Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/2c_X8neOdgvX3yt48XI5IevTnu4.roa
File: 2c_X8neOdgvX3yt48XI5IevTnu4.roa (raw, json)
Hash identifier: CXs6wMY6lyvaoW4P+Z5Pplq1wNmUC8vQEESob/nwVoY=
Subject key identifier: D9:CF:D7:F2:77:8E:76:0B:D7:DF:2B:78:F1:72:39:21:EB:D3:9E:EE
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018E8000930FAB3C2B483DE3F2C5AE22775D
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/2c_X8neOdgvX3yt48XI5IevTnu4.roa
Signing time: Wed 27 Mar 2024 13:01:45 +0000
ROA not before: Wed 27 Mar 2024 13:01:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.180.104.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.136.5.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a0f:e900::/29 maxlen: 29
2a0f:ed00::/29 maxlen: 29
2a0f:f900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:00:93:0f:ab:3c:2b:48:3d:e3:f2:c5:ae:22:77:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Mar 27 13:01:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9cfd7f2778e760bd7df2b78f1723921ebd39eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:05:be:f7:e0:c2:45:18:53:ff:c6:f0:03:
56:78:97:ad:54:cb:6d:fa:22:cf:2d:0a:dc:d1:d2:
df:2f:ae:f2:a9:53:ee:a0:eb:41:27:62:b1:d1:80:
79:49:d3:ce:4c:dd:6e:7f:02:6f:15:17:b5:63:31:
5c:f7:4f:c7:96:c4:89:f8:3a:8f:e2:1c:90:e5:ce:
c9:dc:58:d3:96:41:c9:ef:fb:c4:7e:a3:9d:30:a8:
e8:a7:8a:ca:be:ba:6d:71:20:81:f7:93:fd:d1:f2:
8e:fd:5d:b7:12:02:65:0a:87:2c:0a:ad:bd:8b:58:
f4:50:64:10:ac:65:b8:24:eb:dc:c8:42:0c:fe:71:
2a:9e:b0:e3:00:0a:24:ed:2f:81:2e:ab:53:e6:60:
78:3a:a9:3c:e2:c2:e1:02:19:aa:43:ca:14:54:55:
32:39:a5:14:96:6f:8c:89:42:61:b3:d7:58:0a:4d:
0c:ca:8c:84:95:35:bc:cc:ca:44:09:ae:45:97:47:
7b:55:d3:b0:7c:c6:a5:f5:5b:3f:d2:5e:24:9c:ae:
b9:b4:c2:f7:5a:de:21:de:27:26:00:35:de:9a:6b:
88:be:8c:e7:d5:b9:01:fc:84:22:ff:84:d7:e3:0d:
42:d5:d5:c9:a0:be:73:aa:29:29:ec:f7:fc:20:52:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CF:D7:F2:77:8E:76:0B:D7:DF:2B:78:F1:72:39:21:EB:D3:9E:EE
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/2c_X8neOdgvX3yt48XI5IevTnu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
5.180.107.0/24
45.131.0.0/23
45.131.3.0/24
45.136.5.0/24
45.141.148.0/24
45.141.150.0/24
45.147.44.0/24
77.83.200.0-77.83.202.255
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a0f:e900::/29
2a0f:ed00::/29
2a0f:f900::/29
Signature Algorithm: sha256WithRSAEncryption
75:4e:87:4a:c5:d3:b7:fd:90:9b:2f:ad:b5:51:05:99:4c:32:
a7:d6:6d:b6:bd:1f:1e:0d:dc:87:d4:7b:15:33:d2:35:0a:e5:
42:80:39:fc:d1:68:f2:be:b1:4c:de:ea:5c:9f:53:84:33:97:
4b:dd:29:eb:27:0e:6a:a4:8b:01:d0:8c:7f:8a:95:18:1e:bd:
e4:9f:bb:02:02:6e:cb:07:04:30:2d:ca:e4:ae:f3:19:26:59:
06:50:8b:e0:de:bc:7c:0a:6a:64:06:86:47:31:5f:46:30:1d:
c0:81:2c:db:d1:81:89:cc:2a:be:38:f9:04:0e:72:bd:9c:c4:
7c:e6:23:56:a6:4f:ac:d3:61:17:13:6e:42:99:b7:71:f8:f8:
89:a3:7d:45:a3:f6:2e:df:d6:f2:bb:7a:0d:bf:bc:a8:17:57:
28:ff:6c:9a:1f:ac:8e:4b:8c:c8:3c:7b:12:dc:4b:c5:5d:c4:
e2:8b:89:53:dd:82:d8:60:f5:a3:1e:27:91:9a:26:71:20:d9:
8e:b7:e2:f8:5a:6f:38:4e:3f:c9:10:a7:94:00:99:9f:a1:4a:
44:27:d2:2f:4d:f3:97:47:29:68:a8:45:48:00:80:fe:93:9a:
89:b9:cb:80:49:91:f0:88:33:12:2f:3f:b9:c3:2c:27:4c:4d:
6a:af:a7:07
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAY6AAJMPqzwrSD3j8sWuInddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjQwMzI3MTMwMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWNmZDdmMjc3OGU3NjBiZDdkZjJiNzhmMTcyMzkyMWViZDM5ZWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYcFvvfgwkUYU//G8ANWeJetVMtt
+iLPLQrc0dLfL67yqVPuoOtBJ2Kx0YB5SdPOTN1ufwJvFRe1YzFc90/HlsSJ+DqP
4hyQ5c7J3FjTlkHJ7/vEfqOdMKjop4rKvrptcSCB95P90fKO/V23EgJlCocsCq29
i1j0UGQQrGW4JOvcyEIM/nEqnrDjAAok7S+BLqtT5mB4Oqk84sLhAhmqQ8oUVFUy
OaUUlm+MiUJhs9dYCk0MyoyElTW8zMpECa5Fl0d7VdOwfMal9Vs/0l4knK65tML3
Wt4h3icmADXemmuIvozn1bkB/IQi/4TX4w1C1dXJoL5zqikp7Pf8IFJo/QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFNnP1/J3jnYL198rePFyOSHr057uMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvMmNfWDhuZU9kZ3ZYM3l0NDhYSTVJZXZUbnU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGUBggrBgEFBQcBBwEB/wSBhDCBgTBiBAIAATBcAwQABbRo
AwQABbRrAwQBLYMAAwQALYMDAwQALYgFAwQALY2UAwQALY2WAwQALZMsMAwDBANN
U8gDBABNU8oDBADCdOQDBAHCdOwDBADCkhoDBADCkiQDBADCki8wGwQCAAIwFQMF
AyoP6QADBQMqD+0AAwUDKg/5ADANBgkqhkiG9w0BAQsFAAOCAQEAdU6HSsXTt/2Q
my+ttVEFmUwyp9Zttr0fHg3ch9R7FTPSNQrlQoA5/NFo8r6xTN7qXJ9ThDOXS90p
6ycOaqSLAdCMf4qVGB695J+7AgJuywcEMC3K5K7zGSZZBlCL4N68fApqZAaGRzFf
RjAdwIEs29GBicwqvjj5BA5yvZzEfOYjVqZPrNNhFxNuQpm3cfj4iaN9RaP2Lt/W
8rt6Db+8qBdXKP9smh+sjkuMyDx7EtxLxV3E4ouJU92C2GD1ox4nkZomcSDZjrfi
+FpvOE4/yRCnlACZn6FKRCfSL03zl0cpaKhFSACA/pOaibnLgEmR8IgzEi8/ucMs
J0xNaq+nBw==
-----END CERTIFICATE-----
Generated at Wed May 1 23:55:48 2024 by rpki-client on console-fra.rpki-client.org