Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/sOEeVPW056q-A5Y364PWobf33Eg.roa
File: sOEeVPW056q-A5Y364PWobf33Eg.roa (raw, json)
Hash identifier: A6+dZIFkxBqu76Ya78VAvhJGaF5I3Zt8QFsFIXqblvM=
Subject key identifier: B0:E1:1E:54:F5:B4:E7:AA:BE:03:96:37:EB:83:D6:A1:B7:F7:DC:48
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0192C0172C32FCDF185D969ED136EF4BA57E
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/sOEeVPW056q-A5Y364PWobf33Eg.roa
Signing time: Thu 24 Oct 2024 19:53:17 +0000
ROA not before: Thu 24 Oct 2024 19:53:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214088
IP address blocks: 85.133.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c0:17:2c:32:fc:df:18:5d:96:9e:d1:36:ef:4b:a5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 24 19:53:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0e11e54f5b4e7aabe039637eb83d6a1b7f7dc48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:84:1b:79:c6:e7:b7:4c:23:b6:79:63:84:7a:
3b:be:af:c0:de:fc:4e:72:52:1f:cf:50:7d:7c:c4:
a2:df:21:7b:a7:e6:c8:df:fd:d2:6d:90:7d:c3:b8:
93:bd:ea:5e:53:f9:2b:06:a3:70:1a:48:15:c3:55:
76:dd:d4:32:ff:4e:47:17:d4:11:8a:88:0c:69:e6:
8e:e5:1a:ee:8e:0b:7c:b3:ca:d8:77:58:67:04:8e:
fd:de:c3:a4:90:98:ea:d5:69:e4:a9:3c:cc:37:cc:
92:35:29:63:3d:53:c2:b3:1a:ef:86:87:c3:ac:da:
4b:c0:a2:4b:5b:70:16:12:28:8b:bc:5f:e8:52:c5:
35:b4:71:7f:37:56:e7:07:f3:c1:d2:0a:85:ad:ae:
11:b4:40:04:ad:13:5a:13:03:57:4c:af:4b:d6:59:
77:75:f8:2d:d5:5d:9e:f4:67:a7:a4:00:af:a1:4f:
2b:cc:e7:ad:fb:5f:f7:30:e1:6f:0b:5f:a9:8f:04:
a7:7b:9e:79:ce:36:7a:04:5e:5a:73:d3:cf:7c:ef:
55:d2:bb:2b:a2:e3:29:d3:59:0f:7a:81:d0:25:2c:
88:7e:0f:8e:99:26:82:2f:eb:6c:f7:c8:ec:73:cf:
7c:1b:c3:b8:32:1f:b5:57:38:90:91:17:20:3d:0e:
98:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E1:1E:54:F5:B4:E7:AA:BE:03:96:37:EB:83:D6:A1:B7:F7:DC:48
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/sOEeVPW056q-A5Y364PWobf33Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.221.0/24
Signature Algorithm: sha256WithRSAEncryption
93:b6:1f:87:28:3d:c4:58:4e:8c:6c:46:c8:7b:75:bc:61:24:
e8:33:7e:d0:d8:18:9c:bd:14:9e:1b:d3:65:75:c0:5d:56:7b:
a4:8e:f7:13:fe:db:78:63:a3:38:3c:d3:cf:4b:1f:bd:ac:8c:
ae:b2:d4:a4:6e:9b:4f:86:44:b8:e7:1b:4b:0c:43:a9:a9:57:
5b:48:d2:29:10:bd:14:be:9c:ea:16:5d:7c:81:b5:7f:30:a3:
f3:ed:9e:f3:eb:84:db:e3:2e:9c:22:eb:f0:e4:d4:b6:24:39:
a5:8c:70:a4:7e:6f:74:40:a9:53:2d:76:c3:6d:3a:0e:97:7f:
4b:00:b3:63:ad:20:6b:f1:3e:63:1f:f7:8b:71:f2:75:77:e7:
60:1c:26:f0:bf:5d:7f:80:ab:3d:2d:4e:5c:a6:49:49:99:72:
a3:77:a8:68:2e:64:69:6a:68:27:90:65:93:00:fd:ef:de:28:
5b:49:d8:95:0d:42:06:4b:f1:a0:f1:6c:4d:3d:46:9c:1a:7e:
c7:1e:c7:f8:a6:4c:cd:96:13:4c:23:75:6b:5d:72:d4:cc:96:
9b:c6:ad:18:77:c9:56:c0:53:79:67:34:37:fb:92:96:eb:3f:
42:ea:4d:a8:ac:12:ef:55:44:38:71:b6:aa:66:fa:97:f0:22:
96:0a:dd:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLAFywy/N8YXZae0TbvS6V+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjQxMDI0MTk1MzE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGUxMWU1NGY1YjRlN2FhYmUwMzk2MzdlYjgzZDZhMWI3ZjdkYzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIQbecbnt0wjtnljhHo7vq/A3vxO
clIfz1B9fMSi3yF7p+bI3/3SbZB9w7iTvepeU/krBqNwGkgVw1V23dQy/05HF9QR
iogMaeaO5Rrujgt8s8rYd1hnBI793sOkkJjq1WnkqTzMN8ySNSljPVPCsxrvhofD
rNpLwKJLW3AWEiiLvF/oUsU1tHF/N1bnB/PB0gqFra4RtEAErRNaEwNXTK9L1ll3
dfgt1V2e9GenpACvoU8rzOet+1/3MOFvC1+pjwSne555zjZ6BF5ac9PPfO9V0rsr
ouMp01kPeoHQJSyIfg+OmSaCL+ts98jsc898G8O4Mh+1VziQkRcgPQ6YPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLDhHlT1tOeqvgOWN+uD1qG399xIMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvc09FZVZQVzA1NnEtQTVZMzY0UFdvYmYzM0VnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYXdMA0G
CSqGSIb3DQEBCwUAA4IBAQCTth+HKD3EWE6MbEbIe3W8YSToM37Q2BicvRSeG9Nl
dcBdVnukjvcT/tt4Y6M4PNPPSx+9rIyustSkbptPhkS45xtLDEOpqVdbSNIpEL0U
vpzqFl18gbV/MKPz7Z7z64Tb4y6cIuvw5NS2JDmljHCkfm90QKlTLXbDbToOl39L
ALNjrSBr8T5jH/eLcfJ1d+dgHCbwv11/gKs9LU5cpklJmXKjd6hoLmRpamgnkGWT
AP3v3ihbSdiVDUIGS/Gg8WxNPUacGn7HHsf4pkzNlhNMI3VrXXLUzJabxq0Yd8lW
wFN5ZzQ3+5KW6z9C6k2orBLvVUQ4cbaqZvqX8CKWCt3f
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:30:17 2024 by rpki-client on console-ams.rpki-client.org