Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/4HbhD6WhIPK2uMWdUhYcl-lG2bI.roa
File: 4HbhD6WhIPK2uMWdUhYcl-lG2bI.roa (raw, json)
Hash identifier: yStYHoM7t2nRozeB/MVc1Ojnhg2RW86YS93ijd2iPBw=
Subject key identifier: E0:76:E1:0F:A5:A1:20:F2:B6:B8:C5:9D:52:16:1C:97:E9:46:D9:B2
Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial: 018FE331920A36E4A3346DFA5F5C21D9C725
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/4HbhD6WhIPK2uMWdUhYcl-lG2bI.roa
Signing time: Tue 04 Jun 2024 12:20:27 +0000
ROA not before: Tue 04 Jun 2024 12:20:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42836
IP address blocks: 185.223.86.0/23 maxlen: 24
195.66.90.0/24 maxlen: 24
2001:67c:20c8::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e3:31:92:0a:36:e4:a3:34:6d:fa:5f:5c:21:d9:c7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
Validity
Not Before: Jun 4 12:20:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e076e10fa5a120f2b6b8c59d52161c97e946d9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:6f:51:e5:86:3c:8e:7d:a5:f3:8c:63:b4:
4c:3d:ba:97:04:00:ba:c8:7d:72:7c:2c:95:15:4c:
0b:d8:63:4b:ed:dd:25:64:46:27:f8:4d:12:7c:1e:
f3:0d:5c:26:f4:fb:7d:f9:52:6f:5a:67:75:6b:29:
c3:ab:73:fe:b7:dc:e6:7c:57:39:18:75:66:bd:68:
87:93:6e:31:3a:05:ea:53:e3:29:76:e1:5b:69:6c:
37:fa:d6:f2:3f:f8:86:d2:29:ad:58:08:69:3c:5e:
70:98:19:87:46:a9:2e:26:99:1a:09:64:4c:42:51:
7b:c3:d9:f7:8c:a0:77:42:25:0a:43:03:d4:3b:9a:
0f:34:ea:9d:6f:6e:c5:24:83:1e:b6:13:83:9a:ac:
c4:f8:80:57:4d:39:ca:c6:08:4c:18:dc:d4:40:81:
d6:14:e3:f5:cd:d7:c3:27:82:11:c4:80:4d:51:db:
d4:c5:54:63:2a:78:f5:42:42:5e:97:1a:9d:c4:6d:
98:a7:00:4d:96:0d:a1:bf:f9:dc:1a:d9:6c:31:53:
b2:ca:81:2f:69:5b:49:8a:b2:79:6d:f3:e2:54:a6:
07:76:34:d3:6b:78:f4:ac:76:8b:e9:22:36:64:8e:
42:01:0a:ab:da:f1:3f:1c:c2:6a:b3:71:06:41:cf:
ec:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:76:E1:0F:A5:A1:20:F2:B6:B8:C5:9D:52:16:1C:97:E9:46:D9:B2
X509v3 Authority Key Identifier:
keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/4HbhD6WhIPK2uMWdUhYcl-lG2bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.86.0/23
195.66.90.0/24
IPv6:
2001:67c:20c8::/48
Signature Algorithm: sha256WithRSAEncryption
bd:3d:01:4d:92:ea:75:82:b3:ee:f2:e8:3f:5c:94:7d:e4:78:
bc:73:23:e4:6f:67:58:3e:3c:51:da:6a:60:24:a8:80:08:b0:
e5:b6:30:a8:32:d9:10:75:24:36:94:7f:77:3e:e9:73:d9:12:
e8:27:ee:93:c9:1c:7b:74:c3:d3:51:cc:36:7e:fd:d1:8e:5f:
1e:3c:38:eb:0f:bc:b4:a3:71:41:ce:c0:b7:45:4d:87:ef:06:
49:04:50:66:a2:61:14:02:30:34:12:ec:31:24:2b:c4:30:c0:
6c:1d:4d:2f:04:c1:d7:10:2e:18:88:bd:9c:7b:ac:98:3f:3a:
cf:46:14:34:d8:0c:aa:dd:4d:51:c4:b0:4f:d4:41:00:2d:fd:
09:51:95:4e:bd:ca:4d:2f:5f:4e:f7:d2:9f:de:52:1f:3c:de:
31:24:1a:42:93:85:09:70:fe:e3:76:af:e5:70:c0:fd:f2:b2:
53:6b:a6:5d:4a:79:8e:f5:d6:87:2e:6b:a5:71:db:77:67:e7:
6e:4f:69:53:26:af:c1:6a:3f:74:66:06:d7:52:a4:11:58:f8:
a0:e4:b7:32:3f:d5:58:41:da:28:2b:9d:e3:f3:11:f9:b7:ff:
9d:d8:81:87:b3:85:fd:02:3f:6c:98:94:e8:95:06:52:2a:52:
92:4a:88:2f
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAY/jMZIKNuSjNG36X1wh2cclMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOTY5NDZjNTAxZGRmNDg2OTZkYTJjZjExMGZkY2ViMjg2
ZmFjOTgwHhcNMjQwNjA0MTIyMDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDc2ZTEwZmE1YTEyMGYyYjZiOGM1OWQ1MjE2MWM5N2U5NDZkOWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudJvUeWGPI59pfOMY7RMPbqXBAC6
yH1yfCyVFUwL2GNL7d0lZEYn+E0SfB7zDVwm9Pt9+VJvWmd1aynDq3P+t9zmfFc5
GHVmvWiHk24xOgXqU+MpduFbaWw3+tbyP/iG0imtWAhpPF5wmBmHRqkuJpkaCWRM
QlF7w9n3jKB3QiUKQwPUO5oPNOqdb27FJIMethODmqzE+IBXTTnKxghMGNzUQIHW
FOP1zdfDJ4IRxIBNUdvUxVRjKnj1QkJelxqdxG2YpwBNlg2hv/ncGtlsMVOyyoEv
aVtJirJ5bfPiVKYHdjTTa3j0rHaL6SI2ZI5CAQqr2vE/HMJqs3EGQc/sqwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFOB24Q+loSDytrjFnVIWHJfpRtmyMB8GA1UdIwQY
MBaAFCyWlGxQHd9IaW2izxEP3Osob6yYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGZlZjgtZDJkZi00ZjdhLTkyYjQt
N2Y5NzBhM2FmOWNkLzEvNEhiaEQ2V2hJUEsydU1XZFVoWWNsLWxHMmJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wNGZlZjgtZDJkZi00ZjdhLTkyYjQtN2Y5NzBhM2FmOWNk
LzEvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBud9WAwQA
w0JaMA8EAgACMAkDBwAgAQZ8IMgwDQYJKoZIhvcNAQELBQADggEBAL09AU2S6nWC
s+7y6D9clH3keLxzI+RvZ1g+PFHaamAkqIAIsOW2MKgy2RB1JDaUf3c+6XPZEugn
7pPJHHt0w9NRzDZ+/dGOXx48OOsPvLSjcUHOwLdFTYfvBkkEUGaiYRQCMDQS7DEk
K8QwwGwdTS8EwdcQLhiIvZx7rJg/Os9GFDTYDKrdTVHEsE/UQQAt/QlRlU69yk0v
X0730p/eUh883jEkGkKThQlw/uN2r+VwwP3yslNrpl1KeY711ocua6Vx23dn525P
aVMmr8FqP3RmBtdSpBFY+KDktzI/1VhB2igrnePzEfm3/53YgYezhf0CP2yYlOiV
BlIqUpJKiC8=
-----END CERTIFICATE-----
Generated at Mon Jul 1 16:09:57 2024 by rpki-client on console-ams.rpki-client.org