Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/RReT58FahQN7VrgNbzYKi8Ojv9g.roa
File: RReT58FahQN7VrgNbzYKi8Ojv9g.roa (raw, json)
Hash identifier: 2RWDL5rJ00nzF0fmTDPgkbyv+ydonD4WG0fWb2CO7KY=
Subject key identifier: 45:17:93:E7:C1:5A:85:03:7B:56:B8:0D:6F:36:0A:8B:C3:A3:BF:D8
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DFB0C850F49809DA5C17C0E111D92C
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/RReT58FahQN7VrgNbzYKi8Ojv9g.roa
Signing time: Tue 02 Jan 2024 06:32:31 +0000
ROA not before: Tue 02 Jan 2024 06:32:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210281
IP address blocks: 185.106.92.0/24 maxlen: 24
194.36.177.0/24 maxlen: 24
82.115.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:b0:c8:50:f4:98:09:da:5c:17:c0:e1:11:d9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=451793e7c15a85037b56b80d6f360a8bc3a3bfd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:da:40:1d:ff:ba:61:e8:a9:d1:43:c4:d9:77:
4c:33:85:fb:a6:45:e7:ba:11:3a:f5:dd:9e:29:3c:
3b:3d:e4:de:22:8f:fe:41:b6:45:5d:b1:fa:dc:54:
f2:e5:f7:c3:26:d7:88:6e:e6:cc:08:a1:ae:54:39:
59:92:8c:57:ad:72:59:55:b0:07:16:75:ab:9c:28:
4a:07:f5:9a:a7:5e:b3:29:b2:4b:37:68:c0:f8:58:
42:9a:a4:98:c0:0b:c4:74:10:e9:14:96:9a:33:c0:
aa:f7:b7:52:df:c1:f0:41:ce:9f:ec:05:c3:74:7b:
b5:b2:88:0a:2c:05:e0:91:52:b4:31:a1:57:b5:cb:
5c:2e:5c:f5:67:88:1a:0f:b6:5c:b4:cd:ac:88:0b:
17:ce:39:be:3a:b6:ab:6e:0a:fa:45:79:08:62:89:
66:9d:3e:58:56:8b:76:21:e2:f1:b3:01:2b:a7:11:
17:3c:0e:bb:2c:06:32:7b:c5:3c:81:f2:91:70:b5:
46:49:b6:19:d3:9b:dd:81:d4:bb:7c:ea:a4:79:8e:
6f:0c:60:c0:80:a2:ca:a5:6b:2d:f6:3b:6b:81:3c:
e8:73:52:01:17:b4:8b:68:9a:75:28:3e:93:a8:cf:
bf:67:85:3f:02:7c:a3:52:a7:40:a7:a3:d9:cf:c0:
fa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:17:93:E7:C1:5A:85:03:7B:56:B8:0D:6F:36:0A:8B:C3:A3:BF:D8
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/RReT58FahQN7VrgNbzYKi8Ojv9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.223.0/24
185.106.92.0/24
194.36.177.0/24
Signature Algorithm: sha256WithRSAEncryption
60:66:ad:47:34:65:b0:bd:e8:7c:e9:e7:ab:25:d8:11:56:cf:
06:ef:92:fb:f9:5b:5c:d6:b1:d8:43:f9:a3:b0:db:48:12:0c:
0a:ee:dd:82:a7:44:b0:39:82:c7:08:3f:cb:d2:58:b4:60:57:
42:30:68:18:ce:99:ee:72:6e:75:e3:df:42:ce:a3:50:e6:11:
1e:5c:95:1d:d1:87:26:b1:56:39:eb:8d:c4:e9:b3:d3:3e:2b:
17:33:6f:1e:a5:9b:30:1a:8a:d2:7e:e2:46:89:ce:2b:cd:2e:
40:54:ab:e2:e9:ac:c0:4d:d6:cf:6a:eb:41:5f:b6:6f:21:fb:
92:0b:08:fb:8b:2d:71:2e:f3:e1:d7:10:a0:92:6e:c2:f8:66:
8d:29:53:16:32:e1:56:99:5f:6d:ad:3f:91:77:54:17:ec:51:
00:c1:9b:10:00:d5:91:cf:fa:98:13:ff:13:cb:b7:51:b5:a8:
0f:77:f8:bc:70:94:91:6b:f9:fa:03:d6:cf:1f:6a:f4:29:ab:
80:ec:8a:81:67:ab:be:9b:b9:c9:25:2a:00:7f:bd:c3:84:2b:
a0:3f:88:35:c7:22:44:19:52:6b:cf:c2:34:22:93:a5:b7:73:
32:3d:77:59:e8:0d:ae:5c:9f:0e:35:e2:76:19:a5:3c:d3:6d:
57:c4:5e:45
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzI37DIUPSYCdpcF8DhEdksMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjQwMTAyMDYzMjMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTE3OTNlN2MxNWE4NTAzN2I1NmI4MGQ2ZjM2MGE4YmMzYTNiZmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldpAHf+6Yeip0UPE2XdMM4X7pkXn
uhE69d2eKTw7PeTeIo/+QbZFXbH63FTy5ffDJteIbubMCKGuVDlZkoxXrXJZVbAH
FnWrnChKB/Wap16zKbJLN2jA+FhCmqSYwAvEdBDpFJaaM8Cq97dS38HwQc6f7AXD
dHu1sogKLAXgkVK0MaFXtctcLlz1Z4gaD7ZctM2siAsXzjm+Orarbgr6RXkIYolm
nT5YVot2IeLxswErpxEXPA67LAYye8U8gfKRcLVGSbYZ05vdgdS7fOqkeY5vDGDA
gKLKpWst9jtrgTzoc1IBF7SLaJp1KD6TqM+/Z4U/AnyjUqdAp6PZz8D6bwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEUXk+fBWoUDe1a4DW82CovDo7/YMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvUlJlVDU4RmFoUU43VnJnTmJ6WUtpOE9qdjlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUnPfAwQA
uWpcAwQAwiSxMA0GCSqGSIb3DQEBCwUAA4IBAQBgZq1HNGWwveh86eerJdgRVs8G
75L7+Vtc1rHYQ/mjsNtIEgwK7t2Cp0SwOYLHCD/L0li0YFdCMGgYzpnucm51499C
zqNQ5hEeXJUd0YcmsVY5643E6bPTPisXM28epZswGorSfuJGic4rzS5AVKvi6azA
TdbPautBX7ZvIfuSCwj7iy1xLvPh1xCgkm7C+GaNKVMWMuFWmV9trT+Rd1QX7FEA
wZsQANWRz/qYE/8Ty7dRtagPd/i8cJSRa/n6A9bPH2r0KauA7IqBZ6u+m7nJJSoA
f73DhCugP4g1xyJEGVJrz8I0IpOlt3MyPXdZ6A2uXJ8ONeJ2GaU8021XxF5F
-----END CERTIFICATE-----
Generated at Wed May 29 08:13:56 2024 by rpki-client on console-fra.rpki-client.org