Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/1-qi5RfrLx8S45wk9QGsJQGBkjbI.roa
File: 1-qi5RfrLx8S45wk9QGsJQGBkjbI.roa (raw, json)
Hash identifier: FIupfgNZ5tO4X5aX5/+pmZKGbOD43HH2ad/WWG+I348=
Subject key identifier: FA:A8:B9:45:FA:CB:C7:C4:B8:E7:09:3D:40:6B:09:40:60:64:8D:B2
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018D4196167C5FB766A4D66810F13505AA6B
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/1-qi5RfrLx8S45wk9QGsJQGBkjbI.roa
Signing time: Thu 25 Jan 2024 17:06:11 +0000
ROA not before: Thu 25 Jan 2024 17:06:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 46.151.32.0/24 maxlen: 24
46.151.33.0/24 maxlen: 24
46.151.34.0/24 maxlen: 24
46.151.35.0/24 maxlen: 24
77.36.2.0/23 maxlen: 24
77.36.4.0/22 maxlen: 22
77.36.54.0/24 maxlen: 24
77.36.55.0/24 maxlen: 24
77.36.57.0/24 maxlen: 24
77.36.60.0/24 maxlen: 24
77.36.65.0/24 maxlen: 24
77.36.68.0/22 maxlen: 22
91.223.158.0/24 maxlen: 24
91.228.119.0/24 maxlen: 24
91.229.6.0/24 maxlen: 24
91.232.254.0/24 maxlen: 24
91.236.77.0/24 maxlen: 24
91.236.237.0/24 maxlen: 24
91.237.48.0/24 maxlen: 24
91.239.222.0/23 maxlen: 23
93.120.12.0/22 maxlen: 22
93.120.36.0/24 maxlen: 24
93.120.37.0/24 maxlen: 24
93.120.38.0/24 maxlen: 24
93.120.46.0/24 maxlen: 24
93.120.74.0/24 maxlen: 24
93.120.120.0/22 maxlen: 22
176.96.48.0/22 maxlen: 22
176.96.93.0/24 maxlen: 24
178.159.147.0/24 maxlen: 24
188.191.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 09:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:41:96:16:7c:5f:b7:66:a4:d6:68:10:f1:35:05:aa:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 25 17:06:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faa8b945facbc7c4b8e7093d406b094060648db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:78:bf:7f:a5:56:42:72:83:e7:bb:6e:da:24:
49:b9:ef:92:22:ae:58:b1:5f:b6:95:6a:e9:23:0a:
3d:be:7e:eb:39:74:1e:64:9d:7d:81:bc:3c:d1:0b:
43:49:41:1c:4f:c8:b5:2f:64:2c:7f:62:e3:e0:1b:
33:df:7f:9d:56:01:1b:fb:32:93:07:39:36:79:22:
f4:5b:b7:3b:64:c6:98:ca:08:86:a2:59:e0:c3:1e:
bd:e6:08:99:8f:01:bb:64:da:37:ee:ca:82:91:51:
52:c6:e8:56:c3:d1:cb:5d:d8:56:20:1c:d8:01:84:
5e:51:88:79:5a:74:85:c0:05:44:e8:e1:41:4f:3a:
dc:2b:dd:20:69:92:9a:34:78:28:a2:f1:46:c2:c7:
f9:62:5f:52:ae:06:fd:38:67:55:8d:dd:f0:04:59:
66:de:66:cd:8e:0d:83:a6:ed:52:5c:8d:a5:36:e7:
9c:1b:65:4a:97:49:20:3d:95:1d:1a:33:fd:22:6f:
5f:85:05:0c:f8:72:7a:61:d8:d2:f9:95:92:b5:c7:
6e:52:e7:1c:c1:61:30:cb:89:ff:dc:55:29:78:5e:
6a:6c:75:98:e4:8b:15:f1:8e:d0:63:ab:9a:bb:18:
c4:8e:e5:91:93:ea:4c:d4:85:33:11:cb:64:27:cb:
f1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A8:B9:45:FA:CB:C7:C4:B8:E7:09:3D:40:6B:09:40:60:64:8D:B2
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/1-qi5RfrLx8S45wk9QGsJQGBkjbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.32.0/22
77.36.2.0-77.36.7.255
77.36.54.0/23
77.36.57.0/24
77.36.60.0/24
77.36.65.0/24
77.36.68.0/22
91.223.158.0/24
91.228.119.0/24
91.229.6.0/24
91.232.254.0/24
91.236.77.0/24
91.236.237.0/24
91.237.48.0/24
91.239.222.0/23
93.120.12.0/22
93.120.36.0-93.120.38.255
93.120.46.0/24
93.120.74.0/24
93.120.120.0/22
176.96.48.0/22
176.96.93.0/24
178.159.147.0/24
188.191.252.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:54:5d:b2:43:97:0d:7c:f5:34:88:b4:7c:b3:79:0b:e5:46:
87:c4:15:ec:72:74:c0:2e:90:77:56:ac:ff:81:c6:63:21:9f:
aa:4d:c3:e2:fe:58:9e:2a:eb:04:2f:d4:8c:4a:d7:ad:b1:2f:
23:e4:34:a2:be:15:47:b7:5c:f9:8a:44:40:37:74:da:9d:fe:
e6:cb:05:79:77:d7:08:ff:6d:29:55:0a:29:fa:7b:b5:73:a1:
53:12:19:7c:cf:34:2d:15:8e:75:1f:c3:2b:a2:d5:ef:32:6a:
6f:40:51:d6:13:a3:a8:24:bd:b3:bc:2b:7e:32:48:43:16:13:
0b:04:f8:20:4e:97:5d:c2:68:09:b6:9b:97:a4:ec:a3:98:26:
fe:63:df:b5:14:6e:b1:66:42:17:ed:64:35:29:e6:0d:e8:11:
28:34:5b:03:dd:d8:6f:ed:12:8f:c9:d1:cd:25:23:0b:7f:b8:
9f:04:2f:ac:a0:66:f4:bc:f1:f5:1a:50:aa:72:0c:2e:2a:4c:
00:b2:48:90:b6:a3:27:6d:9f:ff:c7:1b:cb:72:51:f6:7d:1f:
52:ac:88:78:2c:30:29:f9:80:47:8c:c4:76:9f:d0:4a:78:53:
55:16:ef:24:f0:1a:0d:6a:c7:9e:32:7b:82:a0:e3:4a:93:03:
0e:cc:34:92
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgISAY1BlhZ8X7dmpNZoEPE1BaprMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjQwMTI1MTcwNjExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWE4Yjk0NWZhY2JjN2M0YjhlNzA5M2Q0MDZiMDk0MDYwNjQ4ZGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Xi/f6VWQnKD57tu2iRJue+SIq5Y
sV+2lWrpIwo9vn7rOXQeZJ19gbw80QtDSUEcT8i1L2Qsf2Lj4Bsz33+dVgEb+zKT
Bzk2eSL0W7c7ZMaYygiGolngwx695giZjwG7ZNo37sqCkVFSxuhWw9HLXdhWIBzY
AYReUYh5WnSFwAVE6OFBTzrcK90gaZKaNHgoovFGwsf5Yl9Srgb9OGdVjd3wBFlm
3mbNjg2Dpu1SXI2lNuecG2VKl0kgPZUdGjP9Im9fhQUM+HJ6YdjS+ZWStcduUucc
wWEwy4n/3FUpeF5qbHWY5IsV8Y7QY6uauxjEjuWRk+pM1IUzEctkJ8vx6wIDAQAB
o4ICqTCCAqUwHQYDVR0OBBYEFPqouUX6y8fEuOcJPUBrCUBgZI2yMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvMS1xaTVSZnJMeDhTNDV3azlRR3NKUUdCa2piSS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMmQvY2RmNWY2LTJmMTgtNDJjNy05MzBlLWRjMDZkZDgwNTk2
MC8xL05KeTcxY0xQUVpYTWJzZnlIMkIxZ2FBaVRhby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBvQYIKwYBBQUHAQcBAf8Ega0wgaowgacEAgABMIGgAwQC
LpcgMAwDBAFNJAIDBANNJAADBAFNJDYDBABNJDkDBABNJDwDBABNJEEDBAJNJEQD
BABb354DBABb5HcDBABb5QYDBABb6P4DBABb7E0DBABb7O0DBABb7TADBAFb794D
BAJdeAwwDAMEAl14JAMEAF14JgMEAF14LgMEAF14SgMEAl14eAMEArBgMAMEALBg
XQMEALKfkwMEAry//DANBgkqhkiG9w0BAQsFAAOCAQEAj1RdskOXDXz1NIi0fLN5
C+VGh8QV7HJ0wC6Qd1as/4HGYyGfqk3D4v5YnirrBC/UjErXrbEvI+Q0or4VR7dc
+YpEQDd02p3+5ssFeXfXCP9tKVUKKfp7tXOhUxIZfM80LRWOdR/DK6LV7zJqb0BR
1hOjqCS9s7wrfjJIQxYTCwT4IE6XXcJoCbabl6Tso5gm/mPftRRusWZCF+1kNSnm
DegRKDRbA93Yb+0Sj8nRzSUjC3+4nwQvrKBm9Lzx9RpQqnIMLipMALJIkLajJ22f
/8cby3JR9n0fUqyIeCwwKfmAR4zEdp/QSnhTVRbvJPAaDWrHnjJ7gqDjSpMDDsw0
kg==
-----END CERTIFICATE-----
Generated at Wed May 8 18:38:42 2024 by rpki-client on console-fra.rpki-client.org