Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/8feJGMdR8b5mIR2qaEJcSicQ-Wk.roa
File: 8feJGMdR8b5mIR2qaEJcSicQ-Wk.roa (raw, json)
Hash identifier: oWHLB9Ev9alFbqVNC8TgoaJrVWmahI75Jz30LQ8TWGE=
Subject key identifier: F1:F7:89:18:C7:51:F1:BE:66:21:1D:AA:68:42:5C:4A:27:10:F9:69
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649DA72D513A0845C86E4ED28B51914
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/8feJGMdR8b5mIR2qaEJcSicQ-Wk.roa
Signing time: Mon 01 Jan 2024 18:29:37 +0000
ROA not before: Mon 01 Jan 2024 18:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42086
IP address blocks: 62.204.141.0/24 maxlen: 24
212.91.190.0/24 maxlen: 24
213.169.53.0/24 maxlen: 24
213.169.52.0/24 maxlen: 24
62.204.156.0/23 maxlen: 23
82.103.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:da:72:d5:13:a0:84:5c:86:e4:ed:28:b5:19:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1f78918c751f1be66211daa68425c4a2710f969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:70:e0:c4:f4:4d:f2:d7:f6:f1:f7:7d:eb:e2:
a6:69:08:da:02:3f:ce:00:f4:98:71:ca:75:39:b9:
6f:ca:71:0a:91:3e:4f:7e:79:61:fb:8d:03:58:27:
53:c0:0d:e2:58:81:49:38:3c:44:17:f7:34:22:50:
ed:2a:13:88:f1:ef:5b:8f:51:f8:3d:ec:b2:02:54:
cb:31:ee:bd:5d:34:60:a1:8b:d3:4f:47:9b:98:30:
db:a8:7b:6f:90:ad:9f:e6:32:57:9d:f4:5d:4d:61:
72:fb:da:76:a5:81:bd:3c:be:cf:2f:0a:65:a6:4e:
6f:29:24:91:20:82:76:db:75:41:cf:c4:4d:a5:37:
ca:64:43:5b:9b:d9:a5:e1:69:03:c5:7a:ac:19:91:
e2:b0:3e:fa:00:46:2f:90:5f:f6:43:20:4c:ac:6e:
b5:04:0e:5b:14:05:2e:32:17:98:a5:5c:6a:2f:d8:
4a:0d:c5:90:a5:8a:4c:d9:f4:a2:fd:f8:91:ee:1e:
d9:ae:d2:af:0c:a5:58:ca:e7:0f:12:7d:2f:97:15:
ad:9c:fb:4b:d8:5b:f3:aa:e8:e8:2e:82:8a:7d:b8:
be:10:83:ef:cd:7c:ff:97:89:07:fd:a0:64:e0:8f:
9a:86:06:26:57:c2:e6:d3:c3:5e:9d:50:9e:fb:ec:
13:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F7:89:18:C7:51:F1:BE:66:21:1D:AA:68:42:5C:4A:27:10:F9:69
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/8feJGMdR8b5mIR2qaEJcSicQ-Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.141.0/24
62.204.156.0/23
82.103.87.0/24
212.91.190.0/24
213.169.52.0/23
Signature Algorithm: sha256WithRSAEncryption
62:84:0f:f1:ce:f7:b2:21:2a:a4:0d:32:8f:c1:6e:e0:46:7c:
27:09:56:9e:8d:00:70:49:74:57:93:ec:6d:54:1b:f4:62:a0:
44:5d:b7:a4:61:a9:8d:29:3c:36:35:25:8a:8c:e9:67:fa:3e:
b5:7e:d6:8c:df:d4:75:20:f2:02:2b:f7:6b:8c:e0:65:43:b9:
0a:dc:e2:16:61:ed:8e:1c:d6:44:b4:ff:5e:b0:b6:d1:f1:bd:
f5:d0:08:d0:f4:44:93:52:11:c7:de:ac:75:2d:52:48:6b:5d:
4a:4f:62:86:25:d2:2c:75:1b:c2:2c:11:a6:6c:d3:fd:eb:88:
1e:0c:5c:1f:96:5d:74:20:a5:0d:7c:7c:31:74:55:8d:1e:d1:
3f:25:20:0e:70:91:70:5d:f7:4d:12:20:b7:3a:d8:e6:33:30:
09:ec:96:ac:8f:c5:fe:f9:b2:e9:6f:4b:04:0b:ef:80:6e:77:
8c:da:e8:a2:e5:8c:37:37:2d:bc:6a:c1:81:54:e6:fe:04:44:
8e:15:b9:59:f8:1e:3f:89:2a:12:6f:94:d9:c0:4d:5a:0e:21:
6e:5d:29:6b:81:98:44:55:47:1b:38:9b:4a:af:b3:90:6f:ec:
ae:b1:d4:ef:e1:b7:e9:e5:36:c1:72:31:bd:6c:c8:33:8e:5e:
1b:b5:3f:54
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzGSdpy1ROghFyG5O0otRkUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjQwMTAxMTgyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWY3ODkxOGM3NTFmMWJlNjYyMTFkYWE2ODQyNWM0YTI3MTBmOTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3DgxPRN8tf28fd96+KmaQjaAj/O
APSYccp1OblvynEKkT5Pfnlh+40DWCdTwA3iWIFJODxEF/c0IlDtKhOI8e9bj1H4
PeyyAlTLMe69XTRgoYvTT0ebmDDbqHtvkK2f5jJXnfRdTWFy+9p2pYG9PL7PLwpl
pk5vKSSRIIJ223VBz8RNpTfKZENbm9ml4WkDxXqsGZHisD76AEYvkF/2QyBMrG61
BA5bFAUuMheYpVxqL9hKDcWQpYpM2fSi/fiR7h7ZrtKvDKVYyucPEn0vlxWtnPtL
2FvzqujoLoKKfbi+EIPvzXz/l4kH/aBk4I+ahgYmV8Lm08NenVCe++wTxQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFPH3iRjHUfG+ZiEdqmhCXEonEPlpMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvOGZlSkdNZFI4YjVtSVIycWFFSmNTaWNRLVdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAPsyNAwQB
PsycAwQAUmdXAwQA1Fu+AwQB1ak0MA0GCSqGSIb3DQEBCwUAA4IBAQBihA/xzvey
ISqkDTKPwW7gRnwnCVaejQBwSXRXk+xtVBv0YqBEXbekYamNKTw2NSWKjOln+j61
ftaM39R1IPICK/drjOBlQ7kK3OIWYe2OHNZEtP9esLbR8b310AjQ9ESTUhHH3qx1
LVJIa11KT2KGJdIsdRvCLBGmbNP964geDFwfll10IKUNfHwxdFWNHtE/JSAOcJFw
XfdNEiC3OtjmMzAJ7Jasj8X++bLpb0sEC++AbneM2uii5Yw3Ny28asGBVOb+BESO
FblZ+B4/iSoSb5TZwE1aDiFuXSlrgZhEVUcbOJtKr7OQb+yusdTv4bfp5TbBcjG9
bMgzjl4btT9U
-----END CERTIFICATE-----
Generated at Mon May 6 12:05:03 2024 by rpki-client on console-fra.rpki-client.org