Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/sJs-qYwI-qHmaW2c1PbJ6llwbgE.roa
File: sJs-qYwI-qHmaW2c1PbJ6llwbgE.roa (raw, json)
Hash identifier: Y32z34FaHYhMPAiR8OZ/boZhhYuRRwIuJ+ct+oV1P0o=
Subject key identifier: B0:9B:3E:A9:8C:08:FA:A1:E6:69:6D:9C:D4:F6:C9:EA:59:70:6E:01
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 018CC9BBEE412457E28EDB72E02B21544579
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/sJs-qYwI-qHmaW2c1PbJ6llwbgE.roa
Signing time: Tue 02 Jan 2024 10:33:05 +0000
ROA not before: Tue 02 Jan 2024 10:33:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207728
IP address blocks: 46.28.234.0/24 maxlen: 24
185.162.11.0/24 maxlen: 24
185.162.9.0/24 maxlen: 24
185.162.8.0/24 maxlen: 24
87.236.177.0/24 maxlen: 24
31.210.172.0/24 maxlen: 24
31.210.170.0/23 maxlen: 24
104.192.42.0/24 maxlen: 24
31.210.173.0/24 maxlen: 24
93.88.75.0/24 maxlen: 24
93.88.74.0/24 maxlen: 24
31.10.5.0/24 maxlen: 24
194.146.127.0/24 maxlen: 24
185.204.52.0/24 maxlen: 24
2a12:9cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:ee:41:24:57:e2:8e:db:72:e0:2b:21:54:45:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Jan 2 10:33:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b09b3ea98c08faa1e6696d9cd4f6c9ea59706e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:b2:9a:7d:e6:c7:a2:42:ef:03:6a:2c:38:
4f:fd:a3:3f:94:e6:e2:7e:27:d1:fa:95:c2:17:ff:
97:d6:3c:4a:06:a9:85:51:06:2a:48:a7:20:59:cb:
8a:40:08:e1:43:65:3f:eb:76:58:4f:e9:0f:44:85:
e6:d6:4a:fa:b6:b5:12:fb:ab:4e:df:90:7f:7c:be:
a6:20:10:af:6d:5f:91:8e:6f:e9:b6:43:9a:5c:50:
44:0c:61:39:84:63:33:55:c6:18:a1:2e:81:a6:76:
88:c0:8c:dd:c6:8e:61:ae:c9:3b:08:63:f2:73:4b:
2c:b0:1a:0d:06:dd:2c:dc:7b:f8:0a:e0:d4:cb:a0:
98:9a:92:bd:11:2f:d2:96:a2:e2:29:75:3e:06:d2:
f6:da:1e:0d:78:6f:f6:75:e6:2c:05:6b:98:c9:93:
4a:d1:74:67:27:3c:c0:f1:b8:b7:1f:6a:7b:70:8d:
85:4a:fd:fd:82:3c:37:4f:ef:ec:e1:eb:19:f7:8f:
a6:b4:66:7e:90:79:31:c8:6d:6b:66:73:46:da:d8:
1d:ec:38:ab:c1:32:14:67:cf:01:b3:63:b0:bd:14:
56:32:ce:de:b1:32:7a:a9:af:ed:b7:7d:c2:04:c5:
40:f4:d2:21:25:b1:b3:16:fe:ac:07:45:df:2c:bd:
5a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9B:3E:A9:8C:08:FA:A1:E6:69:6D:9C:D4:F6:C9:EA:59:70:6E:01
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/sJs-qYwI-qHmaW2c1PbJ6llwbgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.5.0/24
31.210.170.0-31.210.173.255
46.28.234.0/24
87.236.177.0/24
93.88.74.0/23
104.192.42.0/24
185.162.8.0/23
185.162.11.0/24
185.204.52.0/24
194.146.127.0/24
IPv6:
2a12:9cc0::/29
Signature Algorithm: sha256WithRSAEncryption
5f:99:c9:2a:52:bb:2f:31:d1:7e:6a:0c:07:77:7c:6b:e1:ad:
df:22:c2:2c:a0:f7:7f:d3:08:aa:bf:63:2f:0e:02:75:ac:8a:
24:97:f2:4d:ed:a7:02:21:b2:63:4e:38:4e:95:48:aa:fa:59:
6a:55:40:1b:22:69:75:c7:39:f6:9f:ce:7b:15:4d:93:6d:2e:
e2:b7:c0:1a:ee:16:d0:bb:ec:7e:45:1e:71:a3:f2:aa:da:5f:
1c:c4:a2:3d:84:42:0f:72:67:27:b0:1a:1d:40:d5:77:e0:b0:
e2:c0:22:8e:8d:31:93:11:7d:ba:c1:b8:c5:82:c1:89:fd:78:
15:e8:a7:29:86:cf:55:6d:19:5c:1c:a5:58:fe:71:b2:20:a2:
99:d2:a2:96:0d:b2:f5:b8:ba:eb:e0:01:5c:70:25:9e:b5:d4:
f5:44:57:57:b7:5f:f1:b9:a3:01:dc:52:cb:7b:fc:a7:b1:70:
cc:f8:99:fb:50:ca:45:a4:40:05:06:7b:b8:47:9c:cd:a9:33:
cb:7b:41:7c:3d:19:08:3e:31:ce:76:d7:5d:f7:25:8d:19:e0:
b7:cc:18:de:e1:f8:3f:f6:8c:58:29:0b:d5:ef:80:1c:b9:5e:
56:15:aa:6d:72:4a:ed:2d:8e:aa:64:fc:be:67:cf:bc:d6:f3:
fc:78:02:41
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgISAYzJu+5BJFfijtty4CshVEV5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OWQxZjY3YTQxY2EyZTQwNTAxN2NiZTQ4YmFmZmYxNzMz
ZTM4NjkwHhcNMjQwMTAyMTAzMzA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDliM2VhOThjMDhmYWExZTY2OTZkOWNkNGY2YzllYTU5NzA2ZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x+ymn3mx6JC7wNqLDhP/aM/lObi
fifR+pXCF/+X1jxKBqmFUQYqSKcgWcuKQAjhQ2U/63ZYT+kPRIXm1kr6trUS+6tO
35B/fL6mIBCvbV+Rjm/ptkOaXFBEDGE5hGMzVcYYoS6BpnaIwIzdxo5hrsk7CGPy
c0sssBoNBt0s3Hv4CuDUy6CYmpK9ES/SlqLiKXU+BtL22h4NeG/2deYsBWuYyZNK
0XRnJzzA8bi3H2p7cI2FSv39gjw3T+/s4esZ94+mtGZ+kHkxyG1rZnNG2tgd7Dir
wTIUZ88Bs2OwvRRWMs7esTJ6qa/tt33CBMVA9NIhJbGzFv6sB0XfLL1abwIDAQAB
o4ICVjCCAlIwHQYDVR0OBBYEFLCbPqmMCPqh5mltnNT2yepZcG4BMB8GA1UdIwQY
MBaAFBSdH2ekHKLkBQF8vki6//FzPjhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDkt
NTQ4NTY4MmEwNWY1LzEvc0pzLXFZd0ktcUhtYVcyYzFQYko2bGx3YmdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDktNTQ4NTY4MmEwNWY1
LzEvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBKBAIAATBEAwQAHwoFMAwD
BAEf0qoDBAEf0qwDBAAuHOoDBABX7LEDBAFdWEoDBABowCoDBAG5oggDBAC5ogsD
BAC5zDQDBADCkn8wDQQCAAIwBwMFAyoSnMAwDQYJKoZIhvcNAQELBQADggEBAF+Z
ySpSuy8x0X5qDAd3fGvhrd8iwiyg93/TCKq/Yy8OAnWsiiSX8k3tpwIhsmNOOE6V
SKr6WWpVQBsiaXXHOfafznsVTZNtLuK3wBruFtC77H5FHnGj8qraXxzEoj2EQg9y
ZyewGh1A1XfgsOLAIo6NMZMRfbrBuMWCwYn9eBXopymGz1VtGVwcpVj+cbIgopnS
opYNsvW4uuvgAVxwJZ611PVEV1e3X/G5owHcUst7/KexcMz4mftQykWkQAUGe7hH
nM2pM8t7QXw9GQg+Mc521133JY0Z4LfMGN7h+D/2jFgpC9XvgBy5XlYVqm1ySu0t
jqpk/L5nz7zW8/x4AkE=
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:37:01 2024 by rpki-client on console-ams.rpki-client.org