Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/R8vKsRMyAogsBClbjlZrRRe6Dh4.roa
File: R8vKsRMyAogsBClbjlZrRRe6Dh4.roa (raw, json)
Hash identifier: 9TNHRcmZ6YzBREhHk1u2R/CfgrYtDtnmvEKhpfPZ68I=
Subject key identifier: 47:CB:CA:B1:13:32:02:88:2C:04:29:5B:8E:56:6B:45:17:BA:0E:1E
Certificate issuer: /CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Certificate serial: 018CC7276B34D3403FA94E141401A0B4249C
Authority key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/R8vKsRMyAogsBClbjlZrRRe6Dh4.roa
Signing time: Mon 01 Jan 2024 22:31:38 +0000
ROA not before: Mon 01 Jan 2024 22:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197690
IP address blocks: 185.35.172.0/22 maxlen: 24
193.104.37.0/24 maxlen: 24
2a00:b060::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 14:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6b:34:d3:40:3f:a9:4e:14:14:01:a0:b4:24:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Validity
Not Before: Jan 1 22:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47cbcab1133202882c04295b8e566b4517ba0e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:05:25:2e:09:65:69:77:f2:a1:57:4a:64:52:
2a:f2:f9:73:b1:69:8c:e0:d3:7c:0c:fc:0e:15:a5:
ac:73:60:37:e1:e0:75:cc:25:da:5c:f2:5a:7c:8a:
b2:e5:e0:fe:8a:cd:e2:ae:ec:85:55:a6:0b:37:fd:
cc:0c:7b:67:4a:13:64:15:e8:cc:ff:45:68:46:5a:
00:d7:c9:c3:4f:6c:2c:e4:aa:c0:90:47:93:7a:9c:
0b:04:c3:cb:08:de:f7:df:85:0d:44:7b:fd:eb:61:
2d:33:31:85:93:36:19:1c:50:9a:1e:3a:20:6b:62:
ad:40:32:18:b7:d0:d6:42:d2:dc:69:09:60:76:cb:
a0:f1:d7:d4:ed:3d:9b:bc:d8:e8:cc:34:bc:16:07:
5f:e2:da:20:ea:b9:0d:51:cf:ba:03:70:7a:cb:cd:
fe:9f:75:b7:a2:6e:be:31:4a:84:c6:38:93:13:d9:
9a:62:36:c8:b1:fd:5a:0e:35:1e:b4:0b:37:3b:6f:
ef:78:bc:3f:db:e0:e8:d3:8a:8f:9f:6d:c7:4b:21:
53:1e:ca:e4:0f:b9:67:14:cc:d6:16:d3:0d:1a:a8:
53:17:6f:f2:14:0f:a0:91:48:d2:4d:0c:c5:22:21:
66:d5:bd:d7:85:2d:bf:f8:6e:a2:88:29:2c:41:6f:
1b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CB:CA:B1:13:32:02:88:2C:04:29:5B:8E:56:6B:45:17:BA:0E:1E
X509v3 Authority Key Identifier:
keyid:E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/R8vKsRMyAogsBClbjlZrRRe6Dh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.172.0/22
193.104.37.0/24
IPv6:
2a00:b060::/32
Signature Algorithm: sha256WithRSAEncryption
20:fe:33:37:36:3a:01:9f:ae:2a:73:6a:05:71:85:fa:e5:3d:
93:41:4d:27:d0:91:8a:97:9b:f3:4b:3e:01:55:4c:54:35:86:
99:e7:fe:04:54:a9:ca:0e:30:31:d6:d7:ee:0f:e4:d7:b9:8a:
dc:3d:a8:f4:21:f2:07:9b:87:b8:8d:e4:db:08:6a:68:99:b9:
34:33:e5:3b:51:de:b5:31:59:79:cb:54:5b:6d:78:28:af:0a:
ed:e3:85:3c:c5:07:ac:64:c4:79:31:32:25:e5:6d:81:cc:94:
a4:a9:ed:25:9b:4d:a2:19:f8:9c:d1:30:11:82:26:a1:ad:90:
c1:45:a0:77:b5:02:fd:83:82:6c:bf:f6:e9:1f:29:4d:28:4a:
79:27:47:0e:26:b4:99:74:b2:c9:43:a0:b6:ed:d2:f6:1c:20:
17:87:52:d1:5d:c3:fe:0d:0a:01:8e:5e:e9:de:d6:d8:fa:ed:
6a:23:d8:2d:cf:e6:1e:1a:f8:ec:c7:84:fe:1d:3d:6a:8b:9e:
15:2b:1a:69:7e:45:4a:78:23:b8:b2:9e:f5:f7:79:f2:89:a5:
75:ff:65:ec:4f:b9:e3:88:33:d7:3a:62:77:b9:c4:2c:44:50:
29:aa:30:c9:91:4c:22:91:f8:44:39:f0:d4:05:6d:2a:36:2a:
49:ed:ab:8e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzHJ2s000A/qU4UFAGgtCScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNDYzYzI3OGI4NGUyZGYwMGE0N2JjMmQ4MGM4ZDgwZmZh
OWJhODkwHhcNMjQwMTAxMjIzMTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2NiY2FiMTEzMzIwMjg4MmMwNDI5NWI4ZTU2NmI0NTE3YmEwZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wUlLgllaXfyoVdKZFIq8vlzsWmM
4NN8DPwOFaWsc2A34eB1zCXaXPJafIqy5eD+is3iruyFVaYLN/3MDHtnShNkFejM
/0VoRloA18nDT2ws5KrAkEeTepwLBMPLCN7334UNRHv962EtMzGFkzYZHFCaHjog
a2KtQDIYt9DWQtLcaQlgdsug8dfU7T2bvNjozDS8Fgdf4tog6rkNUc+6A3B6y83+
n3W3om6+MUqExjiTE9maYjbIsf1aDjUetAs3O2/veLw/2+Do04qPn23HSyFTHsrk
D7lnFMzWFtMNGqhTF2/yFA+gkUjSTQzFIiFm1b3XhS2/+G6iiCksQW8b1QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFEfLyrETMgKILAQpW45Wa0UXug4eMB8GA1UdIwQY
MBaAFONGPCeLhOLfAKR7wtgMjYD/qbqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85N2JhY2UtYjJkNS00MDUyLThmNjEt
NWYyZGZlZDVkMWE0LzEvUjh2S3NSTXlBb2dzQkNsYmpsWnJSUmU2RGg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85N2JhY2UtYjJkNS00MDUyLThmNjEtNWYyZGZlZDVkMWE0
LzEvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuSOsAwQA
wWglMA0EAgACMAcDBQAqALBgMA0GCSqGSIb3DQEBCwUAA4IBAQAg/jM3NjoBn64q
c2oFcYX65T2TQU0n0JGKl5vzSz4BVUxUNYaZ5/4EVKnKDjAx1tfuD+TXuYrcPaj0
IfIHm4e4jeTbCGpombk0M+U7Ud61MVl5y1RbbXgorwrt44U8xQesZMR5MTIl5W2B
zJSkqe0lm02iGfic0TARgiahrZDBRaB3tQL9g4Jsv/bpHylNKEp5J0cOJrSZdLLJ
Q6C27dL2HCAXh1LRXcP+DQoBjl7p3tbY+u1qI9gtz+YeGvjsx4T+HT1qi54VKxpp
fkVKeCO4sp7193nyiaV1/2XsT7njiDPXOmJ3ucQsRFApqjDJkUwikfhEOfDUBW0q
NipJ7auO
-----END CERTIFICATE-----
Generated at Thu May 16 21:26:04 2024 by rpki-client on console-ams.rpki-client.org