Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/gEu9xhTFANh5RWJwlIu_DMaL7dQ.roa
File: gEu9xhTFANh5RWJwlIu_DMaL7dQ.roa (raw, json)
Hash identifier: AI+L2qUnXYZashwlD4StU24hup1SQ5CfdSJsgxfIgCg=
Subject key identifier: 80:4B:BD:C6:14:C5:00:D8:79:45:62:70:94:8B:BF:0C:C6:8B:ED:D4
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 018DB0BBEAEE30F02EA6BA9E9DF4154AAC47
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/gEu9xhTFANh5RWJwlIu_DMaL7dQ.roa
Signing time: Fri 16 Feb 2024 07:05:21 +0000
ROA not before: Fri 16 Feb 2024 07:05:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2.57.180.0/22 maxlen: 24
2.59.116.0/24 maxlen: 24
45.12.44.0/22 maxlen: 24
45.15.52.0/22 maxlen: 22
45.67.44.0/22 maxlen: 22
45.86.192.0/22 maxlen: 22
45.95.140.0/22 maxlen: 24
45.130.204.0/22 maxlen: 24
45.136.60.0/22 maxlen: 24
45.145.192.0/22 maxlen: 24
45.151.204.0/22 maxlen: 24
91.225.0.0/24 maxlen: 24
91.227.240.0/23 maxlen: 23
91.239.37.0/24 maxlen: 24
94.142.164.0/22 maxlen: 22
185.39.11.0/24 maxlen: 24
185.57.176.0/22 maxlen: 22
185.232.89.0/24 maxlen: 24
193.3.158.0/24 maxlen: 24
195.244.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b0:bb:ea:ee:30:f0:2e:a6:ba:9e:9d:f4:15:4a:ac:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Feb 16 07:05:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=804bbdc614c500d879456270948bbf0cc68bedd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:26:df:1a:bd:e7:95:db:c5:80:4b:b8:3f:cf:
90:8f:27:a5:50:e3:28:5c:d8:d7:34:2f:0e:b5:5d:
b9:87:4b:44:e4:1a:c5:ec:09:2d:9e:a5:dd:b1:9a:
be:b3:3b:5a:9d:a5:07:74:a1:f2:88:49:88:63:24:
9f:b6:52:fe:9f:f0:5b:58:27:e2:be:f8:71:54:69:
dd:62:b2:16:c4:2e:ae:46:57:82:ef:83:0a:bc:ba:
3c:de:dc:1f:d9:d5:4f:49:ce:f1:30:32:e8:a4:81:
da:d9:f6:24:c8:5c:b4:ab:7a:d3:c1:01:76:73:59:
42:fc:ee:3c:95:c4:53:fe:88:a2:e9:2f:54:1c:c6:
9b:8a:f0:7f:fe:fa:4c:77:df:68:a0:cc:92:18:7d:
76:22:98:f9:c6:0e:74:68:df:5b:dd:01:92:56:29:
25:4e:3d:0d:1c:63:cb:b8:a4:97:86:ba:d7:73:77:
1a:1c:f8:0d:b9:52:23:98:56:26:2e:2e:f3:23:85:
6e:cc:8d:64:0c:de:4f:99:04:72:21:ce:fd:c9:3a:
61:a6:f4:ab:ef:08:74:ba:19:a3:73:b0:23:72:47:
b5:50:42:56:cd:93:3e:46:2f:76:70:8a:6b:4d:44:
04:bd:24:4e:67:53:5a:71:46:0b:c4:a2:59:90:d2:
92:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4B:BD:C6:14:C5:00:D8:79:45:62:70:94:8B:BF:0C:C6:8B:ED:D4
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/gEu9xhTFANh5RWJwlIu_DMaL7dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.180.0/22
2.59.116.0/24
45.12.44.0/22
45.15.52.0/22
45.67.44.0/22
45.86.192.0/22
45.95.140.0/22
45.130.204.0/22
45.136.60.0/22
45.145.192.0/22
45.151.204.0/22
91.225.0.0/24
91.227.240.0/23
91.239.37.0/24
94.142.164.0/22
185.39.11.0/24
185.57.176.0/22
185.232.89.0/24
193.3.158.0/24
195.244.14.0/23
Signature Algorithm: sha256WithRSAEncryption
60:e6:37:7b:ff:9b:e0:37:4f:8b:13:59:ea:64:1d:ad:ca:7a:
a9:d8:6b:90:6a:ca:4d:f3:7c:1a:d9:14:0c:49:81:31:4a:73:
53:c3:6b:07:da:47:ea:38:d3:36:82:56:e6:b5:22:bc:6e:1a:
e1:93:9b:5b:92:0e:c8:ba:1b:00:d6:f8:6b:ac:db:87:19:62:
34:0b:b9:6d:47:17:63:5f:b8:5f:3b:33:3b:a2:ce:10:7e:e1:
46:92:4e:9c:a3:c3:6b:da:62:68:a9:97:be:e1:59:07:9d:42:
e7:7d:a9:dd:8d:d1:02:d6:6a:4d:b1:c1:54:dd:9b:35:ad:5d:
0f:a2:49:00:9d:16:5c:66:c6:29:08:6b:27:75:14:69:75:1a:
a0:af:e9:02:b3:6c:50:0c:ee:58:c1:4d:31:d7:62:c4:80:95:
fb:e5:13:fc:e8:66:03:03:d4:44:8b:be:2f:2a:bf:09:3a:a8:
5e:24:c3:bf:69:0d:f8:3d:5c:c0:ac:d5:0e:74:e0:54:7f:f9:
4d:94:45:db:a7:75:8d:d4:f9:8b:84:42:b6:a3:29:d1:9e:3b:
e2:40:1a:a5:c2:2b:7c:28:09:c9:4b:2d:0b:e6:87:0a:9d:60:
40:43:b8:9f:87:aa:10:5b:ba:15:30:7f:04:aa:10:79:ff:a1:
55:0f:eb:0b
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgISAY2wu+ruMPAuprqenfQVSqxHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDVlMzcxNzhkODUyNGM3MjY2MGExZDc5NjE2NTk5OWU1
ODY2MjIwHhcNMjQwMjE2MDcwNTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDRiYmRjNjE0YzUwMGQ4Nzk0NTYyNzA5NDhiYmYwY2M2OGJlZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSbfGr3nldvFgEu4P8+QjyelUOMo
XNjXNC8OtV25h0tE5BrF7AktnqXdsZq+sztanaUHdKHyiEmIYySftlL+n/BbWCfi
vvhxVGndYrIWxC6uRleC74MKvLo83twf2dVPSc7xMDLopIHa2fYkyFy0q3rTwQF2
c1lC/O48lcRT/oii6S9UHMabivB//vpMd99ooMySGH12Ipj5xg50aN9b3QGSVikl
Tj0NHGPLuKSXhrrXc3caHPgNuVIjmFYmLi7zI4VuzI1kDN5PmQRyIc79yTphpvSr
7wh0uhmjc7Ajcke1UEJWzZM+Ri92cIprTUQEvSROZ1NacUYLxKJZkNKS1QIDAQAB
o4ICfjCCAnowHQYDVR0OBBYEFIBLvcYUxQDYeUVicJSLvwzGi+3UMB8GA1UdIwQY
MBaAFMjV43F42FJMcmYKHXlhZZmeWGYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODIt
OWUwYWVkMmZiOGVjLzEvZ0V1OXhoVEZBTmg1UldKd2xJdV9ETWFMN2RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODItOWUwYWVkMmZiOGVj
LzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQCAjm0
AwQAAjt0AwQCLQwsAwQCLQ80AwQCLUMsAwQCLVbAAwQCLV+MAwQCLYLMAwQCLYg8
AwQCLZHAAwQCLZfMAwQAW+EAAwQBW+PwAwQAW+8lAwQCXo6kAwQAuScLAwQCuTmw
AwQAuehZAwQAwQOeAwQBw/QOMA0GCSqGSIb3DQEBCwUAA4IBAQBg5jd7/5vgN0+L
E1nqZB2tynqp2GuQaspN83wa2RQMSYExSnNTw2sH2kfqONM2glbmtSK8bhrhk5tb
kg7IuhsA1vhrrNuHGWI0C7ltRxdjX7hfOzM7os4QfuFGkk6co8Nr2mJoqZe+4VkH
nULnfandjdEC1mpNscFU3Zs1rV0PokkAnRZcZsYpCGsndRRpdRqgr+kCs2xQDO5Y
wU0x12LEgJX75RP86GYDA9REi74vKr8JOqheJMO/aQ34PVzArNUOdOBUf/lNlEXb
p3WN1PmLhEK2oynRnjviQBqlwit8KAnJSy0L5ocKnWBAQ7ifh6oQW7oVMH8EqhB5
/6FVD+sL
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:44:42 2024 by rpki-client on console-ams.rpki-client.org