Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/OY1ElTH2Y-EVkZquZzG6Hc3HwrM.roa
File: OY1ElTH2Y-EVkZquZzG6Hc3HwrM.roa (raw, json)
Hash identifier: qJ3yGbvbM9ygvskm5pV/PLDc31deMwzhKOehUYSFxlw=
Subject key identifier: 39:8D:44:95:31:F6:63:E1:15:91:9A:AE:67:31:BA:1D:CD:C7:C2:B3
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 018DC10ABBAD9C7A0CBF4FFE5C4DB2AC4381
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/OY1ElTH2Y-EVkZquZzG6Hc3HwrM.roa
Signing time: Mon 19 Feb 2024 11:05:22 +0000
ROA not before: Mon 19 Feb 2024 11:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211415
IP address blocks: 2.56.184.0/22 maxlen: 22
31.40.232.0/22 maxlen: 24
45.11.152.0/24 maxlen: 24
45.11.153.0/24 maxlen: 24
45.90.248.0/22 maxlen: 22
45.147.153.0/24 maxlen: 24
45.147.154.0/24 maxlen: 24
45.147.155.0/24 maxlen: 24
85.8.168.0/22 maxlen: 22
194.31.180.0/22 maxlen: 22
194.121.59.0/24 maxlen: 24
194.124.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:0a:bb:ad:9c:7a:0c:bf:4f:fe:5c:4d:b2:ac:43:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Feb 19 11:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=398d449531f663e115919aae6731ba1dcdc7c2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:91:f8:4d:89:4a:6b:ac:9c:49:92:f0:68:
b2:72:26:6f:a6:c1:a2:fc:a0:cf:4a:47:d7:d4:38:
f7:d8:9d:ba:bf:2e:de:c4:45:c2:01:0d:e0:fb:ea:
00:27:96:ee:80:a8:75:2d:44:9a:59:47:66:d4:cf:
60:82:60:07:47:b5:9a:3a:e5:ad:52:b5:fd:d7:87:
07:14:c7:04:99:51:27:65:9e:af:ec:2a:d6:9e:a1:
0a:c4:c6:a0:16:7d:f6:ee:6a:87:c3:3c:6f:a5:bd:
47:29:6f:e9:b8:fe:3d:ef:0b:60:4d:f7:fd:ab:f0:
4e:63:ea:9a:29:47:af:59:f4:27:14:be:ec:c9:de:
6b:85:fe:63:f5:3c:c1:ae:ea:64:37:0b:66:6d:9b:
90:81:00:24:a1:39:43:1c:bf:c3:00:b4:3a:5e:7a:
18:6a:6c:86:d6:2a:6e:b4:e7:5d:7a:3d:3c:ee:0b:
10:41:83:cd:33:2c:58:01:6a:68:fb:33:d5:d0:55:
94:71:d9:bd:b4:a1:14:8b:d3:17:14:84:3c:cf:11:
80:9b:1b:f9:c2:87:bd:48:cb:2e:8c:70:d9:39:88:
80:51:ec:d9:1e:b1:89:ff:1c:83:be:4d:b8:63:f9:
ea:5f:36:96:47:48:24:7a:e9:2c:50:35:70:91:03:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8D:44:95:31:F6:63:E1:15:91:9A:AE:67:31:BA:1D:CD:C7:C2:B3
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/OY1ElTH2Y-EVkZquZzG6Hc3HwrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.184.0/22
31.40.232.0/22
45.11.152.0/23
45.90.248.0/22
45.147.153.0-45.147.155.255
85.8.168.0/22
194.31.180.0/22
194.121.59.0/24
194.124.144.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:8b:eb:8e:6e:9e:6e:25:76:58:18:b5:45:1e:ad:61:43:f9:
26:e9:be:c3:6d:56:fe:03:a6:60:9c:cd:ea:be:87:9b:78:cb:
cb:d5:1d:0f:b4:17:0a:3f:0c:f8:0d:eb:e9:4c:ae:61:ed:3a:
e1:97:8a:74:8b:2c:d7:16:65:0b:c8:ac:f0:6a:2d:f0:e7:02:
fe:2f:fb:3c:8e:92:c0:8b:a1:ff:40:b0:42:09:68:25:5b:42:
ee:c1:9a:18:87:7e:f1:a4:af:8e:f9:b8:d4:65:6f:c3:2c:c0:
f6:46:ed:73:52:8a:60:5b:4c:aa:a3:f8:6f:9c:cd:f2:84:da:
6c:21:08:2e:2a:0b:73:2a:24:09:68:6b:f3:e4:03:46:91:d6:
d4:95:63:bc:40:db:64:4b:48:ff:00:9c:1d:84:33:4d:c4:e9:
c9:01:ec:6d:8f:81:de:f7:54:ec:67:d5:8b:6f:5d:9b:4b:a1:
5f:82:80:cd:a5:17:d4:59:6b:07:5f:95:4e:e8:11:76:70:05:
2b:31:45:e9:4e:99:78:bf:2e:a7:ea:ea:52:ec:b7:13:78:78:
25:4c:28:34:e3:b6:e4:7d:9e:82:48:3d:a5:e9:d6:a8:85:2c:
93:d6:6b:bd:8a:7d:d7:ce:21:dd:fc:16:c5:d0:c7:6a:4a:da:
e7:12:1b:07
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAY3BCrutnHoMv0/+XE2yrEOBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5
NjMzNjIwHhcNMjQwMjE5MTEwNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOThkNDQ5NTMxZjY2M2UxMTU5MTlhYWU2NzMxYmExZGNkYzdjMmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7uR+E2JSmusnEmS8GiyciZvpsGi
/KDPSkfX1Dj32J26vy7exEXCAQ3g++oAJ5bugKh1LUSaWUdm1M9ggmAHR7WaOuWt
UrX914cHFMcEmVEnZZ6v7CrWnqEKxMagFn327mqHwzxvpb1HKW/puP497wtgTff9
q/BOY+qaKUevWfQnFL7syd5rhf5j9TzBrupkNwtmbZuQgQAkoTlDHL/DALQ6XnoY
amyG1iputOddej087gsQQYPNMyxYAWpo+zPV0FWUcdm9tKEUi9MXFIQ8zxGAmxv5
woe9SMsujHDZOYiAUezZHrGJ/xyDvk24Y/nqXzaWR0gkeuksUDVwkQMSvQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFDmNRJUx9mPhFZGarmcxuh3Nx8KzMB8GA1UdIwQY
MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt
YjE2Y2I0ZGZhZGQzLzEvT1kxRWxUSDJZLUVWa1pxdVp6RzZIYzNId3JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz
LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCAji4AwQC
HyjoAwQBLQuYAwQCLVr4MAwDBAAtk5kDBAItk5gDBAJVCKgDBALCH7QDBADCeTsD
BADCfJAwDQYJKoZIhvcNAQELBQADggEBAD+L645unm4ldlgYtUUerWFD+SbpvsNt
Vv4DpmCczeq+h5t4y8vVHQ+0Fwo/DPgN6+lMrmHtOuGXinSLLNcWZQvIrPBqLfDn
Av4v+zyOksCLof9AsEIJaCVbQu7BmhiHfvGkr475uNRlb8MswPZG7XNSimBbTKqj
+G+czfKE2mwhCC4qC3MqJAloa/PkA0aR1tSVY7xA22RLSP8AnB2EM03E6ckB7G2P
gd73VOxn1YtvXZtLoV+CgM2lF9RZawdflU7oEXZwBSsxRelOmXi/Lqfq6lLstxN4
eCVMKDTjtuR9noJIPaXp1qiFLJPWa72KfdfOId38FsXQx2pK2ucSGwc=
-----END CERTIFICATE-----
Generated at Wed May 15 18:37:08 2024 by rpki-client on console-fra.rpki-client.org