Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/DessAVNOY-5JxMS1XSNiv0GUTtc.roa
File: DessAVNOY-5JxMS1XSNiv0GUTtc.roa (raw, json)
Hash identifier: hZuttjpuCFd/WQan1H1xoLdE4K4oNGU+QF8dhGgSW1M=
Subject key identifier: 0D:EB:2C:01:53:4E:63:EE:49:C4:C4:B5:5D:23:62:BF:41:94:4E:D7
Certificate issuer: /CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Certificate serial: 01919DF45BD1A261B080953A6F532655B806
Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/DessAVNOY-5JxMS1XSNiv0GUTtc.roa
Signing time: Thu 29 Aug 2024 11:45:22 +0000
ROA not before: Thu 29 Aug 2024 11:45:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33915
IP address blocks: 145.79.0.0/16 maxlen: 24
145.79.32.0/21 maxlen: 21
145.79.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9d:f4:5b:d1:a2:61:b0:80:95:3a:6f:53:26:55:b8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Validity
Not Before: Aug 29 11:45:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0deb2c01534e63ee49c4c4b55d2362bf41944ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6a:60:ab:21:19:02:24:17:d2:37:8c:07:7c:
d7:f3:59:bc:9b:93:e4:d3:1e:d1:55:7a:56:f6:a4:
85:14:f6:19:97:3e:a9:7c:8d:0c:b9:d3:c3:eb:ef:
23:13:01:d9:fa:77:d7:65:30:0e:b6:49:14:56:48:
c3:1b:1e:51:5c:71:db:bf:22:f1:22:0e:b6:c5:d1:
cc:ad:d2:06:02:5b:30:7e:87:3a:db:37:6f:bc:58:
c7:c0:af:f9:b1:55:2a:0e:50:b6:78:81:71:d2:07:
53:70:2a:ce:3f:eb:ec:cd:3d:19:91:1d:90:9f:19:
8c:97:96:c6:19:85:21:26:48:e7:bb:82:39:c6:0d:
25:ba:d4:56:bd:c8:6c:be:10:29:e3:be:e8:99:12:
0d:e9:3e:a2:ab:94:71:d8:41:52:39:75:b0:b5:ad:
77:bf:f1:ac:39:0c:4b:26:6b:44:0c:83:87:03:c6:
6d:e6:9c:bc:d2:2e:84:be:f4:3c:91:13:74:f6:c8:
cc:71:7a:00:10:2e:a6:d0:87:45:41:a2:ed:35:77:
20:de:8a:40:bd:0d:5d:58:78:c2:91:5c:99:c5:b3:
90:ae:71:58:d3:f2:4d:10:da:77:2b:43:67:0c:bf:
2b:d8:71:30:39:34:5e:d8:f8:64:df:9a:67:74:38:
5b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EB:2C:01:53:4E:63:EE:49:C4:C4:B5:5D:23:62:BF:41:94:4E:D7
X509v3 Authority Key Identifier:
keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/DessAVNOY-5JxMS1XSNiv0GUTtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:2f:0c:08:a9:d9:1f:1c:0f:b8:85:35:b9:b7:54:c9:ae:bc:
2a:7f:75:9a:58:54:50:2c:c4:30:ed:51:ee:bc:00:bc:d6:63:
a1:9a:14:66:e3:84:8b:6f:cd:d8:bd:82:8e:3d:b9:f3:89:73:
2b:bb:ed:c3:e4:fe:6e:0c:e9:eb:c2:80:71:fd:ec:0f:d5:4c:
74:af:4a:77:7c:da:36:53:db:50:c8:a4:3c:b8:2d:41:40:18:
59:ba:07:7c:e1:96:57:92:c0:12:3c:b6:47:ef:83:5b:24:25:
12:c2:40:58:16:1f:92:48:7c:d7:15:eb:5c:01:c7:ff:5f:ee:
31:fd:c8:91:64:8a:d8:fa:9c:3f:93:08:3c:6a:7a:80:ce:a0:
f0:2d:26:62:25:73:27:fc:58:ca:7d:71:08:8b:ae:de:57:53:
a8:1d:30:ff:ef:7a:bc:51:82:f1:d2:5f:30:0f:f2:f5:b9:f0:
0a:97:95:04:ae:03:d0:6d:07:ae:9d:6e:70:7a:b1:58:ae:5a:
78:8c:a1:a9:9f:87:22:c7:fe:10:99:28:2d:9c:f5:72:8a:a6:
ea:ee:c6:3d:18:a4:f6:97:92:b0:f3:28:f6:b6:2b:37:bf:ef:
fc:d1:3f:fb:01:eb:e8:3d:10:7a:5b:62:86:79:f9:77:c9:04:
96:b7:df:4e
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZGd9FvRomGwgJU6b1MmVbgGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MzZlOWIxZDAxNDc0YWYyYzNlNGY4YzIwZjQ2MWQxMzY4
MDE5NDkwHhcNMjQwODI5MTE0NTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGViMmMwMTUzNGU2M2VlNDljNGM0YjU1ZDIzNjJiZjQxOTQ0ZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12pgqyEZAiQX0jeMB3zX81m8m5Pk
0x7RVXpW9qSFFPYZlz6pfI0MudPD6+8jEwHZ+nfXZTAOtkkUVkjDGx5RXHHbvyLx
Ig62xdHMrdIGAlswfoc62zdvvFjHwK/5sVUqDlC2eIFx0gdTcCrOP+vszT0ZkR2Q
nxmMl5bGGYUhJkjnu4I5xg0lutRWvchsvhAp477omRIN6T6iq5Rx2EFSOXWwta13
v/GsOQxLJmtEDIOHA8Zt5py80i6EvvQ8kRN09sjMcXoAEC6m0IdFQaLtNXcg3opA
vQ1dWHjCkVyZxbOQrnFY0/JNENp3K0NnDL8r2HEwOTRe2Phk35pndDhbeQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFA3rLAFTTmPuScTEtV0jYr9BlE7XMB8GA1UdIwQY
MBaAFIc26bHQFHSvLD5PjCD0YdE2gBlJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81ODExODMtN2E4My00Y2FiLWJkOGIt
M2IwNjhkYjQxMTQwLzEvRGVzc0FWTk9ZLTVKeE1TMVhTTml2MEdVVHRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My81ODExODMtN2E4My00Y2FiLWJkOGItM2IwNjhkYjQxMTQw
LzEvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkU8wDQYJ
KoZIhvcNAQELBQADggEBAJovDAip2R8cD7iFNbm3VMmuvCp/dZpYVFAsxDDtUe68
ALzWY6GaFGbjhItvzdi9go49ufOJcyu77cPk/m4M6evCgHH97A/VTHSvSnd82jZT
21DIpDy4LUFAGFm6B3zhlleSwBI8tkfvg1skJRLCQFgWH5JIfNcV61wBx/9f7jH9
yJFkitj6nD+TCDxqeoDOoPAtJmIlcyf8WMp9cQiLrt5XU6gdMP/verxRgvHSXzAP
8vW58AqXlQSuA9BtB66dbnB6sViuWniMoamfhyLH/hCZKC2c9XKKpuruxj0YpPaX
krDzKPa2Kze/7/zRP/sB6+g9EHpbYoZ5+XfJBJa3304=
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:10:46 2024 by rpki-client on console-ams.rpki-client.org