Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/Z5_pDUENQtj_gBZpUXlOeMGuQFU.roa
File: Z5_pDUENQtj_gBZpUXlOeMGuQFU.roa (raw, json)
Hash identifier: dTGXyDfdtUVV2CzePxKiEmHN/y70KzHio+uSm4YC2Xc=
Subject key identifier: 67:9F:E9:0D:41:0D:42:D8:FF:80:16:69:51:79:4E:78:C1:AE:40:55
Certificate issuer: /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Certificate serial: 018CC94D41D10881DE48B4BADD826542DE47
Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/Z5_pDUENQtj_gBZpUXlOeMGuQFU.roa
Signing time: Tue 02 Jan 2024 08:32:12 +0000
ROA not before: Tue 02 Jan 2024 08:32:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199046
IP address blocks: 192.145.120.0/22 maxlen: 24
45.130.96.0/22 maxlen: 24
45.158.156.0/22 maxlen: 24
152.89.40.0/22 maxlen: 24
185.5.220.0/22 maxlen: 24
176.106.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:41:d1:08:81:de:48:b4:ba:dd:82:65:42:de:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Validity
Not Before: Jan 2 08:32:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=679fe90d410d42d8ff80166951794e78c1ae4055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bd:10:9e:c4:c1:a4:99:40:c2:ce:89:29:d3:
ca:f0:17:c3:84:76:68:35:bc:13:a9:18:a4:37:09:
2b:7b:1e:51:e6:a7:ae:f9:f2:da:53:bf:35:0c:37:
e1:a7:9b:fc:e4:d8:8b:43:19:98:57:a7:67:ff:56:
5a:e9:68:11:01:39:d6:cc:c7:f2:82:cf:a9:d2:25:
ca:75:cb:de:d3:8e:2a:80:e5:c4:32:4a:8d:92:e0:
42:52:6d:60:9d:8b:10:3e:28:a1:96:68:94:8f:69:
6d:8f:57:00:ac:76:cf:97:fb:46:87:be:af:37:f8:
0a:f7:8d:3c:d9:4e:be:7c:25:ac:cc:9a:3c:2b:22:
35:88:ba:98:9d:22:79:0e:e0:77:2a:52:81:d5:7e:
12:c3:46:21:1d:71:46:0e:ca:9b:95:e5:1c:43:fb:
90:5f:8f:00:a0:6b:18:a9:5d:e8:4d:3c:78:b9:81:
f1:b4:bd:f5:7d:57:9e:68:65:1d:6f:86:ad:85:26:
c1:ed:54:cd:e7:2f:3c:fe:0b:28:ed:4e:16:06:c5:
07:44:92:e0:98:ee:e4:3c:6c:de:80:76:59:6d:a9:
7a:8d:b8:1c:38:3f:88:bf:f2:35:cd:53:e0:69:a6:
3f:ea:06:48:d2:a4:75:17:7d:2b:0f:7b:14:5a:b3:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9F:E9:0D:41:0D:42:D8:FF:80:16:69:51:79:4E:78:C1:AE:40:55
X509v3 Authority Key Identifier:
keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/Z5_pDUENQtj_gBZpUXlOeMGuQFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.96.0/22
45.158.156.0/22
152.89.40.0/22
176.106.40.0/21
185.5.220.0/22
192.145.120.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:15:28:41:31:ed:0f:82:9b:eb:95:94:f5:c7:da:a0:8c:66:
b1:50:c7:ca:09:7e:15:2a:38:5f:15:11:97:14:2c:6a:ce:98:
36:9d:20:1b:09:66:07:a9:ca:2c:8b:2d:58:15:13:04:f9:22:
55:e1:cd:69:b6:f1:8f:dd:8b:35:83:6e:b3:29:b2:92:54:a9:
55:a7:06:b3:1b:73:14:7e:28:11:ca:71:e4:09:32:46:3c:5f:
d0:1d:f6:cc:c5:00:1b:d6:dd:d9:f2:0f:a0:44:b1:6a:12:7d:
86:07:06:34:2c:08:f5:48:e8:77:ed:f9:43:48:bc:ff:7e:78:
c8:c4:43:65:68:fb:ed:d1:6b:77:5c:f8:4a:b3:df:5a:9f:4d:
fa:22:37:cd:b9:25:04:41:b5:a8:fb:ea:03:dd:ca:df:3a:0a:
a9:92:7e:b5:67:8f:b8:d0:df:c4:c4:5e:92:f5:e2:56:8f:42:
6e:1e:73:b1:a8:b0:3a:d0:97:b4:92:56:bd:01:47:a6:f1:8f:
1d:a0:a4:b5:ca:c6:16:2c:b7:bc:76:37:72:f4:94:70:7d:50:
0b:97:f3:7a:45:38:d2:e4:9f:f2:4d:67:03:20:30:cc:5c:c9:
dc:89:c4:5d:be:5f:d0:24:01:54:ee:d8:0c:68:82:5e:9c:c4:
91:c5:43:c9
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYzJTUHRCIHeSLS63YJlQt5HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNTZjN2U2NjBiMWM3NGUzYjAzMThiMTQzMzhjM2YwMGRk
N2JjNzIwHhcNMjQwMTAyMDgzMjEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzlmZTkwZDQxMGQ0MmQ4ZmY4MDE2Njk1MTc5NGU3OGMxYWU0MDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr0QnsTBpJlAws6JKdPK8BfDhHZo
NbwTqRikNwkrex5R5qeu+fLaU781DDfhp5v85NiLQxmYV6dn/1Za6WgRATnWzMfy
gs+p0iXKdcve044qgOXEMkqNkuBCUm1gnYsQPiihlmiUj2ltj1cArHbPl/tGh76v
N/gK94082U6+fCWszJo8KyI1iLqYnSJ5DuB3KlKB1X4Sw0YhHXFGDsqbleUcQ/uQ
X48AoGsYqV3oTTx4uYHxtL31fVeeaGUdb4athSbB7VTN5y88/gso7U4WBsUHRJLg
mO7kPGzegHZZbal6jbgcOD+Iv/I1zVPgaaY/6gZI0qR1F30rD3sUWrMmMQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFGef6Q1BDULY/4AWaVF5TnjBrkBVMB8GA1UdIwQY
MBaAFPpWx+ZgscdOOwMYsUM4w/AN17xyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1sYkg1bUN4eDA0N0F4aXhRempEOEEzWHZISS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvMjc2YzI0LTJhN2YtNDcyNi04ZDlm
LThiZjRmZTRjNzczMi8xL1o1X3BEVUVOUXRqX2dCWnBVWGxPZU1HdVFGVS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODIvMjc2YzI0LTJhN2YtNDcyNi04ZDlmLThiZjRmZTRjNzcz
Mi8xLzEtbGJINW1DeHgwNDdBeGl4UXpqRDhBM1h2SEkuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBAItgmAD
BAItnpwDBAKYWSgDBAOwaigDBAK5BdwDBALAkXgwDQYJKoZIhvcNAQELBQADggEB
AC8VKEEx7Q+Cm+uVlPXH2qCMZrFQx8oJfhUqOF8VEZcULGrOmDadIBsJZgepyiyL
LVgVEwT5IlXhzWm28Y/dizWDbrMpspJUqVWnBrMbcxR+KBHKceQJMkY8X9Ad9szF
ABvW3dnyD6BEsWoSfYYHBjQsCPVI6Hft+UNIvP9+eMjEQ2Vo++3Ra3dc+Eqz31qf
TfoiN825JQRBtaj76gPdyt86CqmSfrVnj7jQ38TEXpL14laPQm4ec7GosDrQl7SS
Vr0BR6bxjx2gpLXKxhYst7x2N3L0lHB9UAuX83pFONLkn/JNZwMgMMxcydyJxF2+
X9AkAVTu2Axogl6cxJHFQ8k=
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:02:02 2024 by rpki-client on console-ams.rpki-client.org