Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/gIaeUvc7kRvqBaO6Kav28j6LTeo.roa
File: gIaeUvc7kRvqBaO6Kav28j6LTeo.roa (raw, json)
Hash identifier: Wdyj0rZhq/YnRd2iO6cUIMBFbGlhQlGCbZe6/1LRAU0=
Subject key identifier: 80:86:9E:52:F7:3B:91:1B:EA:05:A3:BA:29:AB:F6:F2:3E:8B:4D:EA
Certificate issuer: /CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
Certificate serial: 018CC5001410D13592187DF4EAC27F6E8FE6
Authority key identifier: 13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/gIaeUvc7kRvqBaO6Kav28j6LTeo.roa
Signing time: Mon 01 Jan 2024 12:29:25 +0000
ROA not before: Mon 01 Jan 2024 12:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30058
IP address blocks: 185.5.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 00:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:14:10:d1:35:92:18:7d:f4:ea:c2:7f:6e:8f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
Validity
Not Before: Jan 1 12:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80869e52f73b911bea05a3ba29abf6f23e8b4dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:65:2d:7f:79:db:59:ff:67:73:a0:47:bd:03:
82:4e:75:d6:64:79:3c:d9:98:97:07:b8:35:d7:ec:
b3:37:80:41:43:20:d9:6b:0b:f5:fd:29:66:09:41:
b1:30:a8:fe:8e:d5:d1:ec:14:5c:ca:c0:3a:ad:ac:
d3:f4:8f:09:48:b0:82:e0:b0:b4:2a:3d:0e:f0:f9:
49:bb:0f:69:2a:dd:04:81:e1:21:d5:77:7d:a3:85:
ff:1f:f2:e0:b0:5d:ef:aa:24:3b:fc:b5:66:ed:f2:
f9:1b:3e:ce:ff:52:49:b4:63:60:14:dc:c0:a0:81:
03:d9:bc:6d:e7:e9:45:5b:83:8c:61:13:e6:51:a2:
5f:cb:33:1d:a7:b1:ff:a3:5b:97:66:7b:b6:f0:40:
86:bd:41:4b:14:37:79:42:1b:4e:e8:ab:84:95:b8:
2f:b5:af:c5:b8:70:e1:9e:79:ac:d5:16:8f:40:d6:
32:29:41:54:a9:a4:32:54:a4:94:20:25:50:eb:22:
93:d5:fe:f5:1f:7d:b5:e0:f9:8e:c9:52:11:5e:3e:
7a:06:2d:cf:2a:83:32:cd:79:3a:bb:89:09:3c:be:
50:03:ed:95:92:de:29:f7:e5:09:2c:8a:70:81:96:
24:b2:ff:1b:f7:20:5e:eb:da:cc:d1:dc:32:0e:b0:
c2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:86:9E:52:F7:3B:91:1B:EA:05:A3:BA:29:AB:F6:F2:3E:8B:4D:EA
X509v3 Authority Key Identifier:
keyid:13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/gIaeUvc7kRvqBaO6Kav28j6LTeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.47.0/24
Signature Algorithm: sha256WithRSAEncryption
53:1f:38:d9:8a:b5:6f:ab:5b:16:cd:08:06:ac:0d:7e:df:90:
61:b3:05:84:bb:ab:a7:90:c7:20:ee:48:7e:5c:76:d2:fe:a4:
b7:1f:9d:ff:dd:e6:6b:1b:ae:e6:be:85:46:8a:ae:5d:f9:1f:
5c:96:59:d0:3f:c9:a8:45:15:95:34:7a:0e:5f:e5:c5:c1:72:
d8:de:fb:22:fa:46:53:b9:1a:f0:3d:b4:65:3c:59:57:a5:8b:
30:7a:d9:3c:55:c8:c7:c5:1e:0e:cf:f7:5c:47:18:cb:b0:b1:
da:1f:e0:cf:e7:3f:cb:38:78:02:a4:f5:dc:12:81:24:32:28:
cd:13:08:ae:3b:49:b3:f9:d3:89:8f:97:25:96:6f:84:d3:19:
44:12:8a:32:d8:b6:d7:7c:9d:e8:c1:87:20:e0:0d:8f:6f:11:
53:0d:12:24:16:3f:b8:5a:3d:31:55:ce:4f:70:ea:3f:88:72:
8b:c0:58:9b:3b:82:a1:9b:47:7d:68:1f:1a:9d:78:d6:80:1f:
a2:01:61:b0:71:53:1a:24:be:99:15:b8:9d:ee:c9:dd:03:70:
b6:87:fb:89:a5:54:61:d8:ea:15:e2:46:9b:41:78:54:86:c2:
23:c7:49:38:f6:b1:e1:6e:1d:b3:da:53:b1:12:56:e3:14:7b:
8e:62:a0:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFABQQ0TWSGH306sJ/bo/mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzM2NkN2MxYTljNzljODJlZWU1Yzg2YTQyM2MxN2MxZDYz
YzM0MTMwHhcNMjQwMTAxMTIyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDg2OWU1MmY3M2I5MTFiZWEwNWEzYmEyOWFiZjZmMjNlOGI0ZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGUtf3nbWf9nc6BHvQOCTnXWZHk8
2ZiXB7g11+yzN4BBQyDZawv1/SlmCUGxMKj+jtXR7BRcysA6razT9I8JSLCC4LC0
Kj0O8PlJuw9pKt0EgeEh1Xd9o4X/H/LgsF3vqiQ7/LVm7fL5Gz7O/1JJtGNgFNzA
oIED2bxt5+lFW4OMYRPmUaJfyzMdp7H/o1uXZnu28ECGvUFLFDd5QhtO6KuElbgv
ta/FuHDhnnms1RaPQNYyKUFUqaQyVKSUICVQ6yKT1f71H3214PmOyVIRXj56Bi3P
KoMyzXk6u4kJPL5QA+2Vkt4p9+UJLIpwgZYksv8b9yBe69rM0dwyDrDCdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFICGnlL3O5Eb6gWjuimr9vI+i03qMB8GA1UdIwQY
MBaAFBM818Gpx5yC7uXIakI8F8HWPDQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXp6WHdhbkhuSUx1NWNocVFqd1h3ZFk4TkJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84MmMwYTItODA0Yi00NDZkLWFiMjQt
NGYzOGM2NTZiMjU2LzEvZ0lhZVV2YzdrUnZxQmFPNkthdjI4ajZMVGVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84MmMwYTItODA0Yi00NDZkLWFiMjQtNGYzOGM2NTZiMjU2
LzEvRXp6WHdhbkhuSUx1NWNocVFqd1h3ZFk4TkJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQUvMA0G
CSqGSIb3DQEBCwUAA4IBAQBTHzjZirVvq1sWzQgGrA1+35BhswWEu6unkMcg7kh+
XHbS/qS3H53/3eZrG67mvoVGiq5d+R9cllnQP8moRRWVNHoOX+XFwXLY3vsi+kZT
uRrwPbRlPFlXpYswetk8VcjHxR4Oz/dcRxjLsLHaH+DP5z/LOHgCpPXcEoEkMijN
EwiuO0mz+dOJj5cllm+E0xlEEooy2LbXfJ3owYcg4A2PbxFTDRIkFj+4Wj0xVc5P
cOo/iHKLwFibO4Khm0d9aB8anXjWgB+iAWGwcVMaJL6ZFbid7sndA3C2h/uJpVRh
2OoV4kabQXhUhsIjx0k49rHhbh2z2lOxElbjFHuOYqCr
-----END CERTIFICATE-----
Generated at Thu May 2 10:30:37 2024 by rpki-client on console-fra.rpki-client.org