Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/OqjLVlG4E7NMKG74I1gCkWt-UkQ.roa
File: OqjLVlG4E7NMKG74I1gCkWt-UkQ.roa (raw, json)
Hash identifier: FR55Ny4oY0l6ztLl2wiEBQG+EAs+VP73IA9XL/1sVgU=
Subject key identifier: 3A:A8:CB:56:51:B8:13:B3:4C:28:6E:F8:23:58:02:91:6B:7E:52:44
Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Certificate serial: 018DCFA8E305E24979393B5BC31852436C5A
Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/OqjLVlG4E7NMKG74I1gCkWt-UkQ.roa
Signing time: Thu 22 Feb 2024 07:12:48 +0000
ROA not before: Thu 22 Feb 2024 07:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61060
IP address blocks: 45.158.204.0/23 maxlen: 23
185.132.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cf:a8:e3:05:e2:49:79:39:3b:5b:c3:18:52:43:6c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Validity
Not Before: Feb 22 07:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3aa8cb5651b813b34c286ef8235802916b7e5244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4e:a6:65:a5:07:c3:f0:ca:30:cd:1c:ef:d3:
b3:c9:ed:9f:31:a8:bd:42:8b:0b:d3:bf:d2:c8:0e:
1d:be:f6:4b:80:02:74:81:8c:d4:09:56:62:3e:e6:
69:12:c2:20:04:e9:74:c3:c7:cd:e6:7c:92:86:73:
ae:35:19:61:c1:54:14:30:03:12:62:71:44:07:a5:
17:ec:ca:2d:af:e0:99:5b:f8:1c:e9:cb:9b:fc:27:
e8:80:ee:7a:2a:48:a5:5c:e4:5b:0d:32:56:22:ec:
56:bb:72:94:02:e8:65:7b:38:95:5d:ff:be:38:0f:
f3:8d:43:64:b9:7e:9e:84:be:70:8a:d0:b0:d9:7b:
e7:53:88:95:5b:85:fc:a2:c7:9f:9e:a2:37:c7:4f:
4c:56:30:e7:78:02:fa:2a:1e:34:b5:6f:66:60:a7:
6c:b7:fe:9e:c2:b9:97:ef:b6:da:45:92:ee:ac:76:
5f:40:a2:31:38:86:76:6d:a2:34:8b:09:1d:ad:3b:
64:1c:3b:92:a2:8f:b0:b9:01:72:9a:ec:ed:2a:ce:
9f:dd:3b:91:03:a9:f3:2f:17:fb:71:7a:7d:a3:6a:
d1:a6:6b:6a:4b:63:e0:02:0c:7e:ab:10:96:82:5d:
ed:95:f9:e8:b4:cc:25:09:e8:a0:23:16:68:bb:c2:
f6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A8:CB:56:51:B8:13:B3:4C:28:6E:F8:23:58:02:91:6B:7E:52:44
X509v3 Authority Key Identifier:
keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/OqjLVlG4E7NMKG74I1gCkWt-UkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.204.0/23
185.132.236.0/22
Signature Algorithm: sha256WithRSAEncryption
20:d5:27:49:a1:03:ba:4e:b2:e0:44:f6:d3:93:00:97:8e:3b:
a3:9e:3a:91:86:94:a1:39:59:c8:67:b7:14:08:10:90:8f:ae:
fb:89:ba:56:d8:69:2f:b9:09:60:1f:c0:2d:22:3b:f9:04:e5:
1d:e6:43:ff:12:0a:42:66:44:a6:35:fb:b9:8c:c4:bb:2f:e9:
11:77:1d:b3:88:e5:2f:de:19:c0:74:e6:74:57:0e:82:a2:34:
93:15:1e:55:68:59:74:45:5e:63:4a:82:2e:1a:b5:8a:5d:05:
72:cc:a9:45:c2:8e:0b:8d:44:1c:bd:56:38:91:28:f3:b5:e7:
3e:24:84:51:87:70:37:a7:45:09:f5:f1:53:3f:cc:0a:f5:db:
a1:2f:72:ab:56:c6:a7:39:5d:a8:5e:c2:3d:0a:c7:db:15:ee:
2c:9c:34:4a:3f:ea:04:bd:b3:18:ff:87:3e:a0:70:e1:27:1a:
3a:e1:51:93:8e:1d:2c:85:07:a3:6d:bb:a2:9a:c6:26:4e:04:
14:cc:41:e8:fa:97:a0:92:bc:32:ad:75:00:d4:47:2e:6c:84:
d1:1d:4d:51:5f:f0:e2:e9:f8:89:df:a5:b4:98:34:d6:78:2b:
09:88:df:c2:c8:66:8c:de:3f:47:e3:58:27:89:ca:c4:cf:40:
92:4d:eb:31
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY3PqOMF4kl5OTtbwxhSQ2xaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMTY2MThiNzFmZmM4MGUxYzNmNDFlZDBkZmM4OWFiNWU5
NjNmZDIwHhcNMjQwMjIyMDcxMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWE4Y2I1NjUxYjgxM2IzNGMyODZlZjgyMzU4MDI5MTZiN2U1MjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4k6mZaUHw/DKMM0c79Ozye2fMai9
QosL07/SyA4dvvZLgAJ0gYzUCVZiPuZpEsIgBOl0w8fN5nyShnOuNRlhwVQUMAMS
YnFEB6UX7Motr+CZW/gc6cub/CfogO56KkilXORbDTJWIuxWu3KUAuhleziVXf++
OA/zjUNkuX6ehL5witCw2XvnU4iVW4X8osefnqI3x09MVjDneAL6Kh40tW9mYKds
t/6ewrmX77baRZLurHZfQKIxOIZ2baI0iwkdrTtkHDuSoo+wuQFymuztKs6f3TuR
A6nzLxf7cXp9o2rRpmtqS2PgAgx+qxCWgl3tlfnotMwlCeigIxZou8L2ZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDqoy1ZRuBOzTChu+CNYApFrflJEMB8GA1UdIwQY
MBaAFIoWYYtx/8gOHD9B7Q38iatelj/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUt
MjkxYWFlZGQ1OGNjLzEvT3FqTFZsRzRFN05NS0c3NEkxZ0NrV3QtVWtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUtMjkxYWFlZGQ1OGNj
LzEvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLZ7MAwQC
uYTsMA0GCSqGSIb3DQEBCwUAA4IBAQAg1SdJoQO6TrLgRPbTkwCXjjujnjqRhpSh
OVnIZ7cUCBCQj677ibpW2GkvuQlgH8AtIjv5BOUd5kP/EgpCZkSmNfu5jMS7L+kR
dx2ziOUv3hnAdOZ0Vw6CojSTFR5VaFl0RV5jSoIuGrWKXQVyzKlFwo4LjUQcvVY4
kSjztec+JIRRh3A3p0UJ9fFTP8wK9duhL3KrVsanOV2oXsI9CsfbFe4snDRKP+oE
vbMY/4c+oHDhJxo64VGTjh0shQejbbuimsYmTgQUzEHo+pegkrwyrXUA1EcubITR
HU1RX/Di6fiJ36W0mDTWeCsJiN/CyGaM3j9H41gnicrEz0CSTesx
-----END CERTIFICATE-----
Generated at Mon Jun 17 10:15:00 2024 by rpki-client on console-ams.rpki-client.org