Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/8un1xmvTU_mwzLBBkM1ImVy07GU.roa
File: 8un1xmvTU_mwzLBBkM1ImVy07GU.roa (raw, json)
Hash identifier: hwgK4JnmT97ajmGtvP+2tY09OGR9Zr+uHj94OxZslrM=
Subject key identifier: F2:E9:F5:C6:6B:D3:53:F9:B0:CC:B0:41:90:CD:48:99:5C:B4:EC:65
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 0190C613A4075E4AA1D92F1A2560ABCA2E27
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/8un1xmvTU_mwzLBBkM1ImVy07GU.roa
Signing time: Thu 18 Jul 2024 13:41:34 +0000
ROA not before: Thu 18 Jul 2024 13:41:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29205
IP address blocks: 45.156.236.0/22 maxlen: 24
91.230.36.0/23 maxlen: 23
185.49.12.0/22 maxlen: 24
185.100.228.0/22 maxlen: 22
188.214.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c6:13:a4:07:5e:4a:a1:d9:2f:1a:25:60:ab:ca:2e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Jul 18 13:41:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2e9f5c66bd353f9b0ccb04190cd48995cb4ec65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:91:84:2d:68:9c:1d:b6:14:d4:1d:c5:7e:36:
c1:86:4f:93:ba:f3:ce:ca:74:5d:54:fe:a8:6b:38:
9e:ed:20:c1:5c:1a:ee:c8:bc:ea:59:13:81:a1:8e:
d5:18:4b:1c:2c:94:16:34:b9:52:d0:7a:ce:08:3b:
4c:c8:a7:92:80:51:91:56:f9:cc:69:b9:a2:2f:a1:
ba:e8:b6:e9:31:85:7a:4a:99:d9:f9:e7:4e:6c:77:
4d:8d:df:80:d2:9c:fc:45:70:f7:e9:89:fe:d7:9b:
85:92:f6:7a:38:c9:56:47:ee:16:06:d1:37:f7:41:
80:33:61:da:ef:6a:b7:3e:57:0d:05:53:fa:82:44:
dc:83:b2:cc:8d:24:83:0e:8a:cb:4f:45:2b:12:50:
42:fa:aa:32:69:cb:ce:c6:99:b5:c7:24:e3:b1:eb:
a7:7b:e6:14:66:68:a3:e6:03:e1:d2:e8:7a:96:22:
55:fc:a2:2b:22:49:0a:4a:cb:32:10:96:62:4f:27:
65:17:e2:e1:51:d9:9c:22:82:81:3e:66:45:ec:6f:
41:c9:c7:a2:42:35:31:a3:8f:0c:8e:1a:26:d2:82:
30:eb:b3:96:76:ad:9d:28:73:31:a3:10:3f:f1:40:
1e:53:66:89:3e:19:a9:b4:d4:70:54:cd:57:7f:1d:
12:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E9:F5:C6:6B:D3:53:F9:B0:CC:B0:41:90:CD:48:99:5C:B4:EC:65
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/8un1xmvTU_mwzLBBkM1ImVy07GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.236.0/22
91.230.36.0/23
185.49.12.0/22
185.100.228.0/22
188.214.16.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:90:a0:c7:2b:08:4f:3c:06:12:ec:7c:0f:55:8f:7f:96:24:
c0:1a:1a:6c:a4:7b:5a:f0:bd:5f:4d:43:c5:df:c2:3e:29:87:
4a:3e:8a:48:b3:6c:ed:cf:5e:30:53:11:78:02:c2:59:af:b2:
24:7d:db:eb:ea:2d:06:37:50:ef:8b:23:24:e5:7e:f4:8c:92:
eb:f7:e6:9b:a0:31:08:a5:3d:85:11:99:bc:13:63:5f:bb:70:
8b:33:0b:5c:2d:f0:e3:b9:52:1a:4b:76:cf:72:03:25:33:dd:
e3:8e:fc:c7:df:7e:6e:fb:a8:6b:b6:b2:d2:63:7c:1a:72:cf:
7d:d0:8f:e1:ed:36:90:81:8e:62:aa:5c:ee:d2:90:1f:a0:51:
28:40:40:8e:37:99:e0:6f:09:e2:62:67:a4:97:7f:84:91:7e:
e8:94:5f:81:29:a8:cb:eb:80:9f:02:72:7e:3c:8e:a1:0c:9e:
b0:e2:9f:69:20:b4:58:c9:ae:70:e2:fe:f2:94:b9:97:5b:33:
29:f4:a9:9a:9e:d5:42:4c:ce:6b:ad:6d:eb:fc:9a:8f:dd:d3:
a8:7a:4b:04:4b:c4:47:68:a9:04:b1:6a:a5:19:0f:f8:de:56:
1c:d7:d5:02:3e:a4:64:5f:3b:43:b1:23:90:4a:0a:05:a2:b3:
0a:27:87:fa
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZDGE6QHXkqh2S8aJWCryi4nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4
MWEyOWYwHhcNMjQwNzE4MTM0MTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmU5ZjVjNjZiZDM1M2Y5YjBjY2IwNDE5MGNkNDg5OTVjYjRlYzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZGELWicHbYU1B3FfjbBhk+TuvPO
ynRdVP6oazie7SDBXBruyLzqWROBoY7VGEscLJQWNLlS0HrOCDtMyKeSgFGRVvnM
abmiL6G66LbpMYV6SpnZ+edObHdNjd+A0pz8RXD36Yn+15uFkvZ6OMlWR+4WBtE3
90GAM2Ha72q3PlcNBVP6gkTcg7LMjSSDDorLT0UrElBC+qoyacvOxpm1xyTjseun
e+YUZmij5gPh0uh6liJV/KIrIkkKSssyEJZiTydlF+LhUdmcIoKBPmZF7G9Bycei
QjUxo48Mjhom0oIw67OWdq2dKHMxoxA/8UAeU2aJPhmptNRwVM1Xfx0SGwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFPLp9cZr01P5sMywQZDNSJlctOxlMB8GA1UdIwQY
MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt
Mzc1NzUzOWMyYWM5LzEvOHVuMXhtdlRVX213ekxCQmtNMUltVnkwN0dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5
LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLZzsAwQB
W+YkAwQCuTEMAwQCuWTkAwQDvNYQMA0GCSqGSIb3DQEBCwUAA4IBAQCckKDHKwhP
PAYS7HwPVY9/liTAGhpspHta8L1fTUPF38I+KYdKPopIs2ztz14wUxF4AsJZr7Ik
fdvr6i0GN1DviyMk5X70jJLr9+aboDEIpT2FEZm8E2Nfu3CLMwtcLfDjuVIaS3bP
cgMlM93jjvzH335u+6hrtrLSY3wacs990I/h7TaQgY5iqlzu0pAfoFEoQECON5ng
bwniYmekl3+EkX7olF+BKajL64CfAnJ+PI6hDJ6w4p9pILRYya5w4v7ylLmXWzMp
9KmantVCTM5rrW3r/JqP3dOoeksES8RHaKkEsWqlGQ/43lYc19UCPqRkXztDsSOQ
SgoForMKJ4f6
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:04:39 2024 by rpki-client on console-ams.rpki-client.org