Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/8Fd1pZMWC8DrlIdOm8IcRvKU22g.roa
File: 8Fd1pZMWC8DrlIdOm8IcRvKU22g.roa (raw, json)
Hash identifier: CzFgb6CGBr8ui7CCG+h9nJtSmxylWGFSiiMse5nXS9Q=
Subject key identifier: F0:57:75:A5:93:16:0B:C0:EB:94:87:4E:9B:C2:1C:46:F2:94:DB:68
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 018CC7934219B15DFA0F2BCF3CE6E0C9BDEC
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/8Fd1pZMWC8DrlIdOm8IcRvKU22g.roa
Signing time: Tue 02 Jan 2024 00:29:25 +0000
ROA not before: Tue 02 Jan 2024 00:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203061
IP address blocks: 5.183.92.0/23 maxlen: 23
5.180.220.0/23 maxlen: 23
5.180.222.0/23 maxlen: 23
45.10.232.0/23 maxlen: 23
91.204.48.0/23 maxlen: 23
91.204.50.0/23 maxlen: 23
92.118.12.0/23 maxlen: 23
92.118.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:42:19:b1:5d:fa:0f:2b:cf:3c:e6:e0:c9:bd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 2 00:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f05775a593160bc0eb94874e9bc21c46f294db68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e0:d6:0b:61:e6:86:86:2d:a0:75:2f:c4:8c:
7c:3e:54:80:93:38:fa:66:32:d9:b8:fd:55:ea:3d:
5c:4d:58:98:54:d2:d8:e3:92:3c:ac:bb:11:85:f4:
0e:90:4e:06:7c:21:44:b7:5d:af:e0:b5:94:70:a1:
d9:d8:ce:30:4c:9c:b4:7d:0e:a6:2e:e5:21:bc:b3:
6b:62:92:59:d3:bb:14:7d:6b:61:83:b2:7b:e9:20:
ee:dd:20:46:68:25:6a:b8:fd:e6:97:42:a0:42:f7:
9f:4f:36:08:56:49:e9:ea:23:4c:89:06:7d:16:9c:
c6:57:d1:f7:53:6e:82:d9:8c:71:05:b9:25:eb:46:
8f:7f:7a:b6:e1:88:c5:92:6d:6f:6a:6e:bc:a8:2c:
74:75:2c:26:4e:13:1f:a1:ee:da:12:6b:07:be:49:
2a:51:fc:21:e8:6b:ea:d4:8b:fa:7b:2f:a0:d8:b9:
c8:36:ef:5b:42:6c:0e:18:0c:91:3a:c8:53:64:62:
32:06:64:55:86:46:1a:73:7b:c8:ee:94:36:76:ea:
d2:97:68:33:02:0b:c6:ae:24:8e:5d:ec:45:28:10:
e8:44:4e:d1:a4:93:88:88:b4:76:82:8e:35:06:d0:
90:3d:66:1e:09:be:dc:07:5f:c0:71:67:eb:fe:a7:
f9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:57:75:A5:93:16:0B:C0:EB:94:87:4E:9B:C2:1C:46:F2:94:DB:68
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/8Fd1pZMWC8DrlIdOm8IcRvKU22g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.220.0/22
5.183.92.0/23
45.10.232.0/23
91.204.48.0/22
92.118.12.0/22
Signature Algorithm: sha256WithRSAEncryption
00:64:12:7c:26:25:86:e1:21:5c:01:f1:2a:f9:57:dd:9a:a1:
dd:c2:4a:f0:63:67:3e:5e:09:c4:49:1c:72:e8:89:ae:78:2b:
3c:f2:b2:11:c0:f0:e5:36:46:17:f9:09:5c:5d:18:49:b7:21:
99:af:d9:26:48:77:91:4b:b5:e6:78:51:8e:2c:28:93:b9:76:
f0:dc:5c:8d:4a:c0:62:05:95:30:91:56:e1:66:fa:3b:ff:e6:
06:f1:da:20:33:db:41:b3:20:99:d5:60:da:d7:17:eb:1d:1f:
46:2d:b5:fe:f0:36:ff:a1:e5:11:c5:78:6a:82:61:fd:ba:60:
f4:4b:0c:36:54:44:0e:bc:8f:47:c5:75:40:74:23:6f:b0:49:
a8:c6:b8:16:14:f6:b1:1c:f5:83:02:97:43:e6:23:67:39:41:
41:f7:be:ef:76:32:47:b8:e3:87:c4:4d:a9:29:8e:7b:2d:bc:
47:5f:a2:32:47:db:0f:ce:0f:24:67:0c:b1:07:4d:7c:9d:d5:
c5:57:bb:d6:3c:ef:0b:32:f0:73:cc:1b:a0:25:4b:2e:52:0b:
b1:59:69:1a:c8:61:83:63:f8:a8:1e:ad:9d:ce:d1:41:28:50:
45:a5:c3:16:fc:7b:51:48:ff:01:5c:f1:52:ae:9b:41:69:99:
c3:f8:fd:9d
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzHk0IZsV36DyvPPObgyb3sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj
YjUzZDYwHhcNMjQwMTAyMDAyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDU3NzVhNTkzMTYwYmMwZWI5NDg3NGU5YmMyMWM0NmYyOTRkYjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuDWC2HmhoYtoHUvxIx8PlSAkzj6
ZjLZuP1V6j1cTViYVNLY45I8rLsRhfQOkE4GfCFEt12v4LWUcKHZ2M4wTJy0fQ6m
LuUhvLNrYpJZ07sUfWthg7J76SDu3SBGaCVquP3ml0KgQvefTzYIVknp6iNMiQZ9
FpzGV9H3U26C2YxxBbkl60aPf3q24YjFkm1vam68qCx0dSwmThMfoe7aEmsHvkkq
Ufwh6Gvq1Iv6ey+g2LnINu9bQmwOGAyROshTZGIyBmRVhkYac3vI7pQ2durSl2gz
AgvGriSOXexFKBDoRE7RpJOIiLR2go41BtCQPWYeCb7cB1/AcWfr/qf5hQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFPBXdaWTFgvA65SHTpvCHEbylNtoMB8GA1UdIwQY
MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt
NDY5MGEwMDcxNDFmLzEvOEZkMXBaTVdDOERybElkT204SWNSdktVMjJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm
LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCBbTcAwQB
BbdcAwQBLQroAwQCW8wwAwQCXHYMMA0GCSqGSIb3DQEBCwUAA4IBAQAAZBJ8JiWG
4SFcAfEq+VfdmqHdwkrwY2c+XgnESRxy6ImueCs88rIRwPDlNkYX+QlcXRhJtyGZ
r9kmSHeRS7XmeFGOLCiTuXbw3FyNSsBiBZUwkVbhZvo7/+YG8dogM9tBsyCZ1WDa
1xfrHR9GLbX+8Db/oeURxXhqgmH9umD0Sww2VEQOvI9HxXVAdCNvsEmoxrgWFPax
HPWDApdD5iNnOUFB977vdjJHuOOHxE2pKY57LbxHX6IyR9sPzg8kZwyxB018ndXF
V7vWPO8LMvBzzBugJUsuUguxWWkayGGDY/ioHq2dztFBKFBFpcMW/HtRSP8BXPFS
rptBaZnD+P2d
-----END CERTIFICATE-----
Generated at Mon May 20 16:20:34 2024 by rpki-client on console-fra.rpki-client.org