Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/fEJyU8ayQMgGM_AzcEgx18Chplo.roa
File: fEJyU8ayQMgGM_AzcEgx18Chplo.roa (raw, json)
Hash identifier: 3fb/kwM1XTxTCBQLXLm9fweK1aOaql+nJiFpoftEvY4=
Subject key identifier: 7C:42:72:53:C6:B2:40:C8:06:33:F0:33:70:48:31:D7:C0:A1:A6:5A
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 018CC79585539B4C4B1616B4961A7BA654C9
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/fEJyU8ayQMgGM_AzcEgx18Chplo.roa
Signing time: Tue 02 Jan 2024 00:31:54 +0000
ROA not before: Tue 02 Jan 2024 00:31:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35913
IP address blocks: 192.144.52.0/22 maxlen: 24
185.161.252.0/22 maxlen: 24
193.9.40.0/22 maxlen: 24
45.83.112.0/22 maxlen: 24
80.254.232.0/22 maxlen: 24
185.181.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:85:53:9b:4c:4b:16:16:b4:96:1a:7b:a6:54:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jan 2 00:31:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c427253c6b240c80633f033704831d7c0a1a65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4c:4a:7e:1a:a7:88:2f:48:a9:1d:9b:05:e0:
92:f0:75:fd:28:77:9a:2f:0e:b6:5d:22:37:3a:da:
34:3c:54:98:0b:a9:0e:e7:2a:70:7a:6a:51:a0:c8:
f0:b1:cf:ef:d7:8e:1b:5e:a6:bc:8f:5d:82:1c:aa:
dd:34:eb:27:6b:5c:24:70:a7:88:00:63:7e:81:da:
46:bb:7f:f1:ee:30:96:fc:80:f4:12:97:f8:4c:22:
98:00:74:47:af:f0:73:f4:6a:a1:26:a1:12:c3:1a:
a4:ee:36:e3:ae:de:6c:67:d0:46:ac:1d:9e:13:c5:
f5:9c:1d:c2:63:25:2e:c3:73:e1:3d:14:ca:72:d1:
59:98:1a:04:e5:8b:28:20:20:57:b2:6e:2a:0c:c3:
72:5e:06:d1:8f:01:7c:ae:f2:0d:02:b9:ce:da:26:
25:bb:68:47:7a:ed:38:26:1d:b6:08:fa:9a:7d:12:
56:de:fb:31:15:f8:81:a2:11:29:05:db:12:40:36:
b5:9d:3a:2a:8d:6a:83:54:fe:28:21:35:6c:2b:df:
05:f0:c4:3a:47:99:bb:33:4f:14:64:ca:0b:a9:6c:
da:eb:ea:4d:95:0a:08:7e:7b:ad:c6:34:09:d5:e5:
e2:47:1e:fd:c6:f0:29:59:8e:7e:de:03:e6:cc:5a:
58:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:42:72:53:C6:B2:40:C8:06:33:F0:33:70:48:31:D7:C0:A1:A6:5A
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/fEJyU8ayQMgGM_AzcEgx18Chplo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.112.0/22
80.254.232.0/22
185.161.252.0/22
185.181.56.0/22
192.144.52.0/22
193.9.40.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:dd:81:34:1a:15:30:3f:f8:83:73:b2:ba:0a:77:5e:08:74:
0c:11:e1:76:90:cb:02:3f:a0:c7:5b:83:39:04:f2:24:13:4b:
81:c5:b5:a1:ff:b7:46:79:86:87:36:cc:34:5b:dd:86:fc:7c:
e9:bf:1b:20:ec:52:27:2f:32:f9:bf:45:9c:ee:3c:51:3d:91:
6e:69:7f:db:dc:2e:a9:ec:76:21:33:9d:08:f4:5b:26:c3:38:
60:d7:48:7f:f8:ec:4c:25:4f:13:be:3a:cc:ab:fc:17:20:03:
d1:7b:3e:db:43:1c:3b:e6:1f:16:01:9e:9b:40:be:09:27:66:
cb:38:a6:63:73:19:ee:66:cf:e9:03:8d:ca:8a:7d:55:46:b7:
42:a1:54:e6:a8:2b:f0:38:cb:c5:78:a2:e0:12:50:f9:ef:d8:
ed:65:40:6c:6b:9f:77:ce:65:a8:a1:e9:00:6d:33:93:d3:9e:
86:06:bb:a2:f6:26:a2:43:59:b7:34:cc:fa:5c:45:4f:de:56:
53:70:b5:90:db:62:03:d3:c9:5c:9a:9a:a4:2c:c5:5c:59:07:
cc:4f:ac:d6:b8:16:86:f1:9a:90:8b:d5:c3:90:a7:14:46:ef:
3f:4f:3d:e2:f8:9d:c9:bd:d7:a4:e8:f2:4d:a9:bc:50:e0:b0:
8c:75:27:ef
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYzHlYVTm0xLFha0lhp7plTJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm
ZGE1MjAwHhcNMjQwMTAyMDAzMTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzQyNzI1M2M2YjI0MGM4MDYzM2YwMzM3MDQ4MzFkN2MwYTFhNjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjExKfhqniC9IqR2bBeCS8HX9KHea
Lw62XSI3Oto0PFSYC6kO5ypwempRoMjwsc/v144bXqa8j12CHKrdNOsna1wkcKeI
AGN+gdpGu3/x7jCW/ID0Epf4TCKYAHRHr/Bz9GqhJqESwxqk7jbjrt5sZ9BGrB2e
E8X1nB3CYyUuw3PhPRTKctFZmBoE5YsoICBXsm4qDMNyXgbRjwF8rvINArnO2iYl
u2hHeu04Jh22CPqafRJW3vsxFfiBohEpBdsSQDa1nToqjWqDVP4oITVsK98F8MQ6
R5m7M08UZMoLqWza6+pNlQoIfnutxjQJ1eXiRx79xvApWY5+3gPmzFpYFQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFHxCclPGskDIBjPwM3BIMdfAoaZaMB8GA1UdIwQY
MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt
NDM4YWNiNzJmYzViLzEvZkVKeVU4YXlRTWdHTV9BemNFZ3gxOENocGxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi
LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCLVNwAwQC
UP7oAwQCuaH8AwQCubU4AwQCwJA0AwQCwQkoMA0GCSqGSIb3DQEBCwUAA4IBAQBM
3YE0GhUwP/iDc7K6CndeCHQMEeF2kMsCP6DHW4M5BPIkE0uBxbWh/7dGeYaHNsw0
W92G/Hzpvxsg7FInLzL5v0Wc7jxRPZFuaX/b3C6p7HYhM50I9Fsmwzhg10h/+OxM
JU8TvjrMq/wXIAPRez7bQxw75h8WAZ6bQL4JJ2bLOKZjcxnuZs/pA43Kin1VRrdC
oVTmqCvwOMvFeKLgElD579jtZUBsa593zmWooekAbTOT056GBrui9iaiQ1m3NMz6
XEVP3lZTcLWQ22ID08lcmpqkLMVcWQfMT6zWuBaG8ZqQi9XDkKcURu8/Tz3i+J3J
vdek6PJNqbxQ4LCMdSfv
-----END CERTIFICATE-----
Generated at Fri May 3 08:53:12 2024 by rpki-client on console-ams.rpki-client.org