Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Von8lsVsyo1z4go0SLTT0LzEpU8.roa
File: Von8lsVsyo1z4go0SLTT0LzEpU8.roa (raw, json)
Hash identifier: 7VoT/Y3x7ubnsPafoAflDMnp8W/4CtFZ3atFtEV2T5o=
Subject key identifier: 56:89:FC:96:C5:6C:CA:8D:73:E2:0A:34:48:B4:D3:D0:BC:C4:A5:4F
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B936422BE1FAFED821F3CA04B29D36
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Von8lsVsyo1z4go0SLTT0LzEpU8.roa
Signing time: Mon 01 Jan 2024 20:31:15 +0000
ROA not before: Mon 01 Jan 2024 20:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42351
IP address blocks: 185.240.189.0/24 maxlen: 24
185.240.188.0/24 maxlen: 24
185.240.191.0/24 maxlen: 24
185.240.190.0/24 maxlen: 24
185.255.58.0/24 maxlen: 24
185.242.169.0/24 maxlen: 24
185.242.168.0/24 maxlen: 24
185.243.239.0/24 maxlen: 24
185.243.238.0/24 maxlen: 24
185.243.237.0/24 maxlen: 24
185.243.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:36:42:2b:e1:fa:fe:d8:21:f3:ca:04:b2:9d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5689fc96c56cca8d73e20a3448b4d3d0bcc4a54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:21:93:e3:c2:0d:de:43:ea:64:20:0f:3f:2b:
e4:ac:e3:18:76:61:c3:9a:1e:30:2c:87:e2:4a:d0:
4b:15:73:ab:e2:da:51:85:83:49:7a:e4:f2:6b:6c:
8c:a5:7f:ce:cb:e1:2b:6b:63:6b:b5:d2:5e:57:7a:
c8:a5:4a:10:a9:85:b8:6a:a1:a2:04:7c:ed:3a:cc:
7d:c2:95:5b:d4:1c:4b:c2:76:be:24:bc:7e:e3:ae:
1d:ec:98:05:a9:1c:66:84:73:41:28:13:70:ed:d2:
1d:96:d9:9b:9d:ea:2e:ac:df:13:b4:5e:5b:de:d2:
17:7a:5b:db:df:66:ab:14:31:17:b7:83:fb:e3:d6:
48:fb:78:d7:ac:53:39:b3:bd:fe:d3:a3:5e:af:0f:
dd:5e:ea:fe:94:ed:2e:29:8e:51:e8:d5:93:96:7b:
cb:8c:a8:9d:9c:0e:66:90:13:83:4b:20:c4:44:e2:
d3:e2:c6:5f:fa:7d:1b:b9:ab:7b:d7:12:cb:d2:05:
99:68:97:81:e6:b2:d3:57:a9:ff:ee:d9:63:0e:9f:
f2:c1:19:d9:15:2d:f3:89:17:b7:bc:99:1f:f6:88:
7f:ec:85:82:95:7e:f6:6f:92:06:29:5a:38:f2:36:
3b:bd:ff:d3:a9:93:33:2a:08:9d:5b:f2:02:c4:de:
3e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:89:FC:96:C5:6C:CA:8D:73:E2:0A:34:48:B4:D3:D0:BC:C4:A5:4F
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Von8lsVsyo1z4go0SLTT0LzEpU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.188.0/22
185.242.168.0/23
185.243.236.0/22
185.255.58.0/24
Signature Algorithm: sha256WithRSAEncryption
30:35:dd:b2:94:d3:e1:d1:ae:ea:61:e1:91:dd:87:c4:e4:1a:
75:01:25:42:db:f4:7b:5a:56:3b:34:bb:d1:ab:38:a4:86:f9:
c7:9b:d3:a1:0d:3e:f4:45:5f:31:67:57:39:c2:96:a4:74:b7:
41:4a:cf:08:fb:3f:58:46:e6:d4:fb:2e:30:aa:ca:65:54:e7:
46:e1:67:8a:7d:3a:cd:c1:ea:be:1a:61:f3:3f:ce:34:20:c3:
d3:ba:84:93:d8:99:29:ca:eb:ac:0d:76:45:78:d2:73:22:11:
57:a2:58:eb:47:fa:84:2b:64:76:50:1a:5b:96:ad:2d:08:f7:
dd:c0:4c:51:26:07:11:f8:41:f6:91:72:80:37:c5:2b:d1:25:
81:b7:b6:7e:01:03:f2:ef:f8:b2:02:c8:41:cb:d2:50:17:83:
6c:23:d0:fc:ea:65:44:d2:63:2d:3d:c9:93:93:5c:ef:e5:68:
55:92:9a:c7:6c:f7:06:39:cb:53:53:af:db:be:0e:1f:16:62:
f1:70:49:76:6a:8f:d9:1c:0f:d4:17:d6:61:0a:5c:73:d1:93:
0b:c5:6c:00:80:73:a3:3b:e3:1e:56:bd:59:8c:a6:27:4b:8c:
80:3c:d3:68:be:ee:c8:35:cb:a5:f4:4b:b5:76:1c:f2:0e:18:
97:b5:5f:64
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzGuTZCK+H6/tgh88oEsp02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjQwMTAxMjAzMTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Njg5ZmM5NmM1NmNjYThkNzNlMjBhMzQ0OGI0ZDNkMGJjYzRhNTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yGT48IN3kPqZCAPPyvkrOMYdmHD
mh4wLIfiStBLFXOr4tpRhYNJeuTya2yMpX/Oy+Era2NrtdJeV3rIpUoQqYW4aqGi
BHztOsx9wpVb1BxLwna+JLx+464d7JgFqRxmhHNBKBNw7dIdltmbneourN8TtF5b
3tIXelvb32arFDEXt4P749ZI+3jXrFM5s73+06Nerw/dXur+lO0uKY5R6NWTlnvL
jKidnA5mkBODSyDEROLT4sZf+n0buat71xLL0gWZaJeB5rLTV6n/7tljDp/ywRnZ
FS3ziRe3vJkf9oh/7IWClX72b5IGKVo48jY7vf/TqZMzKgidW/ICxN4+4wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFaJ/JbFbMqNc+IKNEi009C8xKVPMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvVm9uOGxzVnN5bzF6NGdvMFNMVFQwTHpFcFU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCufC8AwQB
ufKoAwQCufPsAwQAuf86MA0GCSqGSIb3DQEBCwUAA4IBAQAwNd2ylNPh0a7qYeGR
3YfE5Bp1ASVC2/R7WlY7NLvRqzikhvnHm9OhDT70RV8xZ1c5wpakdLdBSs8I+z9Y
RubU+y4wqsplVOdG4WeKfTrNweq+GmHzP840IMPTuoST2JkpyuusDXZFeNJzIhFX
oljrR/qEK2R2UBpblq0tCPfdwExRJgcR+EH2kXKAN8Ur0SWBt7Z+AQPy7/iyAshB
y9JQF4NsI9D86mVE0mMtPcmTk1zv5WhVkprHbPcGOctTU6/bvg4fFmLxcEl2ao/Z
HA/UF9ZhClxz0ZMLxWwAgHOjO+MeVr1ZjKYnS4yAPNNovu7INcul9Eu1dhzyDhiX
tV9k
-----END CERTIFICATE-----
Generated at Sat Jun 15 11:52:14 2024 by rpki-client on console-ams.rpki-client.org