Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/o5j9_aRXr5MXiFsROTwFuvAMl5I.roa
File: o5j9_aRXr5MXiFsROTwFuvAMl5I.roa (raw, json)
Hash identifier: MGzwtp8PiN9JpVb7DJaY0KA6L/0vTIKes2z0dn8XyU8=
Subject key identifier: A3:98:FD:FD:A4:57:AF:93:17:88:5B:11:39:3C:05:BA:F0:0C:97:92
Certificate issuer: /CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Certificate serial: 018CC50073C7BFA5374E84BF4B4423475987
Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/o5j9_aRXr5MXiFsROTwFuvAMl5I.roa
Signing time: Mon 01 Jan 2024 12:29:50 +0000
ROA not before: Mon 01 Jan 2024 12:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8554
IP address blocks: 82.97.32.0/22 maxlen: 22
82.97.36.0/22 maxlen: 22
185.52.32.0/22 maxlen: 22
193.41.72.0/22 maxlen: 22
195.234.46.0/24 maxlen: 24
82.97.0.0/19 maxlen: 19
82.97.0.0/18 maxlen: 18
2001:1b38::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:73:c7:bf:a5:37:4e:84:bf:4b:44:23:47:59:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Validity
Not Before: Jan 1 12:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a398fdfda457af9317885b11393c05baf00c9792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:96:2d:d8:e3:ef:6d:13:82:7b:6c:16:66:0f:
14:68:db:aa:21:a4:a6:20:6f:98:58:16:ac:d7:db:
dc:7c:1d:94:31:ea:28:e8:f6:89:55:35:f3:29:ad:
fb:bb:c3:00:01:bb:cf:76:6b:60:70:23:1e:fd:12:
3a:01:92:a1:c7:da:f8:db:06:a5:a8:1c:6a:4d:9d:
eb:aa:72:b4:89:f5:f8:f5:38:0e:c5:3e:31:9a:31:
f9:1f:9a:76:11:e1:04:15:d5:fe:32:9c:73:9c:59:
bb:5e:94:91:cd:74:10:10:46:30:1f:38:c6:a0:47:
c3:b2:1e:38:01:e5:55:18:81:e3:b5:5a:cb:17:bc:
7b:e2:7a:33:56:7e:cd:bc:6b:2e:38:dc:89:c4:fa:
22:14:58:8f:59:2f:d0:55:f4:f5:99:35:cf:30:fb:
f7:1a:50:3e:bc:bb:c2:c1:2e:63:ed:9c:04:06:f2:
1b:0b:75:41:b2:50:54:3a:8a:93:e8:d6:a6:9e:05:
bd:90:c8:7d:49:05:1e:5a:51:c5:bb:d9:fb:68:2f:
ce:6e:43:e9:5a:49:e3:f7:7d:ec:cd:8c:15:21:03:
7d:a1:e7:2f:d8:3b:00:ad:c0:68:f4:c7:dc:05:70:
50:6e:44:6f:ec:e1:95:79:36:cb:5f:52:c9:36:42:
eb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:98:FD:FD:A4:57:AF:93:17:88:5B:11:39:3C:05:BA:F0:0C:97:92
X509v3 Authority Key Identifier:
keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/o5j9_aRXr5MXiFsROTwFuvAMl5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.97.0.0/18
185.52.32.0/22
193.41.72.0/22
195.234.46.0/24
IPv6:
2001:1b38::/32
Signature Algorithm: sha256WithRSAEncryption
39:c6:69:26:3d:c5:cb:7c:f2:18:91:6e:90:16:f0:40:02:32:
a0:7e:54:7f:41:6d:1b:2c:aa:40:49:62:2f:b9:75:ba:f0:80:
fd:79:82:29:de:d5:cf:5e:13:db:9b:8e:b6:42:89:c1:af:e9:
ed:c9:99:eb:a8:29:c8:85:47:fa:32:26:b9:c8:2c:6a:7b:56:
86:f9:73:47:6e:0b:55:df:98:db:54:6e:fd:08:0d:bc:bc:ec:
1d:ab:70:c5:72:13:d6:ab:83:09:c5:4a:8c:17:bc:a5:f5:8a:
46:07:f0:2b:06:98:f6:c3:59:93:68:3d:8d:dc:0e:25:28:eb:
34:fc:48:b7:26:82:05:d7:76:56:ca:8a:f1:c2:e7:43:25:33:
00:6e:95:2d:eb:23:71:75:bd:d5:0d:d8:96:00:dc:ed:fd:96:
8c:5f:45:3c:cb:f2:80:91:04:e6:19:7e:c2:76:fc:ee:f6:09:
bc:a4:a8:2b:e2:2d:da:f0:ba:9b:36:30:93:b6:74:7a:0a:df:
12:cf:5f:74:13:4f:27:64:16:75:3f:2f:67:4b:5a:a6:b8:14:
b5:32:2e:03:a3:7b:ab:0a:9f:ac:7a:35:0a:96:84:e8:3e:eb:
6c:39:39:6c:90:8c:c2:1e:f9:e4:fe:af:ea:e9:79:f9:39:f7:
2b:be:d3:7b
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYzFAHPHv6U3ToS/S0QjR1mHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNTkwODNmYWY1ZjAyYmJhNjY4MDlhMWEyMjcyZWFmMjZl
OGEzNzgwHhcNMjQwMTAxMTIyOTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzk4ZmRmZGE0NTdhZjkzMTc4ODViMTEzOTNjMDViYWYwMGM5NzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pYt2OPvbROCe2wWZg8UaNuqIaSm
IG+YWBas19vcfB2UMeoo6PaJVTXzKa37u8MAAbvPdmtgcCMe/RI6AZKhx9r42wal
qBxqTZ3rqnK0ifX49TgOxT4xmjH5H5p2EeEEFdX+MpxznFm7XpSRzXQQEEYwHzjG
oEfDsh44AeVVGIHjtVrLF7x74nozVn7NvGsuONyJxPoiFFiPWS/QVfT1mTXPMPv3
GlA+vLvCwS5j7ZwEBvIbC3VBslBUOoqT6NamngW9kMh9SQUeWlHFu9n7aC/ObkPp
Wknj933szYwVIQN9oecv2DsArcBo9MfcBXBQbkRv7OGVeTbLX1LJNkLr3wIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFKOY/f2kV6+TF4hbETk8BbrwDJeSMB8GA1UdIwQY
MBaAFN9ZCD+vXwK7pmgJoaInLq8m6KN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzFrSVA2OWZBcnVtYUFtaG9pY3VyeWJvbzNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8xZDNjZTUtYzdlZi00OWZmLTlkNGUt
NTk2ZmRiYjBlZGQ5LzEvbzVqOV9hUlhyNU1YaUZzUk9Ud0Z1dkFNbDVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8xZDNjZTUtYzdlZi00OWZmLTlkNGUtNTk2ZmRiYjBlZGQ5
LzEvMzFrSVA2OWZBcnVtYUFtaG9pY3VyeWJvbzNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQGUmEAAwQC
uTQgAwQCwSlIAwQAw+ouMA0EAgACMAcDBQAgARs4MA0GCSqGSIb3DQEBCwUAA4IB
AQA5xmkmPcXLfPIYkW6QFvBAAjKgflR/QW0bLKpASWIvuXW68ID9eYIp3tXPXhPb
m462QonBr+ntyZnrqCnIhUf6Mia5yCxqe1aG+XNHbgtV35jbVG79CA28vOwdq3DF
chPWq4MJxUqMF7yl9YpGB/ArBpj2w1mTaD2N3A4lKOs0/Ei3JoIF13ZWyorxwudD
JTMAbpUt6yNxdb3VDdiWANzt/ZaMX0U8y/KAkQTmGX7Cdvzu9gm8pKgr4i3a8Lqb
NjCTtnR6Ct8Sz190E08nZBZ1Py9nS1qmuBS1Mi4Do3urCp+sejUKloToPutsOTls
kIzCHvnk/q/q6Xn5OfcrvtN7
-----END CERTIFICATE-----
Generated at Tue May 21 09:36:16 2024 by rpki-client on console-fra.rpki-client.org