Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k8uWUowXsYQrofqt-GrCOLkhDos.roa
File: k8uWUowXsYQrofqt-GrCOLkhDos.roa (raw, json)
Hash identifier: yVrEFP4MxNrFQj/7sI2LlJTIZGJfBdYFzB25sZNbS5g=
Subject key identifier: 93:CB:96:52:8C:17:B1:84:2B:A1:FA:AD:F8:6A:C2:38:B9:21:0E:8B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019344E26E341B8F40074A62176E329C10E9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k8uWUowXsYQrofqt-GrCOLkhDos.roa
Signing time: Tue 19 Nov 2024 14:45:10 +0000
ROA not before: Tue 19 Nov 2024 14:45:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.87.121.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
89.35.130.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.141.216.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:44:e2:6e:34:1b:8f:40:07:4a:62:17:6e:32:9c:10:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 19 14:45:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93cb96528c17b1842ba1faadf86ac238b9210e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:e7:85:47:eb:c6:e6:2c:0e:4a:df:df:9e:
22:e3:b4:1a:61:08:73:13:a8:c2:bb:44:10:35:40:
81:7e:be:85:bf:7f:a2:85:47:0a:ff:ee:f6:a4:d5:
0d:e6:42:e0:4e:8c:de:b5:8c:4c:f2:81:56:2f:b1:
72:65:12:53:e9:c7:d7:15:b0:b9:37:32:24:00:44:
85:2a:21:2f:40:30:7e:e1:eb:47:62:78:2b:bb:b6:
e5:c9:0f:5d:fb:ef:50:93:d0:9d:7d:09:f6:b4:47:
05:31:08:bf:75:a5:c3:16:5a:f0:44:fc:f0:bf:39:
e9:a0:6e:f9:18:9e:a0:e9:c3:0c:b0:9e:de:2a:e3:
7d:ac:26:34:1d:aa:c4:dc:f9:7d:08:38:d2:76:93:
c7:82:60:79:21:75:5f:84:f0:63:f8:b8:31:74:76:
3b:79:74:b4:17:d8:65:9f:48:c4:70:d2:a5:8f:dc:
5c:e6:31:5e:03:3f:28:31:01:95:b0:b5:b3:a7:46:
05:fa:9f:39:fe:70:97:d0:8d:b9:c7:0c:f1:4f:8e:
0c:e2:75:37:84:7f:f2:72:6f:84:f5:68:f3:30:69:
08:88:e7:e5:8c:2e:46:41:b3:19:7b:cb:ae:b9:22:
b1:a0:a8:86:fe:c9:24:23:4a:e8:0f:be:d4:73:00:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CB:96:52:8C:17:B1:84:2B:A1:FA:AD:F8:6A:C2:38:B9:21:0E:8B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k8uWUowXsYQrofqt-GrCOLkhDos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.121.0/24
45.135.182.0/23
89.34.106.0/24
89.34.219.0/24
89.35.130.0/24
93.114.183.0/24
185.141.216.0/24
185.198.235.0/24
188.64.142.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:65:d0:32:fa:5e:4b:bf:0d:05:c6:91:d8:3c:59:ed:c7:a0:
89:ac:f1:23:ef:5b:25:3c:c3:25:8d:f8:f4:e5:fe:4b:c0:4a:
2e:5d:f3:33:b0:1f:e1:41:4e:7e:86:ae:15:49:1a:5e:54:08:
4a:35:ec:62:06:21:64:ce:9a:bf:ff:70:6a:c8:65:75:12:21:
c9:a7:8b:b2:99:52:a1:94:88:ec:29:2e:fa:a0:8b:d3:e3:b0:
9a:14:6c:55:e7:b8:da:34:1b:d6:21:b2:cc:6c:8a:e0:9e:8e:
5f:fa:61:58:e3:83:92:3a:d1:bb:8c:0f:71:e4:14:50:e6:c0:
cd:68:79:c2:21:df:df:ad:72:6b:6f:45:5b:ab:57:7a:11:31:
67:2c:5a:2a:df:ab:eb:a2:0b:80:48:07:6f:2b:f2:9a:13:1b:
a2:6d:e0:8b:a8:83:f5:f4:14:f5:7c:1b:f7:b9:e4:26:89:ee:
bd:98:db:cd:5d:a0:ee:0b:6f:7f:87:23:f7:7c:43:1b:b5:08:
70:90:e3:79:a7:d4:b9:fd:1e:aa:ac:6e:37:6c:e2:d0:19:11:
6e:29:6d:05:67:e5:8f:16:52:b1:3f:68:4e:56:39:71:95:70:
3f:5b:48:01:79:db:46:b3:74:21:e2:91:bf:97:a2:6b:06:6f:
a5:29:72:bb
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZNE4m40G49AB0piF24ynBDpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQxMTE5MTQ0NTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2NiOTY1MjhjMTdiMTg0MmJhMWZhYWRmODZhYzIzOGI5MjEwZThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNLnhUfrxuYsDkrf354i47QaYQhz
E6jCu0QQNUCBfr6Fv3+ihUcK/+72pNUN5kLgTozetYxM8oFWL7FyZRJT6cfXFbC5
NzIkAESFKiEvQDB+4etHYngru7blyQ9d++9Qk9CdfQn2tEcFMQi/daXDFlrwRPzw
vznpoG75GJ6g6cMMsJ7eKuN9rCY0HarE3Pl9CDjSdpPHgmB5IXVfhPBj+LgxdHY7
eXS0F9hln0jEcNKlj9xc5jFeAz8oMQGVsLWzp0YF+p85/nCX0I25xwzxT44M4nU3
hH/ycm+E9WjzMGkIiOfljC5GQbMZe8uuuSKxoKiG/skkI0roD77UcwC64QIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFJPLllKMF7GEK6H6rfhqwji5IQ6LMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvazh1V1Vvd1hzWVFyb2ZxdC1HckNPTGtoRG9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALVd5AwQB
LYe2AwQAWSJqAwQAWSLbAwQAWSOCAwQAXXK3AwQAuY3YAwQAucbrAwQAvECOMA0G
CSqGSIb3DQEBCwUAA4IBAQAvZdAy+l5Lvw0FxpHYPFntx6CJrPEj71slPMMljfj0
5f5LwEouXfMzsB/hQU5+hq4VSRpeVAhKNexiBiFkzpq//3BqyGV1EiHJp4uymVKh
lIjsKS76oIvT47CaFGxV57jaNBvWIbLMbIrgno5f+mFY44OSOtG7jA9x5BRQ5sDN
aHnCId/frXJrb0Vbq1d6ETFnLFoq36vroguASAdvK/KaExuibeCLqIP19BT1fBv3
ueQmie69mNvNXaDuC29/hyP3fEMbtQhwkON5p9S5/R6qrG43bOLQGRFuKW0FZ+WP
FlKxP2hOVjlxlXA/W0gBedtGs3Qh4pG/l6JrBm+lKXK7
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:52:43 2024 by rpki-client on console-ams.rpki-client.org