Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/0_B8sTTsZrNrOobe3kxL8SU4RMk.roa
File: 0_B8sTTsZrNrOobe3kxL8SU4RMk.roa (raw, json)
Hash identifier: WetLMtQbpHvXpYMXSNCMCeEjQp2+OrKcsGexHL/DzZI=
Subject key identifier: D3:F0:7C:B1:34:EC:66:B3:6B:3A:86:DE:DE:4C:4B:F1:25:38:44:C9
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 018CC871599BF50A71E598D1ADE05942B9D5
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/0_B8sTTsZrNrOobe3kxL8SU4RMk.roa
Signing time: Tue 02 Jan 2024 04:32:00 +0000
ROA not before: Tue 02 Jan 2024 04:32:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47834
IP address blocks: 213.129.128.0/21 maxlen: 21
95.129.240.0/21 maxlen: 21
213.129.136.0/21 maxlen: 21
213.129.144.0/21 maxlen: 21
213.129.152.0/21 maxlen: 21
45.85.172.0/22 maxlen: 22
2a03:f300::/32 maxlen: 32
2a03:f300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:59:9b:f5:0a:71:e5:98:d1:ad:e0:59:42:b9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: Jan 2 04:32:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3f07cb134ec66b36b3a86dede4c4bf1253844c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5a:8f:28:da:0d:f6:23:64:b5:5d:5c:05:c8:
28:c9:7e:29:b3:2b:6d:b0:6a:7d:17:0c:ef:b5:4e:
38:40:f9:ae:76:f1:13:46:5d:29:f5:0f:37:d0:fd:
05:ab:51:55:37:9b:97:73:35:0c:8c:2e:fb:27:da:
db:dc:15:87:c4:b5:01:89:4a:59:d2:32:0b:09:ba:
44:e2:b4:4e:91:14:f3:ec:65:64:65:a2:e8:33:dd:
be:81:0b:32:ac:1d:78:f3:3f:3b:3f:3a:77:ac:0f:
56:65:28:01:16:ac:64:62:a6:7b:4f:56:be:0b:b8:
32:28:79:b4:63:ab:4f:73:22:93:0d:53:3b:1c:d8:
19:9c:b1:30:0d:ea:1a:92:48:02:98:15:04:00:9c:
df:fe:c5:b1:b6:9b:c8:2a:5c:f5:a8:b0:82:b9:0d:
25:1d:dc:b6:d5:db:c4:d6:fc:c1:68:d7:b7:ca:6b:
7e:76:1f:32:18:0a:3e:88:0b:68:7e:38:12:a8:7f:
6a:6c:13:eb:fa:ef:57:91:26:5c:9f:28:3e:24:9c:
0c:f4:d4:23:62:6a:b0:76:02:44:96:52:0e:d8:0c:
12:15:35:bc:59:21:03:65:81:07:fc:6d:44:38:ed:
ea:b7:c0:9a:e2:4b:f0:1d:06:c5:dc:ff:77:90:b4:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F0:7C:B1:34:EC:66:B3:6B:3A:86:DE:DE:4C:4B:F1:25:38:44:C9
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/0_B8sTTsZrNrOobe3kxL8SU4RMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.172.0/22
95.129.240.0/21
213.129.128.0/19
IPv6:
2a03:f300::/29
Signature Algorithm: sha256WithRSAEncryption
16:21:23:78:38:84:43:b4:99:6b:a1:ba:5f:d5:c9:fd:8d:a1:
9c:c9:90:43:b2:4e:12:46:e6:1d:1d:33:c3:36:6e:96:ce:07:
e2:03:f8:b1:16:03:4b:77:d9:e9:22:83:dd:f2:17:28:b5:8e:
b5:08:66:82:30:25:d9:b1:23:2d:b1:3c:2b:83:c4:27:df:39:
54:92:66:9e:79:9f:c5:27:a0:f1:06:9e:dd:5e:92:97:b3:ff:
6a:10:4a:9d:72:f1:e9:79:d6:88:8e:b0:00:36:c0:92:ec:18:
9d:89:9f:1d:92:13:cb:f0:52:4e:02:e6:62:25:37:91:c1:ad:
76:bd:67:5e:cb:7b:70:57:42:02:72:69:06:5c:58:1a:a4:1d:
b3:20:04:1d:4f:e6:fc:41:29:d1:f6:9d:9e:66:02:d6:b3:5b:
3b:6e:22:d0:54:84:a6:9e:46:f0:03:f3:8c:79:36:6f:33:d0:
28:41:5d:e1:e4:ec:31:45:27:ec:36:4d:e8:92:46:c0:06:9a:
32:81:fb:fd:bb:63:b0:37:9c:d6:c2:66:11:6b:e5:9d:db:d5:
9c:f7:a1:eb:fe:0f:30:5f:d3:e3:25:78:f7:89:ce:cf:45:f2:
c0:73:a4:39:4b:b8:a5:6a:9f:79:12:7d:2b:dc:21:cc:15:ba:
80:0f:fc:48
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzIcVmb9Qpx5ZjRreBZQrnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMTZiMTBkMGFjMjE4MDE3Yzc0OTM5NGU0ZjI1MTljZjJj
MDUxNGUwHhcNMjQwMTAyMDQzMjAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2YwN2NiMTM0ZWM2NmIzNmIzYTg2ZGVkZTRjNGJmMTI1Mzg0NGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFqPKNoN9iNktV1cBcgoyX4psytt
sGp9FwzvtU44QPmudvETRl0p9Q830P0Fq1FVN5uXczUMjC77J9rb3BWHxLUBiUpZ
0jILCbpE4rROkRTz7GVkZaLoM92+gQsyrB148z87Pzp3rA9WZSgBFqxkYqZ7T1a+
C7gyKHm0Y6tPcyKTDVM7HNgZnLEwDeoakkgCmBUEAJzf/sWxtpvIKlz1qLCCuQ0l
Hdy21dvE1vzBaNe3ymt+dh8yGAo+iAtofjgSqH9qbBPr+u9XkSZcnyg+JJwM9NQj
YmqwdgJEllIO2AwSFTW8WSEDZYEH/G1EOO3qt8Ca4kvwHQbF3P93kLS6BwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFNPwfLE07GazazqG3t5MS/ElOETJMB8GA1UdIwQY
MBaAFDAWsQ0KwhgBfHSTlOTyUZzywFFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMt
NjkzNjc2MmQyZmNlLzEvMF9COHNUVHNack5yT29iZTNreEw4U1U0Uk1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMtNjkzNjc2MmQyZmNl
LzEvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLVWsAwQD
X4HwAwQF1YGAMA0EAgACMAcDBQMqA/MAMA0GCSqGSIb3DQEBCwUAA4IBAQAWISN4
OIRDtJlrobpf1cn9jaGcyZBDsk4SRuYdHTPDNm6WzgfiA/ixFgNLd9npIoPd8hco
tY61CGaCMCXZsSMtsTwrg8Qn3zlUkmaeeZ/FJ6DxBp7dXpKXs/9qEEqdcvHpedaI
jrAANsCS7BidiZ8dkhPL8FJOAuZiJTeRwa12vWdey3twV0ICcmkGXFgapB2zIAQd
T+b8QSnR9p2eZgLWs1s7biLQVISmnkbwA/OMeTZvM9AoQV3h5OwxRSfsNk3okkbA
Bpoygfv9u2OwN5zWwmYRa+Wd29Wc96Hr/g8wX9PjJXj3ic7PRfLAc6Q5S7ilap95
En0r3CHMFbqAD/xI
-----END CERTIFICATE-----
Generated at Tue Jul 2 12:46:37 2024 by rpki-client on console-ams.rpki-client.org