Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/PR5-ed7Ihz1_qgMvZI4SyskCg_k.roa
File: PR5-ed7Ihz1_qgMvZI4SyskCg_k.roa (raw, json)
Hash identifier: iVmTPiiNhAZm59PVus1BaC1QgGw+QooBUMfbnB14b/Q=
Subject key identifier: 3D:1E:7E:79:DE:C8:87:3D:7F:AA:03:2F:64:8E:12:CA:C9:02:83:F9
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 018F147FECCE0E63C6F5B1C46DAEA983BD62
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/PR5-ed7Ihz1_qgMvZI4SyskCg_k.roa
Signing time: Thu 25 Apr 2024 09:04:39 +0000
ROA not before: Thu 25 Apr 2024 09:04:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 188.125.160.0/24 maxlen: 24
188.125.161.0/24 maxlen: 24
188.125.163.0/24 maxlen: 24
188.125.164.0/24 maxlen: 24
188.125.165.0/24 maxlen: 24
188.125.166.0/24 maxlen: 24
188.125.167.0/24 maxlen: 24
188.125.168.0/24 maxlen: 24
188.125.169.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
188.125.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:14:7f:ec:ce:0e:63:c6:f5:b1:c4:6d:ae:a9:83:bd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Apr 25 09:04:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d1e7e79dec8873d7faa032f648e12cac90283f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:bf:e8:ae:d2:46:60:a6:50:f9:be:c0:da:
b2:42:9d:2e:3a:6f:17:d8:3e:d7:4d:74:7b:9e:e5:
0a:cc:1d:2c:87:68:40:02:cd:8d:4e:03:5e:2e:90:
16:00:ea:db:73:17:98:13:e5:24:c5:44:e2:53:6d:
d8:bb:80:5a:8b:19:8a:9d:e8:ab:e6:ff:37:ed:f6:
0c:62:ae:13:48:e6:ad:b9:7e:98:27:ae:6e:04:8f:
d5:1a:88:ff:e7:0e:6c:32:8d:df:f5:69:9b:2b:66:
38:b8:96:64:e9:38:a8:8b:42:12:42:6c:66:45:68:
7a:f8:36:ca:81:91:db:2f:3a:76:a9:86:07:38:96:
d9:e0:c9:b6:5f:b1:0c:55:15:01:64:4e:30:61:1b:
28:34:04:57:65:dc:08:3e:e3:81:40:6f:47:39:6e:
3f:7e:13:c3:f1:4e:b0:b8:84:16:3c:3b:e9:e9:c7:
6b:57:03:e9:b5:52:55:ad:cf:7b:69:fe:a8:bf:b8:
d6:07:b3:ee:f2:b5:e3:6b:3b:6f:13:8f:24:30:0a:
15:09:61:e7:99:26:52:33:b9:fa:1b:71:6f:35:06:
43:95:21:39:f2:9c:bc:b8:41:b7:b8:46:18:b0:ac:
27:b6:43:15:22:09:bb:77:8c:c9:65:ed:dd:34:a2:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1E:7E:79:DE:C8:87:3D:7F:AA:03:2F:64:8E:12:CA:C9:02:83:F9
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/PR5-ed7Ihz1_qgMvZI4SyskCg_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.160.0/23
188.125.163.0-188.125.170.255
188.125.174.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:8b:f8:b9:d9:3d:d5:18:8e:f2:75:fa:e1:66:6d:0b:c4:de:
48:c1:5e:39:b1:bf:bf:e6:11:e0:fa:90:a8:18:6d:a6:b5:fc:
6f:7f:4c:ad:68:fb:f8:ac:70:77:49:7a:d9:1c:cf:33:fd:1e:
74:c7:c9:fc:20:9f:bb:0e:53:14:aa:14:19:6b:57:db:f9:aa:
3d:8b:e0:eb:b5:1f:4d:d1:eb:30:b8:4c:e3:41:5b:83:00:62:
7c:07:27:0d:41:69:9d:24:f7:f8:41:d7:5d:e9:35:f5:06:60:
47:0c:ab:44:96:61:8e:ce:83:cd:df:ed:d8:60:51:b6:12:5b:
b3:93:92:28:10:95:d5:a5:c7:06:b8:76:ce:98:87:3a:f8:5e:
a7:39:f6:53:12:a7:cd:86:42:1a:72:43:79:41:cc:e2:16:7a:
ec:f9:15:bd:81:49:eb:e3:e6:78:37:e8:7b:c4:88:2d:1a:55:
39:7e:7d:6d:3a:96:8c:15:8b:4c:df:e9:8f:7c:b8:00:33:28:
b1:29:92:40:5d:e1:56:8b:bd:e1:b4:4a:dd:15:2e:1e:3c:73:
ce:c7:cf:af:63:40:91:f7:f7:77:6a:a2:5e:bf:f0:fc:bb:6b:
05:17:96:b3:f3:54:f5:03:49:90:ac:aa:ae:30:3c:43:b6:5f:
a7:d1:9c:2b
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAY8Uf+zODmPG9bHEba6pg71iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MmY2MzNmNzZlOGQ4YWFlYWEzMmI1YWNlMTZhM2RiMzk0
M2Q4MGMwHhcNMjQwNDI1MDkwNDM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDFlN2U3OWRlYzg4NzNkN2ZhYTAzMmY2NDhlMTJjYWM5MDI4M2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcG/6K7SRmCmUPm+wNqyQp0uOm8X
2D7XTXR7nuUKzB0sh2hAAs2NTgNeLpAWAOrbcxeYE+UkxUTiU23Yu4BaixmKneir
5v837fYMYq4TSOatuX6YJ65uBI/VGoj/5w5sMo3f9WmbK2Y4uJZk6Tioi0ISQmxm
RWh6+DbKgZHbLzp2qYYHOJbZ4Mm2X7EMVRUBZE4wYRsoNARXZdwIPuOBQG9HOW4/
fhPD8U6wuIQWPDvp6cdrVwPptVJVrc97af6ov7jWB7Pu8rXjaztvE48kMAoVCWHn
mSZSM7n6G3FvNQZDlSE58py8uEG3uEYYsKwntkMVIgm7d4zJZe3dNKIEVQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFD0efnneyIc9f6oDL2SOEsrJAoP5MB8GA1UdIwQY
MBaAFFQvYz926Niq6qMrWs4Wo9s5Q9gMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDIt
NjliOTUzYzlkNWFhLzEvUFI1LWVkN0loejFfcWdNdlpJNFN5c2tDZ19rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDItNjliOTUzYzlkNWFh
LzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBvH2gMAwD
BAC8faMDBAC8faoDBAC8fa4wDQYJKoZIhvcNAQELBQADggEBAFyL+LnZPdUYjvJ1
+uFmbQvE3kjBXjmxv7/mEeD6kKgYbaa1/G9/TK1o+/iscHdJetkczzP9HnTHyfwg
n7sOUxSqFBlrV9v5qj2L4Ou1H03R6zC4TONBW4MAYnwHJw1BaZ0k9/hB113pNfUG
YEcMq0SWYY7Og83f7dhgUbYSW7OTkigQldWlxwa4ds6Yhzr4Xqc59lMSp82GQhpy
Q3lBzOIWeuz5Fb2BSevj5ng36HvEiC0aVTl+fW06lowVi0zf6Y98uAAzKLEpkkBd
4VaLveG0St0VLh48c87Hz69jQJH393dqol6/8Py7awUXlrPzVPUDSZCsqq4wPEO2
X6fRnCs=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:52:02 2024 by rpki-client on console-fra.rpki-client.org