Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/3YKwlMveisSzPbn-tW0PvzxMseQ.roa
File: 3YKwlMveisSzPbn-tW0PvzxMseQ.roa (raw, json)
Hash identifier: NbGrqi0fCFPs/E1UO0vxHp3LOom6BAEbB4LWqLM6GQI=
Subject key identifier: DD:82:B0:94:CB:DE:8A:C4:B3:3D:B9:FE:B5:6D:0F:BF:3C:4C:B1:E4
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 018CC94D8AF849B87AF98D5EF460936FEE9C
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/3YKwlMveisSzPbn-tW0PvzxMseQ.roa
Signing time: Tue 02 Jan 2024 08:32:31 +0000
ROA not before: Tue 02 Jan 2024 08:32:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212822
IP address blocks: 185.216.210.0/24 maxlen: 24
45.95.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:8a:f8:49:b8:7a:f9:8d:5e:f4:60:93:6f:ee:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 2 08:32:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd82b094cbde8ac4b33db9feb56d0fbf3c4cb1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:49:3e:7c:b7:c3:d8:80:85:e0:15:29:19:d6:
57:b4:e2:cd:07:c4:f0:ab:dc:78:dd:be:f0:71:23:
b2:ce:f7:85:2f:36:40:f7:a4:91:2d:0b:ad:97:c9:
20:c9:bf:44:76:ff:6e:13:38:59:cb:47:36:09:4d:
7c:cd:2a:9c:ad:f6:8f:58:fd:65:9b:53:3f:5f:68:
4a:a3:06:74:e6:46:ea:55:ac:0c:84:27:97:41:81:
a3:22:3f:04:ee:2d:ab:71:c6:1b:6c:33:82:40:3c:
da:95:b8:76:23:8a:2d:ab:f0:06:d3:53:5f:2d:ae:
d1:2e:7a:a8:e5:ea:cf:f6:33:94:e7:6a:65:a4:24:
3a:ff:10:66:ed:8b:e0:60:58:5a:48:1e:77:35:70:
04:1d:51:20:7d:75:ee:1e:48:f1:a7:a5:ef:64:c6:
a2:74:1a:65:51:24:ae:07:7f:be:58:c8:b6:7b:de:
77:62:99:4c:72:b2:c4:17:49:45:b7:78:a3:6e:06:
1c:fe:66:b8:30:ce:00:14:c6:2b:94:ff:a3:43:37:
76:4f:cd:8a:d3:8b:d4:56:a6:4d:41:03:de:99:40:
f3:71:96:f1:79:66:5f:9f:38:47:3f:17:b5:0f:3e:
99:65:8f:42:51:13:52:3d:2d:eb:ea:13:b3:1a:ba:
ef:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:82:B0:94:CB:DE:8A:C4:B3:3D:B9:FE:B5:6D:0F:BF:3C:4C:B1:E4
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/3YKwlMveisSzPbn-tW0PvzxMseQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.34.0/24
185.216.210.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:74:7d:bb:14:fb:68:83:34:40:cc:0d:d5:85:d8:45:82:2f:
97:34:01:c5:d7:eb:8b:48:8c:8f:cc:b2:fd:1c:f2:8e:d2:4c:
da:d6:a2:c9:5e:31:13:23:1f:3d:48:68:bf:2d:0d:ee:85:73:
25:cc:98:bb:49:05:d1:40:72:33:66:cc:57:aa:73:10:a8:8c:
70:ab:b2:e5:a0:39:19:8e:c9:ba:2b:7b:90:f4:39:d3:53:66:
cf:f4:c3:99:35:47:7d:74:62:4e:b4:89:19:cf:fe:40:7b:22:
ad:9a:05:6b:e9:29:bd:ad:f8:9d:b2:8c:e8:c4:41:6e:25:20:
58:73:36:86:f2:26:19:7e:42:eb:a5:57:24:57:9f:39:56:57:
6c:96:2f:da:e2:4e:df:b7:bb:4d:a5:11:68:05:65:05:1b:56:
50:17:ad:b5:8c:c8:6a:33:02:68:46:37:59:1d:c3:36:bb:af:
df:46:e8:f6:d0:d2:89:91:5c:6c:3b:64:d3:04:05:ab:8e:d2:
56:b7:14:c4:e7:68:7e:7d:05:c7:cb:57:3b:92:97:94:e7:9f:
f2:30:36:da:2e:73:4f:4c:b5:bf:c9:e3:1d:cd:07:ba:1e:d1:
6d:24:e3:7c:1e:0e:0f:b3:05:47:6e:13:63:f6:c4:44:ba:6c:
4d:be:39:67
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzJTYr4Sbh6+Y1e9GCTb+6cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz
MGVhMTAwHhcNMjQwMTAyMDgzMjMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDgyYjA5NGNiZGU4YWM0YjMzZGI5ZmViNTZkMGZiZjNjNGNiMWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEk+fLfD2ICF4BUpGdZXtOLNB8Tw
q9x43b7wcSOyzveFLzZA96SRLQutl8kgyb9Edv9uEzhZy0c2CU18zSqcrfaPWP1l
m1M/X2hKowZ05kbqVawMhCeXQYGjIj8E7i2rccYbbDOCQDzalbh2I4otq/AG01Nf
La7RLnqo5erP9jOU52plpCQ6/xBm7YvgYFhaSB53NXAEHVEgfXXuHkjxp6XvZMai
dBplUSSuB3++WMi2e953YplMcrLEF0lFt3ijbgYc/ma4MM4AFMYrlP+jQzd2T82K
04vUVqZNQQPemUDzcZbxeWZfnzhHPxe1Dz6ZZY9CURNSPS3r6hOzGrrvlwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN2CsJTL3orEsz25/rVtD788TLHkMB8GA1UdIwQY
MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt
YWRkZjBlMTg0OWViLzEvM1lLd2xNdmVpc1N6UGJuLXRXMFB2enhNc2VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi
LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALV8iAwQA
udjSMA0GCSqGSIb3DQEBCwUAA4IBAQAcdH27FPtogzRAzA3VhdhFgi+XNAHF1+uL
SIyPzLL9HPKO0kza1qLJXjETIx89SGi/LQ3uhXMlzJi7SQXRQHIzZsxXqnMQqIxw
q7LloDkZjsm6K3uQ9DnTU2bP9MOZNUd9dGJOtIkZz/5AeyKtmgVr6Sm9rfidsozo
xEFuJSBYczaG8iYZfkLrpVckV585Vldsli/a4k7ft7tNpRFoBWUFG1ZQF621jMhq
MwJoRjdZHcM2u6/fRuj20NKJkVxsO2TTBAWrjtJWtxTE52h+fQXHy1c7kpeU55/y
MDbaLnNPTLW/yeMdzQe6HtFtJON8Hg4PswVHbhNj9sREumxNvjln
-----END CERTIFICATE-----
Generated at Sun May 19 15:32:07 2024 by rpki-client on console-ams.rpki-client.org