Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/oU5S1CsxLy4Gwjf3Y6S07_81LG8.roa
File: oU5S1CsxLy4Gwjf3Y6S07_81LG8.roa (raw, json)
Hash identifier: 8nT+dqkXhZ84E0yy5vAwhQf83PbIrQyXjQyzJvcgd1k=
Subject key identifier: A1:4E:52:D4:2B:31:2F:2E:06:C2:37:F7:63:A4:B4:EF:FF:35:2C:6F
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 018CC94DE64B6E2923E1744411351473D41D
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/oU5S1CsxLy4Gwjf3Y6S07_81LG8.roa
Signing time: Tue 02 Jan 2024 08:32:54 +0000
ROA not before: Tue 02 Jan 2024 08:32:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35489
IP address blocks: 213.145.103.0/24 maxlen: 24
213.145.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:e6:4b:6e:29:23:e1:74:44:11:35:14:73:d4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 2 08:32:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a14e52d42b312f2e06c237f763a4b4efff352c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:87:3b:6a:22:f4:f7:83:af:58:3a:99:a5:43:
f8:aa:6a:0c:54:cd:ec:65:ec:f4:e5:17:23:c6:7d:
07:ac:d5:0e:94:a2:7b:1f:0d:04:b9:50:34:7b:b2:
52:27:d0:a3:93:d1:6b:d8:89:30:d3:9f:22:c9:a2:
66:22:28:de:fb:dd:60:33:1e:76:14:a7:68:4c:0d:
cc:fb:b2:b7:2c:98:ae:ec:10:b6:6c:29:ea:01:91:
4a:ba:3e:64:d8:c1:60:10:b6:85:5f:fa:0a:d8:8a:
fb:4a:48:95:bc:9f:0d:02:9b:08:28:02:f4:10:60:
23:d1:c1:8c:24:83:34:9b:2b:61:67:2f:a3:03:f3:
f1:a9:52:05:67:15:86:fa:62:aa:24:0b:09:a1:28:
ec:50:de:2c:fc:2f:07:12:ff:c0:b6:2d:f7:b2:5a:
12:e2:0b:75:62:0e:e2:e0:fa:44:21:42:50:9b:84:
9a:fb:26:2c:22:df:fa:fb:e7:14:1d:bc:e6:a2:c3:
cc:61:d9:af:01:5b:56:2e:a8:8d:7c:2e:65:db:b5:
8d:b6:03:d3:81:ba:a2:59:3c:93:1d:85:65:bf:5e:
89:77:d3:82:f3:52:f3:c3:1a:8f:c4:fc:e5:ee:fd:
1f:96:a4:fb:45:2d:c4:e2:ad:ae:a6:d4:30:a0:50:
4a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4E:52:D4:2B:31:2F:2E:06:C2:37:F7:63:A4:B4:EF:FF:35:2C:6F
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/oU5S1CsxLy4Gwjf3Y6S07_81LG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.103.0/24
213.145.108.0/24
Signature Algorithm: sha256WithRSAEncryption
60:96:42:33:ce:bf:06:d0:b3:ac:86:4a:53:f9:cb:ec:0b:55:
2d:61:d8:be:17:e0:85:f8:7b:4f:bd:f2:61:b2:53:62:ae:28:
e5:4c:01:1a:c3:ff:ab:aa:3f:21:9d:0d:ea:dd:70:79:75:90:
a1:28:e8:31:68:20:8d:7c:64:d9:92:8f:fa:56:62:64:34:0d:
d3:df:f3:18:02:ac:91:63:0b:b1:18:e5:84:97:bc:fc:51:54:
b9:4a:34:ab:db:99:63:8f:58:17:82:89:94:44:b6:1b:d4:39:
ed:3a:db:a6:f2:b1:14:83:8b:05:78:06:a0:a6:8a:57:49:90:
8a:5c:7d:63:0b:28:f4:05:a9:5b:be:6e:86:b4:6c:28:43:2b:
40:b4:66:ae:bb:37:68:1d:35:6c:58:db:21:5d:34:97:f5:68:
62:00:52:71:2f:ae:11:3d:97:81:15:54:95:5d:2d:82:f8:b5:
3d:64:3c:e8:36:41:b6:dc:92:70:c9:ed:5e:00:57:1d:5c:56:
31:2b:08:e2:48:63:54:6a:56:e0:de:f9:4c:41:91:f8:cb:71:
2d:26:07:2b:8e:18:8e:c9:40:5c:52:56:e9:64:65:85:71:0f:
a0:81:ec:e8:99:ef:39:74:3f:a6:2b:f1:87:a1:05:76:8d:e6:
ca:98:ef:47
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzJTeZLbikj4XREETUUc9QdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw
MWFiNDEwHhcNMjQwMTAyMDgzMjU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTRlNTJkNDJiMzEyZjJlMDZjMjM3Zjc2M2E0YjRlZmZmMzUyYzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYc7aiL094OvWDqZpUP4qmoMVM3s
Zez05Rcjxn0HrNUOlKJ7Hw0EuVA0e7JSJ9Cjk9Fr2Ikw058iyaJmIije+91gMx52
FKdoTA3M+7K3LJiu7BC2bCnqAZFKuj5k2MFgELaFX/oK2Ir7SkiVvJ8NApsIKAL0
EGAj0cGMJIM0mythZy+jA/PxqVIFZxWG+mKqJAsJoSjsUN4s/C8HEv/Ati33sloS
4gt1Yg7i4PpEIUJQm4Sa+yYsIt/6++cUHbzmosPMYdmvAVtWLqiNfC5l27WNtgPT
gbqiWTyTHYVlv16Jd9OC81LzwxqPxPzl7v0flqT7RS3E4q2uptQwoFBKlwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKFOUtQrMS8uBsI392OktO//NSxvMB8GA1UdIwQY
MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt
Y2Y5ZGM1YmFhYTc5LzEvb1U1UzFDc3hMeTRHd2pmM1k2UzA3XzgxTEc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5
LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1ZFnAwQA
1ZFsMA0GCSqGSIb3DQEBCwUAA4IBAQBglkIzzr8G0LOshkpT+cvsC1UtYdi+F+CF
+HtPvfJhslNirijlTAEaw/+rqj8hnQ3q3XB5dZChKOgxaCCNfGTZko/6VmJkNA3T
3/MYAqyRYwuxGOWEl7z8UVS5SjSr25ljj1gXgomURLYb1DntOtum8rEUg4sFeAag
popXSZCKXH1jCyj0Balbvm6GtGwoQytAtGauuzdoHTVsWNshXTSX9WhiAFJxL64R
PZeBFVSVXS2C+LU9ZDzoNkG23JJwye1eAFcdXFYxKwjiSGNUalbg3vlMQZH4y3Et
JgcrjhiOyUBcUlbpZGWFcQ+ggezome85dD+mK/GHoQV2jebKmO9H
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:20:13 2024 by rpki-client on console-fra.rpki-client.org