Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8yz9oJPZ_5wMoGWBsjEuVL3HNqU.roa
File: 8yz9oJPZ_5wMoGWBsjEuVL3HNqU.roa (raw, json)
Hash identifier: kJ4nj66xDRwUzbTUTBvK5J/fHh/UVQTibAiJa3YyYKw=
Subject key identifier: F3:2C:FD:A0:93:D9:FF:9C:0C:A0:65:81:B2:31:2E:54:BD:C7:36:A5
Certificate issuer: /CN=f258b3a9741b431d7becd64286b9e6bce0e975da
Certificate serial: 018CC3B732C2F9942ED624035BA00DDEF24D
Authority key identifier: F2:58:B3:A9:74:1B:43:1D:7B:EC:D6:42:86:B9:E6:BC:E0:E9:75:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8yz9oJPZ_5wMoGWBsjEuVL3HNqU.roa
Signing time: Mon 01 Jan 2024 06:30:12 +0000
ROA not before: Mon 01 Jan 2024 06:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205823
IP address blocks: 193.32.105.0/24 maxlen: 24
193.32.104.0/23 maxlen: 23
193.32.104.0/24 maxlen: 24
193.32.116.0/24 maxlen: 24
193.32.116.0/23 maxlen: 23
193.32.117.0/24 maxlen: 24
185.205.57.0/24 maxlen: 24
185.205.56.0/22 maxlen: 22
185.205.56.0/24 maxlen: 24
185.205.58.0/24 maxlen: 24
185.205.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:32:c2:f9:94:2e:d6:24:03:5b:a0:0d:de:f2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f258b3a9741b431d7becd64286b9e6bce0e975da
Validity
Not Before: Jan 1 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f32cfda093d9ff9c0ca06581b2312e54bdc736a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e3:51:76:ba:63:dc:59:f5:5f:3b:ae:24:a7:
ff:20:75:e7:e9:15:b2:eb:37:81:62:8d:d6:22:60:
75:45:d8:f7:16:61:c5:81:31:64:bd:5e:20:4a:bf:
5d:7b:b2:48:01:3b:25:19:03:ad:d0:53:7d:32:4a:
21:90:9e:fc:c9:d2:91:d6:ce:7b:31:71:d0:be:4c:
f9:12:5a:5b:14:6b:a4:27:48:98:73:68:71:ad:d8:
4c:45:44:28:57:9d:e8:61:af:3e:ed:9b:38:6f:92:
99:13:68:e7:f0:1b:23:c1:b3:06:d3:ba:95:b0:b0:
5e:a4:55:36:0b:43:6b:77:3d:fa:a3:a0:22:06:88:
42:b8:1b:c5:5c:5e:22:f9:14:44:f6:0a:07:f8:3b:
97:7b:0d:97:b4:e6:f5:b1:09:2d:cb:6c:77:8a:e9:
14:cf:19:26:ed:e5:2e:cc:f0:94:b1:47:1e:37:30:
1e:d4:52:12:9a:41:4f:6c:68:03:0b:57:87:8c:ff:
66:cd:18:7c:54:63:16:fd:c2:6c:d4:61:71:82:36:
0b:37:5a:83:eb:1e:fc:d0:27:ca:a3:3c:1e:8d:04:
e9:26:b1:c6:0f:a0:03:5a:ae:e3:c9:86:6e:8a:0f:
dc:5d:56:af:85:9b:e3:ac:5a:88:c8:7e:3a:4d:db:
4d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2C:FD:A0:93:D9:FF:9C:0C:A0:65:81:B2:31:2E:54:BD:C7:36:A5
X509v3 Authority Key Identifier:
keyid:F2:58:B3:A9:74:1B:43:1D:7B:EC:D6:42:86:B9:E6:BC:E0:E9:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8yz9oJPZ_5wMoGWBsjEuVL3HNqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.56.0/22
193.32.104.0/23
193.32.116.0/23
Signature Algorithm: sha256WithRSAEncryption
50:fb:5b:a4:1a:68:d2:9e:26:92:90:9a:dc:1c:19:a1:46:0e:
49:8c:4e:69:55:7a:de:a0:39:05:d8:f1:1a:4d:60:00:42:f4:
c3:8a:68:63:dd:58:7f:63:b7:83:88:d1:8d:c1:20:8a:2e:fd:
64:a1:70:81:07:a1:e7:f5:21:fd:42:1d:bb:51:b2:2f:19:5e:
a9:f1:94:20:83:de:39:c4:d3:3f:74:d5:5b:d9:92:0c:47:5f:
28:29:19:14:4c:58:b7:2c:3c:f3:87:c2:f5:c7:45:80:a0:75:
30:1b:04:11:39:7c:f1:2c:4e:29:2b:95:43:92:e9:75:90:e7:
65:87:02:39:41:83:60:5e:ae:0b:fd:80:44:49:63:fe:a8:4c:
47:91:a1:04:d6:86:7a:6c:1a:fa:10:66:d3:64:ea:c0:32:4c:
93:82:1b:73:d9:bf:40:34:b0:d7:97:22:8e:4b:ce:2b:bb:af:
f1:09:1e:cd:42:0f:be:12:bc:d7:ce:85:5b:00:46:4c:a1:fe:
5a:e9:41:ef:65:3d:90:2f:47:8f:dc:87:4f:c1:e0:b5:fc:5c:
8e:4d:ef:dd:95:26:3a:59:80:f7:97:e3:c6:e5:46:a2:8c:93:
a6:7a:fb:b7:d3:41:6e:60:6d:8a:91:67:1e:8b:1f:1d:81:dc:
d0:d8:e1:86
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzDtzLC+ZQu1iQDW6AN3vJNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNThiM2E5NzQxYjQzMWQ3YmVjZDY0Mjg2YjllNmJjZTBl
OTc1ZGEwHhcNMjQwMTAxMDYzMDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzJjZmRhMDkzZDlmZjljMGNhMDY1ODFiMjMxMmU1NGJkYzczNmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieNRdrpj3Fn1XzuuJKf/IHXn6RWy
6zeBYo3WImB1Rdj3FmHFgTFkvV4gSr9de7JIATslGQOt0FN9MkohkJ78ydKR1s57
MXHQvkz5ElpbFGukJ0iYc2hxrdhMRUQoV53oYa8+7Zs4b5KZE2jn8BsjwbMG07qV
sLBepFU2C0Nrdz36o6AiBohCuBvFXF4i+RRE9goH+DuXew2XtOb1sQkty2x3iukU
zxkm7eUuzPCUsUceNzAe1FISmkFPbGgDC1eHjP9mzRh8VGMW/cJs1GFxgjYLN1qD
6x780CfKozwejQTpJrHGD6ADWq7jyYZuig/cXVavhZvjrFqIyH46TdtN3QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPMs/aCT2f+cDKBlgbIxLlS9xzalMB8GA1UdIwQY
MBaAFPJYs6l0G0Mde+zWQoa55rzg6XXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGxpenFYUWJReDE3N05aQ2hybm12T0RwZGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wOTVkNWYtMjY5My00MTgyLTkzOTct
Y2RhOTRmYjc5NmQxLzEvOHl6OW9KUFpfNXdNb0dXQnNqRXVWTDNITnFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8wOTVkNWYtMjY5My00MTgyLTkzOTctY2RhOTRmYjc5NmQx
LzEvOGxpenFYUWJReDE3N05aQ2hybm12T0RwZGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuc04AwQB
wSBoAwQBwSB0MA0GCSqGSIb3DQEBCwUAA4IBAQBQ+1ukGmjSniaSkJrcHBmhRg5J
jE5pVXreoDkF2PEaTWAAQvTDimhj3Vh/Y7eDiNGNwSCKLv1koXCBB6Hn9SH9Qh27
UbIvGV6p8ZQgg945xNM/dNVb2ZIMR18oKRkUTFi3LDzzh8L1x0WAoHUwGwQROXzx
LE4pK5VDkul1kOdlhwI5QYNgXq4L/YBESWP+qExHkaEE1oZ6bBr6EGbTZOrAMkyT
ghtz2b9ANLDXlyKOS84ru6/xCR7NQg++ErzXzoVbAEZMof5a6UHvZT2QL0eP3IdP
weC1/FyOTe/dlSY6WYD3l+PG5UaijJOmevu300FuYG2KkWceix8dgdzQ2OGG
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:02 2024 by rpki-client on console-ams.rpki-client.org