Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/cnA-of2_SxgamX6C0W2bvJ91Fh4.roa
File: cnA-of2_SxgamX6C0W2bvJ91Fh4.roa (raw, json)
Hash identifier: hYXAV5PN3BI3bxJ95Pe1pijb1fgGc+e5h3QX12F7xYk=
Subject key identifier: 72:70:3E:A1:FD:BF:4B:18:1A:99:7E:82:D1:6D:9B:BC:9F:75:16:1E
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 018CC8709A923E28DB0A6EECDF371A7CF83F
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/cnA-of2_SxgamX6C0W2bvJ91Fh4.roa
Signing time: Tue 02 Jan 2024 04:31:11 +0000
ROA not before: Tue 02 Jan 2024 04:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42724
IP address blocks: 194.62.40.0/24 maxlen: 24
193.3.167.0/24 maxlen: 24
194.36.84.0/24 maxlen: 24
194.36.86.0/24 maxlen: 24
194.36.87.0/24 maxlen: 24
45.155.127.0/24 maxlen: 24
45.155.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:9a:92:3e:28:db:0a:6e:ec:df:37:1a:7c:f8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: Jan 2 04:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72703ea1fdbf4b181a997e82d16d9bbc9f75161e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0b:1d:62:b4:a4:cc:06:e4:75:cc:fa:50:01:
b9:ef:f3:44:c5:4f:55:94:a3:1d:28:79:29:84:87:
8e:38:0e:0f:fd:ab:ec:c1:9a:29:bd:4c:dd:6e:af:
4f:6f:90:94:b7:19:12:e5:76:d5:d3:5a:e3:ec:b8:
e4:01:7a:9e:e4:99:04:04:97:af:83:43:8e:6f:3b:
40:bd:97:a2:f4:07:c8:6d:23:9a:4a:86:13:93:35:
31:bf:5b:dd:62:bd:4c:ac:60:c9:10:8b:67:fb:b5:
e6:d6:e8:e5:d4:e0:89:38:85:d1:b2:4e:9a:98:9a:
53:79:e8:68:0c:a4:27:32:fe:3c:44:52:a2:a9:7a:
9f:ac:17:74:69:40:94:20:31:88:23:f1:62:3f:23:
a1:c1:30:3c:c1:62:d6:64:3c:18:2d:54:24:9f:e3:
7c:e5:14:b6:d3:89:ce:02:40:04:f4:26:ed:c2:8c:
50:2a:56:dc:64:f7:c1:17:20:ea:76:bb:0d:b2:08:
98:ef:ca:ec:18:1d:f2:ad:53:37:a0:79:c8:4d:7a:
36:9d:47:16:e7:d6:ca:42:e1:22:ea:0e:a1:00:74:
13:ae:46:bc:d7:f3:78:4f:db:c7:12:e5:16:78:19:
bb:5e:b9:7d:9e:5a:55:0a:79:8c:5b:e2:e6:d0:82:
10:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:70:3E:A1:FD:BF:4B:18:1A:99:7E:82:D1:6D:9B:BC:9F:75:16:1E
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/cnA-of2_SxgamX6C0W2bvJ91Fh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.126.0/23
193.3.167.0/24
194.36.84.0/24
194.36.86.0/23
194.62.40.0/24
Signature Algorithm: sha256WithRSAEncryption
70:b7:57:7e:0b:b0:c6:eb:0d:f2:87:c1:54:5b:82:09:3b:96:
b9:bd:eb:da:16:76:c0:2e:d0:07:db:2c:96:ef:6f:ad:65:25:
6a:3c:44:d2:0a:e3:df:01:7f:bb:14:c7:72:8e:e8:bc:71:fd:
a8:25:84:a0:23:d4:e2:ec:9e:79:96:3d:72:47:05:4c:00:1f:
01:11:62:ab:76:78:18:6a:ae:b0:58:06:24:2a:84:e7:fc:9c:
2c:b6:7f:c4:bb:9c:a5:7c:31:f0:0b:86:8f:f2:67:92:75:8f:
b5:8f:e9:e7:98:06:a1:27:1a:a6:5e:98:b4:f2:8b:4c:e2:bc:
bb:fe:5c:93:48:00:cb:23:38:b7:6e:48:02:b3:cc:15:43:a8:
c4:73:c5:5c:cd:58:83:60:1e:f5:45:69:50:6a:29:9d:78:d2:
c0:a1:ca:e8:34:4d:9f:1a:6c:63:7e:5f:9a:2b:00:96:a1:6e:
02:d0:9e:ef:67:f7:ff:1f:66:3b:e0:36:0d:8d:0d:43:c0:da:
59:59:08:52:e1:72:b2:51:4c:ff:88:73:fb:32:d5:af:4e:8d:
37:44:db:78:eb:5c:df:34:89:8e:8d:37:3e:52:85:fc:91:bd:
1b:3f:48:df:e7:cf:1a:1b:86:90:c0:ce:52:60:d5:1e:d5:06:
bb:3d:3e:30
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzIcJqSPijbCm7s3zcafPg/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MzIzOTY1MWRiNmFhYjFiY2I2NzMyNWY3ODViNWVlMWY0
MDI1Y2IwHhcNMjQwMTAyMDQzMTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjcwM2VhMWZkYmY0YjE4MWE5OTdlODJkMTZkOWJiYzlmNzUxNjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggsdYrSkzAbkdcz6UAG57/NExU9V
lKMdKHkphIeOOA4P/avswZopvUzdbq9Pb5CUtxkS5XbV01rj7LjkAXqe5JkEBJev
g0OObztAvZei9AfIbSOaSoYTkzUxv1vdYr1MrGDJEItn+7Xm1ujl1OCJOIXRsk6a
mJpTeehoDKQnMv48RFKiqXqfrBd0aUCUIDGII/FiPyOhwTA8wWLWZDwYLVQkn+N8
5RS204nOAkAE9CbtwoxQKlbcZPfBFyDqdrsNsgiY78rsGB3yrVM3oHnITXo2nUcW
59bKQuEi6g6hAHQTrka81/N4T9vHEuUWeBm7Xrl9nlpVCnmMW+Lm0IIQ8QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHJwPqH9v0sYGpl+gtFtm7yfdRYeMB8GA1UdIwQY
MBaAFBQyOWUdtqqxvLZzJfeFte4fQCXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQt
NmVlYzc3ZDliOTg1LzEvY25BLW9mMl9TeGdhbVg2QzBXMmJ2SjkxRmg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQtNmVlYzc3ZDliOTg1
LzEvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBLZt+AwQA
wQOnAwQAwiRUAwQBwiRWAwQAwj4oMA0GCSqGSIb3DQEBCwUAA4IBAQBwt1d+C7DG
6w3yh8FUW4IJO5a5vevaFnbALtAH2yyW72+tZSVqPETSCuPfAX+7FMdyjui8cf2o
JYSgI9Ti7J55lj1yRwVMAB8BEWKrdngYaq6wWAYkKoTn/Jwstn/Eu5ylfDHwC4aP
8meSdY+1j+nnmAahJxqmXpi08otM4ry7/lyTSADLIzi3bkgCs8wVQ6jEc8VczViD
YB71RWlQaimdeNLAocroNE2fGmxjfl+aKwCWoW4C0J7vZ/f/H2Y74DYNjQ1DwNpZ
WQhS4XKyUUz/iHP7MtWvTo03RNt461zfNImOjTc+UoX8kb0bP0jf588aG4aQwM5S
YNUe1Qa7PT4w
-----END CERTIFICATE-----
Generated at Sat Jun 1 18:34:15 2024 by rpki-client on console-ams.rpki-client.org