Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/EApr4Z72ZNv6-Qhja73XLbTrlmg.roa
File: EApr4Z72ZNv6-Qhja73XLbTrlmg.roa (raw, json)
Hash identifier: Ktrdf1s5QJZ6PhoDT+NTHjgsDHtuzmtrt0ZxRgkLLSM=
Subject key identifier: 10:0A:6B:E1:9E:F6:64:DB:FA:F9:08:63:6B:BD:D7:2D:B4:EB:96:68
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 018CC26CFFFDC86EBB7CF6B8FEFEB006D963
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/EApr4Z72ZNv6-Qhja73XLbTrlmg.roa
Signing time: Mon 01 Jan 2024 00:29:32 +0000
ROA not before: Mon 01 Jan 2024 00:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133944
IP address blocks: 207.244.216.0/22 maxlen: 22
45.141.80.0/22 maxlen: 22
43.245.116.0/23 maxlen: 23
209.35.4.0/23 maxlen: 23
209.35.113.0/24 maxlen: 24
193.148.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 21:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:ff:fd:c8:6e:bb:7c:f6:b8:fe:fe:b0:06:d9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=100a6be19ef664dbfaf908636bbdd72db4eb9668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ab:95:d9:97:36:7f:33:bf:1f:e8:7d:1c:42:
52:41:c2:d7:a2:89:a1:2e:76:b9:cd:fe:7c:b4:4c:
7a:88:71:0c:83:69:57:f5:fd:82:4a:18:95:b3:79:
93:7a:24:31:10:17:04:a7:6e:e9:c5:ad:f9:b9:22:
a9:16:92:f0:74:35:2f:73:c9:b5:38:87:98:86:1c:
e1:68:50:bb:71:4a:69:2c:75:eb:57:89:10:71:09:
4b:7a:05:58:98:b3:d9:47:a6:4c:7b:b2:f7:e6:2a:
4e:f8:69:b0:e0:48:ac:75:0d:77:24:ca:7f:ef:38:
72:9a:9c:68:27:72:e0:c7:c3:e5:9c:d8:59:ec:d7:
d3:ea:43:3b:5e:e4:b1:20:75:80:ba:ab:63:5d:98:
77:83:3a:4e:51:b2:2a:2b:3f:62:cd:07:74:51:49:
f2:df:72:64:e1:b5:4c:c2:2d:c9:12:1c:a2:ae:52:
27:0a:5a:d1:f4:93:ef:8f:6e:b5:1a:2f:3f:6c:46:
4c:07:30:d4:4a:c2:d7:7e:65:a2:7b:fb:ca:53:5c:
8f:40:83:43:a4:b6:db:c8:16:10:eb:9c:db:03:d2:
0e:d5:e3:9b:f1:81:b8:95:97:fc:73:d3:0a:6f:34:
98:63:2b:d0:49:68:d4:90:a6:b4:93:b4:2f:a0:1d:
5b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0A:6B:E1:9E:F6:64:DB:FA:F9:08:63:6B:BD:D7:2D:B4:EB:96:68
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/EApr4Z72ZNv6-Qhja73XLbTrlmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.245.116.0/23
45.141.80.0/22
193.148.92.0/23
207.244.216.0/22
209.35.4.0/23
209.35.113.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a1:4e:5b:62:8c:8e:0b:e2:06:2f:60:71:77:c1:05:00:ea:
91:68:12:29:41:44:29:b8:85:40:cc:4c:a3:32:66:4c:c8:80:
85:30:a2:78:35:eb:eb:70:01:1d:c7:9c:14:34:3b:ab:e1:bd:
9b:b4:5c:6c:03:6e:ce:44:83:64:07:ef:87:68:d5:28:0c:8b:
41:3d:87:e6:43:39:d7:ff:01:f5:48:be:19:c1:5d:cc:3a:da:
d8:d2:94:a9:d9:68:23:cf:24:ab:d7:69:8d:dd:7a:d6:99:12:
40:9d:68:6a:6f:e5:62:0f:87:e3:0b:d7:71:8e:f4:a0:77:28:
69:44:39:23:ca:a4:a7:7b:cd:6c:75:45:38:db:cb:9b:5e:8d:
6c:1a:a5:db:e2:69:66:30:75:bb:bd:69:b4:0d:d5:a3:22:74:
28:fe:ff:e0:f9:16:53:a4:02:84:cc:93:d4:94:d5:45:8e:65:
bd:1e:50:5f:5d:66:ad:0c:ef:19:c7:d3:b2:c3:42:43:bf:16:
fa:cd:99:c1:5e:14:7e:c7:68:a9:f2:5e:72:d6:ca:8b:77:85:
d5:bc:17:91:f1:01:fb:2b:d2:a9:6b:4c:1b:ac:bb:29:38:65:
a3:dd:ba:64:33:ed:d5:c5:d9:8b:3b:3b:6a:0f:0a:57:85:d8:
ab:62:33:1c
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYzCbP/9yG67fPa4/v6wBtljMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5
MTk3ZjIwHhcNMjQwMTAxMDAyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDBhNmJlMTllZjY2NGRiZmFmOTA4NjM2YmJkZDcyZGI0ZWI5NjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KuV2Zc2fzO/H+h9HEJSQcLXoomh
Lna5zf58tEx6iHEMg2lX9f2CShiVs3mTeiQxEBcEp27pxa35uSKpFpLwdDUvc8m1
OIeYhhzhaFC7cUppLHXrV4kQcQlLegVYmLPZR6ZMe7L35ipO+Gmw4EisdQ13JMp/
7zhympxoJ3Lgx8PlnNhZ7NfT6kM7XuSxIHWAuqtjXZh3gzpOUbIqKz9izQd0UUny
33Jk4bVMwi3JEhyirlInClrR9JPvj261Gi8/bEZMBzDUSsLXfmWie/vKU1yPQIND
pLbbyBYQ65zbA9IO1eOb8YG4lZf8c9MKbzSYYyvQSWjUkKa0k7QvoB1bbwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFBAKa+Ge9mTb+vkIY2u91y2065ZoMB8GA1UdIwQY
MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt
MmQxNDNkN2I4NTNjLzEvRUFwcjRaNzJaTnY2LVFoamE3M1hMYlRybG1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj
LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBK/V0AwQC
LY1QAwQBwZRcAwQCz/TYAwQB0SMEAwQA0SNxMA0GCSqGSIb3DQEBCwUAA4IBAQAk
oU5bYoyOC+IGL2Bxd8EFAOqRaBIpQUQpuIVAzEyjMmZMyICFMKJ4NevrcAEdx5wU
NDur4b2btFxsA27ORINkB++HaNUoDItBPYfmQznX/wH1SL4ZwV3MOtrY0pSp2Wgj
zySr12mN3XrWmRJAnWhqb+ViD4fjC9dxjvSgdyhpRDkjyqSne81sdUU428ubXo1s
GqXb4mlmMHW7vWm0DdWjInQo/v/g+RZTpAKEzJPUlNVFjmW9HlBfXWatDO8Zx9Oy
w0JDvxb6zZnBXhR+x2ip8l5y1sqLd4XVvBeR8QH7K9Kpa0wbrLspOGWj3bpkM+3V
xdmLOztqDwpXhdirYjMc
-----END CERTIFICATE-----
Generated at Mon May 20 04:55:23 2024 by rpki-client on console-fra.rpki-client.org