Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/geDSu9T8nTE2h1ULb9yJLuKeHi4.roa
File: geDSu9T8nTE2h1ULb9yJLuKeHi4.roa (raw, json)
Hash identifier: NEsebbf3uWe/EGMg5OzBNiIX9Px88dsaJiDBEKZkl+o=
Subject key identifier: 81:E0:D2:BB:D4:FC:9D:31:36:87:55:0B:6F:DC:89:2E:E2:9E:1E:2E
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 018CC64AE3D5AFECBC2267CEBD0A7767E672
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/geDSu9T8nTE2h1ULb9yJLuKeHi4.roa
Signing time: Mon 01 Jan 2024 18:30:45 +0000
ROA not before: Mon 01 Jan 2024 18:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205836
IP address blocks: 46.149.106.0/24 maxlen: 24
185.157.129.0/24 maxlen: 24
185.157.130.0/24 maxlen: 24
185.157.128.0/24 maxlen: 24
185.157.131.0/24 maxlen: 24
45.92.185.0/24 maxlen: 24
45.92.186.0/24 maxlen: 24
45.92.184.0/24 maxlen: 24
45.92.187.0/24 maxlen: 24
185.204.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e3:d5:af:ec:bc:22:67:ce:bd:0a:77:67:e6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Jan 1 18:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81e0d2bbd4fc9d313687550b6fdc892ee29e1e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:a2:08:d1:8d:47:11:23:00:41:03:8c:00:
08:12:b8:97:ff:f0:30:a4:50:82:c4:23:bb:0b:5d:
71:e2:59:44:d8:82:41:73:e5:9b:e8:af:41:14:36:
03:5d:c1:e3:ce:ae:93:f6:4f:74:2b:11:7e:be:94:
6d:b1:71:dd:d4:ab:25:7f:fd:8b:b9:06:d6:05:f6:
67:3c:c5:a7:ec:f7:f3:8c:79:c6:bf:4a:24:49:27:
9b:1d:bc:aa:16:e8:b0:28:cc:69:0c:7f:3d:55:bc:
37:ea:f3:e7:0b:70:72:d0:37:24:a2:f7:55:d5:50:
95:df:fc:3d:ca:4a:96:e3:5a:84:a8:b8:0d:16:c1:
b5:3a:cf:95:4f:86:f2:b2:a9:6d:0a:c8:dc:10:2e:
3d:b1:ca:4e:d4:27:69:80:a5:73:89:37:2b:fd:31:
77:6d:53:09:af:b6:d9:42:01:c6:6f:7d:c0:70:ee:
93:4c:86:ce:ee:9e:59:59:ae:16:f3:e6:9d:08:4d:
ff:69:ca:94:75:99:c7:57:d5:c0:7d:d1:bd:0d:8f:
98:f1:f3:ec:b8:98:63:15:79:48:54:22:61:52:94:
31:51:92:8f:6a:b5:c2:53:80:bf:b4:b1:46:f3:d3:
e0:68:ac:54:d3:27:68:c5:27:f3:86:a8:bd:f7:99:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E0:D2:BB:D4:FC:9D:31:36:87:55:0B:6F:DC:89:2E:E2:9E:1E:2E
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/geDSu9T8nTE2h1ULb9yJLuKeHi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.184.0/22
46.149.106.0/24
185.157.128.0/22
185.204.202.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:3f:d7:e0:20:49:47:25:a9:a4:d7:61:eb:01:74:dc:63:27:
b9:31:69:73:53:2d:78:1d:26:2e:f5:b5:91:b1:81:be:d9:22:
9c:75:8f:bb:6f:17:6d:ec:1b:d1:ef:d4:ba:62:db:9b:06:c6:
86:52:57:e5:90:67:b0:7e:0e:ea:c5:03:16:a9:42:bc:1e:71:
d5:90:c4:ed:c7:53:26:34:a3:85:96:0f:27:ad:71:03:bc:e2:
85:15:96:28:41:77:c0:89:b7:e2:64:d5:a1:c8:59:45:01:33:
40:e7:78:56:5e:da:44:02:b5:c2:f6:db:42:f4:4f:3c:ed:8b:
04:63:53:12:ab:d6:48:1d:59:d3:f5:19:c9:ce:98:01:3c:fc:
5a:4b:a5:93:b7:8c:6f:44:1c:90:72:f9:19:8c:9d:97:21:9a:
d8:dc:26:ad:e9:a0:cc:23:cd:08:33:4f:50:b0:a8:22:68:50:
89:d8:e4:9b:d1:06:35:d4:5e:34:c3:d8:fa:a6:2b:5c:8b:35:
02:9e:9d:c4:11:05:f5:a6:e7:62:f8:61:31:3f:55:c3:6f:e9:
52:33:d1:6f:33:70:e9:4b:7d:54:84:e9:48:bf:75:99:40:9b:
ae:a3:bf:82:a1:27:e5:f8:32:24:3a:25:39:b9:d9:d4:c8:f5:
1c:fa:46:49
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzGSuPVr+y8ImfOvQp3Z+ZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NzAyMWRjZGY0NGI2YWZkZDM4MTA1NDdjNTVhNzliZDFh
OWZhM2IwHhcNMjQwMTAxMTgzMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWUwZDJiYmQ0ZmM5ZDMxMzY4NzU1MGI2ZmRjODkyZWUyOWUxZTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8qiCNGNRxEjAEEDjAAIEriX//Aw
pFCCxCO7C11x4llE2IJBc+Wb6K9BFDYDXcHjzq6T9k90KxF+vpRtsXHd1Kslf/2L
uQbWBfZnPMWn7PfzjHnGv0okSSebHbyqFuiwKMxpDH89Vbw36vPnC3By0DckovdV
1VCV3/w9ykqW41qEqLgNFsG1Os+VT4bysqltCsjcEC49scpO1CdpgKVziTcr/TF3
bVMJr7bZQgHGb33AcO6TTIbO7p5ZWa4W8+adCE3/acqUdZnHV9XAfdG9DY+Y8fPs
uJhjFXlIVCJhUpQxUZKParXCU4C/tLFG89PgaKxU0ydoxSfzhqi995mRtwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIHg0rvU/J0xNodVC2/ciS7inh4uMB8GA1UdIwQY
MBaAFFdwIdzfRLav3TgQVHxVp5vRqfo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQt
YzkwN2FlMWMyMTFlLzEvZ2VEU3U5VDhuVEUyaDFVTGI5eUpMdUtlSGk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQtYzkwN2FlMWMyMTFl
LzEvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLVy4AwQA
LpVqAwQCuZ2AAwQAuczKMA0GCSqGSIb3DQEBCwUAA4IBAQCNP9fgIElHJamk12Hr
AXTcYye5MWlzUy14HSYu9bWRsYG+2SKcdY+7bxdt7BvR79S6YtubBsaGUlflkGew
fg7qxQMWqUK8HnHVkMTtx1MmNKOFlg8nrXEDvOKFFZYoQXfAibfiZNWhyFlFATNA
53hWXtpEArXC9ttC9E887YsEY1MSq9ZIHVnT9RnJzpgBPPxaS6WTt4xvRByQcvkZ
jJ2XIZrY3Cat6aDMI80IM09QsKgiaFCJ2OSb0QY11F40w9j6pitcizUCnp3EEQX1
pudi+GExP1XDb+lSM9FvM3DpS31UhOlIv3WZQJuuo7+CoSfl+DIkOiU5udnUyPUc
+kZJ
-----END CERTIFICATE-----
Generated at Fri Jun 7 20:00:42 2024 by rpki-client on console-ams.rpki-client.org