Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/aQ_hg_Um6BT2pHC3YFcFif2KJAM.roa
File: aQ_hg_Um6BT2pHC3YFcFif2KJAM.roa (raw, json)
Hash identifier: rxj1L4cynXXJo52v4j7rkcHKLbSIozkkjK8w3lxHSws=
Subject key identifier: 69:0F:E1:83:F5:26:E8:14:F6:A4:70:B7:60:57:05:89:FD:8A:24:03
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 018CC7958318A1DE4597BA093F100E54C743
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/aQ_hg_Um6BT2pHC3YFcFif2KJAM.roa
Signing time: Tue 02 Jan 2024 00:31:53 +0000
ROA not before: Tue 02 Jan 2024 00:31:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8903
IP address blocks: 212.80.160.0/19 maxlen: 24
213.170.32.0/19 maxlen: 24
185.123.120.0/22 maxlen: 24
212.66.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:83:18:a1:de:45:97:ba:09:3f:10:0e:54:c7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Jan 2 00:31:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=690fe183f526e814f6a470b760570589fd8a2403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bc:b2:4e:8a:e5:b1:a2:58:0b:de:2f:97:5f:
94:f0:46:27:53:a9:62:c4:9b:08:02:9d:9a:2f:9a:
e4:8f:09:ec:68:97:4d:98:cc:5d:fd:e5:be:0b:42:
ad:fc:cc:07:36:27:cc:5b:e5:e0:b9:61:b5:17:18:
8f:85:5b:61:65:a6:b5:ba:9a:3a:bf:a3:b1:8c:ae:
9e:9c:33:8e:26:a5:08:d6:15:71:02:a2:19:66:57:
d7:62:e9:3d:50:f9:13:42:2e:0d:b8:32:eb:1f:8e:
0c:9b:5f:53:e6:4c:ea:96:57:ea:62:33:ef:55:d4:
4a:5b:d7:b0:b6:a2:62:1a:57:8d:3a:25:63:8c:94:
0f:d2:a3:f5:28:8d:3e:11:eb:33:70:25:0e:f1:a6:
ce:8a:99:67:ad:70:de:77:33:39:ff:9d:4d:59:05:
54:2a:7c:6d:85:8a:07:e5:bb:a3:1e:b8:88:cb:e7:
94:7b:19:36:21:4b:e2:e7:26:ee:c4:5c:e3:5a:42:
dd:df:22:fa:a8:e2:cb:da:20:61:04:6d:82:4c:85:
49:4d:fe:e3:69:47:fc:ad:5a:8a:c0:20:25:01:47:
1c:da:91:26:dd:6b:bb:1d:45:cf:ea:21:2e:4e:20:
04:e7:c8:ca:3d:47:c4:b8:5f:50:94:59:78:b2:fe:
9a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0F:E1:83:F5:26:E8:14:F6:A4:70:B7:60:57:05:89:FD:8A:24:03
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/aQ_hg_Um6BT2pHC3YFcFif2KJAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.120.0/22
212.66.160.0/24
212.80.160.0/19
213.170.32.0/19
Signature Algorithm: sha256WithRSAEncryption
72:01:6f:16:4b:08:0e:6d:3c:da:0a:7d:6a:8f:43:8d:40:03:
22:d0:3f:1b:6e:42:2d:5a:2e:88:1b:44:0e:e5:9e:fc:3a:fa:
a2:3c:10:19:bd:4c:8b:02:61:88:94:55:9d:d0:cc:f4:ba:3b:
e2:02:55:fe:e0:55:35:4d:14:85:2b:11:e9:55:53:1b:2b:01:
81:cc:14:82:9c:a5:e0:47:45:4a:93:be:ca:4b:83:8a:27:67:
d0:90:98:ef:f9:e9:ce:dc:de:96:ac:0e:0e:43:e7:70:13:09:
4a:7c:ed:fe:80:ff:9b:e6:50:9d:22:4a:59:ae:19:13:6c:69:
35:78:4c:f6:fd:db:d3:39:ad:04:66:b3:17:9b:15:5a:a3:79:
b4:42:a5:6e:a8:7c:f4:fb:f0:40:d8:ea:42:50:e1:b6:73:6e:
0f:b6:91:c1:17:6c:5c:80:9b:28:c5:bd:5d:db:a8:bc:02:7a:
30:d0:6f:57:18:ed:23:2a:fa:6b:2d:75:18:2a:ab:04:44:00:
9d:6f:c9:8e:02:15:07:3c:08:71:cf:55:bc:5e:1a:71:9d:ab:
8b:5f:50:e3:05:85:7b:bc:b7:0a:5c:dc:ed:3e:b1:75:f8:0d:
6c:d3:a4:af:8f:b4:fc:1c:a3:15:bd:55:48:2f:5f:57:67:62:
26:6c:21:98
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzHlYMYod5Fl7oJPxAOVMdDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy
M2UzZGIwHhcNMjQwMTAyMDAzMTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTBmZTE4M2Y1MjZlODE0ZjZhNDcwYjc2MDU3MDU4OWZkOGEyNDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LyyTorlsaJYC94vl1+U8EYnU6li
xJsIAp2aL5rkjwnsaJdNmMxd/eW+C0Kt/MwHNifMW+XguWG1FxiPhVthZaa1upo6
v6OxjK6enDOOJqUI1hVxAqIZZlfXYuk9UPkTQi4NuDLrH44Mm19T5kzqllfqYjPv
VdRKW9ewtqJiGleNOiVjjJQP0qP1KI0+EeszcCUO8abOiplnrXDedzM5/51NWQVU
KnxthYoH5bujHriIy+eUexk2IUvi5ybuxFzjWkLd3yL6qOLL2iBhBG2CTIVJTf7j
aUf8rVqKwCAlAUcc2pEm3Wu7HUXP6iEuTiAE58jKPUfEuF9QlFl4sv6ahwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGkP4YP1JugU9qRwt2BXBYn9iiQDMB8GA1UdIwQY
MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt
YTg3MWVjYzIxMmE2LzEvYVFfaGdfVW02QlQycEhDM1lGY0ZpZjJLSkFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2
LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCuXt4AwQA
1EKgAwQF1FCgAwQF1aogMA0GCSqGSIb3DQEBCwUAA4IBAQByAW8WSwgObTzaCn1q
j0ONQAMi0D8bbkItWi6IG0QO5Z78OvqiPBAZvUyLAmGIlFWd0Mz0ujviAlX+4FU1
TRSFKxHpVVMbKwGBzBSCnKXgR0VKk77KS4OKJ2fQkJjv+enO3N6WrA4OQ+dwEwlK
fO3+gP+b5lCdIkpZrhkTbGk1eEz2/dvTOa0EZrMXmxVao3m0QqVuqHz0+/BA2OpC
UOG2c24PtpHBF2xcgJsoxb1d26i8Anow0G9XGO0jKvprLXUYKqsERACdb8mOAhUH
PAhxz1W8XhpxnauLX1DjBYV7vLcKXNztPrF1+A1s06Svj7T8HKMVvVVIL19XZ2Im
bCGY
-----END CERTIFICATE-----
Generated at Fri May 17 21:45:27 2024 by rpki-client on console-fra.rpki-client.org