Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/Ev8SGvmsQrnuD8ae4V9_p_o8VRI.roa
File: Ev8SGvmsQrnuD8ae4V9_p_o8VRI.roa (raw, json)
Hash identifier: CKaQDX5cirCXdBtt3FNYkZwu0tkh4NzQ012wzeXdQfY=
Subject key identifier: 12:FF:12:1A:F9:AC:42:B9:EE:0F:C6:9E:E1:5F:7F:A7:FA:3C:55:12
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 018CC2DAEA5A019B5DCACCAD992D6A043478
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/Ev8SGvmsQrnuD8ae4V9_p_o8VRI.roa
Signing time: Mon 01 Jan 2024 02:29:35 +0000
ROA not before: Mon 01 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.85.78.0/24 maxlen: 24
185.85.79.0/24 maxlen: 24
91.190.168.0/24 maxlen: 24
91.190.171.0/24 maxlen: 24
91.190.169.0/24 maxlen: 24
91.190.172.0/24 maxlen: 24
91.190.175.0/24 maxlen: 24
91.190.174.0/24 maxlen: 24
91.190.173.0/24 maxlen: 24
5.63.24.0/24 maxlen: 24
5.63.27.0/24 maxlen: 24
5.63.26.0/24 maxlen: 24
5.63.25.0/24 maxlen: 24
5.63.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ea:5a:01:9b:5d:ca:cc:ad:99:2d:6a:04:34:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12ff121af9ac42b9ee0fc69ee15f7fa7fa3c5512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d6:d8:5d:1b:09:3e:37:e8:5f:62:da:de:ec:
95:24:28:17:d7:67:14:f8:36:bb:c0:24:9e:a5:ba:
b8:60:97:84:e7:d4:24:eb:4e:2f:ee:b8:5b:74:bf:
ae:47:66:45:0c:a7:a9:de:de:7c:1b:52:7a:98:05:
3d:5b:7a:79:56:61:de:50:08:56:45:44:9b:3b:16:
6b:f7:26:7d:4f:57:eb:5f:b0:6a:19:ed:95:6c:57:
6e:67:0c:82:b1:08:ce:49:a5:72:00:e9:1a:87:d3:
50:fe:a3:b7:82:40:04:9a:3f:d3:bc:bc:a1:98:21:
5c:4c:68:eb:99:33:dd:80:57:0c:7e:b8:6f:7d:9f:
ff:d9:49:aa:40:d3:72:c3:f7:13:a4:12:69:a0:ab:
1d:86:1f:c4:b5:95:14:9b:53:3d:75:3f:58:ed:8d:
5b:53:90:c6:65:07:1d:19:c9:d9:53:e3:88:0c:ec:
0a:e2:10:5c:6c:d8:bf:81:ed:34:5b:ae:fc:fc:66:
17:63:f4:e5:d8:f2:62:de:e1:b2:93:cd:aa:e0:2c:
f9:64:d0:d3:c1:e4:3a:3e:d2:9c:fb:bf:e8:92:95:
c8:2d:1a:7a:19:44:67:5a:8c:05:eb:4b:df:f9:ed:
35:50:54:da:51:32:64:74:df:21:c2:f9:b4:f2:f1:
67:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FF:12:1A:F9:AC:42:B9:EE:0F:C6:9E:E1:5F:7F:A7:FA:3C:55:12
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/Ev8SGvmsQrnuD8ae4V9_p_o8VRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.24.0-5.63.28.255
91.190.168.0/23
91.190.171.0-91.190.175.255
185.85.78.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:ed:d4:96:94:61:b6:e2:39:30:d0:cf:c5:44:a3:52:e2:18:
c8:12:95:72:e6:52:b9:ea:60:f3:3d:4d:ad:35:ff:4b:f5:72:
ce:ce:f3:ba:bf:df:49:c1:65:77:64:ee:5b:a2:62:f9:08:da:
c1:99:42:d7:b0:41:78:91:2f:a8:ef:05:4f:da:b9:b1:6d:bb:
79:06:a4:d3:9e:1c:13:26:91:22:fc:37:f2:34:2e:61:f0:64:
ef:f5:8c:c0:9a:f5:06:7d:e2:56:0a:28:76:5c:2c:88:88:b9:
37:b3:3d:e3:d6:e0:06:38:34:3a:72:51:3b:63:4d:bd:b9:d6:
02:ef:9c:a6:3a:e8:9a:80:97:d4:c4:6b:3a:dc:5e:06:da:0e:
ff:4c:70:3a:7b:9b:d7:e3:ff:b5:01:66:85:ca:50:d7:70:8e:
97:11:6a:5e:44:ee:20:72:b0:ad:26:c5:a9:4b:52:4a:a4:d5:
ac:1a:12:d4:cd:b9:59:23:e9:27:89:69:d5:4e:72:6a:9d:86:
c4:69:a5:7d:6f:7d:fe:80:b1:4c:ff:46:ca:3d:a0:4c:39:f1:
95:81:95:dc:f4:21:84:4b:1c:7f:89:86:c5:5c:fe:73:c4:82:
49:55:4a:93:91:76:db:8e:dc:45:c6:7d:93:9f:6a:1c:c1:f1:
a5:ed:dd:b2
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYzC2upaAZtdysytmS1qBDR4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMTQxYzUwOTA4MjRkMGExN2MyOWVjNDA1MGUyMTAwNzEx
M2ZiZGEwHhcNMjQwMTAxMDIyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmZmMTIxYWY5YWM0MmI5ZWUwZmM2OWVlMTVmN2ZhN2ZhM2M1NTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNbYXRsJPjfoX2La3uyVJCgX12cU
+Da7wCSepbq4YJeE59Qk604v7rhbdL+uR2ZFDKep3t58G1J6mAU9W3p5VmHeUAhW
RUSbOxZr9yZ9T1frX7BqGe2VbFduZwyCsQjOSaVyAOkah9NQ/qO3gkAEmj/TvLyh
mCFcTGjrmTPdgFcMfrhvfZ//2UmqQNNyw/cTpBJpoKsdhh/EtZUUm1M9dT9Y7Y1b
U5DGZQcdGcnZU+OIDOwK4hBcbNi/ge00W678/GYXY/Tl2PJi3uGyk82q4Cz5ZNDT
weQ6PtKc+7/okpXILRp6GURnWowF60vf+e01UFTaUTJkdN8hwvm08vFnOwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFBL/Ehr5rEK57g/GnuFff6f6PFUSMB8GA1UdIwQY
MBaAFFoUHFCQgk0KF8KexAUOIQBxE/vaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUt
ZWNlZWZmOGU4NGUwLzEvRXY4U0d2bXNRcm51RDhhZTRWOV9wX284VlJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUtZWNlZWZmOGU4NGUw
LzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAMFPxgD
BAAFPxwDBAFbvqgwDAMEAFu+qwMEBFu+oAMEAblVTjANBgkqhkiG9w0BAQsFAAOC
AQEAp+3UlpRhtuI5MNDPxUSjUuIYyBKVcuZSuepg8z1NrTX/S/Vyzs7zur/fScFl
d2TuW6Ji+QjawZlC17BBeJEvqO8FT9q5sW27eQak054cEyaRIvw38jQuYfBk7/WM
wJr1Bn3iVgoodlwsiIi5N7M949bgBjg0OnJRO2NNvbnWAu+cpjromoCX1MRrOtxe
BtoO/0xwOnub1+P/tQFmhcpQ13COlxFqXkTuIHKwrSbFqUtSSqTVrBoS1M25WSPp
J4lp1U5yap2GxGmlfW99/oCxTP9Gyj2gTDnxlYGV3PQhhEscf4mGxVz+c8SCSVVK
k5F2247cRcZ9k59qHMHxpe3dsg==
-----END CERTIFICATE-----
Generated at Thu May 2 16:34:43 2024 by rpki-client on console-fra.rpki-client.org