Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/AgEHF5ByvUq6BX3DY16Ydp2Tn-0.roa
File: AgEHF5ByvUq6BX3DY16Ydp2Tn-0.roa (raw, json)
Hash identifier: 6Wu/abKTjeiHWILGgsLL2SCExOCLwxjN7kQOORs/bVo=
Subject key identifier: 02:01:07:17:90:72:BD:4A:BA:05:7D:C3:63:5E:98:76:9D:93:9F:ED
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018D5166FA36EF1EAE9C33863C8CC19B00BD
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/AgEHF5ByvUq6BX3DY16Ydp2Tn-0.roa
Signing time: Sun 28 Jan 2024 18:48:39 +0000
ROA not before: Sun 28 Jan 2024 18:48:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204834
IP address blocks: 85.133.160.0/22 maxlen: 24
85.133.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:51:66:fa:36:ef:1e:ae:9c:33:86:3c:8c:c1:9b:00:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 28 18:48:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=020107179072bd4aba057dc3635e98769d939fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:79:75:7f:c9:22:22:90:b4:97:70:33:bb:8a:
85:c2:0f:15:bd:13:28:15:87:4a:5f:51:63:3a:d6:
eb:5f:eb:96:68:8b:8c:cc:aa:94:80:60:f9:45:e9:
ab:ba:14:97:ba:63:b0:f8:ac:41:f9:11:09:60:67:
71:44:5a:1f:ab:6d:77:15:d6:b7:ee:ee:d9:ab:8e:
4e:1f:e0:76:30:c7:d3:19:8a:f7:11:c3:9a:3a:99:
ca:93:85:1f:1e:3a:4f:bc:f8:0d:d0:13:fd:66:76:
52:69:41:1d:fb:c1:7d:14:99:64:2a:6c:cb:bf:30:
9e:de:a4:91:7f:ce:d2:cd:bb:32:e3:c1:a9:f7:23:
dc:c2:2d:bd:d7:79:dd:6c:9c:e0:da:6d:72:0e:37:
23:64:f3:2d:b2:e2:81:1f:a3:45:84:08:f2:d7:d4:
bf:cb:69:fb:e4:56:ce:eb:e8:64:9a:ec:75:67:61:
32:15:a6:14:08:68:18:d5:9d:e9:4d:10:da:fa:2b:
19:f8:ec:72:e6:4b:a8:d3:d3:02:f4:ca:b4:7b:2b:
bd:4e:f7:20:87:ea:b5:e5:74:9d:44:b5:65:64:8d:
95:11:61:65:9c:be:94:f9:5c:46:08:bb:c6:07:a6:
44:57:e4:6c:66:a2:f4:d6:e8:a0:04:63:44:4e:52:
77:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:01:07:17:90:72:BD:4A:BA:05:7D:C3:63:5E:98:76:9D:93:9F:ED
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/AgEHF5ByvUq6BX3DY16Ydp2Tn-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.160.0/22
85.133.242.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ea:76:b4:3a:17:18:a6:35:b2:c3:ce:40:39:b6:13:fd:6c:
8d:04:84:21:66:4b:15:4c:9a:79:ee:c6:dc:ba:62:8a:73:22:
8b:03:6c:37:85:0c:56:d0:1b:33:27:4b:16:93:37:51:3b:a7:
fd:df:1b:11:36:da:e0:b1:bb:1e:87:d3:af:11:95:db:3e:ab:
01:3d:ca:fb:88:9b:72:e1:b0:99:90:c9:a1:9d:c9:85:00:20:
bf:50:df:0e:70:6c:5e:48:80:79:1d:3b:de:b7:08:86:50:84:
99:26:53:73:eb:28:66:ac:ef:20:76:5c:72:ae:28:cc:e2:d2:
5d:28:e8:e6:af:c4:2d:e1:01:c0:a5:10:7a:71:67:9f:77:a9:
91:ad:70:ef:c0:03:e1:67:b5:29:d3:8f:22:11:cc:f1:83:6c:
d4:c2:10:2f:54:e1:8d:b0:b5:71:61:9b:fd:2c:d3:23:b8:cd:
58:9d:d8:1f:d0:42:82:05:1e:b7:89:37:a2:76:62:8d:c8:5c:
44:70:0d:39:a5:ea:68:62:f4:c4:24:73:c4:a4:8a:90:b9:2d:
6d:52:e4:97:82:50:34:42:ae:e5:02:00:51:66:a5:a3:bb:39:
18:87:4e:9e:56:15:86:d1:77:40:ab:69:14:9d:33:31:41:71:
84:3a:79:d0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY1RZvo27x6unDOGPIzBmwC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjQwMTI4MTg0ODM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjAxMDcxNzkwNzJiZDRhYmEwNTdkYzM2MzVlOTg3NjlkOTM5ZmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Hl1f8kiIpC0l3Azu4qFwg8VvRMo
FYdKX1FjOtbrX+uWaIuMzKqUgGD5RemruhSXumOw+KxB+REJYGdxRFofq213Fda3
7u7Zq45OH+B2MMfTGYr3EcOaOpnKk4UfHjpPvPgN0BP9ZnZSaUEd+8F9FJlkKmzL
vzCe3qSRf87Szbsy48Gp9yPcwi2913ndbJzg2m1yDjcjZPMtsuKBH6NFhAjy19S/
y2n75FbO6+hkmux1Z2EyFaYUCGgY1Z3pTRDa+isZ+Oxy5kuo09MC9Mq0eyu9Tvcg
h+q15XSdRLVlZI2VEWFlnL6U+VxGCLvGB6ZEV+RsZqL01uigBGNETlJ3LwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAIBBxeQcr1KugV9w2NemHadk5/tMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvQWdFSEY1Qnl2VXE2QlgzRFkxNllkcDJUbi0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVYWgAwQA
VYXyMA0GCSqGSIb3DQEBCwUAA4IBAQAe6na0OhcYpjWyw85AObYT/WyNBIQhZksV
TJp57sbcumKKcyKLA2w3hQxW0BszJ0sWkzdRO6f93xsRNtrgsbseh9OvEZXbPqsB
Pcr7iJty4bCZkMmhncmFACC/UN8OcGxeSIB5HTvetwiGUISZJlNz6yhmrO8gdlxy
rijM4tJdKOjmr8Qt4QHApRB6cWefd6mRrXDvwAPhZ7Up048iEczxg2zUwhAvVOGN
sLVxYZv9LNMjuM1Yndgf0EKCBR63iTeidmKNyFxEcA05pepoYvTEJHPEpIqQuS1t
UuSXglA0Qq7lAgBRZqWjuzkYh06eVhWG0XdAq2kUnTMxQXGEOnnQ
-----END CERTIFICATE-----
Generated at Sat Jun 1 14:05:15 2024 by rpki-client on console-ams.rpki-client.org