Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/s8sOXB6VhfjpaF98YCYMoFsC4PM.roa
File: s8sOXB6VhfjpaF98YCYMoFsC4PM.roa (raw, json)
Hash identifier: 0lhyeIov1StxlNAsgot5ct5OZsnOAgmBgzJLgV3h1wE=
Subject key identifier: B3:CB:0E:5C:1E:95:85:F8:E9:68:5F:7C:60:26:0C:A0:5B:02:E0:F3
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 018F19ED3365B374DFC34E69B26502D1C804
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/s8sOXB6VhfjpaF98YCYMoFsC4PM.roa
Signing time: Fri 26 Apr 2024 10:22:06 +0000
ROA not before: Fri 26 Apr 2024 10:22:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 185.85.72.0/24 maxlen: 24
185.85.73.0/24 maxlen: 24
185.85.74.0/24 maxlen: 24
185.85.75.0/24 maxlen: 24
185.160.29.0/24 maxlen: 24
185.160.30.0/24 maxlen: 24
185.160.31.0/24 maxlen: 24
2a05:abc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:ed:33:65:b3:74:df:c3:4e:69:b2:65:02:d1:c8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Apr 26 10:22:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3cb0e5c1e9585f8e9685f7c60260ca05b02e0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:87:0e:d5:2e:4b:b5:7b:bb:c6:01:4d:29:
5e:79:83:69:5a:af:9c:72:ee:c6:09:a9:70:d9:47:
d0:0c:bb:a5:ff:57:f2:47:7e:23:78:91:13:c8:32:
77:ee:51:d9:e8:c3:70:77:52:6c:e4:b9:8b:f6:48:
00:89:98:69:84:f5:e9:88:2f:26:86:f0:b5:8d:69:
4c:01:2a:35:71:80:72:98:df:06:a5:e4:27:4f:c1:
25:52:7c:7e:45:2e:49:2a:bd:d6:57:9f:58:40:d2:
80:1d:c7:96:ed:ca:93:21:7c:2a:6e:3c:e5:5f:45:
3d:dd:a9:bc:fb:1f:44:39:13:98:ab:63:e3:d5:8a:
f7:8d:db:09:0f:c4:20:30:c3:ad:3e:be:a6:3b:1c:
ea:55:7c:e4:27:67:5a:9b:02:70:26:5d:bd:c3:16:
21:e1:78:af:91:27:8a:24:ba:4b:e4:e1:9e:04:34:
c7:ac:92:ac:65:4a:df:01:c0:e6:40:32:6f:c8:32:
41:50:e3:77:18:46:5c:51:0e:eb:b6:06:77:b0:46:
36:08:41:88:34:0a:08:3d:e7:ca:4d:af:dc:af:5c:
58:97:7d:4c:75:4b:5c:2c:9c:53:4c:51:cf:5f:86:
56:5c:cc:f4:78:65:ab:7e:2b:bf:22:af:aa:4d:85:
69:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CB:0E:5C:1E:95:85:F8:E9:68:5F:7C:60:26:0C:A0:5B:02:E0:F3
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/s8sOXB6VhfjpaF98YCYMoFsC4PM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.72.0/22
185.160.29.0-185.160.31.255
IPv6:
2a05:abc0::/29
Signature Algorithm: sha256WithRSAEncryption
1b:56:99:ed:da:d7:7c:32:d1:f8:76:3f:62:d1:30:9c:92:e2:
37:07:d5:73:ff:98:cd:6d:3b:ac:ce:8c:8c:70:5d:65:f5:7c:
df:d3:25:64:e9:bb:99:f9:3e:49:78:a8:2c:2d:9d:d6:e4:fc:
52:24:cb:c6:9b:14:f5:14:da:27:19:3d:5d:81:31:38:9d:94:
a1:8e:8c:5d:89:1f:44:9e:12:65:1a:c4:eb:78:a7:29:ba:aa:
30:57:07:be:c7:05:6b:c8:11:09:df:f1:f5:13:83:12:29:75:
fe:d3:a6:da:23:40:33:78:27:39:46:6b:bf:fc:5a:8f:00:d7:
f3:ec:f0:ee:52:3d:fa:be:c9:b4:43:c7:b6:22:46:c6:ca:cc:
03:52:80:0e:36:26:1c:a8:06:9d:2e:6f:11:14:5d:e3:ab:51:
4a:d9:60:ff:aa:2e:fe:a8:3e:ba:de:59:9e:7d:42:11:b0:a2:
d5:d9:2e:27:82:35:62:07:94:2a:66:c8:d5:ce:58:f8:01:68:
ad:7d:01:fb:cf:66:fa:27:ff:c5:01:bb:32:0a:ef:d8:1d:90:
45:cc:78:34:f8:f8:3c:ce:34:d0:94:77:22:72:93:cf:26:b4:
6f:e2:f1:7a:c0:f9:1b:51:d0:77:95:e2:43:78:75:79:36:5b:
89:34:3c:c7
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAY8Z7TNls3Tfw05psmUC0cgEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZTAxM2VjOGE1YzU2ZGYyNDFhOWIyNTYzZDExMWY4ZTU0
M2JmOTEwHhcNMjQwNDI2MTAyMjA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2NiMGU1YzFlOTU4NWY4ZTk2ODVmN2M2MDI2MGNhMDViMDJlMGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMCHDtUuS7V7u8YBTSleeYNpWq+c
cu7GCalw2UfQDLul/1fyR34jeJETyDJ37lHZ6MNwd1Js5LmL9kgAiZhphPXpiC8m
hvC1jWlMASo1cYBymN8GpeQnT8ElUnx+RS5JKr3WV59YQNKAHceW7cqTIXwqbjzl
X0U93am8+x9EOROYq2Pj1Yr3jdsJD8QgMMOtPr6mOxzqVXzkJ2damwJwJl29wxYh
4XivkSeKJLpL5OGeBDTHrJKsZUrfAcDmQDJvyDJBUON3GEZcUQ7rtgZ3sEY2CEGI
NAoIPefKTa/cr1xYl31MdUtcLJxTTFHPX4ZWXMz0eGWrfiu/Iq+qTYVpnQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFLPLDlwelYX46WhffGAmDKBbAuDzMB8GA1UdIwQY
MBaAFNHgE+yKXFbfJBqbJWPREfjlQ7+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQt
NDQwNTI4YzFlNDllLzEvczhzT1hCNlZoZmpwYUY5OFlDWU1vRnNDNFBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQtNDQwNTI4YzFlNDll
LzEvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQCuVVIMAwD
BAC5oB0DBAW5oAAwDQQCAAIwBwMFAyoFq8AwDQYJKoZIhvcNAQELBQADggEBABtW
me3a13wy0fh2P2LRMJyS4jcH1XP/mM1tO6zOjIxwXWX1fN/TJWTpu5n5Pkl4qCwt
ndbk/FIky8abFPUU2icZPV2BMTidlKGOjF2JH0SeEmUaxOt4pym6qjBXB77HBWvI
EQnf8fUTgxIpdf7TptojQDN4JzlGa7/8Wo8A1/Ps8O5SPfq+ybRDx7YiRsbKzANS
gA42JhyoBp0ubxEUXeOrUUrZYP+qLv6oPrreWZ59QhGwotXZLieCNWIHlCpmyNXO
WPgBaK19AfvPZvon/8UBuzIK79gdkEXMeDT4+DzONNCUdyJyk88mtG/i8XrA+RtR
0HeV4kN4dXk2W4k0PMc=
-----END CERTIFICATE-----
Generated at Sat May 18 00:03:50 2024 by rpki-client on console-fra.rpki-client.org