Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/u3PAecxVDjAv9bJIDUBkgmLj46U.roa
File: u3PAecxVDjAv9bJIDUBkgmLj46U.roa (raw, json)
Hash identifier: gT2Q9ipPfeJkEYCYsx/E1IcR8puDNb6NpjFq4lV34HA=
Subject key identifier: BB:73:C0:79:CC:55:0E:30:2F:F5:B2:48:0D:40:64:82:62:E3:E3:A5
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 018CE9D293331F51EA09A35BA0F967E8E6A4
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/u3PAecxVDjAv9bJIDUBkgmLj46U.roa
Signing time: Mon 08 Jan 2024 16:05:40 +0000
ROA not before: Mon 08 Jan 2024 16:05:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31515
IP address blocks: 161.30.169.0/24 maxlen: 24
161.30.130.0/24 maxlen: 24
161.30.129.0/24 maxlen: 24
161.30.28.0/24 maxlen: 24
161.30.33.0/24 maxlen: 24
161.30.42.0/23 maxlen: 24
161.30.40.0/23 maxlen: 23
161.30.44.0/23 maxlen: 24
161.30.203.0/24 maxlen: 24
161.30.8.0/24 maxlen: 24
161.30.9.0/24 maxlen: 24
161.30.7.0/24 maxlen: 24
161.30.5.0/24 maxlen: 24
161.30.10.0/24 maxlen: 24
161.30.16.0/22 maxlen: 22
161.30.12.0/22 maxlen: 22
161.30.237.0/24 maxlen: 24
161.30.22.0/23 maxlen: 23
161.30.238.0/24 maxlen: 24
161.30.20.0/24 maxlen: 24
161.30.236.0/22 maxlen: 24
161.30.240.0/24 maxlen: 24
2a11:ae00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:d2:93:33:1f:51:ea:09:a3:5b:a0:f9:67:e8:e6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Jan 8 16:05:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb73c079cc550e302ff5b2480d40648262e3e3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e9:b3:99:58:75:f9:b8:fd:1a:ef:69:ab:a2:
2e:cd:bf:2b:c8:5f:eb:ce:4f:9d:5b:3e:45:48:51:
8e:d4:ff:f6:bb:7b:de:7b:5b:b3:2e:e5:0a:f6:0f:
d6:1c:77:9d:c0:da:0c:18:1c:d7:b4:d7:99:f3:12:
fb:d2:35:59:c3:3a:13:17:98:ed:30:50:4f:ff:0f:
a1:a3:17:72:3c:b9:6e:88:a4:99:ed:62:bb:a2:cc:
c3:ca:49:d4:34:e6:71:09:f2:ff:98:2b:e8:6a:42:
e1:cb:1e:30:af:b5:2b:b5:c2:10:26:f9:9e:f4:cc:
29:f6:4e:93:ee:6c:b1:b0:ec:73:88:58:66:82:a3:
b2:cd:28:2a:93:79:31:b8:45:39:12:b6:18:ce:60:
2d:6f:73:5e:e2:7b:f4:83:fe:97:f1:a5:9a:87:70:
3f:46:09:c2:a4:fe:c8:66:e8:36:ee:00:b4:01:05:
b6:67:e9:f1:c8:9b:3a:27:16:6a:5e:f8:33:70:5d:
0d:dd:0d:36:8a:3b:3e:51:4b:7a:b1:82:47:e1:14:
a2:ec:ed:a3:c5:98:fb:e2:07:41:b0:83:04:41:ad:
3f:4c:93:7d:62:82:f7:b7:31:2d:ac:25:c1:cb:66:
bd:5e:b5:a0:3b:c4:26:55:c3:4c:87:04:df:46:cf:
11:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:73:C0:79:CC:55:0E:30:2F:F5:B2:48:0D:40:64:82:62:E3:E3:A5
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/u3PAecxVDjAv9bJIDUBkgmLj46U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.30.5.0/24
161.30.7.0-161.30.10.255
161.30.12.0-161.30.20.255
161.30.22.0/23
161.30.28.0/24
161.30.33.0/24
161.30.40.0-161.30.45.255
161.30.129.0-161.30.130.255
161.30.169.0/24
161.30.203.0/24
161.30.236.0-161.30.240.255
IPv6:
2a11:ae00::/32
Signature Algorithm: sha256WithRSAEncryption
02:d1:3b:e1:a5:fe:96:3d:6d:c5:e1:96:d8:94:26:37:e3:f9:
1e:30:e1:02:a1:fb:45:ee:a0:21:46:ae:8b:88:8c:a3:28:ba:
66:1d:f2:72:24:81:33:3f:cf:44:b0:5f:bc:cf:ee:dd:69:dc:
46:b0:aa:e3:d7:bc:0f:9a:58:2f:27:f5:c6:20:d0:f9:58:cb:
64:f8:e7:05:80:c2:81:ee:cc:14:06:1b:fb:71:49:c8:9a:7b:
0f:b6:cd:a2:e9:e1:4b:ea:4f:43:62:89:35:22:e8:f1:9a:97:
51:3a:53:42:59:ee:c0:8e:c8:c9:8d:c4:9f:75:a1:d8:d7:07:
5a:30:85:50:08:82:05:97:43:8d:78:40:23:42:87:7a:ae:5e:
5a:f1:5c:f7:07:5a:3c:ed:3e:d7:74:15:74:b9:fb:de:56:67:
74:c8:e9:d8:4d:8f:1a:92:3f:74:0c:b7:2c:9a:c9:76:3c:b4:
33:c5:47:97:32:e7:fa:75:ce:e9:e5:0d:61:78:73:07:c2:3f:
7d:f9:08:e2:12:03:80:a7:67:a1:9c:b1:a4:2d:aa:ad:d8:7a:
3f:27:48:92:c8:6a:5c:15:0e:43:a9:df:7a:4a:3e:58:8a:aa:
a3:c4:7c:95:58:c2:cf:05:ec:cc:7c:24:76:b0:96:d7:0b:6b:
ce:1e:98:11
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzp0pMzH1HqCaNboPln6OakMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZTU1MThlNjg0NjdiNDI5MGMzNTA5MjY4YjZkNmQ2NjQ5
NjJjODYwHhcNMjQwMTA4MTYwNTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjczYzA3OWNjNTUwZTMwMmZmNWIyNDgwZDQwNjQ4MjYyZTNlM2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+mzmVh1+bj9Gu9pq6Iuzb8ryF/r
zk+dWz5FSFGO1P/2u3vee1uzLuUK9g/WHHedwNoMGBzXtNeZ8xL70jVZwzoTF5jt
MFBP/w+hoxdyPLluiKSZ7WK7oszDyknUNOZxCfL/mCvoakLhyx4wr7UrtcIQJvme
9Mwp9k6T7myxsOxziFhmgqOyzSgqk3kxuEU5ErYYzmAtb3Ne4nv0g/6X8aWah3A/
RgnCpP7IZug27gC0AQW2Z+nxyJs6JxZqXvgzcF0N3Q02ijs+UUt6sYJH4RSi7O2j
xZj74gdBsIMEQa0/TJN9YoL3tzEtrCXBy2a9XrWgO8QmVcNMhwTfRs8RHQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFLtzwHnMVQ4wL/WySA1AZIJi4+OlMB8GA1UdIwQY
MBaAFAnlUY5oRntCkMNQkmi21tZkliyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zMDI4MmMtM2M4Mi00NzMwLWI5NWUt
ZTc0NTk0ODk4M2VkLzEvdTNQQWVjeFZEakF2OWJKSURVQmtnbUxqNDZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8zMDI4MmMtM2M4Mi00NzMwLWI5NWUtZTc0NTk0ODk4M2Vk
LzEvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGUBggrBgEFBQcBBwEB/wSBhDCBgTBwBAIAATBqAwQAoR4F
MAwDBAChHgcDBAChHgowDAMEAqEeDAMEAKEeFAMEAaEeFgMEAKEeHAMEAKEeITAM
AwQDoR4oAwQBoR4sMAwDBAChHoEDBAChHoIDBAChHqkDBAChHsswDAMEAqEe7AME
AKEe8DANBAIAAjAHAwUAKhGuADANBgkqhkiG9w0BAQsFAAOCAQEAAtE74aX+lj1t
xeGW2JQmN+P5HjDhAqH7Re6gIUaui4iMoyi6Zh3yciSBMz/PRLBfvM/u3WncRrCq
49e8D5pYLyf1xiDQ+VjLZPjnBYDCge7MFAYb+3FJyJp7D7bNounhS+pPQ2KJNSLo
8ZqXUTpTQlnuwI7IyY3En3Wh2NcHWjCFUAiCBZdDjXhAI0KHeq5eWvFc9wdaPO0+
13QVdLn73lZndMjp2E2PGpI/dAy3LJrJdjy0M8VHlzLn+nXO6eUNYXhzB8I/ffkI
4hIDgKdnoZyxpC2qrdh6PydIkshqXBUOQ6nfeko+WIqqo8R8lVjCzwXszHwkdrCW
1wtrzh6YEQ==
-----END CERTIFICATE-----
Generated at Wed May 15 17:09:16 2024 by rpki-client on console-ams.rpki-client.org