Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/ieNKqgaapbV74PX6LmvKstpzWhk.roa
File: ieNKqgaapbV74PX6LmvKstpzWhk.roa (raw, json)
Hash identifier: 5Ki+twEc15xVd035QlctTYRhXXkGJH7ve8XeENT48Y8=
Subject key identifier: 89:E3:4A:AA:06:9A:A5:B5:7B:E0:F5:FA:2E:6B:CA:B2:DA:73:5A:19
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 018CC4248FB3E0299E973E243F06E7271109
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/ieNKqgaapbV74PX6LmvKstpzWhk.roa
Signing time: Mon 01 Jan 2024 08:29:39 +0000
ROA not before: Mon 01 Jan 2024 08:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28964
IP address blocks: 178.254.150.0/24 maxlen: 24
178.254.164.0/24 maxlen: 24
178.254.166.0/24 maxlen: 24
178.254.160.0/23 maxlen: 23
178.254.162.0/24 maxlen: 24
5.172.32.0/24 maxlen: 24
178.254.167.0/24 maxlen: 24
178.254.178.0/24 maxlen: 24
178.254.174.0/24 maxlen: 24
178.254.173.0/24 maxlen: 24
178.254.185.0/24 maxlen: 24
109.111.255.0/24 maxlen: 24
89.23.94.0/23 maxlen: 23
109.111.242.0/24 maxlen: 24
109.111.241.0/24 maxlen: 24
109.111.249.0/24 maxlen: 24
109.111.251.0/24 maxlen: 24
89.23.64.0/24 maxlen: 24
185.157.45.0/24 maxlen: 24
185.157.46.0/24 maxlen: 24
185.157.47.0/24 maxlen: 24
89.23.72.0/23 maxlen: 23
89.23.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:8f:b3:e0:29:9e:97:3e:24:3f:06:e7:27:11:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jan 1 08:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89e34aaa069aa5b57be0f5fa2e6bcab2da735a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:8d:95:c7:3f:36:19:ac:c7:77:50:1f:21:
80:11:a1:b6:d5:24:0b:50:23:18:ff:82:b7:fa:1a:
f0:2c:0f:29:69:8b:0c:3a:5a:66:c3:62:a8:0a:ed:
95:d8:c4:a4:e8:b0:26:ee:db:2a:b7:a0:b3:1d:b4:
8f:bc:bf:a6:66:da:b8:b8:85:63:40:6c:1c:cd:e6:
88:d9:47:7a:10:53:13:7d:82:dc:dd:fc:52:da:2a:
09:d9:1a:b7:5d:11:9f:f6:5d:69:3c:b1:ff:7f:58:
16:89:3a:8b:4f:a2:ad:f5:b6:1e:79:1b:c9:4b:66:
c5:b2:d2:ff:f3:7c:4b:b7:04:88:0a:83:a2:b9:13:
2b:be:1b:c8:58:a1:d8:d9:61:81:db:3d:52:9c:32:
87:6a:6c:72:99:80:ba:e0:2e:16:fd:f2:c8:93:b2:
6a:ae:2c:bc:d7:04:94:15:3e:54:9b:c2:4f:de:cc:
3c:35:ed:57:60:c5:23:da:cc:32:fe:8c:06:8b:eb:
35:c2:51:3a:4d:ae:7a:5f:40:75:0c:21:b0:02:a1:
07:a5:ee:11:e5:5f:ad:65:2d:ec:d3:d6:c8:b1:5c:
32:61:5f:90:2d:5d:eb:3c:32:48:ce:39:a2:26:69:
0c:c9:80:03:b8:b3:4b:15:fe:55:b5:46:da:e7:17:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E3:4A:AA:06:9A:A5:B5:7B:E0:F5:FA:2E:6B:CA:B2:DA:73:5A:19
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/ieNKqgaapbV74PX6LmvKstpzWhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.32.0/24
89.23.64.0/24
89.23.72.0/23
89.23.91.0/24
89.23.94.0/23
109.111.241.0-109.111.242.255
109.111.249.0/24
109.111.251.0/24
109.111.255.0/24
178.254.150.0/24
178.254.160.0-178.254.162.255
178.254.164.0/24
178.254.166.0/23
178.254.173.0-178.254.174.255
178.254.178.0/24
178.254.185.0/24
185.157.45.0-185.157.47.255
Signature Algorithm: sha256WithRSAEncryption
12:25:e3:b8:b4:32:b3:df:53:e3:bb:b7:dc:11:94:55:0f:fd:
8e:87:f1:70:35:cb:27:e7:69:5d:aa:46:03:15:1c:a1:7c:9e:
64:8d:2e:c8:52:1f:49:c5:98:3e:fb:0e:58:e9:ac:85:72:84:
40:7f:86:09:14:7d:8b:8c:24:a9:e3:ad:d4:ad:fa:7d:37:20:
9f:f2:6e:38:af:08:6f:a0:0d:a3:e5:ef:ec:b2:db:52:02:14:
75:f6:cc:b9:6a:82:bd:b5:01:18:64:5e:b4:e0:1d:5d:44:97:
f5:34:96:ed:b3:2d:94:3b:fa:82:2b:37:30:99:07:21:f2:74:
31:e1:aa:da:57:85:c4:86:06:8c:ef:89:a9:61:02:6e:f3:ca:
aa:6c:66:ec:b3:fc:d6:63:33:88:b4:40:c2:60:02:08:16:7b:
39:2f:e8:73:08:8d:35:d5:89:19:2d:57:51:09:a2:05:e0:99:
25:bb:53:21:cc:f7:d2:ff:fe:66:d6:ec:b9:91:a0:d7:7f:3c:
62:74:97:83:dc:c1:c5:c1:91:fe:9a:75:07:15:c6:41:ef:08:
6e:7f:5a:39:22:38:22:62:7a:1b:32:1e:26:b1:90:24:dd:19:
fa:c1:54:b2:fb:09:3e:21:91:0e:b8:e1:e1:bc:0e:93:9b:37:
3d:40:af:b1
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgISAYzEJI+z4Cmelz4kPwbnJxEJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk
OWNlMTYwHhcNMjQwMTAxMDgyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWUzNGFhYTA2OWFhNWI1N2JlMGY1ZmEyZTZiY2FiMmRhNzM1YTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSaNlcc/Nhmsx3dQHyGAEaG21SQL
UCMY/4K3+hrwLA8paYsMOlpmw2KoCu2V2MSk6LAm7tsqt6CzHbSPvL+mZtq4uIVj
QGwczeaI2Ud6EFMTfYLc3fxS2ioJ2Rq3XRGf9l1pPLH/f1gWiTqLT6Kt9bYeeRvJ
S2bFstL/83xLtwSICoOiuRMrvhvIWKHY2WGB2z1SnDKHamxymYC64C4W/fLIk7Jq
riy81wSUFT5Um8JP3sw8Ne1XYMUj2swy/owGi+s1wlE6Ta56X0B1DCGwAqEHpe4R
5V+tZS3s09bIsVwyYV+QLV3rPDJIzjmiJmkMyYADuLNLFf5VtUba5xcn8QIDAQAB
o4ICjjCCAoowHQYDVR0OBBYEFInjSqoGmqW1e+D1+i5ryrLac1oZMB8GA1UdIwQY
MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt
MGY2NmMxODg3OTE2LzEvaWVOS3FnYWFwYlY3NFBYNkxtdktzdHB6V2hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2
LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGjBggrBgEFBQcBBwEB/wSBkzCBkDCBjQQCAAEwgYYDBAAF
rCADBABZF0ADBAFZF0gDBABZF1sDBAFZF14wDAMEAG1v8QMEAG1v8gMEAG1v+QME
AG1v+wMEAG1v/wMEALL+ljAMAwQFsv6gAwQAsv6iAwQAsv6kAwQBsv6mMAwDBACy
/q0DBACy/q4DBACy/rIDBACy/rkwDAMEALmdLQMEBLmdIDANBgkqhkiG9w0BAQsF
AAOCAQEAEiXjuLQys99T47u33BGUVQ/9jofxcDXLJ+dpXapGAxUcoXyeZI0uyFIf
ScWYPvsOWOmshXKEQH+GCRR9i4wkqeOt1K36fTcgn/JuOK8Ib6ANo+Xv7LLbUgIU
dfbMuWqCvbUBGGRetOAdXUSX9TSW7bMtlDv6gis3MJkHIfJ0MeGq2leFxIYGjO+J
qWECbvPKqmxm7LP81mMziLRAwmACCBZ7OS/ocwiNNdWJGS1XUQmiBeCZJbtTIcz3
0v/+ZtbsuZGg1388YnSXg9zBxcGR/pp1BxXGQe8Ibn9aOSI4ImJ6GzIeJrGQJN0Z
+sFUsvsJPiGRDrjh4bwOk5s3PUCvsQ==
-----END CERTIFICATE-----
Generated at Sun Jun 2 07:07:33 2024 by rpki-client on console-fra.rpki-client.org