Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/EzCVx3LmMfzPw-ZiwqAE3dYQV0A.roa
File: EzCVx3LmMfzPw-ZiwqAE3dYQV0A.roa (raw, json)
Hash identifier: x/0UqH28cr1MjXuOhsebm0ed4ZTkL8O4wN91wiX5kcU=
Subject key identifier: 13:30:95:C7:72:E6:31:FC:CF:C3:E6:62:C2:A0:04:DD:D6:10:57:40
Certificate issuer: /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Certificate serial: 018CC9BC0A2FD0CDD5A054F1D4869E02F06F
Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/EzCVx3LmMfzPw-ZiwqAE3dYQV0A.roa
Signing time: Tue 02 Jan 2024 10:33:12 +0000
ROA not before: Tue 02 Jan 2024 10:33:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35242
IP address blocks: 194.45.208.0/21 maxlen: 21
193.29.132.0/24 maxlen: 24
195.80.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:0a:2f:d0:cd:d5:a0:54:f1:d4:86:9e:02:f0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Validity
Not Before: Jan 2 10:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=133095c772e631fccfc3e662c2a004ddd6105740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:43:78:4d:ce:c5:58:ca:5b:4e:34:f1:2c:d3:
83:64:57:95:43:fe:83:f3:28:d9:52:8f:b9:62:f1:
b8:5d:ca:73:01:f3:45:3f:d6:f2:75:c0:81:de:20:
37:01:cb:a0:12:78:59:d8:a4:09:92:63:fc:4e:9e:
a8:c1:bf:af:32:7a:a1:e5:c3:69:81:c7:17:26:6f:
a3:29:b4:6b:7a:88:6b:c8:fa:dc:93:19:03:2a:48:
6e:52:fd:69:6e:0b:6e:eb:25:73:6d:41:e0:79:f3:
a1:21:ff:ef:84:ba:d3:16:7d:63:52:85:12:5d:aa:
a0:de:0b:b9:5d:5f:d6:9b:fe:e3:40:a0:79:86:47:
c1:43:5d:0a:8a:d6:97:5c:1c:a3:b8:60:49:66:4a:
e2:bc:71:a3:f6:eb:33:90:1c:2c:b9:dc:97:e9:c6:
08:25:6a:5e:d9:6e:80:1f:15:e0:b6:75:9e:7d:31:
24:dd:9c:1c:eb:4a:d3:9f:04:8a:ab:47:0c:8e:8b:
0f:48:c7:8e:90:2e:d7:d4:df:a8:e3:92:91:fe:f2:
30:0c:23:e5:91:fd:bd:dc:98:89:4d:1e:39:9c:06:
20:8f:ef:47:8a:19:e6:31:e1:64:78:61:57:df:4d:
ca:e1:dc:3a:62:70:66:1a:31:2f:a8:77:1b:76:e0:
d8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:30:95:C7:72:E6:31:FC:CF:C3:E6:62:C2:A0:04:DD:D6:10:57:40
X509v3 Authority Key Identifier:
keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/EzCVx3LmMfzPw-ZiwqAE3dYQV0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.132.0/24
194.45.208.0/21
195.80.239.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:09:f3:75:d8:eb:f4:a0:80:f1:28:94:51:1f:6c:c8:f6:cc:
78:0d:bd:9b:91:50:01:92:20:3a:d9:5d:dd:01:3c:35:23:13:
04:0c:b3:4d:46:4f:d9:a8:0c:af:c5:ba:5d:0e:9b:3e:b2:1d:
3f:4f:09:2b:4c:0a:61:85:89:b5:10:19:de:e7:a9:02:8e:ae:
6c:e2:9e:b1:02:b5:1f:59:75:2c:19:ce:55:47:5e:73:25:7b:
26:10:e8:89:a3:ac:4b:27:95:2c:a0:e4:96:d9:59:4c:5e:91:
d4:1b:5c:38:b5:fb:ab:2c:b0:90:5f:9e:4b:66:5f:c1:5f:50:
85:33:a2:e6:fe:26:54:66:07:ba:21:2c:14:fb:5d:14:71:b0:
2a:38:74:09:a3:3c:16:53:4c:f8:53:fe:92:27:cb:0c:0a:e5:
34:7f:13:08:10:87:7f:a6:47:e5:66:ce:1f:a4:03:00:48:02:
ad:23:89:c9:d9:83:a8:fc:4b:2f:3e:18:37:09:43:ac:e2:c0:
47:6e:84:7f:2b:fc:19:d0:cb:b2:41:0e:51:5c:19:a2:ab:f6:
43:e3:88:e2:c8:7a:32:5a:95:88:db:91:95:9f:8c:6f:33:e7:
6c:1d:2c:4a:42:8d:82:45:61:c7:91:12:b0:6c:e5:6b:c0:1b:
b7:7c:9d:d9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzJvAov0M3VoFTx1IaeAvBvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2MxYWFhZGI4MzIwZGQ4NDMyMzU0NThjZjJjNWNiZjQ3
MDRhZDYwHhcNMjQwMTAyMTAzMzEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzMwOTVjNzcyZTYzMWZjY2ZjM2U2NjJjMmEwMDRkZGQ2MTA1NzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkN4Tc7FWMpbTjTxLNODZFeVQ/6D
8yjZUo+5YvG4XcpzAfNFP9bydcCB3iA3AcugEnhZ2KQJkmP8Tp6owb+vMnqh5cNp
gccXJm+jKbRreohryPrckxkDKkhuUv1pbgtu6yVzbUHgefOhIf/vhLrTFn1jUoUS
Xaqg3gu5XV/Wm/7jQKB5hkfBQ10KitaXXByjuGBJZkrivHGj9uszkBwsudyX6cYI
JWpe2W6AHxXgtnWefTEk3Zwc60rTnwSKq0cMjosPSMeOkC7X1N+o45KR/vIwDCPl
kf293JiJTR45nAYgj+9HihnmMeFkeGFX303K4dw6YnBmGjEvqHcbduDYYwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBMwlcdy5jH8z8PmYsKgBN3WEFdAMB8GA1UdIwQY
MBaAFPV8GqrbgyDdhDI1RYzyxcv0cErWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVh3YXF0dURJTjJFTWpWRmpQTEZ5X1J3U3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jM2U4NzEtMjBjYy00NGY0LWJmYTAt
YTE4NTZkZDdiNWQ4LzEvRXpDVngzTG1NZnpQdy1aaXdxQUUzZFlRVjBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jM2U4NzEtMjBjYy00NGY0LWJmYTAtYTE4NTZkZDdiNWQ4
LzEvOVh3YXF0dURJTjJFTWpWRmpQTEZ5X1J3U3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwR2EAwQD
wi3QAwQAw1DvMA0GCSqGSIb3DQEBCwUAA4IBAQC0CfN12Ov0oIDxKJRRH2zI9sx4
Db2bkVABkiA62V3dATw1IxMEDLNNRk/ZqAyvxbpdDps+sh0/TwkrTAphhYm1EBne
56kCjq5s4p6xArUfWXUsGc5VR15zJXsmEOiJo6xLJ5UsoOSW2VlMXpHUG1w4tfur
LLCQX55LZl/BX1CFM6Lm/iZUZge6ISwU+10UcbAqOHQJozwWU0z4U/6SJ8sMCuU0
fxMIEId/pkflZs4fpAMASAKtI4nJ2YOo/EsvPhg3CUOs4sBHboR/K/wZ0MuyQQ5R
XBmiq/ZD44jiyHoyWpWI25GVn4xvM+dsHSxKQo2CRWHHkRKwbOVrwBu3fJ3Z
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:55:51 2024 by rpki-client on console-fra.rpki-client.org