Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/e1sZR8x-WsnvANMHDR91OQmgIjY.roa
File: e1sZR8x-WsnvANMHDR91OQmgIjY.roa (raw, json)
Hash identifier: OxguY+hSP4C1O0qGvbIbFQlknCPuJOmSvwUIk5rfdjk=
Subject key identifier: 7B:5B:19:47:CC:7E:5A:C9:EF:00:D3:07:0D:1F:75:39:09:A0:22:36
Certificate issuer: /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial: 0191F5CF99DE3FCECB46EF6394E2F4C975D3
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/e1sZR8x-WsnvANMHDR91OQmgIjY.roa
Signing time: Sun 15 Sep 2024 13:11:48 +0000
ROA not before: Sun 15 Sep 2024 13:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201119
IP address blocks: 185.195.145.0/24 maxlen: 24
2a0a:5bc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f5:cf:99:de:3f:ce:cb:46:ef:63:94:e2:f4:c9:75:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Validity
Not Before: Sep 15 13:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b5b1947cc7e5ac9ef00d3070d1f753909a02236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:73:47:44:18:74:7f:d1:fd:3e:7b:b7:b2:b9:
06:7e:b6:96:d5:31:50:92:0a:3d:63:f5:a1:3d:83:
50:16:ef:c1:6a:a6:c0:de:e0:04:7a:dc:b2:94:4b:
71:44:7f:8b:4f:22:92:b3:2c:67:90:14:b1:e2:61:
ed:ad:e3:20:21:d1:8f:23:bf:54:1a:c9:1b:93:99:
01:41:d2:88:e5:34:4b:df:f7:35:3b:30:a8:d3:d2:
e4:f0:0d:47:f6:f0:2f:1d:bd:74:35:d4:b8:bb:05:
68:0d:a4:d5:46:62:6c:dc:22:88:35:98:09:59:ef:
0b:07:71:3a:3f:69:99:d2:1d:55:b3:54:ab:ed:cf:
4d:16:0b:9c:87:80:84:5f:88:b5:30:24:ed:d1:f9:
be:7d:4e:9a:75:d8:ad:40:16:fe:3a:37:da:4b:d2:
4b:11:4b:1f:6a:26:ae:2e:83:e5:1e:3b:24:e9:65:
e6:4f:7b:b4:cd:ab:c0:54:56:e1:5f:79:c7:32:d9:
3b:81:97:db:cf:42:89:7d:a2:ac:4a:21:c7:31:21:
39:70:64:57:d2:d9:93:38:7f:1a:16:15:10:b2:b8:
b4:59:46:01:8f:02:6c:66:7b:74:46:a1:75:52:1b:
86:cd:bc:14:17:ad:a8:3a:1e:73:2f:d9:c5:2e:39:
82:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5B:19:47:CC:7E:5A:C9:EF:00:D3:07:0D:1F:75:39:09:A0:22:36
X509v3 Authority Key Identifier:
keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/e1sZR8x-WsnvANMHDR91OQmgIjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.145.0/24
IPv6:
2a0a:5bc0::/48
Signature Algorithm: sha256WithRSAEncryption
84:d2:4d:8c:13:d8:7f:d6:77:f8:0a:c5:9d:09:9f:9a:f5:9f:
c8:b4:55:a7:d6:e5:cf:da:ff:37:6e:01:ca:b6:5a:28:ad:8c:
ff:9e:e7:40:95:fe:ef:b0:9f:74:7c:f4:64:c6:5b:d6:d1:09:
b3:a5:da:59:98:85:22:99:4e:eb:4b:e3:22:5e:ce:7b:b7:07:
fd:43:5d:b5:b2:52:af:16:2f:1f:59:87:5e:e9:66:ca:92:f5:
01:49:42:b2:88:32:ff:7b:99:7c:4e:81:ed:97:be:9b:a7:8d:
e7:d1:1f:a0:0f:34:d5:a6:eb:4b:87:3a:55:8f:81:c9:f6:6f:
1a:b8:0a:36:c0:9f:fb:e4:24:27:69:04:a4:bf:4b:b8:96:e2:
c3:d0:ba:e8:1e:a6:00:6a:05:c0:1c:e3:d4:4c:ef:59:8c:0a:
d9:4a:c8:da:0c:fe:d8:e9:d2:a9:80:26:ea:f2:56:94:f7:b1:
1d:a6:d5:3f:57:7e:1d:80:95:be:82:62:30:1b:2b:4f:22:77:
cc:18:9c:55:b2:66:84:e8:9f:9f:59:d9:da:bf:6f:00:30:c5:
08:b0:db:46:0e:10:b9:93:a7:2b:63:3a:8c:85:d6:6c:d3:95:
15:17:6f:56:5f:f2:5a:d0:7d:cf:34:d3:6d:ac:0d:b3:eb:10:
70:e9:bc:8b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZH1z5neP87LRu9jlOL0yXXTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MGRkZGI1MTE2MDNlNDFjMmI3YWJiYTNkMjQ5ZDVlZjVl
ZDRkMTEwHhcNMjQwOTE1MTMxMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjViMTk0N2NjN2U1YWM5ZWYwMGQzMDcwZDFmNzUzOTA5YTAyMjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XNHRBh0f9H9Pnu3srkGfraW1TFQ
kgo9Y/WhPYNQFu/BaqbA3uAEetyylEtxRH+LTyKSsyxnkBSx4mHtreMgIdGPI79U
Gskbk5kBQdKI5TRL3/c1OzCo09Lk8A1H9vAvHb10NdS4uwVoDaTVRmJs3CKINZgJ
We8LB3E6P2mZ0h1Vs1Sr7c9NFguch4CEX4i1MCTt0fm+fU6additQBb+OjfaS9JL
EUsfaiauLoPlHjsk6WXmT3u0zavAVFbhX3nHMtk7gZfbz0KJfaKsSiHHMSE5cGRX
0tmTOH8aFhUQsri0WUYBjwJsZnt0RqF1UhuGzbwUF62oOh5zL9nFLjmC5wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHtbGUfMflrJ7wDTBw0fdTkJoCI2MB8GA1UdIwQY
MBaAFFgN3bURYD5Bwreruj0knV717U0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0EzZHRSRmdQa0hDdDZ1NlBTU2RYdlh0VFJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mYzk2YTQtMzZkMS00YzNkLTg1MGIt
M2NkNDE3YWVlOWNlLzEvZTFzWlI4eC1Xc252QU5NSERSOTFPUW1nSWpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9mYzk2YTQtMzZkMS00YzNkLTg1MGItM2NkNDE3YWVlOWNl
LzEvV0EzZHRSRmdQa0hDdDZ1NlBTU2RYdlh0VFJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAucORMA8E
AgACMAkDBwAqClvAAAAwDQYJKoZIhvcNAQELBQADggEBAITSTYwT2H/Wd/gKxZ0J
n5r1n8i0VafW5c/a/zduAcq2WiitjP+e50CV/u+wn3R89GTGW9bRCbOl2lmYhSKZ
TutL4yJeznu3B/1DXbWyUq8WLx9Zh17pZsqS9QFJQrKIMv97mXxOge2XvpunjefR
H6APNNWm60uHOlWPgcn2bxq4CjbAn/vkJCdpBKS/S7iW4sPQuugepgBqBcAc49RM
71mMCtlKyNoM/tjp0qmAJuryVpT3sR2m1T9Xfh2Alb6CYjAbK08id8wYnFWyZoTo
n59Z2dq/bwAwxQiw20YOELmTpytjOoyF1mzTlRUXb1Zf8lrQfc80022sDbPrEHDp
vIs=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:12:39 2024 by rpki-client on console-fra.rpki-client.org