Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/Fi1rFGy5KbqRQ1pz05LF1xBRFrU.roa
File: Fi1rFGy5KbqRQ1pz05LF1xBRFrU.roa (raw, json)
Hash identifier: srCnoWPRupqBYDrXCCLDGvtbGJNe4PkZcT950/jKuR8=
Subject key identifier: 16:2D:6B:14:6C:B9:29:BA:91:43:5A:73:D3:92:C5:D7:10:51:16:B5
Certificate issuer: /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Certificate serial: 0192E6BDF4FDFAE78635B84BA19D60E71E3E
Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/Fi1rFGy5KbqRQ1pz05LF1xBRFrU.roa
Signing time: Fri 01 Nov 2024 08:01:01 +0000
ROA not before: Fri 01 Nov 2024 08:01:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206492
IP address blocks: 5.154.170.0/24 maxlen: 24
185.185.32.0/22 maxlen: 22
185.185.32.0/24 maxlen: 24
194.148.52.0/22 maxlen: 22
2a0b:4d80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e6:bd:f4:fd:fa:e7:86:35:b8:4b:a1:9d:60:e7:1e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Validity
Not Before: Nov 1 08:01:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=162d6b146cb929ba91435a73d392c5d7105116b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:ed:3d:36:cc:24:6a:6d:c5:1e:23:ca:c4:
51:81:47:7c:09:ca:7e:53:42:02:a3:b0:1e:70:7b:
a9:74:c1:70:1c:3c:4b:d3:b5:de:99:27:4c:76:e3:
9f:48:f1:a2:35:ed:b6:13:9b:1c:77:4a:70:f4:74:
8e:b4:c1:fc:0d:42:bb:9b:7f:19:79:fb:44:3c:fe:
5d:ec:9c:45:5a:4a:38:4c:d5:67:e5:2d:64:8f:f8:
d8:5c:b9:03:67:63:c8:e1:c4:1b:ad:31:21:5d:d4:
36:5f:1e:39:a8:43:4e:36:ec:78:7d:1b:98:31:3c:
74:6c:d1:77:ff:72:30:1c:f1:2b:38:76:33:46:4d:
b9:ad:15:48:8a:90:04:d1:5c:8f:0b:85:f9:96:42:
72:7c:50:f3:d7:46:d2:a3:82:e0:1b:f5:2e:3c:33:
02:85:c8:3e:4e:98:b9:f9:84:52:3d:d9:cf:1b:cb:
8c:67:bb:34:8d:92:01:36:e7:c9:52:79:55:72:08:
4b:ec:09:5b:7e:23:44:9a:7f:93:b4:ea:04:a9:7f:
27:2b:aa:e3:27:ff:ba:ed:83:87:82:b9:c2:c9:f3:
53:96:9f:cd:8e:23:fd:f4:de:25:fb:bd:3b:ed:41:
ed:bb:4c:65:5e:a5:02:4b:5c:3d:60:af:f6:99:26:
14:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2D:6B:14:6C:B9:29:BA:91:43:5A:73:D3:92:C5:D7:10:51:16:B5
X509v3 Authority Key Identifier:
keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/Fi1rFGy5KbqRQ1pz05LF1xBRFrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.170.0/24
185.185.32.0/22
194.148.52.0/22
IPv6:
2a0b:4d80::/29
Signature Algorithm: sha256WithRSAEncryption
a5:e8:59:76:38:77:35:99:78:41:ab:93:61:d4:43:5c:cb:84:
1f:1e:15:d1:0c:e8:63:d2:fb:85:8f:f9:2f:15:10:92:0f:46:
9d:1c:82:84:25:7a:70:8a:ed:a3:ec:63:f1:35:35:35:08:68:
1a:3f:dc:ae:18:5e:af:00:1c:0d:f5:24:41:3e:99:47:a5:a6:
fd:7b:3c:a7:11:24:26:17:c2:26:a3:6e:c5:76:9c:68:5f:62:
67:05:09:fb:cc:5e:67:48:cc:48:21:62:a6:a2:61:2f:0a:8b:
2f:71:6c:54:cd:a0:92:d5:30:b2:e9:ca:76:76:e4:81:f3:69:
49:2b:95:88:e4:54:04:a7:14:b1:42:68:cb:27:f9:c6:07:ab:
f5:7f:77:31:52:d5:e2:3a:8d:c0:21:26:a8:68:0a:2d:53:a0:
bd:b0:d3:50:fc:d2:d8:80:8e:fd:f7:7a:8b:80:51:37:78:04:
47:24:2b:e5:9e:5e:8c:83:24:d2:61:1e:f9:74:60:05:8f:33:
fd:1a:48:cf:b8:e2:96:b3:e2:33:cd:a5:40:2a:36:e4:28:13:
bb:c9:14:25:4a:4a:9e:76:50:7d:06:2e:8e:0e:65:17:b7:1f:
71:65:28:7d:06:d3:88:00:f6:8f:bd:1a:dd:7c:b4:a7:03:50:
4e:64:05:63
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZLmvfT9+ueGNbhLoZ1g5x4+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZWE4ZGUzMWNlY2E1NTgwM2NmM2FmMTRkNGE3Mjc5YWU4
NDQ2ZDAwHhcNMjQxMTAxMDgwMTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjJkNmIxNDZjYjkyOWJhOTE0MzVhNzNkMzkyYzVkNzEwNTExNmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ3tPTbMJGptxR4jysRRgUd8Ccp+
U0ICo7AecHupdMFwHDxL07XemSdMduOfSPGiNe22E5scd0pw9HSOtMH8DUK7m38Z
eftEPP5d7JxFWko4TNVn5S1kj/jYXLkDZ2PI4cQbrTEhXdQ2Xx45qENONux4fRuY
MTx0bNF3/3IwHPErOHYzRk25rRVIipAE0VyPC4X5lkJyfFDz10bSo4LgG/UuPDMC
hcg+Tpi5+YRSPdnPG8uMZ7s0jZIBNufJUnlVcghL7AlbfiNEmn+TtOoEqX8nK6rj
J/+67YOHgrnCyfNTlp/NjiP99N4l+7077UHtu0xlXqUCS1w9YK/2mSYU9wIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFBYtaxRsuSm6kUNac9OSxdcQURa1MB8GA1UdIwQY
MBaAFKHqjeMc7KVYA8868U1KcnmuhEbQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYTk5ZDgtODUyNy00NWI4LWFmNmEt
NzY1MjYyZjI5ZWFmLzEvRmkxckZHeTVLYnFSUTFwejA1TEYxeEJSRnJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jYTk5ZDgtODUyNy00NWI4LWFmNmEtNzY1MjYyZjI5ZWFm
LzEvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQABZqqAwQC
ubkgAwQCwpQ0MA0EAgACMAcDBQMqC02AMA0GCSqGSIb3DQEBCwUAA4IBAQCl6Fl2
OHc1mXhBq5Nh1ENcy4QfHhXRDOhj0vuFj/kvFRCSD0adHIKEJXpwiu2j7GPxNTU1
CGgaP9yuGF6vABwN9SRBPplHpab9ezynESQmF8Imo27FdpxoX2JnBQn7zF5nSMxI
IWKmomEvCosvcWxUzaCS1TCy6cp2duSB82lJK5WI5FQEpxSxQmjLJ/nGB6v1f3cx
UtXiOo3AISaoaAotU6C9sNNQ/NLYgI7993qLgFE3eARHJCvlnl6MgyTSYR75dGAF
jzP9GkjPuOKWs+IzzaVAKjbkKBO7yRQlSkqedlB9Bi6ODmUXtx9xZSh9BtOIAPaP
vRrdfLSnA1BOZAVj
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:09:06 2024 by rpki-client on console-ams.rpki-client.org