Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/1-THL7pA1tfjbVy0CW58gEERCbCg.roa
File: 1-THL7pA1tfjbVy0CW58gEERCbCg.roa (raw, json)
Hash identifier: nfzd4Lrpv8Li56HmMdQWuCyoftNq78Z10UJRQEPWA0I=
Subject key identifier: F9:31:CB:EE:90:35:B5:F8:DB:57:2D:02:5B:9F:20:10:44:42:6C:28
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 018FC8F542ADA18DBE1165C4D5C88D431FF5
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/1-THL7pA1tfjbVy0CW58gEERCbCg.roa
Signing time: Thu 30 May 2024 10:04:27 +0000
ROA not before: Thu 30 May 2024 10:04:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44486
IP address blocks: 37.114.32.0/24 maxlen: 24
37.114.33.0/24 maxlen: 24
37.114.34.0/24 maxlen: 24
37.114.35.0/24 maxlen: 24
37.114.36.0/24 maxlen: 24
37.114.38.0/23 maxlen: 24
37.114.42.0/24 maxlen: 24
37.114.43.0/24 maxlen: 24
37.114.45.0/24 maxlen: 24
37.114.47.0/24 maxlen: 24
37.114.48.0/24 maxlen: 24
37.114.49.0/24 maxlen: 24
37.114.51.0/24 maxlen: 24
37.114.52.0/24 maxlen: 24
37.114.53.0/24 maxlen: 24
37.114.55.0/24 maxlen: 24
37.114.56.0/24 maxlen: 24
37.114.57.0/24 maxlen: 24
37.114.59.0/24 maxlen: 24
37.114.60.0/24 maxlen: 24
37.114.61.0/24 maxlen: 24
37.114.62.0/24 maxlen: 24
43.251.162.0/23 maxlen: 23
103.252.88.0/22 maxlen: 22
176.100.32.0/24 maxlen: 24
176.100.33.0/24 maxlen: 24
176.100.34.0/24 maxlen: 24
176.100.35.0/24 maxlen: 24
185.14.94.0/24 maxlen: 24
185.14.95.0/24 maxlen: 24
2a00:ccc1:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c8:f5:42:ad:a1:8d:be:11:65:c4:d5:c8:8d:43:1f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: May 30 10:04:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f931cbee9035b5f8db572d025b9f201044426c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:2f:96:f3:8a:2d:d9:f4:fa:dd:29:f7:e3:
d1:18:a8:9b:4e:32:f6:11:05:a6:70:4d:e6:8d:ab:
bf:13:ad:3f:5d:7a:44:97:c4:4c:53:a6:5d:3e:39:
bc:a0:af:60:40:94:8c:22:f9:bb:de:9e:09:47:28:
c7:b2:bb:62:3b:b8:bb:79:a9:9a:a5:27:36:5d:72:
05:c8:3d:bd:4c:17:65:8d:36:54:0f:71:99:ce:72:
4f:f8:8d:c4:d0:cd:b9:4f:35:c7:f1:4f:9c:27:45:
9b:2a:5c:f7:98:2b:53:3c:32:5b:b6:49:79:a6:0d:
6f:bf:2d:f2:ff:ae:10:89:dc:fb:d0:00:33:03:22:
52:98:45:6c:f6:8c:c5:bb:00:bd:63:3f:80:20:15:
54:d3:3f:bf:7b:c1:e9:d2:7b:d7:07:9b:0e:f1:c5:
67:74:16:b3:d5:1c:ca:32:7c:1e:69:60:b6:fe:ae:
05:71:39:ea:1d:e7:52:ba:00:91:ec:97:fd:fd:a7:
df:0c:67:0b:4d:0e:20:2c:c5:76:bd:d5:ca:47:48:
8c:86:7b:d7:2c:14:4d:43:31:46:95:97:b0:93:a4:
bb:7c:ab:5f:42:2f:9f:53:3f:89:05:ce:20:f0:c5:
51:cb:76:c9:0b:a2:85:44:41:48:a8:6e:f3:2d:c5:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:31:CB:EE:90:35:B5:F8:DB:57:2D:02:5B:9F:20:10:44:42:6C:28
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/1-THL7pA1tfjbVy0CW58gEERCbCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.32.0-37.114.36.255
37.114.38.0/23
37.114.42.0/23
37.114.45.0/24
37.114.47.0-37.114.49.255
37.114.51.0-37.114.53.255
37.114.55.0-37.114.57.255
37.114.59.0-37.114.62.255
43.251.162.0/23
103.252.88.0/22
176.100.32.0/22
185.14.94.0/23
IPv6:
2a00:ccc1:100::/40
Signature Algorithm: sha256WithRSAEncryption
07:ed:cf:03:88:6e:1e:c8:0e:06:cf:9b:94:01:b1:9d:2a:84:
09:97:ac:ef:f9:ab:72:e5:eb:b6:53:a6:75:30:a6:b8:b7:c8:
f9:f5:7c:2a:47:19:67:73:33:48:20:bc:81:7d:5d:fc:0b:49:
f4:3a:ff:0c:1d:bf:a9:6f:da:95:4e:ee:56:80:77:10:7a:98:
d0:6c:39:72:25:92:02:62:1b:0f:6d:1c:88:36:e6:e5:f6:e9:
84:44:2d:da:8c:0a:20:b5:67:72:d7:82:42:ec:46:4e:1b:e7:
42:3c:da:01:30:82:38:bc:ab:a4:be:80:36:5d:87:c8:5f:13:
28:10:36:6d:59:f2:88:cb:6c:7c:36:b1:88:04:35:06:4a:5c:
fe:0d:0e:bd:9c:47:84:e4:f0:9c:c6:6d:d1:e5:e9:94:ac:12:
76:2d:99:29:ac:05:75:21:fb:ec:f9:10:cd:ac:dc:de:ec:73:
0f:76:83:37:c6:2e:61:3e:bd:22:be:22:8c:45:c7:aa:38:15:
68:54:62:01:e0:b7:98:97:64:82:43:4f:21:59:10:55:da:64:
c1:66:92:5a:35:30:6d:09:64:82:83:f9:a0:52:53:16:2f:fa:
92:9a:f5:01:20:00:31:bb:12:f5:9c:05:c0:e9:ac:2d:fb:0f:
24:87:c9:d3
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAY/I9UKtoY2+EWXE1ciNQx/1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj
YmU3ZWMwHhcNMjQwNTMwMTAwNDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTMxY2JlZTkwMzViNWY4ZGI1NzJkMDI1YjlmMjAxMDQ0NDI2YzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvIvlvOKLdn0+t0p9+PRGKibTjL2
EQWmcE3mjau/E60/XXpEl8RMU6ZdPjm8oK9gQJSMIvm73p4JRyjHsrtiO7i7eama
pSc2XXIFyD29TBdljTZUD3GZznJP+I3E0M25TzXH8U+cJ0WbKlz3mCtTPDJbtkl5
pg1vvy3y/64Qidz70AAzAyJSmEVs9ozFuwC9Yz+AIBVU0z+/e8Hp0nvXB5sO8cVn
dBaz1RzKMnweaWC2/q4FcTnqHedSugCR7Jf9/affDGcLTQ4gLMV2vdXKR0iMhnvX
LBRNQzFGlZewk6S7fKtfQi+fUz+JBc4g8MVRy3bJC6KFREFIqG7zLcX5BQIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFPkxy+6QNbX421ctAlufIBBEQmwoMB8GA1UdIwQY
MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt
MWI3Y2JiMDhkNzNmLzEvMS1USEw3cEExdGZqYlZ5MENXNThnRUVSQ2JDZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGUvYzU4YmRjLTE0ZTctNDk5Yy05ZDljLTFiN2NiYjA4ZDcz
Zi8xL0tXV1R0MGZuYWxaSkpSRzdOaExrMWVUTDUtdy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBmwYIKwYBBQUHAQcBAf8EgYswgYgwdgQCAAEwcDAMAwQF
JXIgAwQAJXIkAwQBJXImAwQBJXIqAwQAJXItMAwDBAAlci8DBAElcjAwDAMEACVy
MwMEASVyNDAMAwQAJXI3AwQBJXI4MAwDBAAlcjsDBAAlcj4DBAEr+6IDBAJn/FgD
BAKwZCADBAG5Dl4wDgQCAAIwCAMGACoAzMEBMA0GCSqGSIb3DQEBCwUAA4IBAQAH
7c8DiG4eyA4Gz5uUAbGdKoQJl6zv+aty5eu2U6Z1MKa4t8j59XwqRxlnczNIILyB
fV38C0n0Ov8MHb+pb9qVTu5WgHcQepjQbDlyJZICYhsPbRyINubl9umERC3ajAog
tWdy14JC7EZOG+dCPNoBMII4vKukvoA2XYfIXxMoEDZtWfKIy2x8NrGIBDUGSlz+
DQ69nEeE5PCcxm3R5emUrBJ2LZkprAV1Ifvs+RDNrNze7HMPdoM3xi5hPr0iviKM
RceqOBVoVGIB4LeYl2SCQ08hWRBV2mTBZpJaNTBtCWSCg/mgUlMWL/qSmvUBIAAx
uxL1nAXA6awt+w8kh8nT
-----END CERTIFICATE-----
Generated at Fri Jun 21 03:32:46 2024 by rpki-client on console-ams.rpki-client.org