Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/V7LF_Vi1PQyFXGzZd62NsaF4RfQ.roa
File: V7LF_Vi1PQyFXGzZd62NsaF4RfQ.roa (raw, json)
Hash identifier: WzAg//CySt55WhBz7adBqbO+2nBE3+lNMk2h0yvD7bA=
Subject key identifier: 57:B2:C5:FD:58:B5:3D:0C:85:5C:6C:D9:77:AD:8D:B1:A1:78:45:F4
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018EE35787B6A8F11614B8B2EE9CFB48D212
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/V7LF_Vi1PQyFXGzZd62NsaF4RfQ.roa
Signing time: Mon 15 Apr 2024 19:59:08 +0000
ROA not before: Mon 15 Apr 2024 19:59:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 45.129.196.0/24 maxlen: 24
88.214.48.0/23 maxlen: 23
88.214.50.0/24 maxlen: 24
88.214.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 04:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e3:57:87:b6:a8:f1:16:14:b8:b2:ee:9c:fb:48:d2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 15 19:59:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57b2c5fd58b53d0c855c6cd977ad8db1a17845f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:51:5c:1a:1b:d9:c7:f4:7e:0b:a8:73:d4:47:
db:aa:20:66:af:90:65:2b:58:09:3f:23:3b:5c:c3:
fc:44:16:75:f1:06:39:3a:af:fe:41:24:be:46:8a:
8a:e5:d8:49:01:97:cb:03:e6:f7:46:c5:47:eb:11:
00:b7:e3:fc:3c:f7:f8:90:27:44:6d:1a:28:1f:e4:
6d:d2:be:6f:16:a6:a5:44:30:46:91:97:96:6b:df:
5e:9f:97:00:95:98:0b:b2:92:f1:78:a4:33:40:64:
34:a3:61:89:4d:12:29:f8:58:f2:83:97:21:a7:d6:
86:5d:a6:0b:47:ae:ec:42:f7:52:38:b7:13:63:9f:
82:b5:23:b8:db:a3:f0:2e:ea:1a:08:6a:46:1e:a6:
22:16:a3:51:fc:80:2f:fb:e1:f7:68:f3:de:93:2b:
5c:be:be:60:df:a8:bc:cb:29:be:b7:40:e5:c9:bb:
96:de:ce:e1:f6:79:47:2f:42:b4:86:91:bd:dc:c5:
72:1e:99:ce:dc:31:5c:9e:eb:fa:53:2b:af:d1:d4:
76:da:68:93:84:8e:8e:18:63:a7:1f:02:36:60:9f:
96:6f:af:5c:1a:9a:a0:10:69:b5:28:61:8f:2d:3e:
9d:70:73:8b:f6:cc:87:b5:22:60:30:12:1b:ce:cc:
e4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B2:C5:FD:58:B5:3D:0C:85:5C:6C:D9:77:AD:8D:B1:A1:78:45:F4
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/V7LF_Vi1PQyFXGzZd62NsaF4RfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.196.0/24
88.214.48.0/22
Signature Algorithm: sha256WithRSAEncryption
25:31:4d:20:41:35:33:97:96:dd:f2:23:82:a4:c3:b1:10:8e:
6c:1e:40:47:b8:e3:f4:af:92:56:c5:1b:33:8d:50:80:30:0c:
13:c6:0b:d1:a7:23:a3:59:89:33:35:e2:eb:f0:33:94:2f:21:
0e:53:bd:04:02:7c:80:62:5f:e6:83:06:8c:e3:b7:a7:6b:e1:
5c:78:4a:22:17:c6:62:34:0a:38:b0:0f:67:23:8f:ba:7e:0f:
e4:70:de:83:2a:4b:16:8b:74:6e:87:b2:31:ee:50:d4:91:31:
83:6c:e9:5f:72:90:5d:9d:83:a3:d3:6d:9c:8a:65:51:02:82:
f1:d2:23:de:fb:da:77:88:ba:ee:42:18:46:1c:ec:d8:e7:7d:
e0:d9:78:1a:5a:fc:9a:53:f2:b6:a2:fa:e3:10:d6:fe:c0:7e:
01:22:46:55:3e:96:fc:49:46:83:29:b2:62:62:38:bb:2f:eb:
ae:46:70:2c:e9:ef:a7:82:c4:59:3d:84:cc:ee:06:d6:da:65:
0d:a1:25:09:82:dd:1b:af:cb:95:e6:83:74:de:e8:33:41:03:
ca:eb:e3:11:c6:c2:e7:ae:10:20:b0:7b:c3:74:4c:89:c6:ab:
21:22:73:89:d9:74:51:4c:85:a6:42:c9:ba:57:fe:5f:c5:32:
3b:37:4c:fb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY7jV4e2qPEWFLiy7pz7SNISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjQwNDE1MTk1OTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2IyYzVmZDU4YjUzZDBjODU1YzZjZDk3N2FkOGRiMWExNzg0NWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVFcGhvZx/R+C6hz1EfbqiBmr5Bl
K1gJPyM7XMP8RBZ18QY5Oq/+QSS+RoqK5dhJAZfLA+b3RsVH6xEAt+P8PPf4kCdE
bRooH+Rt0r5vFqalRDBGkZeWa99en5cAlZgLspLxeKQzQGQ0o2GJTRIp+Fjyg5ch
p9aGXaYLR67sQvdSOLcTY5+CtSO426PwLuoaCGpGHqYiFqNR/IAv++H3aPPekytc
vr5g36i8yym+t0DlybuW3s7h9nlHL0K0hpG93MVyHpnO3DFcnuv6Uyuv0dR22miT
hI6OGGOnHwI2YJ+Wb69cGpqgEGm1KGGPLT6dcHOL9syHtSJgMBIbzszkKwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFeyxf1YtT0MhVxs2XetjbGheEX0MB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvVjdMRl9WaTFQUXlGWEd6WmQ2Mk5zYUY0UmZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYHEAwQC
WNYwMA0GCSqGSIb3DQEBCwUAA4IBAQAlMU0gQTUzl5bd8iOCpMOxEI5sHkBHuOP0
r5JWxRszjVCAMAwTxgvRpyOjWYkzNeLr8DOULyEOU70EAnyAYl/mgwaM47ena+Fc
eEoiF8ZiNAo4sA9nI4+6fg/kcN6DKksWi3Ruh7Ix7lDUkTGDbOlfcpBdnYOj022c
imVRAoLx0iPe+9p3iLruQhhGHOzY533g2XgaWvyaU/K2ovrjENb+wH4BIkZVPpb8
SUaDKbJiYji7L+uuRnAs6e+ngsRZPYTM7gbW2mUNoSUJgt0br8uV5oN03ugzQQPK
6+MRxsLnrhAgsHvDdEyJxqshInOJ2XRRTIWmQsm6V/5fxTI7N0z7
-----END CERTIFICATE-----
Generated at Fri May 10 08:08:35 2024 by rpki-client on console-ams.rpki-client.org