Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/85RYvJSWdDmu7h8f44kQ1uh1p8Y.roa
File: 85RYvJSWdDmu7h8f44kQ1uh1p8Y.roa (raw, json)
Hash identifier: esizZaApPlHnk0EE/cX7BDfClQwbFjCZCGbENOg0ym8=
Subject key identifier: F3:94:58:BC:94:96:74:39:AE:EE:1F:1F:E3:89:10:D6:E8:75:A7:C6
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 01918EC15DC3C5CEF7549CF377D91328F59D
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/85RYvJSWdDmu7h8f44kQ1uh1p8Y.roa
Signing time: Mon 26 Aug 2024 12:55:22 +0000
ROA not before: Mon 26 Aug 2024 12:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 45.138.12.0/22 maxlen: 22
152.89.28.0/22 maxlen: 22
193.135.151.0/24 maxlen: 24
193.135.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:c1:5d:c3:c5:ce:f7:54:9c:f3:77:d9:13:28:f5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Aug 26 12:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f39458bc94967439aeee1f1fe38910d6e875a7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d6:d7:9f:bd:3d:4f:3a:ee:3b:e6:2c:25:a3:
91:f2:28:ef:c1:dd:3d:45:d3:a5:49:e7:5d:8f:17:
29:22:26:72:05:f0:7f:e3:78:78:6b:0c:e5:ec:07:
7c:c1:84:a8:f9:6d:06:02:b2:05:72:1b:f2:64:13:
99:35:67:e6:03:9e:e5:57:72:97:02:62:15:8f:60:
a2:31:c1:a7:3b:ad:41:d3:2f:5f:ad:95:95:2e:dd:
f6:8c:2a:8e:fe:f6:6e:7e:11:57:12:39:91:b0:9e:
fa:21:78:8f:d4:b1:87:d3:4d:27:04:04:0a:e7:9c:
34:c5:e1:03:99:b6:ed:93:3b:35:f2:84:3a:ab:f0:
67:af:ca:06:2a:fc:bf:79:ea:b2:32:e8:64:df:eb:
97:ee:4e:ab:88:fc:c3:2b:95:4b:52:a3:10:20:bc:
b3:b5:31:55:8a:3a:6c:02:ee:00:2f:48:0b:cd:6b:
57:83:e2:e8:ec:71:c7:c6:87:8e:d4:83:50:e5:d4:
ee:46:47:dc:32:df:fc:81:77:df:85:f2:4c:58:b6:
24:94:68:87:d6:c2:75:df:9a:6e:04:86:ab:f5:26:
0e:fc:d4:3f:a5:31:99:44:d6:96:af:de:f9:88:69:
36:8a:a4:bb:c9:73:4c:6a:92:a3:00:15:15:31:9e:
a1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:94:58:BC:94:96:74:39:AE:EE:1F:1F:E3:89:10:D6:E8:75:A7:C6
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/85RYvJSWdDmu7h8f44kQ1uh1p8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.12.0/22
152.89.28.0/22
193.135.151.0/24
193.135.174.0/24
Signature Algorithm: sha256WithRSAEncryption
67:25:1c:d7:43:c2:00:9e:d8:ec:20:99:45:d7:60:08:1e:63:
b0:33:06:cf:d3:43:96:5a:23:69:10:dd:9a:ab:be:24:66:93:
77:1e:7c:3f:2f:ac:23:60:b2:f8:65:b2:5b:43:c5:53:f8:25:
e6:c6:e0:c3:63:86:c5:f3:81:d4:56:53:f5:67:d8:1d:03:a0:
ba:c5:13:a1:53:56:37:4c:13:63:19:b5:28:f6:8f:0c:6d:6f:
36:7f:3c:7e:a2:a1:8d:25:51:65:31:8d:76:0f:f3:6b:c8:e8:
9d:2e:28:f0:72:0e:a3:07:ae:bf:b3:be:c1:7f:0f:b3:cf:1d:
87:11:2c:72:20:82:d3:a4:3e:00:ce:47:49:c3:3d:69:91:4c:
3e:67:6b:33:04:1b:fc:2a:0c:d7:cf:11:02:0c:ab:88:ef:4a:
4a:46:71:5f:e6:b1:e5:49:cd:f2:15:d0:10:e2:d9:ba:f9:02:
88:68:07:e6:7b:8d:32:fb:df:b4:07:48:96:2d:4f:91:ac:aa:
dc:6e:ad:f2:e6:6f:5e:f1:94:44:c5:b5:8e:67:a1:f0:1a:69:
79:40:cd:a4:1e:5a:a6:5f:8c:a8:11:2f:83:f9:f1:31:f0:db:
3d:e0:d9:e5:74:4f:2a:a3:12:11:27:f9:e0:cc:2f:f5:2d:66:
bc:2e:b4:28
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZGOwV3Dxc73VJzzd9kTKPWdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx
ZTZiMTcwHhcNMjQwODI2MTI1NTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzk0NThiYzk0OTY3NDM5YWVlZTFmMWZlMzg5MTBkNmU4NzVhN2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9bXn709TzruO+YsJaOR8ijvwd09
RdOlSeddjxcpIiZyBfB/43h4awzl7Ad8wYSo+W0GArIFchvyZBOZNWfmA57lV3KX
AmIVj2CiMcGnO61B0y9frZWVLt32jCqO/vZufhFXEjmRsJ76IXiP1LGH000nBAQK
55w0xeEDmbbtkzs18oQ6q/Bnr8oGKvy/eeqyMuhk3+uX7k6riPzDK5VLUqMQILyz
tTFVijpsAu4AL0gLzWtXg+Lo7HHHxoeO1INQ5dTuRkfcMt/8gXffhfJMWLYklGiH
1sJ135puBIar9SYO/NQ/pTGZRNaWr975iGk2iqS7yXNMapKjABUVMZ6hoQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPOUWLyUlnQ5ru4fH+OJENbodafGMB8GA1UdIwQY
MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt
OWU4OTVkMGVmOGQyLzEvODVSWXZKU1dkRG11N2g4ZjQ0a1ExdWgxcDhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy
LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLYoMAwQC
mFkcAwQAwYeXAwQAwYeuMA0GCSqGSIb3DQEBCwUAA4IBAQBnJRzXQ8IAntjsIJlF
12AIHmOwMwbP00OWWiNpEN2aq74kZpN3Hnw/L6wjYLL4ZbJbQ8VT+CXmxuDDY4bF
84HUVlP1Z9gdA6C6xROhU1Y3TBNjGbUo9o8MbW82fzx+oqGNJVFlMY12D/NryOid
Lijwcg6jB66/s77Bfw+zzx2HESxyIILTpD4AzkdJwz1pkUw+Z2szBBv8KgzXzxEC
DKuI70pKRnFf5rHlSc3yFdAQ4tm6+QKIaAfme40y+9+0B0iWLU+RrKrcbq3y5m9e
8ZRExbWOZ6HwGml5QM2kHlqmX4yoES+D+fEx8Ns94NnldE8qoxIRJ/ngzC/1LWa8
LrQo
-----END CERTIFICATE-----
Generated at Tue Oct 22 19:26:32 2024 by rpki-client on console-ams.rpki-client.org