Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/AkXyemQFUs4kIL20nGqP90O-wHc.roa
File: AkXyemQFUs4kIL20nGqP90O-wHc.roa (raw, json)
Hash identifier: sfIKx/C2Ac4HOkrWF/VoHIp/MSsnQozA5PGHgyk5lBk=
Subject key identifier: 02:45:F2:7A:64:05:52:CE:24:20:BD:B4:9C:6A:8F:F7:43:BE:C0:77
Certificate issuer: /CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Certificate serial: 018CC2DAF36DB66CA536972C4743A01C40FF
Authority key identifier: 33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/AkXyemQFUs4kIL20nGqP90O-wHc.roa
Signing time: Mon 01 Jan 2024 02:29:38 +0000
ROA not before: Mon 01 Jan 2024 02:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34409
IP address blocks: 78.24.161.0/24 maxlen: 24
78.24.160.0/21 maxlen: 21
78.24.162.0/24 maxlen: 24
78.24.166.0/24 maxlen: 24
78.24.160.0/24 maxlen: 24
78.24.165.0/24 maxlen: 24
78.24.163.0/24 maxlen: 24
78.24.164.0/24 maxlen: 24
78.24.167.0/24 maxlen: 24
193.151.36.0/24 maxlen: 24
193.151.38.0/24 maxlen: 24
193.151.37.0/24 maxlen: 24
195.8.99.0/24 maxlen: 24
2a02:1320::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 04:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f3:6d:b6:6c:a5:36:97:2c:47:43:a0:1c:40:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Validity
Not Before: Jan 1 02:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0245f27a640552ce2420bdb49c6a8ff743bec077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:52:12:f2:e9:af:fa:71:6c:55:f0:99:6d:58:
5a:ff:87:c0:28:30:65:c1:ce:5b:2f:8d:b6:0b:ae:
05:b2:0c:74:35:38:a1:38:4b:3d:0a:be:f7:37:c9:
77:9c:2b:00:ec:37:96:38:cb:d6:84:d3:0c:3f:31:
85:c4:bb:66:39:ac:68:3a:a0:b8:d1:a1:8b:c4:a7:
b9:66:47:b6:ee:28:40:3c:5d:4a:03:9f:7d:51:dd:
b4:41:42:56:e3:6a:4d:61:f9:2e:2e:a3:7c:68:4d:
99:ab:35:ac:1a:65:5c:cf:c5:9c:37:f8:bf:29:73:
0b:a5:37:6f:40:f2:f2:e2:67:f1:15:96:35:a8:9d:
26:21:c7:99:c4:50:cf:ca:0c:da:e4:a7:dc:52:e1:
f7:0a:63:f6:19:f0:0c:2d:c0:8d:22:b4:a0:2e:0d:
1f:c7:7a:f8:53:39:5e:37:9f:13:e2:91:05:db:90:
3f:ee:6c:d7:01:8a:4d:1e:d5:5f:a7:a6:83:38:34:
d6:1a:b6:c5:2f:e9:b6:a1:44:d3:02:cf:20:66:79:
f6:c6:61:69:cd:7a:8c:e3:34:32:55:af:a7:cc:f9:
ac:bb:94:8f:16:b3:46:6b:1d:f8:e0:8e:15:1b:c9:
67:05:6e:ad:57:29:8d:07:20:a9:b4:45:bc:36:1f:
98:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:45:F2:7A:64:05:52:CE:24:20:BD:B4:9C:6A:8F:F7:43:BE:C0:77
X509v3 Authority Key Identifier:
keyid:33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/AkXyemQFUs4kIL20nGqP90O-wHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.160.0/21
193.151.36.0-193.151.38.255
195.8.99.0/24
IPv6:
2a02:1320::/32
Signature Algorithm: sha256WithRSAEncryption
59:e0:9f:66:1f:fa:bb:c3:36:c8:c5:32:37:34:f7:14:5c:06:
85:90:3a:42:37:8a:58:0f:df:8e:e6:8f:0d:28:fc:74:50:2c:
7b:00:7e:0e:5a:d2:ac:f6:03:70:28:51:0d:3b:f8:8a:39:21:
59:1e:d8:3a:9c:6a:58:a7:a7:d4:2b:76:f2:f0:4f:a5:68:f4:
61:a1:a4:99:a9:15:ba:66:dd:1e:e3:01:33:37:6f:fe:d9:de:
96:04:18:ad:f5:72:5e:4a:26:c6:68:31:ad:cd:1d:b0:7f:e1:
90:86:00:a4:d1:03:77:23:f1:16:a3:5a:37:1d:7f:8f:e8:a2:
49:34:86:ee:98:97:37:c4:63:50:92:59:79:1c:04:cd:6c:37:
c6:c1:57:2d:94:0c:47:7f:3b:25:1c:de:d6:7c:df:83:5b:70:
b5:d2:ce:4d:ff:b7:46:cc:d3:37:6f:7f:73:c0:0f:5d:fd:68:
d5:c1:0d:45:44:3c:62:b8:f2:af:3b:38:50:b7:31:73:28:41:
31:dc:be:aa:31:e6:dd:a1:a3:87:98:7a:10:ad:8d:8f:40:b2:
1c:b8:9e:2f:69:79:f6:bd:c6:bc:49:24:9f:30:ae:5f:8d:c7:
22:0c:e3:34:b0:31:ac:0b:92:6e:57:f5:9a:ef:c9:b3:aa:84:
b9:4a:89:c5
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYzC2vNttmylNpcsR0OgHED/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzOWNiYjFlNDM5YTNhNzFlYjg3OTY2OTJmNjIyYmY4Mzhm
ODQ4OGMwHhcNMjQwMTAxMDIyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjQ1ZjI3YTY0MDU1MmNlMjQyMGJkYjQ5YzZhOGZmNzQzYmVjMDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFIS8umv+nFsVfCZbVha/4fAKDBl
wc5bL422C64Fsgx0NTihOEs9Cr73N8l3nCsA7DeWOMvWhNMMPzGFxLtmOaxoOqC4
0aGLxKe5Zke27ihAPF1KA599Ud20QUJW42pNYfkuLqN8aE2ZqzWsGmVcz8WcN/i/
KXMLpTdvQPLy4mfxFZY1qJ0mIceZxFDPygza5KfcUuH3CmP2GfAMLcCNIrSgLg0f
x3r4UzleN58T4pEF25A/7mzXAYpNHtVfp6aDODTWGrbFL+m2oUTTAs8gZnn2xmFp
zXqM4zQyVa+nzPmsu5SPFrNGax344I4VG8lnBW6tVymNByCptEW8Nh+Y9wIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFAJF8npkBVLOJCC9tJxqj/dDvsB3MB8GA1UdIwQY
MBaAFDOcux5Dmjpx64eWaS9iK/g4+EiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTV5N0hrT2FPbkhyaDVacEwySXItRGo0U0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83ZTUwMGQtNTU1Mi00YjgyLWEzYmQt
YWEwMDcxYjdiZjg0LzEvQWtYeWVtUUZVczRrSUwyMG5HcVA5ME8td0hjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83ZTUwMGQtNTU1Mi00YjgyLWEzYmQtYWEwMDcxYjdiZjg0
LzEvTTV5N0hrT2FPbkhyaDVacEwySXItRGo0U0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQDThigMAwD
BALBlyQDBADBlyYDBADDCGMwDQQCAAIwBwMFACoCEyAwDQYJKoZIhvcNAQELBQAD
ggEBAFngn2Yf+rvDNsjFMjc09xRcBoWQOkI3ilgP347mjw0o/HRQLHsAfg5a0qz2
A3AoUQ07+Io5IVke2Dqcalinp9QrdvLwT6Vo9GGhpJmpFbpm3R7jATM3b/7Z3pYE
GK31cl5KJsZoMa3NHbB/4ZCGAKTRA3cj8RajWjcdf4/ookk0hu6YlzfEY1CSWXkc
BM1sN8bBVy2UDEd/OyUc3tZ834NbcLXSzk3/t0bM0zdvf3PAD139aNXBDUVEPGK4
8q87OFC3MXMoQTHcvqox5t2ho4eYehCtjY9Ashy4ni9pefa9xrxJJJ8wrl+NxyIM
4zSwMawLkm5X9ZrvybOqhLlKicU=
-----END CERTIFICATE-----
Generated at Sat Jun 15 12:42:32 2024 by rpki-client on console-fra.rpki-client.org