJCg4
bIKkFXgSVAAXRQWmZYOcRNiy4A+ZU7HN/MPuZCp97BD4nxxbmadB0aTw3oTa1SMf
KKfWy44MHWX/Y/D9PY7Z9GoKhVAu9Pcx5ax8Es6wPscjir4qJA2A53QWMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIS/0Ubq1PmXd8Tpt4+IQnA0+r1aMB8GA1UdIwQY
MBaAFKeUzS+RdOQhaTGhBdsmGsqjk4p8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDVUTkw1RjA1Q0ZwTWFFRjJ5WWF5cU9UaW53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kYmQxMjctNGIxMi00ZjE4LThkZGUt
YTM1ODVhMDVlYTJiLzEvaExfUlJ1clUtWmQzeE9tM2o0aENjRFQ2dlZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kYmQxMjctNGIxMi00ZjE4LThkZGUtYTM1ODVhMDVlYTJi
LzEvcDVUTkw1RjA1Q0ZwTWFFRjJ5WWF5cU9UaW53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFw4qgMA0G
CSqGSIb3DQEBCwUAA4IBAQCm0wI+gZ9Eeq3S0dAvbnQRNbCqLOE/l4aA4I+KA7TK
3wJuXujQss6jkqgfrHeDCUKcUN4G+LlGAqA/KV3b9UeYNar+RJ3cxu0DLKNc+rqG
zaAqMX80Brd70a9ElhARm/I2sRPteA2P2d3yF4mQfk8Int3nrg8Xh00W90KDhSE8
n+gd84rI0ZVODyuFYMxtNKnNK2ZOFudro/iRqfef1Lf1wfJDHK14uKiWnQG1NWFK
/pz8LiwX2Xh0GHDsgopwdmo6o9knsQzQ45+cQ75OB4+U4ZTg6zqpmYPKr7DGh3Yy
TV01uORlmsBsfbTfob3baIZ0GbmpZJx8IfRSEKG1nfNt
-----END CERTIFICATE-----
Generated at Tue Jun 18 11:41:13 2024 by rpki-client on console-ams.rpki-client.org