Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/V3Oh8gfB_80HsbVhG5NQfKgOTw4.roa
File: V3Oh8gfB_80HsbVhG5NQfKgOTw4.roa (raw, json)
Hash identifier: 5tyNQVQ8jhzl/YZ+s7tmWnC0WzpGgJOBWSVCQvGljtY=
Subject key identifier: 57:73:A1:F2:07:C1:FF:CD:07:B1:B5:61:1B:93:50:7C:A8:0E:4F:0E
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FB909B1E9D5CB8D8790918C1E6DDF
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/V3Oh8gfB_80HsbVhG5NQfKgOTw4.roa
Signing time: Tue 02 Jan 2024 04:30:14 +0000
ROA not before: Tue 02 Jan 2024 04:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396356
IP address blocks: 45.84.219.0/24 maxlen: 24
45.85.91.0/24 maxlen: 24
136.144.35.0/24 maxlen: 24
136.144.43.0/24 maxlen: 24
45.84.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b9:09:b1:e9:d5:cb:8d:87:90:91:8c:1e:6d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5773a1f207c1ffcd07b1b5611b93507ca80e4f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3f:76:10:9f:cb:c1:6f:05:42:1c:bb:dc:c8:
78:43:93:04:13:ee:75:3a:4e:f1:6a:dc:c1:24:ba:
3c:42:76:a2:c9:fe:00:2e:1c:a1:1e:cc:3b:7b:bc:
eb:82:b8:42:e2:03:0e:be:98:b9:c0:58:a5:ab:32:
f5:23:87:d2:6b:36:8f:c1:1a:df:14:58:fc:3e:8d:
a2:62:b9:bd:a0:1f:c9:81:8c:b5:80:f0:46:de:15:
12:9d:c9:4e:36:b4:e1:a9:47:d8:54:e5:b0:d5:97:
8e:e0:21:51:11:74:ef:d1:f7:d5:25:cb:ba:3c:84:
da:e7:75:ae:f4:8f:a3:32:45:ca:9b:04:99:53:24:
ca:a5:44:e0:60:bc:4b:a1:10:d8:d1:c3:ac:75:d3:
55:41:85:39:7b:62:cc:08:16:31:02:20:e4:6a:5e:
a2:3d:ab:48:ed:5b:65:81:2d:55:44:ae:5e:8b:f7:
e3:7d:c5:3f:2b:39:7e:52:7e:73:b1:88:27:6c:15:
f7:f9:67:f8:62:63:82:2b:b6:f0:fc:bf:4e:13:cd:
6e:45:38:67:14:05:a9:40:f0:08:bf:87:26:68:ed:
24:f9:1b:ae:2c:09:c0:b6:1f:e5:0f:7f:ec:fc:35:
d3:68:90:31:7c:a3:e3:8f:3e:01:c0:3e:36:2b:dd:
cd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:73:A1:F2:07:C1:FF:CD:07:B1:B5:61:1B:93:50:7C:A8:0E:4F:0E
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/V3Oh8gfB_80HsbVhG5NQfKgOTw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.212.0/24
45.84.219.0/24
45.85.91.0/24
136.144.35.0/24
136.144.43.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:e5:fe:73:f6:30:79:04:26:5c:45:d5:e2:6b:ae:03:6f:23:
65:3c:07:0f:20:18:70:1b:8a:7b:a9:bd:03:87:db:c5:58:c3:
ee:e0:ac:b6:e8:26:35:a8:e0:db:ae:c4:67:ba:4f:85:02:45:
9c:e2:34:c1:5a:5f:1e:8e:86:22:5e:b2:f2:fa:a4:08:21:37:
38:5f:9a:99:2b:c7:61:fc:34:53:46:e7:be:bc:9a:7e:57:0c:
fb:ef:44:50:38:80:1b:2f:3f:fb:74:0c:b3:54:5a:4f:70:f0:
57:7f:f9:62:bf:c6:f1:71:80:f5:49:f5:21:ac:cb:3d:95:f2:
e8:ce:64:16:00:d8:10:43:58:7d:6e:b0:3b:c1:68:99:f4:33:
0c:d2:90:e6:6a:2a:79:57:05:82:2f:07:fb:f2:86:29:6b:dd:
62:63:0b:cf:b5:e0:16:09:b5:44:04:60:16:a5:94:e1:7b:42:
a5:c5:66:0f:70:ca:d5:b7:c4:56:26:d7:d2:66:64:9e:e4:96:
74:af:55:1c:f5:34:86:40:d0:55:be:ab:52:18:5e:0c:1b:9c:
f7:90:be:b2:1a:9b:0c:40:c4:8d:16:a6:e6:17:24:14:21:77:
9a:83:ce:a0:17:6e:c9:69:d4:a0:2a:5f:08:97:f6:03:08:3f:
4e:40:96:04
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzIb7kJsenVy42HkJGMHm3fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjQwMTAyMDQzMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzczYTFmMjA3YzFmZmNkMDdiMWI1NjExYjkzNTA3Y2E4MGU0ZjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz92EJ/LwW8FQhy73Mh4Q5MEE+51
Ok7xatzBJLo8Qnaiyf4ALhyhHsw7e7zrgrhC4gMOvpi5wFilqzL1I4fSazaPwRrf
FFj8Po2iYrm9oB/JgYy1gPBG3hUSnclONrThqUfYVOWw1ZeO4CFREXTv0ffVJcu6
PITa53Wu9I+jMkXKmwSZUyTKpUTgYLxLoRDY0cOsddNVQYU5e2LMCBYxAiDkal6i
PatI7VtlgS1VRK5ei/fjfcU/Kzl+Un5zsYgnbBX3+Wf4YmOCK7bw/L9OE81uRThn
FAWpQPAIv4cmaO0k+RuuLAnAth/lD3/s/DXTaJAxfKPjjz4BwD42K93NGwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFFdzofIHwf/NB7G1YRuTUHyoDk8OMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvVjNPaDhnZkJfODBIc2JWaEc1TlFmS2dPVHc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALVTUAwQA
LVTbAwQALVVbAwQAiJAjAwQAiJArMA0GCSqGSIb3DQEBCwUAA4IBAQAs5f5z9jB5
BCZcRdXia64DbyNlPAcPIBhwG4p7qb0Dh9vFWMPu4Ky26CY1qODbrsRnuk+FAkWc
4jTBWl8ejoYiXrLy+qQIITc4X5qZK8dh/DRTRue+vJp+Vwz770RQOIAbLz/7dAyz
VFpPcPBXf/liv8bxcYD1SfUhrMs9lfLozmQWANgQQ1h9brA7wWiZ9DMM0pDmaip5
VwWCLwf78oYpa91iYwvPteAWCbVEBGAWpZThe0KlxWYPcMrVt8RWJtfSZmSe5JZ0
r1Uc9TSGQNBVvqtSGF4MG5z3kL6yGpsMQMSNFqbmFyQUIXeag86gF27JadSgKl8I
l/YDCD9OQJYE
-----END CERTIFICATE-----
Generated at Sat May 18 07:47:05 2024 by rpki-client on console-ams.rpki-client.org