Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/isfx9anKK7X5Z43rxySYyPyMXL0.roa
File: isfx9anKK7X5Z43rxySYyPyMXL0.roa (raw, json)
Hash identifier: +4CWUjHbKkw2gpye21TkKwpwgWumpwFCbhF9NaYqXfg=
Subject key identifier: 8A:C7:F1:F5:A9:CA:2B:B5:F9:67:8D:EB:C7:24:98:C8:FC:8C:5C:BD
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 018CC2DAF0C08544903493340995B4A4A6BF
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/isfx9anKK7X5Z43rxySYyPyMXL0.roa
Signing time: Mon 01 Jan 2024 02:29:37 +0000
ROA not before: Mon 01 Jan 2024 02:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 272877
IP address blocks: 45.80.199.0/24 maxlen: 24
45.80.198.0/24 maxlen: 24
45.80.198.0/23 maxlen: 23
45.80.196.0/22 maxlen: 22
45.80.196.0/23 maxlen: 23
45.80.197.0/24 maxlen: 24
45.80.196.0/24 maxlen: 24
103.23.63.0/24 maxlen: 24
103.23.62.0/23 maxlen: 23
103.23.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jul 2024 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f0:c0:85:44:90:34:93:34:09:95:b4:a4:a6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Jan 1 02:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ac7f1f5a9ca2bb5f9678debc72498c8fc8c5cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:93:b3:40:74:8c:b8:c9:ae:52:56:f6:be:47:
6b:a1:29:60:b5:01:00:bd:8d:e9:b6:06:ba:63:06:
ab:79:dd:71:30:51:a0:3d:47:99:0b:0b:2b:c2:80:
03:4c:a1:09:80:0a:df:f4:58:5a:b5:f1:e1:9f:9c:
67:64:b0:c0:3f:46:cb:5f:62:8b:7a:72:db:8a:f6:
5a:0a:a2:49:c1:ad:82:cb:fb:84:cc:bd:85:03:28:
9f:04:c2:02:02:7c:b7:a8:af:08:2e:40:85:bb:a1:
50:9f:42:7b:b4:f3:48:4e:51:22:bf:d9:fb:35:77:
ff:4a:b9:c6:b3:a0:c8:da:eb:d2:34:ad:f1:37:84:
da:75:f4:41:78:8d:37:81:1f:8a:2a:df:57:ab:a1:
2a:34:36:55:91:fe:29:d1:e5:e6:cc:b0:25:51:ef:
e6:02:a8:2d:a8:26:0d:25:c9:0c:2e:4b:f6:46:99:
d2:f6:09:f1:98:3f:73:1a:ae:87:ec:81:03:45:83:
f5:70:46:b2:a2:ea:ef:0a:9f:0a:8a:78:54:b8:f3:
69:a0:dd:25:77:b8:bf:ae:b7:39:54:57:87:6f:6c:
47:36:6f:77:a4:d1:9e:38:93:01:b6:3e:54:85:0c:
e3:63:f8:b2:a6:83:da:20:ec:f8:7d:db:00:e1:e0:
bf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C7:F1:F5:A9:CA:2B:B5:F9:67:8D:EB:C7:24:98:C8:FC:8C:5C:BD
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/isfx9anKK7X5Z43rxySYyPyMXL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.196.0/22
103.23.62.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:b6:9f:32:30:42:09:18:f5:17:95:76:23:ec:87:bf:e2:1c:
de:00:06:77:ee:bf:47:f8:83:e5:d8:47:8a:cb:84:4f:77:14:
f0:79:58:56:56:e0:d1:07:78:0f:42:06:6c:5a:3b:5a:e8:23:
e0:ad:1d:98:11:3d:a7:e4:ad:70:54:6c:34:bb:f7:47:2c:4b:
82:2b:bd:d9:27:ac:08:90:38:de:33:4b:68:11:9a:f1:36:7e:
49:8e:a3:cd:cd:9f:2e:94:66:63:58:d5:4f:06:4a:ab:90:43:
70:41:d6:86:fc:27:f1:35:28:67:bb:51:07:bd:84:78:0f:0e:
37:01:5d:84:9a:a4:c9:4a:61:e1:31:d5:94:b2:c0:c7:ac:00:
a8:f7:ae:8a:9a:2e:71:49:94:f4:4c:fe:d3:79:7a:48:97:79:
8a:d3:1d:8f:77:41:00:ab:83:2b:67:c9:b8:cf:46:47:2f:64:
99:0c:09:f3:ce:20:23:dc:22:a8:3c:09:92:05:f4:54:42:46:
2e:6f:a8:d6:53:e1:dd:b3:f7:0a:56:17:dc:fc:68:ba:39:be:
b3:56:b4:40:51:c8:79:10:ae:aa:fd:0f:3f:59:91:f6:4e:aa:
e0:9e:86:ab:cf:8d:81:22:8e:85:db:39:06:30:a3:cc:e5:d1:
11:20:82:21
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzC2vDAhUSQNJM0CZW0pKa/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx
OWM0NDgwHhcNMjQwMTAxMDIyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWM3ZjFmNWE5Y2EyYmI1Zjk2NzhkZWJjNzI0OThjOGZjOGM1Y2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZOzQHSMuMmuUlb2vkdroSlgtQEA
vY3ptga6Ywared1xMFGgPUeZCwsrwoADTKEJgArf9FhatfHhn5xnZLDAP0bLX2KL
enLbivZaCqJJwa2Cy/uEzL2FAyifBMICAny3qK8ILkCFu6FQn0J7tPNITlEiv9n7
NXf/SrnGs6DI2uvSNK3xN4TadfRBeI03gR+KKt9Xq6EqNDZVkf4p0eXmzLAlUe/m
AqgtqCYNJckMLkv2RpnS9gnxmD9zGq6H7IEDRYP1cEayourvCp8KinhUuPNpoN0l
d7i/rrc5VFeHb2xHNm93pNGeOJMBtj5UhQzjY/iypoPaIOz4fdsA4eC/3QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIrH8fWpyiu1+WeN68ckmMj8jFy9MB8GA1UdIwQY
MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt
YWQyZmRhNDc5ODhlLzEvaXNmeDlhbktLN1g1WjQzcnh5U1l5UHlNWEwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl
LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVDEAwQB
Zxc+MA0GCSqGSIb3DQEBCwUAA4IBAQCPtp8yMEIJGPUXlXYj7Ie/4hzeAAZ37r9H
+IPl2EeKy4RPdxTweVhWVuDRB3gPQgZsWjta6CPgrR2YET2n5K1wVGw0u/dHLEuC
K73ZJ6wIkDjeM0toEZrxNn5JjqPNzZ8ulGZjWNVPBkqrkENwQdaG/CfxNShnu1EH
vYR4Dw43AV2EmqTJSmHhMdWUssDHrACo966Kmi5xSZT0TP7TeXpIl3mK0x2Pd0EA
q4MrZ8m4z0ZHL2SZDAnzziAj3CKoPAmSBfRUQkYub6jWU+Hds/cKVhfc/Gi6Ob6z
VrRAUch5EK6q/Q8/WZH2Tqrgnoarz42BIo6F2zkGMKPM5dERIIIh
-----END CERTIFICATE-----
Generated at Sun Jul 7 06:21:50 2024 by rpki-client on console-fra.rpki-client.org