Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/Cfc8wUkHTHORB5ENz8D6JGoOAX4.roa
File: Cfc8wUkHTHORB5ENz8D6JGoOAX4.roa (raw, json)
Hash identifier: jZ+NEt101OCvLfMMNRklHlqRoG1dluSL6pH2xrXNgqY=
Subject key identifier: 09:F7:3C:C1:49:07:4C:73:91:07:91:0D:CF:C0:FA:24:6A:0E:01:7E
Certificate issuer: /CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Certificate serial: 018DE6127F6E7C3EF0433EE96273BBD5E2B7
Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/Cfc8wUkHTHORB5ENz8D6JGoOAX4.roa
Signing time: Mon 26 Feb 2024 15:39:48 +0000
ROA not before: Mon 26 Feb 2024 15:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 2.58.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e6:12:7f:6e:7c:3e:f0:43:3e:e9:62:73:bb:d5:e2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Validity
Not Before: Feb 26 15:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09f73cc149074c739107910dcfc0fa246a0e017e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b4:0c:d9:9f:6b:26:d4:30:23:22:62:c7:31:
9b:81:70:40:16:30:51:ba:67:38:59:09:51:79:b8:
b9:ad:a2:8e:0b:a9:d7:03:a5:87:78:20:82:34:47:
50:87:eb:7d:b4:7f:0b:23:f7:e8:33:08:32:10:1b:
c9:f4:06:24:b0:92:84:39:03:57:42:f7:7a:bc:3f:
1b:e1:66:d2:6f:9d:b6:db:1c:4c:fa:54:41:48:6d:
bc:8a:04:15:01:eb:90:8d:77:40:01:ba:3a:af:24:
a0:23:5a:bb:23:92:cc:fd:92:34:b5:50:ae:86:46:
42:2c:6c:7a:7f:65:d1:e7:a5:5a:4d:e2:62:2b:27:
04:c0:aa:98:88:95:11:c8:98:e1:d9:a8:b9:9b:17:
4c:87:4a:c9:2c:10:1c:cb:22:48:ba:8f:69:42:7b:
79:5d:80:4b:02:f5:36:58:da:cd:db:13:e4:53:a7:
d7:d2:f5:bd:e4:be:f4:31:c5:9f:1e:3c:1c:94:82:
97:3f:2f:c6:da:5d:4b:d6:21:61:5a:79:63:43:46:
86:a4:52:32:fb:da:07:85:8a:5a:8b:bf:1a:bd:cc:
18:ab:75:ee:9d:bb:f2:c3:ae:60:eb:98:b3:52:6a:
7d:d0:86:2e:79:8e:03:59:7b:83:f7:06:06:77:b3:
bc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F7:3C:C1:49:07:4C:73:91:07:91:0D:CF:C0:FA:24:6A:0E:01:7E
X509v3 Authority Key Identifier:
keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/Cfc8wUkHTHORB5ENz8D6JGoOAX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.115.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:dd:b0:5c:bd:70:b8:32:c8:59:7a:41:72:0f:e5:f1:c3:89:
da:51:58:d8:0d:5b:ed:8d:58:c1:8d:f0:b6:c2:e4:3b:a7:91:
3d:3c:b7:2d:8b:5e:96:04:62:d0:8c:6e:d5:ca:30:be:2e:58:
cb:80:49:4a:0a:8b:7e:67:78:2c:3d:68:ae:7c:8d:3b:52:46:
a5:6b:0d:89:6c:0e:fc:28:71:62:9b:47:2b:71:60:6d:0f:97:
d0:ce:2d:f7:05:2b:94:00:de:c5:60:8a:2c:5c:22:63:da:02:
17:5c:68:80:bb:bd:6b:20:fb:8a:ec:a4:3d:5e:3f:7e:20:de:
e6:a0:f3:84:0e:43:c8:d8:04:f6:53:1f:df:79:c4:c3:2d:a8:
ce:98:e0:7e:6b:d1:3f:d8:03:41:f4:07:9a:d7:31:b5:f0:ab:
1f:12:ee:8f:19:7c:7c:5f:92:8e:39:87:bd:86:1d:45:22:d7:
6e:07:91:91:35:22:37:3f:51:c8:c3:bf:d9:75:fd:8e:3d:d2:
79:69:d3:6f:78:b2:a9:d7:c5:fe:29:4c:63:b4:71:f0:0a:70:
f6:5c:1a:c5:fe:58:92:72:b8:90:d6:d5:1d:55:eb:e9:c5:e5:
c7:15:79:a5:d0:31:f9:36:bc:b6:78:3b:09:28:d0:06:86:5e:
e8:0f:86:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3mEn9ufD7wQz7pYnO71eK3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNjBhNGQ4NzRkOTYwMWM4MTQyYzM1MmY4MGM1NmE0MzI3
NmNkNDcwHhcNMjQwMjI2MTUzOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWY3M2NjMTQ5MDc0YzczOTEwNzkxMGRjZmMwZmEyNDZhMGUwMTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLQM2Z9rJtQwIyJixzGbgXBAFjBR
umc4WQlRebi5raKOC6nXA6WHeCCCNEdQh+t9tH8LI/foMwgyEBvJ9AYksJKEOQNX
Qvd6vD8b4WbSb5222xxM+lRBSG28igQVAeuQjXdAAbo6rySgI1q7I5LM/ZI0tVCu
hkZCLGx6f2XR56VaTeJiKycEwKqYiJURyJjh2ai5mxdMh0rJLBAcyyJIuo9pQnt5
XYBLAvU2WNrN2xPkU6fX0vW95L70McWfHjwclIKXPy/G2l1L1iFhWnljQ0aGpFIy
+9oHhYpai78avcwYq3Xunbvyw65g65izUmp90IYueY4DWXuD9wYGd7O8jwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAn3PMFJB0xzkQeRDc/A+iRqDgF+MB8GA1UdIwQY
MBaAFLpgpNh02WAcgULDUvgMVqQyds1HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW1DazJIVFpZQnlCUXNOUy1BeFdwREoyelVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yOGNiNWMtMjk4Zi00ZDhiLTgxNWIt
ZTVhMzc3OGJlM2FkLzEvQ2ZjOHdVa0hUSE9SQjVFTno4RDZKR29PQVg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yOGNiNWMtMjk4Zi00ZDhiLTgxNWItZTVhMzc3OGJlM2Fk
LzEvdW1DazJIVFpZQnlCUXNOUy1BeFdwREoyelVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjpzMA0G
CSqGSIb3DQEBCwUAA4IBAQAu3bBcvXC4MshZekFyD+Xxw4naUVjYDVvtjVjBjfC2
wuQ7p5E9PLcti16WBGLQjG7VyjC+LljLgElKCot+Z3gsPWiufI07Ukalaw2JbA78
KHFim0crcWBtD5fQzi33BSuUAN7FYIosXCJj2gIXXGiAu71rIPuK7KQ9Xj9+IN7m
oPOEDkPI2AT2Ux/fecTDLajOmOB+a9E/2ANB9Aea1zG18KsfEu6PGXx8X5KOOYe9
hh1FItduB5GRNSI3P1HIw7/Zdf2OPdJ5adNveLKp18X+KUxjtHHwCnD2XBrF/liS
criQ1tUdVevpxeXHFXml0DH5Nry2eDsJKNAGhl7oD4Ya
-----END CERTIFICATE-----
Generated at Sat May 4 18:16:42 2024 by rpki-client on console-ams.rpki-client.org