Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/_dQEOctP3Vt2jC1Q6l0dWpLHm4Q.roa
File: _dQEOctP3Vt2jC1Q6l0dWpLHm4Q.roa (raw, json)
Hash identifier: BZMshCENC9WcYLuofvIegK965Sa3tOqzaUUdxHpyNNk=
Subject key identifier: FD:D4:04:39:CB:4F:DD:5B:76:8C:2D:50:EA:5D:1D:5A:92:C7:9B:84
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 018DE44E39FB6590FD1E66DD4D6A46ADE18B
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/_dQEOctP3Vt2jC1Q6l0dWpLHm4Q.roa
Signing time: Mon 26 Feb 2024 07:25:48 +0000
ROA not before: Mon 26 Feb 2024 07:25:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44654
IP address blocks: 37.252.208.0/23 maxlen: 23
37.252.208.0/24 maxlen: 24
37.252.209.0/24 maxlen: 24
37.252.210.0/23 maxlen: 23
37.252.210.0/24 maxlen: 24
37.252.211.0/24 maxlen: 24
37.252.212.0/23 maxlen: 23
37.252.212.0/24 maxlen: 24
37.252.213.0/24 maxlen: 24
37.252.215.0/24 maxlen: 24
109.205.8.0/21 maxlen: 24
185.36.124.0/22 maxlen: 24
185.36.124.0/23 maxlen: 23
185.36.124.0/24 maxlen: 24
185.36.125.0/24 maxlen: 24
2a02:d8::/32 maxlen: 48
2a02:d8:8::/48 maxlen: 48
2a02:d8:9::/48 maxlen: 48
2a02:d8:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e4:4e:39:fb:65:90:fd:1e:66:dd:4d:6a:46:ad:e1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Feb 26 07:25:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdd40439cb4fdd5b768c2d50ea5d1d5a92c79b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e4:b6:1d:75:6d:7f:fa:64:3a:8a:58:94:67:
85:06:84:a1:bb:2b:51:1e:a7:1c:25:54:c6:5f:83:
a0:79:d3:ea:c5:65:c0:d1:97:52:fb:66:2c:0d:b1:
f7:af:a2:c2:35:59:30:4b:73:7b:d7:4f:3b:47:79:
81:96:90:20:d1:c1:f0:b1:33:0b:af:94:d7:3e:58:
5a:0c:cb:c4:29:71:12:91:23:a2:5a:e9:9e:ef:cc:
5e:ef:ae:98:92:8e:18:6c:05:c1:14:7c:de:88:2e:
43:86:24:b0:2f:64:69:d0:1a:35:cd:08:af:ca:61:
6d:14:61:a3:f7:db:5c:19:97:5e:28:94:5c:59:d8:
36:00:c4:ee:da:5f:f3:35:94:5a:67:8f:c0:ff:9a:
5e:60:92:32:d3:3a:cb:d8:61:7f:ec:12:45:cc:40:
d9:a3:67:f3:7f:51:7b:86:c7:c5:47:74:6d:89:bd:
a1:b3:f8:f7:09:07:bc:5a:bb:d0:ec:7f:25:72:31:
14:20:fc:b7:1a:75:7f:74:2e:d8:e2:b7:d1:bf:77:
92:8b:42:60:21:e2:04:67:1a:0c:16:44:f7:90:57:
3f:64:10:16:ea:56:e5:9c:e3:e8:15:17:af:79:03:
31:53:a3:6d:92:46:d1:6f:82:e1:47:06:98:e4:59:
dc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D4:04:39:CB:4F:DD:5B:76:8C:2D:50:EA:5D:1D:5A:92:C7:9B:84
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/_dQEOctP3Vt2jC1Q6l0dWpLHm4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.208.0-37.252.213.255
37.252.215.0/24
109.205.8.0/21
185.36.124.0/22
IPv6:
2a02:d8::/32
Signature Algorithm: sha256WithRSAEncryption
04:6b:c5:22:9b:7d:3f:1a:83:b2:94:ef:d2:58:0b:26:87:21:
66:82:69:2d:e7:2a:ed:9d:11:2b:bd:12:5b:cb:ea:f7:c4:23:
86:0f:7e:57:80:fa:bb:10:52:57:f6:b6:68:cd:9f:7d:ce:b4:
43:5b:e5:b4:27:e6:fd:97:f4:c2:9b:32:85:30:ff:21:4a:62:
85:89:74:d9:34:62:c9:b5:ba:43:a7:60:7a:bf:ef:39:cc:c5:
49:99:93:cb:4c:45:1b:53:15:8a:11:18:14:7c:09:4e:3b:9b:
54:ba:3c:9b:96:17:a4:5b:73:07:72:f9:00:1c:85:03:a8:d8:
90:33:fc:83:51:e8:2f:cd:9d:0b:eb:2f:53:70:f8:2e:d6:37:
8e:ee:c9:2c:76:08:ca:0a:8e:f8:76:10:78:ae:74:99:94:59:
c8:23:82:67:e2:62:a3:6d:3c:25:ea:47:f9:be:bb:39:5e:fa:
4d:e6:74:8d:89:a5:2c:b3:0a:ec:3d:5d:2d:42:9a:e8:f4:26:
c0:6f:94:ea:f1:12:9a:49:b6:67:fa:fd:a0:bd:0a:e2:af:75:
96:04:28:fa:68:dc:69:d6:3f:d8:38:87:3e:e7:8e:bc:0c:66:
b8:a0:df:1f:3c:af:f0:f8:52:e2:75:79:2a:39:b8:5f:8e:b7:
ba:28:c0:15
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAY3kTjn7ZZD9HmbdTWpGreGLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx
MjMwN2IwHhcNMjQwMjI2MDcyNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGQ0MDQzOWNiNGZkZDViNzY4YzJkNTBlYTVkMWQ1YTkyYzc5Yjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguS2HXVtf/pkOopYlGeFBoShuytR
HqccJVTGX4OgedPqxWXA0ZdS+2YsDbH3r6LCNVkwS3N71087R3mBlpAg0cHwsTML
r5TXPlhaDMvEKXESkSOiWume78xe766Yko4YbAXBFHzeiC5DhiSwL2Rp0Bo1zQiv
ymFtFGGj99tcGZdeKJRcWdg2AMTu2l/zNZRaZ4/A/5peYJIy0zrL2GF/7BJFzEDZ
o2fzf1F7hsfFR3Rtib2hs/j3CQe8WrvQ7H8lcjEUIPy3GnV/dC7Y4rfRv3eSi0Jg
IeIEZxoMFkT3kFc/ZBAW6lblnOPoFReveQMxU6NtkkbRb4LhRwaY5Fnc5QIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFP3UBDnLT91bdowtUOpdHVqSx5uEMB8GA1UdIwQY
MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt
NWI4NzgyNWMwN2VlLzEvX2RRRU9jdFAzVnQyakMxUTZsMGRXcExIbTRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl
LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgMAwDBAQl/NAD
BAEl/NQDBAAl/NcDBANtzQgDBAK5JHwwDQQCAAIwBwMFACoCANgwDQYJKoZIhvcN
AQELBQADggEBAARrxSKbfT8ag7KU79JYCyaHIWaCaS3nKu2dESu9ElvL6vfEI4YP
fleA+rsQUlf2tmjNn33OtENb5bQn5v2X9MKbMoUw/yFKYoWJdNk0Ysm1ukOnYHq/
7znMxUmZk8tMRRtTFYoRGBR8CU47m1S6PJuWF6Rbcwdy+QAchQOo2JAz/INR6C/N
nQvrL1Nw+C7WN47uySx2CMoKjvh2EHiudJmUWcgjgmfiYqNtPCXqR/m+uzle+k3m
dI2JpSyzCuw9XS1Cmuj0JsBvlOrxEppJtmf6/aC9CuKvdZYEKPpo3GnWP9g4hz7n
jrwMZrig3x88r/D4UuJ1eSo5uF+Ot7oowBU=
-----END CERTIFICATE-----
Generated at Wed Jun 26 04:47:59 2024 by rpki-client on console-ams.rpki-client.org