Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/M623FvEPjyIp9iiWouKS4qq-wYM.roa
File: M623FvEPjyIp9iiWouKS4qq-wYM.roa (raw, json)
Hash identifier: yh4I5UVErwQ3K8+lKoiJ1Be449IQljHWFjxcrIkD2rI=
Subject key identifier: 33:AD:B7:16:F1:0F:8F:22:29:F6:28:96:A2:E2:92:E2:AA:BE:C1:83
Certificate issuer: /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Certificate serial: 018CC493045F5090487AE9FF8BF59B66E1C1
Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/M623FvEPjyIp9iiWouKS4qq-wYM.roa
Signing time: Mon 01 Jan 2024 10:30:18 +0000
ROA not before: Mon 01 Jan 2024 10:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201877
IP address blocks: 83.139.194.0/24 maxlen: 24
83.139.200.0/24 maxlen: 24
83.139.209.0/24 maxlen: 24
83.139.211.0/24 maxlen: 24
83.139.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:04:5f:50:90:48:7a:e9:ff:8b:f5:9b:66:e1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Validity
Not Before: Jan 1 10:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33adb716f10f8f2229f62896a2e292e2aabec183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:bd:f8:70:4a:68:f6:a1:8e:51:3f:11:3b:
a6:3b:5d:ce:96:f1:84:72:bb:56:24:33:4f:45:1c:
66:e6:65:36:c9:53:c7:d8:a7:6f:e6:78:4e:c4:24:
94:b1:31:9f:0d:13:88:a1:d1:44:ca:4a:ea:60:5a:
7b:c0:77:4c:93:86:d2:4a:29:10:f9:3f:a1:0b:37:
ca:94:d5:f0:ed:6a:30:e9:65:7b:a9:32:00:89:2f:
a1:38:2a:6d:a5:e3:07:da:05:92:5c:b5:6b:cb:54:
16:48:d0:a7:11:0d:f1:37:8b:07:e2:1c:53:bb:3c:
da:97:89:98:b3:46:5d:9c:91:99:36:b8:70:35:35:
0d:6f:36:1c:df:f0:07:cf:c3:6e:9e:43:46:0c:ec:
2a:35:24:ac:66:65:be:7e:3e:09:56:51:51:5f:81:
40:bb:69:b2:33:47:c9:81:10:fb:02:84:0d:63:26:
a4:b4:7d:00:c7:ad:8f:3f:c3:39:01:cb:1d:22:ca:
ec:9e:62:dd:dd:19:3b:69:86:3e:3f:c6:4a:53:54:
ce:b5:05:dd:1d:6e:f5:e3:c1:ed:62:2b:75:25:8d:
cc:0e:33:b7:b6:bd:90:b3:55:45:22:a1:85:0f:6f:
9c:0d:f8:33:73:e0:12:a2:16:83:0c:a6:b3:8d:d3:
e4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AD:B7:16:F1:0F:8F:22:29:F6:28:96:A2:E2:92:E2:AA:BE:C1:83
X509v3 Authority Key Identifier:
keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/M623FvEPjyIp9iiWouKS4qq-wYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.194.0/24
83.139.200.0/24
83.139.209.0-83.139.211.255
Signature Algorithm: sha256WithRSAEncryption
3b:8c:a9:08:e9:40:c5:2d:c6:43:06:29:9b:b4:d1:d7:90:2d:
69:04:69:80:15:ec:32:cd:90:27:67:b1:0a:69:8c:40:ce:82:
7b:bb:07:97:c7:82:bc:52:76:40:e8:1e:4b:b2:df:80:02:4f:
de:87:55:54:78:ac:1d:60:39:6f:86:7b:e7:fa:61:89:1d:60:
da:9d:9a:2e:90:ee:34:86:a5:25:28:f3:f1:41:3c:f5:ed:02:
a4:b1:e3:9e:07:95:30:56:39:d3:a2:e7:23:70:b2:57:07:1a:
af:85:3c:77:2d:2b:b9:5d:a7:ef:a8:ea:2d:c7:6e:63:98:38:
b3:d5:51:3b:56:ea:c0:03:a9:d8:09:18:9a:f6:62:cd:36:98:
4b:03:11:94:0d:a5:c9:5c:ef:45:ed:3b:54:ab:c3:f7:d9:1c:
ff:ae:83:60:aa:22:e7:4f:81:45:f7:18:73:04:bf:15:c5:f7:
61:ba:5b:c1:e6:de:2e:a9:ff:ef:77:c8:97:f1:34:0d:ae:cf:
7d:ef:a7:9a:67:e4:f4:0c:a4:40:58:ca:02:2e:6f:77:bd:3e:
1d:c2:75:ec:42:ed:ca:b6:d1:6c:be:d1:83:f1:b5:10:3d:fa:
1b:6b:56:ff:2e:e7:22:09:54:64:68:be:cc:95:ac:ad:25:e7:
de:f3:56:2e
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYzEkwRfUJBIeun/i/WbZuHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MDFjODQ1ZjEzZGQ0YWQ2ZTlkYWU0NzBkNWZmNjljNWNj
YTM3NzEwHhcNMjQwMTAxMTAzMDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2FkYjcxNmYxMGY4ZjIyMjlmNjI4OTZhMmUyOTJlMmFhYmVjMTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyG9+HBKaPahjlE/ETumO13OlvGE
crtWJDNPRRxm5mU2yVPH2Kdv5nhOxCSUsTGfDROIodFEykrqYFp7wHdMk4bSSikQ
+T+hCzfKlNXw7Wow6WV7qTIAiS+hOCptpeMH2gWSXLVry1QWSNCnEQ3xN4sH4hxT
uzzal4mYs0ZdnJGZNrhwNTUNbzYc3/AHz8NunkNGDOwqNSSsZmW+fj4JVlFRX4FA
u2myM0fJgRD7AoQNYyaktH0Ax62PP8M5AcsdIsrsnmLd3Rk7aYY+P8ZKU1TOtQXd
HW7148HtYit1JY3MDjO3tr2Qs1VFIqGFD2+cDfgzc+ASohaDDKazjdPkEQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFDOttxbxD48iKfYolqLikuKqvsGDMB8GA1UdIwQY
MBaAFBUByEXxPdStbp2uRw1f9pxcyjdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEt
ZWQ3OTE1NDM2YjI3LzEvTTYyM0Z2RVBqeUlwOWlpV291S1M0cXEtd1lNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEtZWQ3OTE1NDM2YjI3
LzEvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAU4vCAwQA
U4vIMAwDBABTi9EDBAJTi9AwDQYJKoZIhvcNAQELBQADggEBADuMqQjpQMUtxkMG
KZu00deQLWkEaYAV7DLNkCdnsQppjEDOgnu7B5fHgrxSdkDoHkuy34ACT96HVVR4
rB1gOW+Ge+f6YYkdYNqdmi6Q7jSGpSUo8/FBPPXtAqSx454HlTBWOdOi5yNwslcH
Gq+FPHctK7ldp++o6i3HbmOYOLPVUTtW6sADqdgJGJr2Ys02mEsDEZQNpclc70Xt
O1Srw/fZHP+ug2CqIudPgUX3GHMEvxXF92G6W8Hm3i6p/+93yJfxNA2uz33vp5pn
5PQMpEBYygIub3e9Ph3CdexC7cq20Wy+0YPxtRA9+htrVv8u5yIJVGRovsyVrK0l
597zVi4=
-----END CERTIFICATE-----
Generated at Thu May 9 02:53:18 2024 by rpki-client on console-ams.rpki-client.org