Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/k5YnB0avi05-fz_AkV-mTQOioWQ.roa
File: k5YnB0avi05-fz_AkV-mTQOioWQ.roa (raw, json)
Hash identifier: baVCvlsPXQnVFCYeL2GaKepbNHk5/EdE79y1kFApLVY=
Subject key identifier: 93:96:27:07:46:AF:8B:4E:7E:7F:3F:C0:91:5F:A6:4D:03:A2:A1:64
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC80301CAABD7B985BC2A354678F6573A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/k5YnB0avi05-fz_AkV-mTQOioWQ.roa
Signing time: Tue 02 Jan 2024 02:31:29 +0000
ROA not before: Tue 02 Jan 2024 02:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204896
IP address blocks: 194.14.30.0/24 maxlen: 24
192.121.244.0/24 maxlen: 24
193.234.25.0/24 maxlen: 24
194.103.40.0/24 maxlen: 24
194.103.158.0/24 maxlen: 24
193.234.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:01:ca:ab:d7:b9:85:bc:2a:35:46:78:f6:57:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9396270746af8b4e7e7f3fc0915fa64d03a2a164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:aa:68:07:90:eb:bb:89:26:68:ed:a3:ae:0d:
93:4b:51:d8:9f:ec:de:fc:4e:13:be:0a:f4:11:fd:
9d:2e:51:42:92:47:71:7d:3b:41:1a:ce:6a:1f:c7:
e4:33:61:81:17:2f:ec:da:bc:50:4b:5b:84:d1:1c:
19:a7:10:c2:3d:07:99:46:c6:a7:06:80:83:dc:fb:
12:64:77:ef:f1:84:cd:2d:2f:47:41:ad:eb:d3:58:
d5:86:cb:b2:8f:10:e3:5c:9d:b3:41:ae:38:4f:be:
7b:8d:41:51:aa:67:4c:df:38:bb:8f:51:b2:56:cf:
95:ae:d0:cf:49:82:1f:06:9f:b5:cd:99:2c:21:87:
6d:92:44:6a:89:e4:c3:f8:07:be:97:20:6e:82:28:
ab:9d:28:58:df:9e:a9:48:2d:5f:cd:4a:b5:89:22:
0a:e3:4c:9f:05:06:ad:bd:92:e0:31:5f:a7:0e:16:
d3:37:b4:51:e1:d6:f9:d7:05:c7:a5:77:95:0c:b9:
3c:87:bf:99:00:85:ac:c6:d0:73:e5:a2:fa:f3:bd:
22:62:10:d6:b0:ff:43:e8:93:6b:30:86:1c:5f:d4:
82:c8:c2:07:65:6b:1d:49:cc:86:68:b6:8e:7e:ca:
01:35:9b:57:31:da:b1:24:19:93:1c:cd:e0:aa:5b:
ec:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:96:27:07:46:AF:8B:4E:7E:7F:3F:C0:91:5F:A6:4D:03:A2:A1:64
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/k5YnB0avi05-fz_AkV-mTQOioWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.244.0/24
193.234.25.0/24
193.234.61.0/24
194.14.30.0/24
194.103.40.0/24
194.103.158.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:e5:03:66:59:92:5a:73:44:5a:95:1f:2c:17:d5:86:de:a2:
4e:b6:9c:38:f9:04:c7:e4:93:ae:2a:a5:7a:be:b0:4f:ea:15:
ec:22:53:2f:64:6f:21:12:31:72:42:8a:73:1a:3e:31:8a:f3:
e6:d2:dc:13:80:a3:1e:5c:2c:26:b4:e4:66:9d:60:55:85:09:
3d:c5:d6:a9:a5:11:c7:d5:6b:17:8f:35:bb:a0:da:9a:11:c1:
1e:1e:6b:1e:89:d3:6b:2c:a5:fb:8a:f5:56:32:d9:c5:da:88:
b4:39:ed:3b:88:0d:fe:d6:46:8a:57:e2:62:a0:bb:c7:ac:79:
d4:07:ef:1e:b9:47:a0:5b:59:72:12:5c:79:95:4a:86:f4:e9:
d3:5d:d0:cb:b2:e3:67:93:96:83:34:d4:e3:12:4f:74:3a:8b:
05:ed:c8:09:52:1e:40:36:45:ed:c8:61:6c:5a:a8:4c:e5:37:
2f:16:4b:5f:ff:98:21:05:ea:d3:d2:97:03:ae:33:2d:4b:7a:
c6:f6:94:64:c8:75:75:e6:c6:8f:9f:5e:2b:05:31:f9:d0:a6:
f8:de:5a:f6:9d:e0:6e:05:1b:ca:30:5a:c6:b4:c6:50:2d:7a:
6f:88:02:2c:cf:d3:b5:b0:9b:30:3f:06:0d:2d:95:31:69:45:
84:70:5c:60
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYzIAwHKq9e5hbwqNUZ49lc6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwMTAyMDIzMTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Mzk2MjcwNzQ2YWY4YjRlN2U3ZjNmYzA5MTVmYTY0ZDAzYTJhMTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqpoB5Dru4kmaO2jrg2TS1HYn+ze
/E4Tvgr0Ef2dLlFCkkdxfTtBGs5qH8fkM2GBFy/s2rxQS1uE0RwZpxDCPQeZRsan
BoCD3PsSZHfv8YTNLS9HQa3r01jVhsuyjxDjXJ2zQa44T757jUFRqmdM3zi7j1Gy
Vs+VrtDPSYIfBp+1zZksIYdtkkRqieTD+Ae+lyBugiirnShY356pSC1fzUq1iSIK
40yfBQatvZLgMV+nDhbTN7RR4db51wXHpXeVDLk8h7+ZAIWsxtBz5aL6870iYhDW
sP9D6JNrMIYcX9SCyMIHZWsdScyGaLaOfsoBNZtXMdqxJBmTHM3gqlvssQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFJOWJwdGr4tOfn8/wJFfpk0DoqFkMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvazVZbkIwYXZpMDUtZnpfQWtWLW1UUU9pb1dRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAwHn0AwQA
weoZAwQAweo9AwQAwg4eAwQAwmcoAwQAwmeeMA0GCSqGSIb3DQEBCwUAA4IBAQC1
5QNmWZJac0RalR8sF9WG3qJOtpw4+QTH5JOuKqV6vrBP6hXsIlMvZG8hEjFyQopz
Gj4xivPm0twTgKMeXCwmtORmnWBVhQk9xdappRHH1WsXjzW7oNqaEcEeHmseidNr
LKX7ivVWMtnF2oi0Oe07iA3+1kaKV+JioLvHrHnUB+8euUegW1lyElx5lUqG9OnT
XdDLsuNnk5aDNNTjEk90OosF7cgJUh5ANkXtyGFsWqhM5TcvFktf/5ghBerT0pcD
rjMtS3rG9pRkyHV15saPn14rBTH50Kb43lr2neBuBRvKMFrGtMZQLXpviAIsz9O1
sJswPwYNLZUxaUWEcFxg
-----END CERTIFICATE-----
Generated at Sat May 25 10:39:48 2024 by rpki-client on console-ams.rpki-client.org