Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/P4KdEUMd83NsKFXZz9M6tbzDtt0.roa
File: P4KdEUMd83NsKFXZz9M6tbzDtt0.roa (raw, json)
Hash identifier: qccfq7U+wee6aP7Q+lnKYO/kY/H4yFTFqXXdHfPyaqI=
Subject key identifier: 3F:82:9D:11:43:1D:F3:73:6C:28:55:D9:CF:D3:3A:B5:BC:C3:B6:DD
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 018CC94D8D3F904DD31D6210CA56DAA77686
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/P4KdEUMd83NsKFXZz9M6tbzDtt0.roa
Signing time: Tue 02 Jan 2024 08:32:32 +0000
ROA not before: Tue 02 Jan 2024 08:32:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35434
IP address blocks: 188.123.192.0/19 maxlen: 19
193.47.247.0/24 maxlen: 24
217.73.176.0/20 maxlen: 20
185.69.20.0/22 maxlen: 22
93.95.88.0/21 maxlen: 21
2a02:2780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:8d:3f:90:4d:d3:1d:62:10:ca:56:da:a7:76:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Jan 2 08:32:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f829d11431df3736c2855d9cfd33ab5bcc3b6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:45:80:d8:d6:c6:2b:bf:d4:0b:15:e9:d2:f0:
07:cc:e8:1e:32:58:31:51:ec:62:ef:d5:82:75:dd:
35:30:54:06:7c:ca:52:e0:19:b3:6c:b6:f3:e8:22:
7f:b3:91:61:12:f7:13:0d:de:3b:a2:50:19:fc:34:
f3:fb:e4:b7:cb:08:ac:72:de:ac:53:37:3b:69:c0:
1e:ef:f6:b1:46:54:03:23:bc:da:52:b1:0d:a3:3b:
da:d8:48:d2:7d:b9:a5:e0:6d:46:53:a8:d8:b6:02:
0c:bd:99:27:e9:ad:eb:6a:d6:28:9b:27:8c:8a:51:
ea:8e:68:b0:11:dc:9c:b1:58:fd:42:a5:12:69:e0:
7c:82:a5:ed:aa:c5:6c:29:b0:91:fe:d3:bb:f7:4f:
0d:e7:d2:a1:b6:b6:1e:0e:94:89:7c:51:5e:48:06:
c1:f5:03:99:89:da:2e:95:b8:97:24:ce:ce:13:9d:
16:fb:68:00:25:49:e3:2c:7f:ea:c0:81:65:94:63:
63:13:6f:14:f0:60:8d:7a:b0:bc:ed:5b:25:aa:58:
83:54:6f:6e:ca:18:ae:d5:73:92:69:53:29:fd:be:
31:8d:e1:ac:84:16:a2:9e:48:7c:1f:61:a7:ea:bd:
56:69:0d:f0:93:7c:f7:8c:66:5d:0c:04:a6:14:08:
7f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:82:9D:11:43:1D:F3:73:6C:28:55:D9:CF:D3:3A:B5:BC:C3:B6:DD
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/P4KdEUMd83NsKFXZz9M6tbzDtt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.88.0/21
185.69.20.0/22
188.123.192.0/19
193.47.247.0/24
217.73.176.0/20
IPv6:
2a02:2780::/32
Signature Algorithm: sha256WithRSAEncryption
18:1b:52:1c:7a:82:3e:5c:a3:e9:e6:9d:f4:c2:92:8c:5d:c6:
9a:e9:bc:d3:b4:63:39:3e:85:7b:d2:d7:c5:b7:75:cf:ac:5c:
62:5d:a1:a5:7e:a7:67:21:eb:62:62:42:87:8f:4e:4e:54:d5:
b3:cc:50:34:69:2b:b3:95:93:9c:3f:fb:5c:b3:dc:4f:c4:5f:
b3:04:dd:61:26:90:0c:96:49:38:55:7f:2f:7f:a2:a9:e5:79:
c5:fe:52:d5:c1:f5:63:47:73:24:46:8a:92:4d:b9:e6:bf:62:
c3:60:b9:ec:6f:d4:1a:65:a3:23:0d:22:39:57:22:08:aa:2b:
3c:94:67:7e:10:e4:83:45:5b:d2:fe:a7:95:55:82:fb:23:0c:
fc:3c:30:55:9e:a6:46:ce:a6:59:c3:71:3f:fb:35:89:92:50:
c7:0c:ff:f3:ad:f1:f2:ce:53:57:b9:d9:dd:8f:3b:81:cc:bc:
38:98:c9:fe:7f:29:d5:10:40:cc:25:71:1e:82:cd:5f:63:63:
a2:ae:7e:33:74:8c:54:f2:85:c3:1f:1c:23:1d:06:82:4b:18:
2b:2a:3f:3a:12:95:c5:37:47:95:5d:4a:c3:22:a9:43:96:a3:
06:65:9a:c2:2c:83:1b:d5:73:c0:62:54:c9:1c:0f:89:ac:ac:
54:8c:13:c7
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYzJTY0/kE3THWIQylbap3aGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYmUzYzZkOTk4MTE4MTljZWRkZGNkMjdlNGJlMjViYzBj
ZjUwNmYwHhcNMjQwMTAyMDgzMjMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjgyOWQxMTQzMWRmMzczNmMyODU1ZDljZmQzM2FiNWJjYzNiNmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUWA2NbGK7/UCxXp0vAHzOgeMlgx
Uexi79WCdd01MFQGfMpS4BmzbLbz6CJ/s5FhEvcTDd47olAZ/DTz++S3ywisct6s
Uzc7acAe7/axRlQDI7zaUrENozva2EjSfbml4G1GU6jYtgIMvZkn6a3ratYomyeM
ilHqjmiwEdycsVj9QqUSaeB8gqXtqsVsKbCR/tO7908N59KhtrYeDpSJfFFeSAbB
9QOZidoulbiXJM7OE50W+2gAJUnjLH/qwIFllGNjE28U8GCNerC87VslqliDVG9u
yhiu1XOSaVMp/b4xjeGshBainkh8H2Gn6r1WaQ3wk3z3jGZdDASmFAh/awIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFD+CnRFDHfNzbChV2c/TOrW8w7bdMB8GA1UdIwQY
MBaAFMu+PG2ZgRgZzt3c0n5L4lvAz1BvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2Ut
OGNmN2Q0NDkzMzU4LzEvUDRLZEVVTWQ4M05zS0ZYWno5TTZ0YnpEdHQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2UtOGNmN2Q0NDkzMzU4
LzEveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDXV9YAwQC
uUUUAwQFvHvAAwQAwS/3AwQE2UmwMA0EAgACMAcDBQAqAieAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYG1IceoI+XKPp5p30wpKMXcaa6bzTtGM5PoV70tfFt3XPrFxiXaGl
fqdnIetiYkKHj05OVNWzzFA0aSuzlZOcP/tcs9xPxF+zBN1hJpAMlkk4VX8vf6Kp
5XnF/lLVwfVjR3MkRoqSTbnmv2LDYLnsb9QaZaMjDSI5VyIIqis8lGd+EOSDRVvS
/qeVVYL7Iwz8PDBVnqZGzqZZw3E/+zWJklDHDP/zrfHyzlNXudndjzuBzLw4mMn+
fynVEEDMJXEegs1fY2Oirn4zdIxU8oXDHxwjHQaCSxgrKj86EpXFN0eVXUrDIqlD
lqMGZZrCLIMb1XPAYlTJHA+JrKxUjBPH
-----END CERTIFICATE-----
Generated at Sat Jun 8 11:32:10 2024 by rpki-client on console-ams.rpki-client.org