Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/Eo0V29Pym9WyxHpemg1bIKyV_rc.roa
File: Eo0V29Pym9WyxHpemg1bIKyV_rc.roa (raw, json)
Hash identifier: sgtRWU37nT7rruWuulAcFt0HVDGnhHdtretksXaijUU=
Subject key identifier: 12:8D:15:DB:D3:F2:9B:D5:B2:C4:7A:5E:9A:0D:5B:20:AC:95:FE:B7
Certificate issuer: /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Certificate serial: 018CCA2A36645F670641DF8059A41113EBF7
Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/Eo0V29Pym9WyxHpemg1bIKyV_rc.roa
Signing time: Tue 02 Jan 2024 12:33:33 +0000
ROA not before: Tue 02 Jan 2024 12:33:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 185.162.144.0/24 maxlen: 24
185.162.145.0/24 maxlen: 24
185.162.146.0/24 maxlen: 24
185.162.147.0/24 maxlen: 24
185.171.24.0/24 maxlen: 24
185.171.26.0/24 maxlen: 24
185.171.25.0/24 maxlen: 24
185.171.27.0/24 maxlen: 24
185.247.136.0/24 maxlen: 24
185.247.139.0/24 maxlen: 24
185.247.137.0/24 maxlen: 24
185.247.138.0/24 maxlen: 24
45.136.105.0/24 maxlen: 24
45.136.104.0/24 maxlen: 24
185.26.144.0/24 maxlen: 24
185.26.145.0/24 maxlen: 24
185.26.146.0/24 maxlen: 24
185.26.147.0/24 maxlen: 24
185.126.179.0/24 maxlen: 24
185.126.177.0/24 maxlen: 24
185.126.178.0/24 maxlen: 24
185.126.176.0/24 maxlen: 24
45.136.106.0/24 maxlen: 24
45.136.107.0/24 maxlen: 24
185.153.228.0/24 maxlen: 24
185.153.229.0/24 maxlen: 24
185.153.230.0/24 maxlen: 24
185.153.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:36:64:5f:67:06:41:df:80:59:a4:11:13:eb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Validity
Not Before: Jan 2 12:33:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=128d15dbd3f29bd5b2c47a5e9a0d5b20ac95feb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:13:c6:1f:3f:c3:68:f1:b6:7c:85:c0:72:
cb:1b:24:80:50:ae:d2:da:30:95:76:aa:38:a1:97:
ce:d8:50:09:63:75:21:fd:b2:82:05:76:29:9b:9c:
d2:f9:62:c9:95:e2:5b:64:78:d5:50:65:95:ff:11:
e5:01:c7:5c:1a:88:fa:67:67:44:ce:85:07:f4:72:
a0:13:b1:31:83:a5:2d:e7:21:ea:cf:84:99:97:9f:
ce:f4:03:9c:df:74:61:51:db:e3:a8:e7:1f:c1:47:
b4:44:d9:b8:ca:15:51:c8:7c:75:10:3d:e5:96:c7:
7a:ca:01:15:f3:c4:ab:28:05:b5:3d:f0:52:f6:32:
e2:5a:a4:ae:aa:94:e6:08:01:e6:6b:1e:1b:31:1f:
44:eb:c1:ec:bf:44:0c:b0:94:f7:c1:41:c9:23:78:
08:f2:56:6f:a4:5e:28:e9:9e:0f:ac:35:99:33:c4:
c1:df:21:ee:fc:0d:48:69:a3:83:50:7a:58:06:2a:
85:27:1b:e0:a3:43:0c:4e:9e:a6:2c:c4:ed:31:22:
46:a4:bc:b5:d7:d8:dc:ad:04:d0:d8:a2:ff:34:20:
95:92:f3:6c:4b:c3:b9:03:a7:98:0b:4f:5a:65:51:
0c:d7:c7:59:2c:da:5a:34:56:77:d9:a0:e4:30:e6:
a3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8D:15:DB:D3:F2:9B:D5:B2:C4:7A:5E:9A:0D:5B:20:AC:95:FE:B7
X509v3 Authority Key Identifier:
keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/Eo0V29Pym9WyxHpemg1bIKyV_rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.104.0/22
185.26.144.0/22
185.126.176.0/22
185.153.228.0/22
185.162.144.0/22
185.171.24.0/22
185.247.136.0/22
Signature Algorithm: sha256WithRSAEncryption
92:ae:64:4a:c9:f7:31:1b:6d:65:53:07:c6:fc:c6:9a:12:e9:
46:20:6e:a5:52:93:0e:d3:79:07:92:79:3a:14:3b:ab:a9:e1:
f6:d6:61:06:84:10:dc:f8:6d:bd:fb:a1:eb:ab:b3:0e:60:e7:
23:9d:50:ff:d5:dc:22:89:04:6f:7c:1d:63:e2:dc:43:d1:6c:
16:60:e1:0e:27:f6:c1:37:a8:89:78:fd:ea:a5:ee:6a:e4:f8:
2d:8a:c9:93:3a:e5:a5:24:8f:5f:99:3c:db:ba:cc:92:29:e0:
5c:75:ba:37:ea:6d:e9:38:f9:46:c4:5f:4a:a0:04:88:83:ef:
35:4b:db:9c:2e:98:2b:97:8e:be:f1:c0:20:b3:06:80:c3:6e:
01:3c:17:40:a8:92:61:e7:e0:fa:ec:05:0e:30:32:2c:5c:90:
5d:a3:43:d1:d1:ac:a0:0d:e6:e7:0f:77:8e:2c:23:5b:cb:40:
d4:72:6d:76:ea:6d:b5:e7:30:7b:ee:c7:d7:e4:85:b3:52:a7:
fc:b4:39:a9:a7:08:cb:03:03:18:58:e3:76:ec:f5:b3:e2:d4:
97:cc:9d:2b:9d:02:ba:9e:2c:6d:59:d1:0c:fb:59:94:03:c5:
3a:95:6e:d2:ba:c6:b7:8f:e6:5b:a3:03:97:fa:24:2c:cf:c7:
ba:aa:1d:34
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYzKKjZkX2cGQd+AWaQRE+v3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MjAzYTBjMDRiODFmZTE3NjZmYTQxYmQzMWI3M2I1ODgx
ODhhYzcwHhcNMjQwMTAyMTIzMzMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjhkMTVkYmQzZjI5YmQ1YjJjNDdhNWU5YTBkNWIyMGFjOTVmZWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ4Txh8/w2jxtnyFwHLLGySAUK7S
2jCVdqo4oZfO2FAJY3Uh/bKCBXYpm5zS+WLJleJbZHjVUGWV/xHlAcdcGoj6Z2dE
zoUH9HKgE7Exg6Ut5yHqz4SZl5/O9AOc33RhUdvjqOcfwUe0RNm4yhVRyHx1ED3l
lsd6ygEV88SrKAW1PfBS9jLiWqSuqpTmCAHmax4bMR9E68Hsv0QMsJT3wUHJI3gI
8lZvpF4o6Z4PrDWZM8TB3yHu/A1IaaODUHpYBiqFJxvgo0MMTp6mLMTtMSJGpLy1
19jcrQTQ2KL/NCCVkvNsS8O5A6eYC09aZVEM18dZLNpaNFZ32aDkMOajQQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFBKNFdvT8pvVssR6XpoNWyCslf63MB8GA1UdIwQY
MBaAFPggOgwEuB/hdm+kG9Mbc7WIGIrHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1DQTZEQVM0SC1GMmI2UWIweHR6dFlnWWlzYy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvZTE0Y2EzLWRhOGUtNGI1OC04NjNh
LTMzODk2MjBjMWJkNy8xL0VvMFYyOVB5bTlXeXhIcGVtZzFiSUt5Vl9yYy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWIvZTE0Y2EzLWRhOGUtNGI1OC04NjNhLTMzODk2MjBjMWJk
Ny8xLzEtQ0E2REFTNEgtRjJiNlFiMHh0enRZZ1lpc2MuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwQwYIKwYBBQUHAQcBAf8ENDAyMDAEAgABMCoDBAItiGgD
BAK5GpADBAK5frADBAK5meQDBAK5opADBAK5qxgDBAK594gwDQYJKoZIhvcNAQEL
BQADggEBAJKuZErJ9zEbbWVTB8b8xpoS6UYgbqVSkw7TeQeSeToUO6up4fbWYQaE
ENz4bb37oeursw5g5yOdUP/V3CKJBG98HWPi3EPRbBZg4Q4n9sE3qIl4/eql7mrk
+C2KyZM65aUkj1+ZPNu6zJIp4Fx1ujfqbek4+UbEX0qgBIiD7zVL25wumCuXjr7x
wCCzBoDDbgE8F0CokmHn4PrsBQ4wMixckF2jQ9HRrKAN5ucPd44sI1vLQNRybXbq
bbXnMHvux9fkhbNSp/y0OamnCMsDAxhY43bs9bPi1JfMnSudArqeLG1Z0Qz7WZQD
xTqVbtK6xreP5lujA5f6JCzPx7qqHTQ=
-----END CERTIFICATE-----
Generated at Thu May 2 09:24:06 2024 by rpki-client on console-fra.rpki-client.org