Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/peTYJjpd4WVh532UUPquDKBlWEU.roa
File: peTYJjpd4WVh532UUPquDKBlWEU.roa (raw, json)
Hash identifier: 7IjYszFH9pPHW/WFh4j3eqRNbxQDHXo2Pqx8stBzIiM=
Subject key identifier: A5:E4:D8:26:3A:5D:E1:65:61:E7:7D:94:50:FA:AE:0C:A0:65:58:45
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 018CC348ABAB66C3BAE4E0B40A82AF66009F
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/peTYJjpd4WVh532UUPquDKBlWEU.roa
Signing time: Mon 01 Jan 2024 04:29:28 +0000
ROA not before: Mon 01 Jan 2024 04:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47583
IP address blocks: 194.55.132.0/23 maxlen: 24
45.145.184.0/22 maxlen: 24
193.202.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 15:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ab:ab:66:c3:ba:e4:e0:b4:0a:82:af:66:00:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 04:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5e4d8263a5de16561e77d9450faae0ca0655845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:f4:df:ba:b9:07:b6:93:bf:2a:a7:e0:12:
f6:32:0a:c9:84:bc:32:4e:30:74:00:9c:d8:56:46:
6e:c4:69:92:cc:36:2c:98:56:04:9d:c0:49:46:d3:
61:d8:f1:0d:92:42:91:3a:81:72:66:a4:82:80:7f:
22:30:2a:28:98:fd:f7:20:76:0a:f7:c6:6b:d4:5d:
51:32:3e:69:14:f0:c4:f9:1c:bc:a4:8e:63:1b:e0:
9a:9e:c8:57:e8:29:cd:6c:d8:59:0d:dd:4c:04:35:
4b:d9:ab:6f:33:7f:af:e2:5b:4c:9a:b7:3b:78:d5:
cf:3f:3c:05:c8:fc:1e:a5:c5:1a:5e:42:e3:b1:b1:
2e:b3:3f:a1:f9:54:44:8d:fb:1c:71:63:44:1f:34:
e6:40:f3:ca:37:b7:2c:3b:d2:f8:b6:b2:bb:d3:80:
1d:d7:c1:b8:c7:5f:f4:88:83:0b:fa:04:50:f3:9c:
dc:e2:66:bd:63:a8:f2:29:8f:a6:22:7a:01:00:cd:
d4:72:69:26:67:da:c8:94:52:10:83:7f:96:01:3e:
fa:f7:81:b9:0a:62:1a:e5:2b:74:a6:f1:fb:c4:87:
ff:76:5f:58:3a:5b:aa:fb:d0:41:a7:92:90:41:f4:
10:74:84:6d:df:62:e9:8d:72:ba:8b:7b:60:24:dc:
4a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E4:D8:26:3A:5D:E1:65:61:E7:7D:94:50:FA:AE:0C:A0:65:58:45
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/peTYJjpd4WVh532UUPquDKBlWEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.184.0/22
193.202.44.0/23
194.55.132.0/23
Signature Algorithm: sha256WithRSAEncryption
24:37:90:ec:e7:d1:1f:bf:2e:33:7a:75:8a:b2:da:2b:18:a5:
c7:db:df:9f:58:77:1a:56:cc:11:3c:9a:fb:51:09:9d:b8:84:
66:0c:5f:9a:8c:4b:8b:33:a0:35:9b:bc:78:ab:43:c5:a6:61:
08:a1:00:ba:30:07:71:37:af:b4:b0:69:d8:b1:83:db:71:ca:
c6:2a:99:13:05:52:26:74:c3:24:02:62:de:f5:04:76:e5:af:
a8:12:3c:c5:aa:b8:b7:15:1f:76:04:6b:17:4c:c4:77:0d:6a:
db:38:3c:f5:82:f8:c2:e3:ab:56:82:4c:d2:14:3e:f3:0b:b2:
1d:8f:c3:13:3c:56:b2:4a:f4:c5:9f:f9:2d:20:48:63:73:c0:
90:21:b8:ee:53:ae:84:1e:3b:bb:b0:22:d8:53:d6:76:22:4b:
ce:f4:53:3f:37:b0:85:ea:7c:91:01:e6:de:65:c5:72:82:22:
39:69:f8:12:ab:c1:db:a6:ba:b9:e1:49:10:10:4c:11:d5:ae:
60:49:a3:96:11:7c:74:1a:63:33:74:73:59:d5:6b:03:e5:da:
cd:71:ca:18:05:11:31:75:71:53:2f:43:bc:1e:91:66:b7:d9:
a9:55:95:27:8f:e7:4f:0c:4a:e4:23:c5:28:87:90:73:b6:69:
66:22:82:8c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzDSKurZsO65OC0CoKvZgCfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjQwMTAxMDQyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWU0ZDgyNjNhNWRlMTY1NjFlNzdkOTQ1MGZhYWUwY2EwNjU1ODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/X037q5B7aTvyqn4BL2MgrJhLwy
TjB0AJzYVkZuxGmSzDYsmFYEncBJRtNh2PENkkKROoFyZqSCgH8iMCoomP33IHYK
98Zr1F1RMj5pFPDE+Ry8pI5jG+CanshX6CnNbNhZDd1MBDVL2atvM3+v4ltMmrc7
eNXPPzwFyPwepcUaXkLjsbEusz+h+VREjfsccWNEHzTmQPPKN7csO9L4trK704Ad
18G4x1/0iIML+gRQ85zc4ma9Y6jyKY+mInoBAM3UcmkmZ9rIlFIQg3+WAT7694G5
CmIa5St0pvH7xIf/dl9YOluq+9BBp5KQQfQQdIRt32LpjXK6i3tgJNxKIQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKXk2CY6XeFlYed9lFD6rgygZVhFMB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvcGVUWUpqcGQ0V1ZoNTMyVVVQcXVES0JsV0VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZG4AwQB
wcosAwQBwjeEMA0GCSqGSIb3DQEBCwUAA4IBAQAkN5Ds59Efvy4zenWKstorGKXH
29+fWHcaVswRPJr7UQmduIRmDF+ajEuLM6A1m7x4q0PFpmEIoQC6MAdxN6+0sGnY
sYPbccrGKpkTBVImdMMkAmLe9QR25a+oEjzFqri3FR92BGsXTMR3DWrbODz1gvjC
46tWgkzSFD7zC7Idj8MTPFaySvTFn/ktIEhjc8CQIbjuU66EHju7sCLYU9Z2IkvO
9FM/N7CF6nyRAebeZcVygiI5afgSq8Hbprq54UkQEEwR1a5gSaOWEXx0GmMzdHNZ
1WsD5drNccoYBRExdXFTL0O8HpFmt9mpVZUnj+dPDErkI8Uoh5BztmlmIoKM
-----END CERTIFICATE-----
Generated at Thu May 9 21:13:25 2024 by rpki-client on console-fra.rpki-client.org