Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/EUBm4M6s5tg792ajLhmhM4jiSAI.roa
File: EUBm4M6s5tg792ajLhmhM4jiSAI.roa (raw, json)
Hash identifier: KdZ4CyfHx90f38jt2EZ1auj9IUr27wwk0mPfhvNYxp0=
Subject key identifier: 11:40:66:E0:CE:AC:E6:D8:3B:F7:66:A3:2E:19:A1:33:88:E2:48:02
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 018CC2DAB841EDD35505672FFE98290ECBC0
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/EUBm4M6s5tg792ajLhmhM4jiSAI.roa
Signing time: Mon 01 Jan 2024 02:29:23 +0000
ROA not before: Mon 01 Jan 2024 02:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2856
IP address blocks: 188.172.160.0/21 maxlen: 21
188.172.160.0/20 maxlen: 20
188.172.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b8:41:ed:d3:55:05:67:2f:fe:98:29:0e:cb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jan 1 02:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=114066e0ceace6d83bf766a32e19a13388e24802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:01:02:bc:a8:f4:b2:d9:3c:c2:67:74:23:0a:
2a:c7:c8:33:52:ce:cf:71:39:34:29:1f:e5:60:7a:
bb:21:9c:dd:a6:a6:f8:ff:77:1f:bd:9e:5c:59:95:
b2:1d:ad:b4:33:c6:68:63:bf:6b:32:fd:fc:c6:ca:
71:bd:15:e8:34:ff:23:c8:1c:50:a3:55:f8:a8:63:
3b:65:12:4d:ba:15:59:42:e7:fc:39:d4:14:a6:84:
8b:29:a0:42:41:ce:d6:ef:4d:da:ac:ed:4f:f4:12:
f8:b8:5f:14:b7:df:25:38:6c:bc:8f:1f:bf:ac:10:
9e:1b:39:b3:4e:ee:cf:e5:16:e4:7e:24:6d:20:41:
2c:26:81:00:7a:43:d7:bf:26:33:28:5f:f4:8c:fc:
78:c7:f5:1c:9d:65:6a:0f:15:53:bc:46:bb:d6:65:
bb:84:40:e3:43:8c:76:ad:65:75:4c:6c:cd:80:db:
c0:1a:4f:c5:06:0b:62:59:90:23:6a:60:53:6b:3f:
f2:a1:3b:91:10:f5:ed:78:0d:08:30:0e:de:f0:0a:
cb:54:1d:eb:f6:74:5c:9b:52:67:5f:d2:85:9e:db:
5b:34:65:b9:af:39:46:b8:17:a3:f8:d9:5c:2f:a8:
55:3a:08:66:f6:c9:50:bf:4b:09:a3:b0:d8:d5:7d:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:40:66:E0:CE:AC:E6:D8:3B:F7:66:A3:2E:19:A1:33:88:E2:48:02
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/EUBm4M6s5tg792ajLhmhM4jiSAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.160.0/20
Signature Algorithm: sha256WithRSAEncryption
9a:8a:ce:51:e2:04:74:52:25:5b:f3:4f:f9:93:18:0d:19:54:
68:ce:c4:3a:2f:91:c3:45:ae:b6:53:d9:1b:d2:65:e4:61:70:
9c:fb:01:25:bd:ec:81:88:b1:3c:43:d5:bf:59:b6:67:df:63:
81:d0:c1:89:c0:c3:23:ef:fb:d5:d7:87:39:91:31:2b:31:54:
c5:31:ba:17:3a:e7:ec:de:16:b3:1e:0c:43:ab:eb:bd:01:97:
a0:c4:aa:01:3a:5e:82:70:c1:91:08:e0:b5:97:4f:54:9f:c0:
9b:f9:c0:8a:ed:e1:71:71:5f:1f:82:a2:56:ea:95:7b:4d:72:
96:98:a3:86:c8:86:42:f7:81:2c:fe:20:1f:85:a6:5d:64:b2:
ce:49:ab:81:41:5b:61:ed:55:cb:47:84:17:92:01:be:51:26:
fc:93:55:5f:6b:ac:8c:21:42:60:8e:87:72:a2:0c:bc:cf:56:
00:fd:16:57:8f:2a:25:61:a2:d3:72:f6:e6:62:d4:e8:e9:06:
1c:c5:ab:89:e0:dc:fe:2a:68:37:44:b8:ed:3d:b2:0c:bd:66:
7c:88:08:3d:c8:63:fc:af:64:58:0b:af:71:7c:50:36:fd:86:
c1:f1:a0:ed:59:ff:07:c1:09:eb:bc:a9:4d:fc:45:6b:ff:55:
55:20:9b:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2rhB7dNVBWcv/pgpDsvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk
ZGJkZTUwHhcNMjQwMTAxMDIyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTQwNjZlMGNlYWNlNmQ4M2JmNzY2YTMyZTE5YTEzMzg4ZTI0ODAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gECvKj0stk8wmd0Iwoqx8gzUs7P
cTk0KR/lYHq7IZzdpqb4/3cfvZ5cWZWyHa20M8ZoY79rMv38xspxvRXoNP8jyBxQ
o1X4qGM7ZRJNuhVZQuf8OdQUpoSLKaBCQc7W703arO1P9BL4uF8Ut98lOGy8jx+/
rBCeGzmzTu7P5RbkfiRtIEEsJoEAekPXvyYzKF/0jPx4x/UcnWVqDxVTvEa71mW7
hEDjQ4x2rWV1TGzNgNvAGk/FBgtiWZAjamBTaz/yoTuREPXteA0IMA7e8ArLVB3r
9nRcm1JnX9KFnttbNGW5rzlGuBej+NlcL6hVOghm9slQv0sJo7DY1X1G0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBFAZuDOrObYO/dmoy4ZoTOI4kgCMB8GA1UdIwQY
MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt
NDM3Mzk0OTM4YzUyLzEvRVVCbTRNNnM1dGc3OTJhakxobWhNNGppU0FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy
LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvKygMA0G
CSqGSIb3DQEBCwUAA4IBAQCais5R4gR0UiVb80/5kxgNGVRozsQ6L5HDRa62U9kb
0mXkYXCc+wElveyBiLE8Q9W/WbZn32OB0MGJwMMj7/vV14c5kTErMVTFMboXOufs
3hazHgxDq+u9AZegxKoBOl6CcMGRCOC1l09Un8Cb+cCK7eFxcV8fgqJW6pV7TXKW
mKOGyIZC94Es/iAfhaZdZLLOSauBQVth7VXLR4QXkgG+USb8k1Vfa6yMIUJgjody
ogy8z1YA/RZXjyolYaLTcvbmYtTo6QYcxauJ4Nz+Kmg3RLjtPbIMvWZ8iAg9yGP8
r2RYC69xfFA2/YbB8aDtWf8HwQnrvKlN/EVr/1VVIJsa
-----END CERTIFICATE-----
Generated at Fri May 3 21:39:27 2024 by rpki-client on console-ams.rpki-client.org