Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/rh0OQYDCMxNLH85mpnVhRIYaEWU.roa
File: rh0OQYDCMxNLH85mpnVhRIYaEWU.roa (raw, json)
Hash identifier: kyHJcDB/JyRU+Jsm/bvHQ+F1B+GYVbflFjnmRkBBHvE=
Subject key identifier: AE:1D:0E:41:80:C2:33:13:4B:1F:CE:66:A6:75:61:44:86:1A:11:65
Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial: 018CC793E5B49F7DD74D24C560AEB326333D
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/rh0OQYDCMxNLH85mpnVhRIYaEWU.roa
Signing time: Tue 02 Jan 2024 00:30:07 +0000
ROA not before: Tue 02 Jan 2024 00:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202454
IP address blocks: 193.28.36.0/22 maxlen: 22
193.28.37.0/24 maxlen: 24
193.28.36.0/24 maxlen: 24
193.28.38.0/24 maxlen: 24
193.28.39.0/24 maxlen: 24
185.152.0.0/23 maxlen: 23
185.152.0.0/24 maxlen: 24
185.152.3.0/24 maxlen: 24
185.152.1.0/24 maxlen: 24
2a0a:2700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:e5:b4:9f:7d:d7:4d:24:c5:60:ae:b3:26:33:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Validity
Not Before: Jan 2 00:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae1d0e4180c233134b1fce66a6756144861a1165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:18:47:16:cd:69:bf:cc:90:a8:f7:cc:65:
35:f3:44:d3:a7:57:5f:00:30:c3:1d:c0:51:65:b0:
63:81:22:ad:b4:40:cd:57:8b:d5:78:7e:62:cf:17:
25:a9:95:ec:41:77:6c:39:09:42:18:38:1d:89:0e:
9a:2e:6a:26:96:f9:be:ad:7e:88:fe:6d:15:f1:1e:
42:05:5e:15:73:90:98:1a:e1:fd:33:0a:ff:1b:9f:
07:cc:ea:91:c3:14:7d:db:8f:c2:46:92:a9:f6:93:
bb:17:37:11:28:25:5a:83:39:e7:02:6c:a8:a0:2d:
82:0b:ec:76:34:86:f1:e7:cd:2a:d3:2f:cf:d7:f4:
be:a1:8d:27:c5:63:63:40:5a:1c:99:b1:fd:19:72:
04:d4:9f:e9:31:3a:b5:66:44:d6:66:a4:08:14:8f:
66:2b:f1:17:cd:3c:63:b2:9d:8d:99:d8:a1:d8:93:
db:c2:49:10:9f:f6:a9:8e:ac:79:22:ec:62:ed:df:
b3:d4:20:ef:97:d9:d7:bb:ba:bd:76:d8:89:de:8c:
b4:16:9d:ec:de:e0:33:0b:a1:a7:c3:25:d0:1f:42:
49:7c:cc:de:5a:c3:4e:de:f6:11:f9:c5:98:71:d8:
cc:66:aa:3f:72:f2:27:4c:38:63:d6:4e:e2:6f:9a:
a1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1D:0E:41:80:C2:33:13:4B:1F:CE:66:A6:75:61:44:86:1A:11:65
X509v3 Authority Key Identifier:
keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/rh0OQYDCMxNLH85mpnVhRIYaEWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.0.0/23
185.152.3.0/24
193.28.36.0/22
IPv6:
2a0a:2700::/29
Signature Algorithm: sha256WithRSAEncryption
61:2a:d6:d8:b1:22:40:78:36:64:58:8f:ec:eb:0a:5e:87:1d:
49:fa:76:e3:33:5c:3d:52:c1:42:9b:ad:63:7c:1d:4c:d6:e6:
1a:18:a5:ef:d0:6a:ec:57:52:e9:21:a5:a3:1b:ed:b0:74:0e:
f3:c4:60:75:b9:2e:5e:fc:60:33:07:0e:c4:55:8f:1b:71:fa:
3e:af:9b:51:08:3e:2b:04:cd:d0:0c:14:47:61:cb:43:5d:e5:
c3:9b:04:30:6b:44:c8:07:41:a1:bd:f0:3f:b1:c0:43:41:4e:
11:49:f1:92:19:24:f6:49:1e:a0:79:82:f6:f8:5b:84:aa:55:
42:f9:1e:54:03:0e:02:7d:0c:b4:4f:a3:4b:f4:05:29:ae:37:
9e:2f:1e:20:cb:bf:40:93:dd:e6:d9:b4:18:d6:2a:a0:d0:77:
da:dd:cd:5d:f3:87:3f:53:cc:12:a5:92:90:64:5a:4f:0d:7e:
a6:76:b8:5b:e3:12:a4:6a:cf:b1:62:68:43:f3:85:f4:4f:db:
ab:8c:58:f8:fa:9a:3d:1e:98:a4:bc:bd:5f:5c:38:32:97:2a:
dc:07:14:c6:3d:3e:53:f1:2d:59:d8:51:eb:d4:6b:c2:64:a7:
2c:3a:c1:18:87:9f:3a:60:37:ef:0e:b2:91:22:cf:f9:74:ba:
b8:aa:8c:a6
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzHk+W0n33XTSTFYK6zJjM9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwY2Y0OTYzMzU3ZGRiOTg1NWY5YmFjNGM3ZDk5NWFkYzg5
YTM3MmEwHhcNMjQwMTAyMDAzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTFkMGU0MTgwYzIzMzEzNGIxZmNlNjZhNjc1NjE0NDg2MWExMTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArncYRxbNab/MkKj3zGU180TTp1df
ADDDHcBRZbBjgSKttEDNV4vVeH5izxclqZXsQXdsOQlCGDgdiQ6aLmomlvm+rX6I
/m0V8R5CBV4Vc5CYGuH9Mwr/G58HzOqRwxR924/CRpKp9pO7FzcRKCVagznnAmyo
oC2CC+x2NIbx580q0y/P1/S+oY0nxWNjQFocmbH9GXIE1J/pMTq1ZkTWZqQIFI9m
K/EXzTxjsp2Nmdih2JPbwkkQn/apjqx5Iuxi7d+z1CDvl9nXu7q9dtiJ3oy0Fp3s
3uAzC6GnwyXQH0JJfMzeWsNO3vYR+cWYcdjMZqo/cvInTDhj1k7ib5qhbwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFK4dDkGAwjMTSx/OZqZ1YUSGGhFlMB8GA1UdIwQY
MBaAFPDPSWM1fduYVfm6xMfZla3ImjcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NzU5MTItZmQwYy00MzE4LWIwYjAt
NmUwNTZiNjE3ZDJhLzEvcmgwT1FZRENNeE5MSDg1bXBuVmhSSVlhRVdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NzU5MTItZmQwYy00MzE4LWIwYjAtNmUwNTZiNjE3ZDJh
LzEvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBuZgAAwQA
uZgDAwQCwRwkMA0EAgACMAcDBQMqCicAMA0GCSqGSIb3DQEBCwUAA4IBAQBhKtbY
sSJAeDZkWI/s6wpehx1J+nbjM1w9UsFCm61jfB1M1uYaGKXv0GrsV1LpIaWjG+2w
dA7zxGB1uS5e/GAzBw7EVY8bcfo+r5tRCD4rBM3QDBRHYctDXeXDmwQwa0TIB0Gh
vfA/scBDQU4RSfGSGST2SR6geYL2+FuEqlVC+R5UAw4CfQy0T6NL9AUprjeeLx4g
y79Ak93m2bQY1iqg0Hfa3c1d84c/U8wSpZKQZFpPDX6mdrhb4xKkas+xYmhD84X0
T9urjFj4+po9HpikvL1fXDgylyrcBxTGPT5T8S1Z2FHr1GvCZKcsOsEYh586YDfv
DrKRIs/5dLq4qoym
-----END CERTIFICATE-----
Generated at Fri May 17 22:07:41 2024 by rpki-client on console-ams.rpki-client.org