Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/5TZ4yVQYujWe3SO9F2D8oY_YL_o.roa
File: 5TZ4yVQYujWe3SO9F2D8oY_YL_o.roa (raw, json)
Hash identifier: o38Rl6b70I161OQyBceNmoSl4NYw8zZ88ksTJ8t9bCc=
Subject key identifier: E5:36:78:C9:54:18:BA:35:9E:DD:23:BD:17:60:FC:A1:8F:D8:2F:FA
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 018CC794C8B3D6B3D5B9989F13A2A1F020EE
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/5TZ4yVQYujWe3SO9F2D8oY_YL_o.roa
Signing time: Tue 02 Jan 2024 00:31:05 +0000
ROA not before: Tue 02 Jan 2024 00:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 212.8.229.0/24 maxlen: 24
45.134.12.0/24 maxlen: 24
45.134.14.0/24 maxlen: 24
45.134.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:c8:b3:d6:b3:d5:b9:98:9f:13:a2:a1:f0:20:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Jan 2 00:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e53678c95418ba359edd23bd1760fca18fd82ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4f:83:bb:2b:9e:66:0e:b6:eb:68:8e:6a:73:
80:41:5c:82:c3:85:be:4d:5c:09:73:92:05:8b:4c:
3b:44:5b:8b:ac:88:2e:e2:16:b0:a5:40:b7:94:7d:
bd:11:53:5e:83:6b:52:4a:c5:ae:69:0f:38:93:77:
e9:58:0b:0f:88:f3:21:4c:70:b5:cf:e4:3c:3a:cc:
a5:34:eb:34:4c:91:9d:d1:cb:c8:d4:73:f5:21:2d:
5a:cd:3b:bf:79:ec:da:89:45:3a:b9:74:e1:61:48:
c9:9c:eb:d5:3f:f5:90:ee:a1:4b:79:df:e2:20:60:
4a:76:d1:7e:60:e7:47:d3:a9:c6:b3:61:ae:12:ea:
a0:88:85:31:5c:0e:3e:0f:3f:32:45:d9:ad:06:6b:
b8:67:ba:b2:bc:6a:12:8c:29:04:ef:6b:c8:3f:0c:
f9:35:3a:97:68:21:6a:4e:63:bc:d1:4b:22:e3:31:
98:cb:8d:eb:2b:2b:43:78:d1:2b:55:f7:73:f6:af:
7e:9d:4a:4a:b6:43:cd:aa:99:10:e2:68:9b:91:14:
65:fd:44:4f:5d:7f:c9:e5:d1:5b:72:ac:af:f3:4f:
21:57:c5:ec:32:d7:34:e1:c6:25:34:f6:c7:2b:69:
eb:53:1e:c0:cf:61:fe:74:82:27:e9:7a:ac:f1:e3:
50:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:36:78:C9:54:18:BA:35:9E:DD:23:BD:17:60:FC:A1:8F:D8:2F:FA
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/5TZ4yVQYujWe3SO9F2D8oY_YL_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.12.0/24
45.134.14.0/23
212.8.229.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c6:b2:6e:76:4e:11:dd:4b:eb:23:ec:a5:9d:9e:03:ca:2f:
eb:a6:35:b1:81:fb:c0:df:fc:2a:44:4a:b6:ac:66:fc:26:a8:
4c:98:2e:3d:eb:59:09:c8:ea:72:38:58:3d:44:36:d0:30:40:
fb:d6:24:bb:68:60:41:c0:1d:ba:0f:fd:66:10:d3:96:73:9d:
1f:94:8c:8b:13:d6:c8:94:6a:4b:d5:f4:80:50:23:00:5d:e5:
32:34:dd:7d:19:de:67:d5:5c:b0:53:16:38:71:c7:5a:c7:55:
f3:2b:ce:4d:a2:d4:58:07:b2:6f:94:98:d9:0b:d3:dc:ec:25:
72:2b:9d:55:3f:0a:f6:14:51:dd:3b:f1:35:2c:57:df:df:cb:
88:07:61:86:08:38:33:e0:5f:c5:be:3f:ce:3a:96:ef:62:e3:
63:d4:4b:c6:3b:99:81:5f:b7:86:7a:a6:df:cb:b8:86:da:87:
4b:b0:11:42:91:f8:d8:f1:ff:54:74:5c:d0:8b:0a:8d:3c:e8:
6f:a8:fd:7b:ad:24:df:d1:8a:90:3e:0f:c9:be:71:67:82:6d:
db:13:79:8d:59:eb:4e:03:95:85:fd:98:c9:4d:2f:1a:e1:2f:
0f:96:b6:24:6e:7c:19:15:2d:bb:57:95:06:d4:23:4a:cc:1a:
bf:09:fd:68
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzHlMiz1rPVuZifE6Kh8CDuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTY5NzE2ZDBhZTY0MDY4NzAzMTQwYWEzNzMwZTM3ODhm
ZGQ0YzYwHhcNMjQwMTAyMDAzMTA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTM2NzhjOTU0MThiYTM1OWVkZDIzYmQxNzYwZmNhMThmZDgyZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU+DuyueZg6262iOanOAQVyCw4W+
TVwJc5IFi0w7RFuLrIgu4hawpUC3lH29EVNeg2tSSsWuaQ84k3fpWAsPiPMhTHC1
z+Q8OsylNOs0TJGd0cvI1HP1IS1azTu/eezaiUU6uXThYUjJnOvVP/WQ7qFLed/i
IGBKdtF+YOdH06nGs2GuEuqgiIUxXA4+Dz8yRdmtBmu4Z7qyvGoSjCkE72vIPwz5
NTqXaCFqTmO80Usi4zGYy43rKytDeNErVfdz9q9+nUpKtkPNqpkQ4mibkRRl/URP
XX/J5dFbcqyv808hV8XsMtc04cYlNPbHK2nrUx7Az2H+dIIn6Xqs8eNQzwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOU2eMlUGLo1nt0jvRdg/KGP2C/6MB8GA1UdIwQY
MBaAFMYWlxbQrmQGhwMUCqNzDjeI/dTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2Yt
MDQyNDQ2YjcwZmIxLzEvNVRaNHlWUVl1aldlM1NPOUYyRDhvWV9ZTF9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2YtMDQyNDQ2YjcwZmIx
LzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYYMAwQB
LYYOAwQA1AjlMA0GCSqGSIb3DQEBCwUAA4IBAQAkxrJudk4R3UvrI+ylnZ4Dyi/r
pjWxgfvA3/wqREq2rGb8JqhMmC4961kJyOpyOFg9RDbQMED71iS7aGBBwB26D/1m
ENOWc50flIyLE9bIlGpL1fSAUCMAXeUyNN19Gd5n1VywUxY4ccdax1XzK85NotRY
B7JvlJjZC9Pc7CVyK51VPwr2FFHdO/E1LFff38uIB2GGCDgz4F/Fvj/OOpbvYuNj
1EvGO5mBX7eGeqbfy7iG2odLsBFCkfjY8f9UdFzQiwqNPOhvqP17rSTf0YqQPg/J
vnFngm3bE3mNWetOA5WF/ZjJTS8a4S8PlrYkbnwZFS27V5UG1CNKzBq/Cf1o
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:28:38 2024 by rpki-client on console-fra.rpki-client.org