Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/_4B_8tnvXGLYwHEezek8yUZFX_c.roa
File: _4B_8tnvXGLYwHEezek8yUZFX_c.roa (raw, json)
Hash identifier: RwrncYCCBOznxAmmMNClJHN/YbhTyPmFo2qxCBO7eoQ=
Subject key identifier: FF:80:7F:F2:D9:EF:5C:62:D8:C0:71:1E:CD:E9:3C:C9:46:45:5F:F7
Certificate issuer: /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Certificate serial: 018CC2DAE881F2BFE7F6420209ED3318A366
Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/_4B_8tnvXGLYwHEezek8yUZFX_c.roa
Signing time: Mon 01 Jan 2024 02:29:35 +0000
ROA not before: Mon 01 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 85.158.143.0/24 maxlen: 24
85.158.142.0/24 maxlen: 24
195.245.231.0/24 maxlen: 24
195.245.230.0/24 maxlen: 24
193.109.255.0/24 maxlen: 24
46.226.52.0/23 maxlen: 23
193.109.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e8:81:f2:bf:e7:f6:42:02:09:ed:33:18:a3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff807ff2d9ef5c62d8c0711ecde93cc946455ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:ee:61:12:a3:5e:d4:1f:38:7b:3a:2a:eb:
82:53:29:39:90:48:0d:2e:8f:7d:ae:b9:14:9d:63:
62:75:bc:0c:29:aa:ab:c1:f4:13:ed:35:7c:a5:56:
7e:77:c9:cf:92:72:21:35:0d:23:e0:9a:e4:02:f0:
c5:31:b3:f7:be:32:78:78:f6:42:1f:55:39:fa:9d:
2b:63:62:74:34:ea:22:d0:b4:a0:d3:e1:ea:7e:58:
c7:20:91:e1:fe:e6:e9:08:ab:86:bb:03:b6:a1:d4:
4c:70:a8:17:ff:66:6f:d8:88:e4:68:e3:0f:d4:80:
72:b7:1f:31:47:0d:c9:4c:e3:23:4b:c4:8c:75:86:
63:2c:94:13:30:90:d0:d1:52:71:c0:0c:85:06:a6:
c4:ac:7f:c5:69:d6:31:b7:08:c0:49:f3:aa:86:da:
1d:ad:73:f9:ae:92:70:61:98:27:2a:e4:a6:dc:62:
65:2c:fa:de:a5:8d:6f:9b:23:2c:f5:5d:f4:af:7f:
d7:43:fa:6b:bd:97:f0:5c:5e:13:1c:02:51:23:7e:
6e:77:c4:5e:69:b2:df:4f:e6:c0:b8:d8:1a:90:82:
61:e1:46:9e:e8:b1:c8:1b:83:cc:02:60:a9:75:e1:
bf:c1:53:1d:83:30:3c:db:1b:06:75:aa:c0:0e:9d:
f4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:80:7F:F2:D9:EF:5C:62:D8:C0:71:1E:CD:E9:3C:C9:46:45:5F:F7
X509v3 Authority Key Identifier:
keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/_4B_8tnvXGLYwHEezek8yUZFX_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.52.0/23
85.158.142.0/23
193.109.254.0/23
195.245.230.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:36:8f:d6:d6:a3:19:05:13:9e:42:e8:d8:a0:eb:5f:25:11:
a1:53:93:ee:95:98:85:4f:1a:6f:7e:6e:c5:ae:0a:1e:8a:ab:
ce:37:33:68:95:64:9a:be:40:23:39:31:62:11:3e:5e:bf:5d:
97:84:e8:3d:72:46:04:42:fa:fe:19:70:59:a2:8e:f5:49:fe:
b3:a6:32:4e:50:0e:fe:be:95:33:dd:e1:b7:aa:7b:86:82:51:
97:0a:f0:d1:6f:ab:48:fd:bf:6d:8c:81:65:c2:e5:81:7c:e9:
a3:6d:5a:95:52:e8:33:70:b2:0d:a6:2c:78:98:84:90:d8:c9:
91:d0:f9:17:33:de:e2:cb:ff:47:31:45:30:fe:61:98:2e:ed:
b1:77:bb:6e:e6:55:e1:a9:ce:87:8d:dc:37:f3:a1:86:d9:c8:
22:b1:d3:3e:dd:83:35:f3:37:e6:33:7b:b1:e8:a2:5f:5a:9d:
42:55:2c:4c:7b:8e:ef:a3:c7:17:99:45:12:c5:f9:89:ad:97:
e7:79:eb:41:7c:09:02:c2:7f:cb:22:72:8f:34:dc:83:85:8a:
40:cc:21:5d:b1:95:e2:ea:68:33:5f:a5:13:a0:d2:ff:64:a0:
b7:2e:40:2a:11:25:47:aa:f5:91:b4:b2:34:f6:b0:6d:0d:39:
27:42:c8:e1
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzC2uiB8r/n9kICCe0zGKNmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMWM2ZDBkZTcwY2M1MTgwNWI2M2E1ZTIzMjc2MjI1MjVk
MDc1YjEwHhcNMjQwMTAxMDIyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjgwN2ZmMmQ5ZWY1YzYyZDhjMDcxMWVjZGU5M2NjOTQ2NDU1ZmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzLuYRKjXtQfOHs6KuuCUyk5kEgN
Lo99rrkUnWNidbwMKaqrwfQT7TV8pVZ+d8nPknIhNQ0j4JrkAvDFMbP3vjJ4ePZC
H1U5+p0rY2J0NOoi0LSg0+HqfljHIJHh/ubpCKuGuwO2odRMcKgX/2Zv2IjkaOMP
1IBytx8xRw3JTOMjS8SMdYZjLJQTMJDQ0VJxwAyFBqbErH/FadYxtwjASfOqhtod
rXP5rpJwYZgnKuSm3GJlLPrepY1vmyMs9V30r3/XQ/prvZfwXF4THAJRI35ud8Re
abLfT+bAuNgakIJh4Uae6LHIG4PMAmCpdeG/wVMdgzA82xsGdarADp30pwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFP+Af/LZ71xi2MBxHs3pPMlGRV/3MB8GA1UdIwQY
MBaAFAscbQ3nDMUYBbY6XiMnYiUl0HWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAt
Zjc3NGYxZWFmYmZmLzEvXzRCXzh0bnZYR0xZd0hFZXplazh5VVpGWF9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAtZjc3NGYxZWFmYmZm
LzEvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLuI0AwQB
VZ6OAwQBwW3+AwQBw/XmMA0GCSqGSIb3DQEBCwUAA4IBAQCiNo/W1qMZBROeQujY
oOtfJRGhU5PulZiFTxpvfm7FrgoeiqvONzNolWSavkAjOTFiET5ev12XhOg9ckYE
Qvr+GXBZoo71Sf6zpjJOUA7+vpUz3eG3qnuGglGXCvDRb6tI/b9tjIFlwuWBfOmj
bVqVUugzcLINpix4mISQ2MmR0PkXM97iy/9HMUUw/mGYLu2xd7tu5lXhqc6Hjdw3
86GG2cgisdM+3YM18zfmM3ux6KJfWp1CVSxMe47vo8cXmUUSxfmJrZfneetBfAkC
wn/LInKPNNyDhYpAzCFdsZXi6mgzX6UToNL/ZKC3LkAqESVHqvWRtLI09rBtDTkn
Qsjh
-----END CERTIFICATE-----
Generated at Thu May 2 21:20:15 2024 by rpki-client on console-ams.rpki-client.org