Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/z-hjDmZ1dYNraAlSgssF4dGcWGU.roa
File: z-hjDmZ1dYNraAlSgssF4dGcWGU.roa (raw, json)
Hash identifier: 8O1FNB0BfyJmIy+hLKjTWt9ymcX0vnUbCunAvAWrvHc=
Subject key identifier: CF:E8:63:0E:66:75:75:83:6B:68:09:52:82:CB:05:E1:D1:9C:58:65
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492E5FBF67F1A6C1E16536A87D8E59D
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/z-hjDmZ1dYNraAlSgssF4dGcWGU.roa
Signing time: Mon 01 Jan 2024 10:30:10 +0000
ROA not before: Mon 01 Jan 2024 10:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204650
IP address blocks: 5.160.77.0/24 maxlen: 24
46.209.57.0/24 maxlen: 24
46.209.56.0/23 maxlen: 24
46.209.214.0/24 maxlen: 24
46.209.134.0/24 maxlen: 24
46.209.134.0/23 maxlen: 23
46.209.133.0/24 maxlen: 24
5.160.208.0/23 maxlen: 23
5.160.111.0/24 maxlen: 24
5.160.110.0/24 maxlen: 24
5.160.110.0/23 maxlen: 23
5.160.131.0/24 maxlen: 24
5.160.130.0/24 maxlen: 24
46.209.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:e5:fb:f6:7f:1a:6c:1e:16:53:6a:87:d8:e5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfe8630e667575836b68095282cb05e1d19c5865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a2:53:c9:bd:87:8e:92:64:7c:28:a6:eb:21:
1a:79:59:e2:be:f2:fe:e2:a8:b9:01:1c:6e:0e:4f:
d3:b1:bd:3e:52:9e:91:40:63:c6:70:1d:b8:60:f8:
92:8f:f8:b9:1a:84:8d:dd:7a:87:5d:3a:8f:3e:42:
64:9a:5f:1d:11:1d:77:bc:79:a4:41:ef:68:da:f5:
37:64:5f:e5:05:25:fc:39:ac:8a:9b:04:12:c8:ee:
32:33:8e:60:97:cb:85:74:f2:8e:3e:66:f6:a2:e1:
a7:ac:db:d6:9c:d7:94:e5:be:13:40:3e:42:f6:63:
fa:51:86:04:3b:ed:fe:a2:76:83:87:8b:5c:cb:51:
18:77:e6:c9:7b:f2:e8:e7:93:d1:23:08:43:75:da:
eb:ae:d9:79:c0:18:d3:bf:14:d8:3f:2b:b2:77:11:
c7:37:ff:3c:a9:cb:e3:9c:3e:3f:5b:16:ec:c9:45:
68:ca:39:ab:7c:9e:4b:92:d6:11:34:1a:0b:39:42:
1e:a9:be:20:49:c1:09:b9:28:3e:4f:d9:32:de:d6:
e3:ac:fa:2a:c6:87:9f:9a:2d:e5:da:5c:6d:73:cb:
d4:54:d4:e2:5e:25:63:cf:6f:0f:f5:c6:a8:7b:8e:
5e:5d:d0:4a:90:c9:fc:29:53:4e:05:d1:51:3c:0f:
41:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E8:63:0E:66:75:75:83:6B:68:09:52:82:CB:05:E1:D1:9C:58:65
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/z-hjDmZ1dYNraAlSgssF4dGcWGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.77.0/24
5.160.110.0/23
5.160.130.0/23
5.160.208.0/23
46.209.56.0/23
46.209.108.0/22
46.209.133.0-46.209.135.255
46.209.214.0/24
Signature Algorithm: sha256WithRSAEncryption
08:fd:0e:d5:6d:c7:1f:20:2f:1a:18:fd:71:e3:20:35:96:7b:
11:66:fc:eb:d2:b7:aa:fc:6a:66:96:aa:ff:ae:bd:77:fb:09:
d1:89:b6:52:ac:14:f8:9b:f0:42:52:27:a8:7b:ce:a9:62:ba:
20:76:05:c2:53:2a:36:91:e4:65:29:b5:68:9d:8b:56:71:1f:
54:db:7b:87:23:ed:19:84:20:ef:ee:35:5f:a3:aa:dc:be:b7:
5a:a8:16:b1:c3:87:68:51:ec:54:f4:28:3f:65:99:48:09:6d:
34:20:48:18:c5:21:a3:55:21:18:ff:9e:a7:31:32:4a:21:ba:
ce:65:f1:8a:d7:77:fe:6a:99:95:2b:6b:52:3b:ef:e5:a3:d8:
e4:95:bf:38:a0:e7:b1:0f:9d:3d:65:e2:85:cc:c3:f1:f6:2d:
66:3c:96:55:88:6f:d6:76:ed:fc:93:93:14:1c:ac:6b:08:b9:
61:8f:94:79:9f:9f:25:80:da:06:57:b7:d1:65:cc:ce:50:94:
3a:90:1a:fc:09:73:85:d6:49:5b:e4:17:2c:b7:45:ac:ea:14:
74:30:a2:43:59:04:71:4c:41:55:4e:f5:cc:4c:cd:ac:05:01:
7e:7b:40:c7:54:08:6a:0f:e6:e2:62:cb:d8:3e:47:86:02:fc:
69:f5:21:b3
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYzEkuX79n8abB4WU2qH2OWdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjQwMTAxMTAzMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmU4NjMwZTY2NzU3NTgzNmI2ODA5NTI4MmNiMDVlMWQxOWM1ODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqJTyb2HjpJkfCim6yEaeVnivvL+
4qi5ARxuDk/Tsb0+Up6RQGPGcB24YPiSj/i5GoSN3XqHXTqPPkJkml8dER13vHmk
Qe9o2vU3ZF/lBSX8OayKmwQSyO4yM45gl8uFdPKOPmb2ouGnrNvWnNeU5b4TQD5C
9mP6UYYEO+3+onaDh4tcy1EYd+bJe/Lo55PRIwhDddrrrtl5wBjTvxTYPyuydxHH
N/88qcvjnD4/WxbsyUVoyjmrfJ5LktYRNBoLOUIeqb4gScEJuSg+T9ky3tbjrPoq
xoefmi3l2lxtc8vUVNTiXiVjz28P9caoe45eXdBKkMn8KVNOBdFRPA9BSQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFM/oYw5mdXWDa2gJUoLLBeHRnFhlMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvei1oakRtWjFkWU5yYUFsU2dzc0Y0ZEdjV0dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQABaBNAwQB
BaBuAwQBBaCCAwQBBaDQAwQBLtE4AwQCLtFsMAwDBAAu0YUDBAMu0YADBAAu0dYw
DQYJKoZIhvcNAQELBQADggEBAAj9DtVtxx8gLxoY/XHjIDWWexFm/OvSt6r8amaW
qv+uvXf7CdGJtlKsFPib8EJSJ6h7zqliuiB2BcJTKjaR5GUptWidi1ZxH1Tbe4cj
7RmEIO/uNV+jqty+t1qoFrHDh2hR7FT0KD9lmUgJbTQgSBjFIaNVIRj/nqcxMkoh
us5l8YrXd/5qmZUra1I77+Wj2OSVvzig57EPnT1l4oXMw/H2LWY8llWIb9Z27fyT
kxQcrGsIuWGPlHmfnyWA2gZXt9FlzM5QlDqQGvwJc4XWSVvkFyy3RazqFHQwokNZ
BHFMQVVO9cxMzawFAX57QMdUCGoP5uJiy9g+R4YC/Gn1IbM=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:45:15 2024 by rpki-client on console-fra.rpki-client.org