Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/8J7No5pPUgki-jEFtVPLBKgU-aM.roa
File: 8J7No5pPUgki-jEFtVPLBKgU-aM.roa (raw, json)
Hash identifier: rT7jEswEtOAbKuc8hKWB55nl8WMzgoA4blv6faspyU8=
Subject key identifier: F0:9E:CD:A3:9A:4F:52:09:22:FA:31:05:B5:53:CB:04:A8:14:F9:A3
Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial: 018CC6B7ACFCD9634707B4557E9AECA2A842
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/8J7No5pPUgki-jEFtVPLBKgU-aM.roa
Signing time: Mon 01 Jan 2024 20:29:35 +0000
ROA not before: Mon 01 Jan 2024 20:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204544
IP address blocks: 45.129.38.0/24 maxlen: 24
45.129.37.0/24 maxlen: 24
45.129.36.0/24 maxlen: 24
45.129.36.0/22 maxlen: 22
45.129.38.0/23 maxlen: 23
45.129.39.0/24 maxlen: 24
185.53.141.0/24 maxlen: 24
185.53.140.0/22 maxlen: 22
185.53.140.0/24 maxlen: 24
185.53.140.0/23 maxlen: 23
185.53.143.0/24 maxlen: 24
185.53.142.0/23 maxlen: 23
185.53.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ac:fc:d9:63:47:07:b4:55:7e:9a:ec:a2:a8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Validity
Not Before: Jan 1 20:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f09ecda39a4f520922fa3105b553cb04a814f9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:73:1d:6c:ba:d6:ac:24:98:98:39:80:5b:d1:
78:72:5f:bd:52:8b:09:73:36:0c:7b:7f:ca:2c:9b:
91:40:60:18:01:45:11:aa:be:14:21:dd:b0:7f:5a:
c4:f4:94:a6:33:7d:1c:64:43:6f:32:40:59:c0:4d:
32:33:03:ba:b6:6e:0f:0c:c7:9c:30:35:fe:9d:97:
63:5b:9f:62:de:91:56:15:e3:3f:22:72:76:2b:38:
7b:6a:85:03:ac:38:0d:22:b5:30:db:7d:26:74:31:
c2:a8:8a:c0:68:00:39:53:0b:27:30:de:bc:49:c7:
aa:d4:21:ae:2a:98:78:03:90:84:dc:62:6f:21:25:
d9:bc:6e:4e:20:0d:c2:16:c7:6c:b1:8e:fd:c2:aa:
9d:71:5f:3e:01:39:93:5f:28:6a:a2:af:fb:a6:52:
d7:5f:73:4f:ea:2b:22:11:56:db:da:e3:ad:94:73:
ce:dc:e2:d1:a6:62:64:eb:72:04:60:ff:fe:41:8d:
4d:40:d0:7d:64:15:a9:a1:1f:ec:3e:43:7f:54:26:
d6:35:b1:96:4e:07:f9:61:da:fd:67:5c:fb:55:cd:
64:5e:ca:73:55:ec:2d:b9:d3:e5:2d:5d:54:35:7c:
ff:c4:66:bd:98:f9:a8:8a:7e:be:65:1f:e1:42:81:
c1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9E:CD:A3:9A:4F:52:09:22:FA:31:05:B5:53:CB:04:A8:14:F9:A3
X509v3 Authority Key Identifier:
keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/8J7No5pPUgki-jEFtVPLBKgU-aM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.36.0/22
185.53.140.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:b6:28:af:f2:66:d9:b9:ec:9f:7c:98:94:49:c2:4a:c8:57:
5f:b8:cf:a2:66:d5:f3:68:97:c9:fb:de:03:e2:e3:c4:9b:f7:
de:cd:17:85:17:8e:7c:a4:f0:52:ec:29:5c:5e:b6:91:6b:53:
be:23:b3:60:e8:ff:8f:d6:ff:33:e2:f8:a5:0f:ee:5b:d1:c7:
ed:99:f7:19:6f:fb:c7:d0:2b:59:18:ea:03:f0:98:07:a0:1c:
4c:85:6e:f9:42:bc:d8:3c:3f:5b:01:88:a7:8b:98:98:39:14:
c1:ce:8a:d8:02:6b:40:08:3e:fc:a5:0b:30:2a:e2:3b:41:9e:
76:75:38:ee:4b:39:c5:79:a2:59:1c:f7:d5:4c:16:dc:cb:db:
b9:c0:92:36:e1:75:a0:97:88:55:1a:67:22:9c:b6:6e:5e:64:
92:2c:11:c8:ac:b1:2c:1d:c4:5d:7b:9f:e8:f1:69:40:d7:9a:
63:15:d7:db:cb:45:8c:74:31:e9:61:48:1f:e9:2e:64:36:39:
b0:fc:64:25:40:80:1b:bd:9d:5c:eb:17:95:6c:e2:f9:48:ef:
bb:0f:0b:6c:d5:34:7a:46:91:58:8f:3f:9e:1a:6d:ad:85:ea:
35:94:d5:87:96:aa:44:96:ec:b2:8c:be:84:6f:7d:cb:19:56:
9e:77:5d:4b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzGt6z82WNHB7RVfprsoqhCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5M2UwY2Q4YjNlMDQ0ZWRiODIzYWVmNjg4YWFmYjBiNzVk
ZTg2NzUwHhcNMjQwMTAxMjAyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDllY2RhMzlhNGY1MjA5MjJmYTMxMDViNTUzY2IwNGE4MTRmOWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nMdbLrWrCSYmDmAW9F4cl+9UosJ
czYMe3/KLJuRQGAYAUURqr4UId2wf1rE9JSmM30cZENvMkBZwE0yMwO6tm4PDMec
MDX+nZdjW59i3pFWFeM/InJ2Kzh7aoUDrDgNIrUw230mdDHCqIrAaAA5UwsnMN68
Sceq1CGuKph4A5CE3GJvISXZvG5OIA3CFsdssY79wqqdcV8+ATmTXyhqoq/7plLX
X3NP6isiEVbb2uOtlHPO3OLRpmJk63IEYP/+QY1NQNB9ZBWpoR/sPkN/VCbWNbGW
Tgf5Ydr9Z1z7Vc1kXspzVewtudPlLV1UNXz/xGa9mPmoin6+ZR/hQoHBkwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPCezaOaT1IJIvoxBbVTywSoFPmjMB8GA1UdIwQY
MBaAFCk+DNiz4ETtuCOu9oiq+wt13oZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1Q0TTJMUGdSTzI0STY3MmlLcjdDM1hlaG5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82ZGExYzItMjUyZC00YmQyLWI1NmMt
YmIyMTdjYzNiNzhkLzEvOEo3Tm81cFBVZ2tpLWpFRnRWUExCS2dVLWFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82ZGExYzItMjUyZC00YmQyLWI1NmMtYmIyMTdjYzNiNzhk
LzEvS1Q0TTJMUGdSTzI0STY3MmlLcjdDM1hlaG5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYEkAwQC
uTWMMA0GCSqGSIb3DQEBCwUAA4IBAQAatiiv8mbZueyffJiUScJKyFdfuM+iZtXz
aJfJ+94D4uPEm/fezReFF458pPBS7ClcXraRa1O+I7Ng6P+P1v8z4vilD+5b0cft
mfcZb/vH0CtZGOoD8JgHoBxMhW75QrzYPD9bAYini5iYORTBzorYAmtACD78pQsw
KuI7QZ52dTjuSznFeaJZHPfVTBbcy9u5wJI24XWgl4hVGmcinLZuXmSSLBHIrLEs
HcRde5/o8WlA15pjFdfby0WMdDHpYUgf6S5kNjmw/GQlQIAbvZ1c6xeVbOL5SO+7
Dwts1TR6RpFYjz+eGm2theo1lNWHlqpEluyyjL6Eb33LGVaed11L
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:18:49 2024 by rpki-client on console-ams.rpki-client.org