Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/5Hex3WFoY1DaveH_S6R6-JJSVp4.roa
File: 5Hex3WFoY1DaveH_S6R6-JJSVp4.roa (raw, json)
Hash identifier: FNw4QlzN7458kmavS9+ZY9Cmyh3h+D+cptjrLjfhC2s=
Subject key identifier: E4:77:B1:DD:61:68:63:50:DA:BD:E1:FF:4B:A4:7A:F8:92:52:56:9E
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 018EE2371E4E308AEC083ABDD0EB23911ECB
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/5Hex3WFoY1DaveH_S6R6-JJSVp4.roa
Signing time: Mon 15 Apr 2024 14:44:06 +0000
ROA not before: Mon 15 Apr 2024 14:44:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 85.204.181.0/24 maxlen: 24
86.105.211.0/24 maxlen: 24
86.107.164.0/24 maxlen: 24
89.39.97.0/24 maxlen: 24
93.113.70.0/24 maxlen: 24
93.119.201.0/24 maxlen: 24
188.214.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 23:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e2:37:1e:4e:30:8a:ec:08:3a:bd:d0:eb:23:91:1e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Apr 15 14:44:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e477b1dd61686350dabde1ff4ba47af89252569e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6c:4a:f6:3b:f8:15:e4:15:f4:5f:54:67:8a:
f3:ea:f2:14:aa:1d:fc:0f:c0:43:30:1e:cd:48:8f:
2d:d3:f4:01:85:c1:8f:12:cb:05:12:b8:0a:2e:81:
81:8c:32:bd:80:65:7d:0e:04:e5:e8:a1:78:ed:00:
b8:c1:3a:39:ea:a4:93:75:7d:5f:aa:53:88:98:91:
9f:15:b8:8b:c2:61:fc:d6:e6:16:50:77:5b:c6:30:
14:07:10:b2:cf:9d:16:3d:5d:75:f9:dc:54:fa:ce:
5f:2a:d0:c4:54:ac:e5:05:06:01:d3:74:10:9d:dd:
22:7b:80:a7:c7:0b:d9:fe:3a:56:59:2b:ed:4e:92:
1d:a1:05:f6:ed:51:df:ca:66:a7:74:a1:a1:75:0c:
0f:11:a9:04:45:3a:fe:9a:87:69:e5:92:11:8f:d8:
aa:2e:fb:0d:c6:8e:81:25:9f:96:ab:2e:78:85:60:
d3:80:7b:2e:b9:6c:18:68:49:c2:6c:de:a7:d8:b8:
80:fd:94:44:66:bd:73:51:f1:38:36:e8:19:4e:b1:
2f:85:5b:04:f4:d1:f9:81:65:19:97:c9:dd:58:da:
f0:b7:c1:33:02:32:cf:70:b4:ca:f5:46:60:29:ac:
d1:d2:f9:c2:76:cf:f4:84:d7:20:73:4f:7b:7a:a5:
38:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:77:B1:DD:61:68:63:50:DA:BD:E1:FF:4B:A4:7A:F8:92:52:56:9E
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/5Hex3WFoY1DaveH_S6R6-JJSVp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.181.0/24
86.105.211.0/24
86.107.164.0/24
89.39.97.0/24
93.113.70.0/24
93.119.201.0/24
188.214.139.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:de:96:73:68:95:9f:f0:88:25:02:98:72:35:c4:62:fb:d7:
dd:a4:40:d7:09:0a:56:99:19:d7:ec:d2:13:e9:6d:df:a0:4e:
c2:62:35:7d:88:96:bd:03:55:fa:79:ea:51:d6:73:28:5d:f6:
83:b3:d1:4d:2e:f4:7b:00:b5:29:22:ce:dc:0f:af:af:b1:fd:
af:f5:ae:7d:3e:e5:7a:33:2b:11:23:77:80:9a:27:dd:e0:38:
87:73:0a:69:ca:93:f9:aa:e4:ca:ee:43:99:e2:cf:19:60:c8:
7d:d4:40:d7:b5:f8:5b:c9:45:9d:68:84:ee:4a:5d:c3:0b:d1:
57:f6:9c:f5:c5:b6:6a:6e:d9:bf:fd:60:5f:7a:97:1f:c0:46:
eb:74:02:64:87:5e:a0:1c:8c:6b:47:64:fe:d5:f5:59:58:cf:
e8:2b:05:15:69:c1:83:c3:62:30:25:58:0e:ad:6d:78:42:24:
5a:a8:39:4a:58:1f:0b:a1:af:27:52:0b:d0:8b:44:6b:51:21:
29:a6:b4:8a:fa:2a:7d:a7:3c:67:07:62:18:c1:0a:ec:7c:f8:
7a:10:1c:5c:d9:4c:f9:37:07:62:02:ef:17:46:87:2c:62:82:
11:96:db:fe:ca:5a:56:21:f6:ce:30:b4:1a:3d:5b:a8:5c:e0:
51:1b:c9:32
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAY7iNx5OMIrsCDq90OsjkR7LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjQwNDE1MTQ0NDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDc3YjFkZDYxNjg2MzUwZGFiZGUxZmY0YmE0N2FmODkyNTI1NjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mxK9jv4FeQV9F9UZ4rz6vIUqh38
D8BDMB7NSI8t0/QBhcGPEssFErgKLoGBjDK9gGV9DgTl6KF47QC4wTo56qSTdX1f
qlOImJGfFbiLwmH81uYWUHdbxjAUBxCyz50WPV11+dxU+s5fKtDEVKzlBQYB03QQ
nd0ie4CnxwvZ/jpWWSvtTpIdoQX27VHfymandKGhdQwPEakERTr+modp5ZIRj9iq
LvsNxo6BJZ+Wqy54hWDTgHsuuWwYaEnCbN6n2LiA/ZREZr1zUfE4NugZTrEvhVsE
9NH5gWUZl8ndWNrwt8EzAjLPcLTK9UZgKazR0vnCds/0hNcgc097eqU4FwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFOR3sd1haGNQ2r3h/0ukeviSUlaeMB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvNUhleDNXRm9ZMURhdmVIX1M2UjYtSkpTVnA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAVcy1AwQA
VmnTAwQAVmukAwQAWSdhAwQAXXFGAwQAXXfJAwQAvNaLMA0GCSqGSIb3DQEBCwUA
A4IBAQCp3pZzaJWf8IglAphyNcRi+9fdpEDXCQpWmRnX7NIT6W3foE7CYjV9iJa9
A1X6eepR1nMoXfaDs9FNLvR7ALUpIs7cD6+vsf2v9a59PuV6MysRI3eAmifd4DiH
cwppypP5quTK7kOZ4s8ZYMh91EDXtfhbyUWdaITuSl3DC9FX9pz1xbZqbtm//WBf
epcfwEbrdAJkh16gHIxrR2T+1fVZWM/oKwUVacGDw2IwJVgOrW14QiRaqDlKWB8L
oa8nUgvQi0RrUSEpprSK+ip9pzxnB2IYwQrsfPh6EBxc2Uz5NwdiAu8XRocsYoIR
ltv+ylpWIfbOMLQaPVuoXOBRG8ky
-----END CERTIFICATE-----
Generated at Mon May 13 08:03:22 2024 by rpki-client on console-ams.rpki-client.org