Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/hOUehbVk-QqE5YphPLRUqxYg-Tw.roa
File: hOUehbVk-QqE5YphPLRUqxYg-Tw.roa (raw, json)
Hash identifier: mmsEEUwMQdiBbq2YEQhECCNvmGFSeI8duX0oLMrZ0QI=
Subject key identifier: 84:E5:1E:85:B5:64:F9:0A:84:E5:8A:61:3C:B4:54:AB:16:20:F9:3C
Certificate issuer: /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial: 018CC5DC24681D5C2B4F5464CC122B36179F
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/hOUehbVk-QqE5YphPLRUqxYg-Tw.roa
Signing time: Mon 01 Jan 2024 16:29:47 +0000
ROA not before: Mon 01 Jan 2024 16:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31331
IP address blocks: 83.150.160.0/20 maxlen: 20
83.150.184.0/21 maxlen: 21
83.150.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:24:68:1d:5c:2b:4f:54:64:cc:12:2b:36:17:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Validity
Not Before: Jan 1 16:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84e51e85b564f90a84e58a613cb454ab1620f93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:67:8d:65:f9:4d:8a:81:0a:06:c4:ed:1a:f3:
6f:37:a2:50:5b:c4:29:29:8a:51:a0:81:eb:63:82:
12:0e:62:6f:02:cf:1a:33:4d:91:77:3e:a7:ad:77:
fb:0a:ec:e5:c5:4f:59:a3:03:05:ba:bf:b5:ff:b1:
96:40:4e:6f:6c:8f:77:35:c4:c4:64:0e:c8:ce:67:
08:55:3d:61:18:a1:a3:94:f4:4c:15:9f:7c:c5:89:
a4:d2:e3:94:23:de:08:4e:58:43:19:db:a6:b0:0d:
c0:97:29:6c:ee:fc:06:20:6b:99:ec:a7:f5:49:43:
b1:70:19:ca:eb:be:14:df:be:aa:3a:32:a1:9b:23:
21:19:4d:01:8b:eb:93:bb:ba:52:92:e6:7a:ac:11:
3c:1f:b4:02:bc:30:2c:aa:22:14:3a:00:72:21:02:
8f:dd:41:94:64:95:d8:d9:05:2a:fd:5c:ea:40:19:
b3:ee:7f:78:47:77:86:1d:e6:b7:00:6e:8d:51:59:
18:2f:7c:f6:16:67:7e:10:9d:7b:f6:ca:6d:64:e5:
c6:1f:d7:f5:ca:3d:a1:f5:83:62:a9:64:c0:5c:df:
86:5c:ca:3a:b2:f6:90:17:52:7f:ff:16:14:bd:91:
72:c4:a8:01:94:ee:df:87:f1:32:21:ca:87:03:34:
6b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E5:1E:85:B5:64:F9:0A:84:E5:8A:61:3C:B4:54:AB:16:20:F9:3C
X509v3 Authority Key Identifier:
keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/hOUehbVk-QqE5YphPLRUqxYg-Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.128.0-83.150.175.255
83.150.184.0/21
Signature Algorithm: sha256WithRSAEncryption
c4:20:a9:2b:2c:c2:dd:73:51:95:62:9b:4e:d4:ab:95:ac:ee:
d5:87:a7:bc:34:99:00:a9:2b:94:c2:64:b4:39:21:46:8c:aa:
f7:e5:e9:cc:49:8f:2f:f7:cd:f8:48:eb:8e:56:fe:cf:d3:95:
10:27:a5:f2:91:93:c2:38:4c:6b:6b:0b:b2:12:51:42:f3:a4:
0d:be:dc:24:20:b4:59:c8:19:cf:37:65:fe:00:24:d8:4e:23:
3e:f6:d2:9e:88:a7:26:a0:16:c2:f8:0a:db:d8:c9:bb:bb:32:
8e:51:3d:05:6a:23:38:c0:c2:c8:36:ad:18:ab:04:83:10:a7:
5f:b8:31:a2:11:1a:de:c0:10:eb:24:f8:5e:95:9f:37:c3:93:
42:05:6d:ba:75:61:ea:ff:56:db:a6:88:52:b5:2d:e2:d1:c6:
bd:07:89:83:d3:ac:a5:60:45:4d:d5:05:ce:58:f9:e6:6f:d8:
a0:26:64:13:a5:be:88:b5:27:e7:32:ba:36:ed:66:aa:56:3c:
03:03:36:eb:eb:90:d8:be:2c:51:ff:46:8c:62:06:a0:59:59:
ee:6b:fe:65:95:18:47:37:cc:1a:2d:f5:24:96:31:aa:15:f9:
f0:80:24:8d:47:22:64:36:70:8a:50:50:2f:0b:76:38:9b:8f:
78:0c:38:3a
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYzF3CRoHVwrT1RkzBIrNhefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYmMwMDJhMmIzNTliMWFhODg3OWUxYzRkNzA0NTViMzE5
MmVmYWMwHhcNMjQwMTAxMTYyOTQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGU1MWU4NWI1NjRmOTBhODRlNThhNjEzY2I0NTRhYjE2MjBmOTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymeNZflNioEKBsTtGvNvN6JQW8Qp
KYpRoIHrY4ISDmJvAs8aM02Rdz6nrXf7CuzlxU9ZowMFur+1/7GWQE5vbI93NcTE
ZA7IzmcIVT1hGKGjlPRMFZ98xYmk0uOUI94ITlhDGdumsA3Alyls7vwGIGuZ7Kf1
SUOxcBnK674U376qOjKhmyMhGU0Bi+uTu7pSkuZ6rBE8H7QCvDAsqiIUOgByIQKP
3UGUZJXY2QUq/VzqQBmz7n94R3eGHea3AG6NUVkYL3z2Fmd+EJ179sptZOXGH9f1
yj2h9YNiqWTAXN+GXMo6svaQF1J//xYUvZFyxKgBlO7fh/EyIcqHAzRrMQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFITlHoW1ZPkKhOWKYTy0VKsWIPk8MB8GA1UdIwQY
MBaAFCu8ACorNZsaqIeeHE1wRVsxku+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzd3QUtpczFteHFvaDU0Y1RYQkZXekdTNzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83YzM3MjYtMmRiZS00MTc0LWIxNjQt
YTg5ODg5Y2U1Zjg0LzEvaE9VZWhiVmstUXFFNVlwaFBMUlVxeFlnLVR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83YzM3MjYtMmRiZS00MTc0LWIxNjQtYTg5ODg5Y2U1Zjg0
LzEvSzd3QUtpczFteHFvaDU0Y1RYQkZXekdTNzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAdTloAD
BARTlqADBANTlrgwDQYJKoZIhvcNAQELBQADggEBAMQgqSsswt1zUZVim07Uq5Ws
7tWHp7w0mQCpK5TCZLQ5IUaMqvfl6cxJjy/3zfhI645W/s/TlRAnpfKRk8I4TGtr
C7ISUULzpA2+3CQgtFnIGc83Zf4AJNhOIz720p6IpyagFsL4CtvYybu7Mo5RPQVq
IzjAwsg2rRirBIMQp1+4MaIRGt7AEOsk+F6VnzfDk0IFbbp1Yer/VtumiFK1LeLR
xr0HiYPTrKVgRU3VBc5Y+eZv2KAmZBOlvoi1J+cyujbtZqpWPAMDNuvrkNi+LFH/
RoxiBqBZWe5r/mWVGEc3zBot9SSWMaoV+fCAJI1HImQ2cIpQUC8Ldjibj3gMODo=
-----END CERTIFICATE-----
Generated at Fri Jun 7 14:16:32 2024 by rpki-client on console-fra.rpki-client.org