Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/Sg57p2xVF5BfKuTsjv68Hkc5J4E.roa
File: Sg57p2xVF5BfKuTsjv68Hkc5J4E.roa (raw, json)
Hash identifier: b+Jy1ne5NW/fUYc9DY/Iw564clbJeyF8WzHaHcqJAsY=
Subject key identifier: 4A:0E:7B:A7:6C:55:17:90:5F:2A:E4:EC:8E:FE:BC:1E:47:39:27:81
Certificate issuer: /CN=f7806ac35f2eac02cca046d650fb22befee68d43
Certificate serial: 018CC802ECACC5DABE26CB2FE01EC84C5745
Authority key identifier: F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/Sg57p2xVF5BfKuTsjv68Hkc5J4E.roa
Signing time: Tue 02 Jan 2024 02:31:24 +0000
ROA not before: Tue 02 Jan 2024 02:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35472
IP address blocks: 193.218.44.0/22 maxlen: 22
193.218.48.0/20 maxlen: 20
193.218.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:ec:ac:c5:da:be:26:cb:2f:e0:1e:c8:4c:57:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7806ac35f2eac02cca046d650fb22befee68d43
Validity
Not Before: Jan 2 02:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a0e7ba76c5517905f2ae4ec8efebc1e47392781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:72:52:dd:1a:d2:bd:ef:9a:d3:87:84:3c:a6:
d4:c2:7b:f8:c9:2e:60:5f:08:c0:04:8d:89:19:c8:
86:5d:b5:cf:38:e6:7a:74:51:4c:e5:38:02:c3:59:
8b:2b:d3:d1:39:5a:be:60:5a:5d:16:8c:56:0e:1d:
8b:60:15:d3:27:16:c0:93:8c:8e:58:f5:f8:7c:0b:
74:53:21:15:c9:fd:df:fb:15:90:0f:e4:63:88:a6:
a9:23:96:96:b0:8b:4c:64:c6:1c:2f:fa:dc:e5:56:
db:d3:af:69:f8:7a:87:9c:5a:1d:ea:7d:39:89:eb:
14:0e:61:71:3b:c6:54:49:85:ad:73:fc:d4:24:ee:
6f:8b:5a:d1:b7:23:b0:98:f5:d9:2a:c9:37:85:9f:
9a:f2:df:eb:76:cf:69:4e:4b:99:cb:84:5a:32:10:
78:7b:7e:ae:38:a0:49:89:a4:e0:c3:f3:7e:a3:d1:
8e:cc:15:c0:89:87:0a:ba:75:13:63:a6:bc:9c:45:
28:8e:a9:55:29:a5:d5:76:51:36:40:6a:7c:df:f8:
c5:6c:a4:47:ca:f5:9f:f7:18:a4:fb:54:94:4f:76:
7e:84:c4:ad:b1:57:47:62:43:ab:9e:80:b6:7c:b6:
4a:9f:be:23:e5:7e:97:1d:cd:33:01:1c:d3:26:cb:
b1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0E:7B:A7:6C:55:17:90:5F:2A:E4:EC:8E:FE:BC:1E:47:39:27:81
X509v3 Authority Key Identifier:
keyid:F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/Sg57p2xVF5BfKuTsjv68Hkc5J4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.44.0-193.218.71.255
Signature Algorithm: sha256WithRSAEncryption
8a:2f:20:94:dd:a7:5d:cd:90:1a:02:07:22:90:25:ad:ad:16:
46:2a:3d:81:b0:61:c9:46:5c:f2:09:e2:c8:82:2e:6a:61:ad:
38:3f:3d:c8:6c:83:a7:bc:06:25:03:9e:ff:14:b0:4d:c0:76:
dc:ae:f2:0b:93:6c:fc:67:39:cd:5b:35:35:a4:86:2b:87:cf:
99:9b:77:2b:d7:c3:79:b2:24:9c:8a:1b:9f:5d:20:de:29:b5:
7c:f8:23:98:0b:6b:25:dc:f6:62:0c:db:4a:4e:3a:39:37:e9:
20:09:f3:e2:7f:40:84:78:00:26:8e:9f:ed:50:aa:6f:f8:a1:
47:3e:67:84:ec:34:70:87:44:37:2d:cd:04:53:ae:58:8f:11:
3a:70:ce:2c:6c:2a:2f:49:20:2d:f0:19:fb:5d:65:58:8e:b4:
59:08:97:e7:8e:08:b1:4d:45:7b:68:cb:57:5b:86:20:60:f4:
cc:36:99:5d:b9:2f:33:12:f9:50:15:a9:85:77:ed:e5:a1:de:
30:78:13:1c:f1:9b:d8:f6:5a:d6:7b:f9:d0:ef:a1:9a:42:07:
f6:67:79:ce:46:dc:16:e4:04:b7:cb:7c:3e:1b:4d:3d:f3:48:
9a:81:7a:af:1d:e2:dc:7c:67:64:9f:bb:35:44:5f:d1:8f:de:
cf:05:1f:f6
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzIAuysxdq+Jssv4B7ITFdFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODA2YWMzNWYyZWFjMDJjY2EwNDZkNjUwZmIyMmJlZmVl
NjhkNDMwHhcNMjQwMTAyMDIzMTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTBlN2JhNzZjNTUxNzkwNWYyYWU0ZWM4ZWZlYmMxZTQ3MzkyNzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnJS3RrSve+a04eEPKbUwnv4yS5g
XwjABI2JGciGXbXPOOZ6dFFM5TgCw1mLK9PROVq+YFpdFoxWDh2LYBXTJxbAk4yO
WPX4fAt0UyEVyf3f+xWQD+RjiKapI5aWsItMZMYcL/rc5Vbb069p+HqHnFod6n05
iesUDmFxO8ZUSYWtc/zUJO5vi1rRtyOwmPXZKsk3hZ+a8t/rds9pTkuZy4RaMhB4
e36uOKBJiaTgw/N+o9GOzBXAiYcKunUTY6a8nEUojqlVKaXVdlE2QGp83/jFbKRH
yvWf9xik+1SUT3Z+hMStsVdHYkOrnoC2fLZKn74j5X6XHc0zARzTJsuxBQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEoOe6dsVReQXyrk7I7+vB5HOSeBMB8GA1UdIwQY
MBaAFPeAasNfLqwCzKBG1lD7Ir7+5o1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRCcXcxOHVyQUxNb0ViV1VQc2l2djdtalVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hNGZhOTAtYzI3ZS00YmVhLThiMDct
YTczNWNhMTA4NGI3LzEvU2c1N3AyeFZGNUJmS3VUc2p2NjhIa2M1SjRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hNGZhOTAtYzI3ZS00YmVhLThiMDctYTczNWNhMTA4NGI3
LzEvOTRCcXcxOHVyQUxNb0ViV1VQc2l2djdtalVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALB2iwD
BAPB2kAwDQYJKoZIhvcNAQELBQADggEBAIovIJTdp13NkBoCByKQJa2tFkYqPYGw
YclGXPIJ4siCLmphrTg/Pchsg6e8BiUDnv8UsE3Adtyu8guTbPxnOc1bNTWkhiuH
z5mbdyvXw3myJJyKG59dIN4ptXz4I5gLayXc9mIM20pOOjk36SAJ8+J/QIR4ACaO
n+1Qqm/4oUc+Z4TsNHCHRDctzQRTrliPETpwzixsKi9JIC3wGftdZViOtFkIl+eO
CLFNRXtoy1dbhiBg9Mw2mV25LzMS+VAVqYV37eWh3jB4Exzxm9j2WtZ7+dDvoZpC
B/Znec5G3BbkBLfLfD4bTT3zSJqBeq8d4tx8Z2SfuzVEX9GP3s8FH/Y=
-----END CERTIFICATE-----
Generated at Sun May 19 06:45:58 2024 by rpki-client on console-fra.rpki-client.org