Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/vSjoUl21SGZebiuvhw2cEwvRBW0.roa
File: vSjoUl21SGZebiuvhw2cEwvRBW0.roa (raw, json)
Hash identifier: afnV6Hzc9LDu/h9HWXXNdznUKlzPz+pQaazo7J5w9gE=
Subject key identifier: BD:28:E8:52:5D:B5:48:66:5E:6E:2B:AF:87:0D:9C:13:0B:D1:05:6D
Certificate issuer: /CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Certificate serial: 018CC9BBFE0A91050EBC19BD7114539AAA48
Authority key identifier: 4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/vSjoUl21SGZebiuvhw2cEwvRBW0.roa
Signing time: Tue 02 Jan 2024 10:33:09 +0000
ROA not before: Tue 02 Jan 2024 10:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48197
IP address blocks: 94.127.152.128/25 maxlen: 25
94.127.152.0/24 maxlen: 25
94.127.152.0/23 maxlen: 25
94.127.152.0/25 maxlen: 25
94.127.157.0/24 maxlen: 25
94.127.156.128/25 maxlen: 25
94.127.157.0/25 maxlen: 25
94.127.156.0/22 maxlen: 25
94.127.153.0/24 maxlen: 25
94.127.153.0/25 maxlen: 25
94.127.153.128/25 maxlen: 25
94.127.154.0/23 maxlen: 25
94.127.154.128/25 maxlen: 25
94.127.154.0/25 maxlen: 25
94.127.154.0/24 maxlen: 25
94.127.155.0/24 maxlen: 25
94.127.155.0/25 maxlen: 25
94.127.155.128/25 maxlen: 25
94.127.156.0/24 maxlen: 25
94.127.156.0/23 maxlen: 25
94.127.156.0/25 maxlen: 25
94.127.158.128/25 maxlen: 25
94.127.159.0/24 maxlen: 25
94.127.159.0/25 maxlen: 25
94.127.157.128/25 maxlen: 25
94.127.158.0/24 maxlen: 25
94.127.158.0/25 maxlen: 25
94.127.159.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:fe:0a:91:05:0e:bc:19:bd:71:14:53:9a:aa:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Validity
Not Before: Jan 2 10:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd28e8525db548665e6e2baf870d9c130bd1056d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d9:30:cc:52:5e:25:9e:e9:e1:94:88:62:49:
60:d4:bd:18:6c:f3:19:ed:33:60:13:b8:e4:cc:dc:
aa:cf:5d:16:52:af:5b:72:0a:41:52:cc:6a:11:37:
6f:e7:30:a7:8d:f5:13:14:96:34:f4:28:ad:76:9d:
4b:49:44:a1:11:60:08:57:5f:5a:0d:60:97:d6:73:
83:ec:4d:eb:b8:c6:c2:c8:3e:e2:94:9c:21:f3:49:
d5:e6:d2:5d:cf:3b:64:ac:d3:10:cd:6c:24:a9:73:
f2:b7:d4:d1:2d:31:36:68:d0:2b:12:50:4c:1c:5d:
e0:71:82:92:56:a7:fe:70:54:b0:f2:b1:ec:37:d7:
f6:5b:96:cf:70:09:48:b7:04:5f:37:70:1a:36:8b:
e2:7d:31:c1:67:e7:e7:66:44:c6:fe:c3:47:10:9e:
64:ea:00:a9:7a:fa:d9:93:68:8c:1c:f8:90:94:96:
fc:e1:3b:8c:bf:83:93:2d:b8:54:fe:0a:85:05:7e:
b6:b4:38:eb:97:12:11:88:66:1a:ea:70:74:d5:d9:
a5:90:3b:04:a9:d5:cd:11:2e:12:db:39:e5:67:a9:
09:89:3a:c4:4e:b0:82:91:4a:16:46:65:60:b8:d4:
8d:e4:3c:e1:95:fe:b2:60:5c:7d:f6:81:88:18:aa:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:28:E8:52:5D:B5:48:66:5E:6E:2B:AF:87:0D:9C:13:0B:D1:05:6D
X509v3 Authority Key Identifier:
keyid:4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/vSjoUl21SGZebiuvhw2cEwvRBW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.152.0/21
Signature Algorithm: sha256WithRSAEncryption
44:f4:d9:34:0c:12:cf:bf:0d:f0:0c:2d:cd:a6:6d:3c:4d:a1:
1b:96:28:30:be:4c:1a:22:37:52:6e:59:0a:37:23:66:d7:be:
ed:a0:49:2b:2a:3d:a4:c5:4b:a8:11:25:2f:03:f1:20:5e:6f:
35:cc:d3:a8:a8:ff:5d:c9:20:1f:35:bc:c3:cc:24:1f:23:89:
77:60:e9:55:a3:1f:44:8a:7e:e9:0c:37:42:d9:09:29:c2:86:
97:f6:3b:57:b5:2b:6a:72:9f:03:73:60:53:04:c2:94:18:06:
73:6f:9a:93:4e:33:2a:a5:c4:f0:e5:b9:bf:75:77:7c:48:4a:
26:fd:af:ea:ae:7f:ce:50:e5:17:3a:6b:cf:e3:37:d2:1e:82:
63:a4:5f:b0:9a:43:4a:a8:dc:16:c6:0c:d4:9a:f0:29:04:62:
32:94:09:11:12:d3:6a:70:d2:17:cc:5d:1f:bb:6f:c9:b6:48:
a8:40:97:e4:41:05:30:0e:fa:55:7e:8f:8f:38:ca:bd:73:e8:
61:43:e8:be:9a:0d:15:8c:3c:ab:68:1f:9e:d6:a8:95:ff:ff:
5b:e4:48:54:5e:22:5d:ae:c8:e8:9c:33:c6:9b:58:bf:d5:a0:
87:94:71:1e:58:2d:8a:8e:64:37:a0:aa:cc:95:5d:b4:f1:15:
a3:29:29:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJu/4KkQUOvBm9cRRTmqpIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNDI2Yzg3ZGZiY2M1NTJkYzc5MGZlYzNlZDFjZGU3YThm
ODg2ZTkwHhcNMjQwMTAyMTAzMzA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDI4ZTg1MjVkYjU0ODY2NWU2ZTJiYWY4NzBkOWMxMzBiZDEwNTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtkwzFJeJZ7p4ZSIYklg1L0YbPMZ
7TNgE7jkzNyqz10WUq9bcgpBUsxqETdv5zCnjfUTFJY09Citdp1LSUShEWAIV19a
DWCX1nOD7E3ruMbCyD7ilJwh80nV5tJdzztkrNMQzWwkqXPyt9TRLTE2aNArElBM
HF3gcYKSVqf+cFSw8rHsN9f2W5bPcAlItwRfN3AaNovifTHBZ+fnZkTG/sNHEJ5k
6gCpevrZk2iMHPiQlJb84TuMv4OTLbhU/gqFBX62tDjrlxIRiGYa6nB01dmlkDsE
qdXNES4S2znlZ6kJiTrETrCCkUoWRmVguNSN5Dzhlf6yYFx99oGIGKow6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL0o6FJdtUhmXm4rr4cNnBML0QVtMB8GA1UdIwQY
MBaAFE5CbIffvMVS3HkP7D7Rzeeo+IbpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lNWJkYzctZWIwNi00NjI2LTg0ZDct
MTNkYTc0Y2QzNWE0LzEvdlNqb1VsMjFTR1plYml1dmh3MmNFd3ZSQlcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9lNWJkYzctZWIwNi00NjI2LTg0ZDctMTNkYTc0Y2QzNWE0
LzEvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXn+YMA0G
CSqGSIb3DQEBCwUAA4IBAQBE9Nk0DBLPvw3wDC3Npm08TaEbligwvkwaIjdSblkK
NyNm177toEkrKj2kxUuoESUvA/EgXm81zNOoqP9dySAfNbzDzCQfI4l3YOlVox9E
in7pDDdC2QkpwoaX9jtXtStqcp8Dc2BTBMKUGAZzb5qTTjMqpcTw5bm/dXd8SEom
/a/qrn/OUOUXOmvP4zfSHoJjpF+wmkNKqNwWxgzUmvApBGIylAkREtNqcNIXzF0f
u2/JtkioQJfkQQUwDvpVfo+POMq9c+hhQ+i+mg0VjDyraB+e1qiV//9b5EhUXiJd
rsjonDPGm1i/1aCHlHEeWC2KjmQ3oKrMlV208RWjKSnn
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:10 2024 by rpki-client on console-fra.rpki-client.org