Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xShmleqjLwDLgNHS-zzSr_EOhOY.roa
File: xShmleqjLwDLgNHS-zzSr_EOhOY.roa (raw, json)
Hash identifier: l04VGMHpK9RHTfH2htstPxyHdsi80HyQFhycLtvupY4=
Subject key identifier: C5:28:66:95:EA:A3:2F:00:CB:80:D1:D2:FB:3C:D2:AF:F1:0E:84:E6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC501390ECDF6F18BDFD41A97AB012FCE
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xShmleqjLwDLgNHS-zzSr_EOhOY.roa
Signing time: Mon 01 Jan 2024 12:30:40 +0000
ROA not before: Mon 01 Jan 2024 12:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 84.32.136.0/22 maxlen: 24
88.216.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:39:0e:cd:f6:f1:8b:df:d4:1a:97:ab:01:2f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5286695eaa32f00cb80d1d2fb3cd2aff10e84e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2d:45:78:3b:95:4b:32:9b:bb:65:e2:df:49:
bf:17:b4:9c:0f:e8:ea:10:60:89:e9:99:f0:b9:18:
aa:82:cd:c5:7b:b8:7f:50:06:af:b6:63:7c:09:f2:
27:c1:bf:89:c9:37:79:c0:1b:27:86:1e:ee:43:07:
c3:66:84:18:0c:37:c1:d0:3e:0d:76:81:8e:92:3b:
cb:a8:22:0b:06:b5:19:91:5e:cd:c1:ee:b2:42:91:
f3:ea:a7:47:c5:b4:00:11:7a:71:4a:87:f7:9c:11:
4b:3b:3f:87:ff:69:35:0c:6d:e9:dc:a9:b0:d0:44:
4c:6f:0b:ea:c7:9a:47:9c:26:2c:c4:fe:97:fb:8a:
78:4a:0e:e6:22:cc:3e:29:4d:e6:19:b5:f0:8b:5c:
f1:b7:03:a0:98:18:9d:78:4b:46:a5:34:6d:3d:1c:
0c:49:9b:5f:91:17:12:0e:2f:c3:c6:7c:c8:de:fa:
61:3f:5e:86:6f:76:b1:68:88:b1:91:c7:a2:cd:d5:
42:2e:15:61:3b:71:17:53:ef:e2:14:85:f5:75:b3:
42:46:a3:25:3f:4f:6f:ce:81:06:b1:2c:4f:25:8e:
dc:48:db:75:f1:18:d7:da:24:1c:20:03:7f:9a:07:
d5:a9:93:6f:4a:c4:a1:9c:2b:e3:db:c0:71:4c:cf:
b9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:28:66:95:EA:A3:2F:00:CB:80:D1:D2:FB:3C:D2:AF:F1:0E:84:E6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xShmleqjLwDLgNHS-zzSr_EOhOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.136.0/22
88.216.248.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:5e:a9:f3:83:60:b1:fe:7c:30:77:33:e8:0b:4d:b4:33:2c:
a5:ad:88:e8:fb:69:45:3a:f1:3b:06:98:ae:d3:6c:e5:bc:0c:
2e:2b:4b:a9:c1:da:b0:6e:35:a2:16:d4:f7:08:6e:91:b8:91:
2b:7f:df:0d:7e:19:14:76:03:d8:f6:37:a7:de:a2:e4:c3:61:
e8:c3:c2:48:98:94:92:52:9e:07:ce:9b:2a:89:33:4a:6c:be:
01:44:1b:c3:fe:fb:8c:ec:c3:9b:ad:13:23:1c:74:87:ed:0d:
b0:68:1a:54:f6:c3:b3:5d:74:6c:76:c1:c7:81:be:ba:ae:44:
3b:48:93:72:34:18:db:51:8b:d9:35:d8:f6:e9:ec:0a:c4:ca:
c3:48:c4:c6:29:03:fb:8e:74:c5:f3:47:b1:36:62:fe:6a:a6:
5a:9a:6d:4e:ed:e9:8d:9b:7b:3c:67:02:a2:44:36:11:6c:3e:
7b:bf:76:f4:79:ad:60:a4:ea:77:b8:f8:d3:c1:53:5d:19:53:
fc:eb:9d:7d:08:b4:99:96:f8:f9:e3:15:47:ce:a3:62:d6:05:
9f:49:77:00:95:47:e4:de:aa:eb:f5:a9:bc:5a:c6:ac:8a:3f:
2f:48:72:c0:c1:d6:ee:a5:fa:2c:ea:d9:b8:bb:fe:fa:24:0a:
c2:cb:9a:a7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzFATkOzfbxi9/UGperAS/OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjQwMTAxMTIzMDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTI4NjY5NWVhYTMyZjAwY2I4MGQxZDJmYjNjZDJhZmYxMGU4NGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6C1FeDuVSzKbu2Xi30m/F7ScD+jq
EGCJ6ZnwuRiqgs3Fe7h/UAavtmN8CfInwb+JyTd5wBsnhh7uQwfDZoQYDDfB0D4N
doGOkjvLqCILBrUZkV7Nwe6yQpHz6qdHxbQAEXpxSof3nBFLOz+H/2k1DG3p3Kmw
0ERMbwvqx5pHnCYsxP6X+4p4Sg7mIsw+KU3mGbXwi1zxtwOgmBideEtGpTRtPRwM
SZtfkRcSDi/DxnzI3vphP16Gb3axaIixkceizdVCLhVhO3EXU+/iFIX1dbNCRqMl
P09vzoEGsSxPJY7cSNt18RjX2iQcIAN/mgfVqZNvSsShnCvj28BxTM+5iQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMUoZpXqoy8Ay4DR0vs80q/xDoTmMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEveFNobWxlcWpMd0RMZ05IUy16elNyX0VPaE9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVCCIAwQC
WNj4MA0GCSqGSIb3DQEBCwUAA4IBAQAPXqnzg2Cx/nwwdzPoC020MyylrYjo+2lF
OvE7Bpiu02zlvAwuK0upwdqwbjWiFtT3CG6RuJErf98NfhkUdgPY9jen3qLkw2Ho
w8JImJSSUp4HzpsqiTNKbL4BRBvD/vuM7MObrRMjHHSH7Q2waBpU9sOzXXRsdsHH
gb66rkQ7SJNyNBjbUYvZNdj26ewKxMrDSMTGKQP7jnTF80exNmL+aqZamm1O7emN
m3s8ZwKiRDYRbD57v3b0ea1gpOp3uPjTwVNdGVP86519CLSZlvj54xVHzqNi1gWf
SXcAlUfk3qrr9am8Wsasij8vSHLAwdbupfos6tm4u/76JArCy5qn
-----END CERTIFICATE-----
Generated at Tue May 7 03:14:17 2024 by rpki-client on console-fra.rpki-client.org