Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/ppjW9v7GVQl4C1lgkoQOIpYIhC0.roa
File: ppjW9v7GVQl4C1lgkoQOIpYIhC0.roa (raw, json)
Hash identifier: Y4dnIV10g3K0pnDCr5W0lkA8YdR8+t4UQVXq6DCxc9I=
Subject key identifier: A6:98:D6:F6:FE:C6:55:09:78:0B:59:60:92:84:0E:22:96:08:84:2D
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018CC64ADF6CE46E841216411054178818D6
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/ppjW9v7GVQl4C1lgkoQOIpYIhC0.roa
Signing time: Mon 01 Jan 2024 18:30:44 +0000
ROA not before: Mon 01 Jan 2024 18:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56382
IP address blocks: 178.251.231.0/24 maxlen: 24
5.1.94.0/24 maxlen: 24
45.155.249.0/24 maxlen: 24
45.155.251.0/24 maxlen: 24
45.155.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:df:6c:e4:6e:84:12:16:41:10:54:17:88:18:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 18:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a698d6f6fec65509780b596092840e229608842d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8f:dd:7b:32:e8:37:57:3b:ce:1d:57:45:4c:
73:51:ec:f4:3d:74:1c:94:14:d5:40:0c:b3:79:48:
58:7a:d3:5e:19:0f:c7:90:7d:4e:36:c5:36:31:2d:
41:6f:c8:05:ec:58:3b:36:0d:b8:20:8f:80:b2:86:
08:75:48:46:f9:0f:b4:8e:c4:d0:5a:2a:0e:ef:4c:
34:62:18:a9:95:41:dd:7e:dc:09:c7:4a:3e:8f:ef:
1b:d2:db:58:eb:de:17:d9:7a:f7:45:67:7a:2e:76:
a5:fa:ac:e6:de:28:cc:61:70:51:ed:32:f9:af:e1:
eb:e8:52:37:4f:94:9b:92:3d:5a:d3:c9:42:a3:aa:
44:c7:de:b4:de:c8:d0:28:4a:67:89:95:50:d8:ac:
34:71:4f:9b:08:62:8e:df:74:38:59:6f:0e:fa:87:
0a:53:e0:10:69:c7:54:02:8d:5d:39:69:a4:f0:ea:
b8:5b:49:8b:00:7a:da:da:ef:5e:f7:1f:35:84:4c:
3b:2f:e7:15:d4:07:e4:fb:4f:72:ea:cc:01:aa:4c:
68:02:21:04:a8:d3:01:aa:de:72:69:2f:09:68:80:
7b:d3:4d:be:8c:ef:61:d4:bc:5d:91:e2:d7:b9:53:
c9:2d:eb:37:9a:69:70:ab:52:7a:2a:3d:00:6d:04:
6e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:98:D6:F6:FE:C6:55:09:78:0B:59:60:92:84:0E:22:96:08:84:2D
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/ppjW9v7GVQl4C1lgkoQOIpYIhC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.94.0/24
45.155.249.0-45.155.251.255
178.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:38:ab:ce:ca:07:8b:39:dc:28:0e:68:ab:54:93:db:81:d6:
2d:ea:37:b0:a4:90:fa:34:0f:68:06:95:3b:90:f4:ae:8f:13:
c5:ca:35:7f:1c:71:fb:ea:d1:a8:55:c3:06:c1:55:47:06:f2:
d5:e1:39:0f:cd:30:d5:a5:3f:8e:f1:da:03:52:55:9d:94:4b:
f6:30:1c:6c:53:29:da:99:a2:7f:c8:ee:99:a7:39:83:bd:d9:
01:4d:76:83:8d:f1:70:ab:d7:6a:f4:11:19:03:5a:72:4c:09:
4f:c7:e9:69:80:d9:7f:8a:8e:de:18:99:77:c7:20:49:55:d8:
67:ec:f3:60:1f:77:52:da:b6:fc:e2:aa:4c:13:04:41:95:36:
d7:ea:bb:82:bd:4c:49:92:e6:67:b0:e4:9a:a2:d8:01:2d:f9:
9f:52:ae:32:ad:9f:79:cf:f4:d5:76:61:24:d5:66:e9:06:30:
05:23:47:d6:6e:05:fb:52:c9:f4:b1:4b:32:47:2c:4d:16:97:
5b:c3:cd:76:e5:f5:2f:24:fb:87:6c:03:50:0e:01:bd:61:30:
e8:b8:85:1f:df:f1:d3:e3:b4:99:1e:cd:a9:15:cd:cb:53:6c:
f0:1a:9a:ee:3a:d5:4e:fe:f6:6b:f1:28:10:df:4f:96:ad:3d:
39:65:95:c6
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYzGSt9s5G6EEhZBEFQXiBjWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjQwMTAxMTgzMDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjk4ZDZmNmZlYzY1NTA5NzgwYjU5NjA5Mjg0MGUyMjk2MDg4NDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0o/dezLoN1c7zh1XRUxzUez0PXQc
lBTVQAyzeUhYetNeGQ/HkH1ONsU2MS1Bb8gF7Fg7Ng24II+AsoYIdUhG+Q+0jsTQ
WioO70w0YhiplUHdftwJx0o+j+8b0ttY694X2Xr3RWd6Lnal+qzm3ijMYXBR7TL5
r+Hr6FI3T5Sbkj1a08lCo6pEx9603sjQKEpniZVQ2Kw0cU+bCGKO33Q4WW8O+ocK
U+AQacdUAo1dOWmk8Oq4W0mLAHra2u9e9x81hEw7L+cV1Afk+09y6swBqkxoAiEE
qNMBqt5yaS8JaIB7002+jO9h1LxdkeLXuVPJLes3mmlwq1J6Kj0AbQRugQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFKaY1vb+xlUJeAtZYJKEDiKWCIQtMB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvcHBqVzl2N0dWUWw0QzFsZ2tvUU9JcFlJaEMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQABQFeMAwD
BAAtm/kDBAItm/gDBACy++cwDQYJKoZIhvcNAQELBQADggEBAF44q87KB4s53CgO
aKtUk9uB1i3qN7CkkPo0D2gGlTuQ9K6PE8XKNX8ccfvq0ahVwwbBVUcG8tXhOQ/N
MNWlP47x2gNSVZ2US/YwHGxTKdqZon/I7pmnOYO92QFNdoON8XCr12r0ERkDWnJM
CU/H6WmA2X+Kjt4YmXfHIElV2Gfs82Afd1LatvziqkwTBEGVNtfqu4K9TEmS5mew
5Jqi2AEt+Z9SrjKtn3nP9NV2YSTVZukGMAUjR9ZuBftSyfSxSzJHLE0Wl1vDzXbl
9S8k+4dsA1AOAb1hMOi4hR/f8dPjtJkezakVzctTbPAamu461U7+9mvxKBDfT5at
PTlllcY=
-----END CERTIFICATE-----
Generated at Tue May 7 02:28:48 2024 by rpki-client on console-fra.rpki-client.org