Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/kyfZjYN2sTCiayXpmS1OlrI5hgc.roa
File: kyfZjYN2sTCiayXpmS1OlrI5hgc.roa (raw, json)
Hash identifier: k6YhfDc0sBXywRJHIT1LcVtYHot+Khbalzqu+ER9Q3Y=
Subject key identifier: 93:27:D9:8D:83:76:B1:30:A2:6B:25:E9:99:2D:4E:96:B2:39:86:07
Certificate issuer: /CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Certificate serial: 018D8B678BE292E54828D25C22C0CDDDCF8F
Authority key identifier: 7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/kyfZjYN2sTCiayXpmS1OlrI5hgc.roa
Signing time: Fri 09 Feb 2024 01:07:15 +0000
ROA not before: Fri 09 Feb 2024 01:07:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.115.88.0/24 maxlen: 24
185.115.89.0/24 maxlen: 24
185.115.90.0/24 maxlen: 24
185.115.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8b:67:8b:e2:92:e5:48:28:d2:5c:22:c0:cd:dd:cf:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Validity
Not Before: Feb 9 01:07:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9327d98d8376b130a26b25e9992d4e96b2398607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f8:32:8c:1c:3c:47:d6:ad:a2:d5:13:3b:7c:
2b:3e:7b:d6:42:93:75:64:03:1a:11:ef:5c:6e:38:
8d:36:46:36:bb:e6:d9:3f:68:eb:04:0d:c7:ff:7e:
32:3e:1e:71:22:66:b2:23:60:4a:ca:04:5b:2c:3e:
66:c8:be:d4:b4:ce:30:be:3e:89:69:f9:20:7c:3e:
81:14:5d:6d:93:02:1a:8b:54:76:a5:e6:1e:35:bd:
36:05:a9:e1:c9:05:d5:e1:25:28:e3:76:73:af:7f:
9b:8d:13:77:48:1d:55:92:0b:a9:04:0a:cb:09:82:
cb:5f:52:ea:05:53:42:b0:73:c3:22:6c:01:c8:17:
7a:bf:d0:c1:46:de:0f:bd:d4:59:b7:49:03:62:4a:
02:87:f5:75:c0:b0:f6:0f:61:91:4b:6f:6e:2f:63:
ac:a9:aa:19:53:5c:56:5c:45:d1:fc:07:d6:6d:65:
92:4f:fa:5a:fe:bd:18:04:00:5d:e3:29:e4:97:d1:
99:6f:a4:d0:82:b4:29:d7:fa:a3:d3:e1:20:1d:cd:
12:c7:f9:01:d9:9c:60:30:ee:0f:9a:cc:b4:63:c7:
9e:77:d9:e7:ae:43:5e:61:1d:c0:5e:49:5b:e1:78:
72:b6:db:03:0b:a3:d9:70:fd:59:b7:e8:c1:ef:39:
ac:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:27:D9:8D:83:76:B1:30:A2:6B:25:E9:99:2D:4E:96:B2:39:86:07
X509v3 Authority Key Identifier:
keyid:7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/kyfZjYN2sTCiayXpmS1OlrI5hgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.88.0/22
Signature Algorithm: sha256WithRSAEncryption
80:7c:9c:ef:78:f0:b4:f0:45:56:d7:e2:26:aa:44:9e:f5:7b:
4b:b5:c9:d3:76:80:ad:e1:e7:90:8a:21:18:c0:c0:05:1b:4e:
95:04:b3:83:71:37:64:36:1a:4c:78:fa:5f:2d:81:3b:b7:2d:
1c:ae:4b:12:da:7e:25:e4:45:59:5d:56:35:d2:7a:d5:4c:72:
e5:da:c8:ff:2d:64:d9:98:58:27:2d:17:76:05:fa:fa:54:87:
3c:f4:15:c5:e3:5f:c9:97:c4:22:d7:1c:0d:97:80:d2:dd:77:
be:ee:b2:e7:c6:ed:90:d2:b3:7c:b1:9e:f0:a6:1f:f8:2a:19:
76:ab:5d:f2:33:0c:bd:dc:be:26:48:3d:11:a1:c8:5f:a4:41:
ce:12:3a:b3:93:34:e9:c1:fb:ba:b8:0f:74:b1:e1:d3:95:26:
2a:95:67:af:7e:bc:d0:47:84:38:50:09:34:03:2a:f3:64:ab:
5c:61:7f:52:5d:b2:be:23:4e:cc:9e:d9:fd:21:c9:de:2a:fb:
8a:99:30:2e:1f:39:a7:75:da:a6:db:79:db:5b:74:83:2f:5e:
3a:2c:16:f7:ce:35:a0:fb:90:66:62:dd:a9:a1:31:d8:8a:c8:
03:e1:cd:11:15:22:9a:69:1c:85:16:72:0f:36:f8:7e:94:da:
7c:e6:51:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2LZ4vikuVIKNJcIsDN3c+PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMWJkZWNiYTk0NGY3ZWUxMGU5MDY5MTMxMWZjMGY4NDM0
MzZiYTEwHhcNMjQwMjA5MDEwNzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzI3ZDk4ZDgzNzZiMTMwYTI2YjI1ZTk5OTJkNGU5NmIyMzk4NjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfgyjBw8R9atotUTO3wrPnvWQpN1
ZAMaEe9cbjiNNkY2u+bZP2jrBA3H/34yPh5xImayI2BKygRbLD5myL7UtM4wvj6J
afkgfD6BFF1tkwIai1R2peYeNb02BanhyQXV4SUo43Zzr3+bjRN3SB1VkgupBArL
CYLLX1LqBVNCsHPDImwByBd6v9DBRt4PvdRZt0kDYkoCh/V1wLD2D2GRS29uL2Os
qaoZU1xWXEXR/AfWbWWST/pa/r0YBABd4ynkl9GZb6TQgrQp1/qj0+EgHc0Sx/kB
2ZxgMO4Pmsy0Y8eed9nnrkNeYR3AXklb4XhyttsDC6PZcP1Zt+jB7zmsswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJMn2Y2DdrEwomsl6ZktTpayOYYHMB8GA1UdIwQY
MBaAFHsb3supRPfuEOkGkTEfwPhDQ2uhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXh2ZXk2bEU5LTRRNlFhUk1SX0EtRU5EYTZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iZDRkZTgtODYxYy00NWI2LTg0YzEt
NTc5YjNhODc4MTgyLzEva3lmWmpZTjJzVENpYXlYcG1TMU9sckk1aGdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9iZDRkZTgtODYxYy00NWI2LTg0YzEtNTc5YjNhODc4MTgy
LzEvZXh2ZXk2bEU5LTRRNlFhUk1SX0EtRU5EYTZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXNYMA0G
CSqGSIb3DQEBCwUAA4IBAQCAfJzvePC08EVW1+ImqkSe9XtLtcnTdoCt4eeQiiEY
wMAFG06VBLODcTdkNhpMePpfLYE7ty0crksS2n4l5EVZXVY10nrVTHLl2sj/LWTZ
mFgnLRd2Bfr6VIc89BXF41/Jl8Qi1xwNl4DS3Xe+7rLnxu2Q0rN8sZ7wph/4Khl2
q13yMwy93L4mSD0RochfpEHOEjqzkzTpwfu6uA90seHTlSYqlWevfrzQR4Q4UAk0
AyrzZKtcYX9SXbK+I07Mntn9IcneKvuKmTAuHzmnddqm23nbW3SDL146LBb3zjWg
+5BmYt2poTHYisgD4c0RFSKaaRyFFnIPNvh+lNp85lFa
-----END CERTIFICATE-----
Generated at Thu May 2 07:28:32 2024 by rpki-client on console-fra.rpki-client.org