Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sgFHrBqEL5qqQyZPoIInmAsIIgM.roa
File: sgFHrBqEL5qqQyZPoIInmAsIIgM.roa (raw, json)
Hash identifier: NPPKPK9X+enjV38FIvww9MLv8j56X7i7DiaZgXtNr+A=
Subject key identifier: B2:01:47:AC:1A:84:2F:9A:AA:43:26:4F:A0:82:27:98:0B:08:22:03
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018F3386E2D934279A0997602D517EFE7AF9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sgFHrBqEL5qqQyZPoIInmAsIIgM.roa
Signing time: Wed 01 May 2024 09:40:28 +0000
ROA not before: Wed 01 May 2024 09:40:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.148.116.0/22 maxlen: 24
185.238.188.0/22 maxlen: 24
2a06:de01:d0::/44 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:97c1:8a2f::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a0e:b107:1870::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
2a10:ccc3:ccca::/48 maxlen: 48
2a10:ccc3:cccc::/48 maxlen: 48
2a10:ccc3:ccce::/47 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 19:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:33:86:e2:d9:34:27:9a:09:97:60:2d:51:7e:fe:7a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 1 09:40:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b20147ac1a842f9aaa43264fa08227980b082203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3b:14:93:01:cc:97:41:ee:87:d0:85:01:f3:
8f:ae:d3:e3:83:e1:9c:d3:24:ca:72:e6:ff:f4:d6:
71:b3:b9:d1:d2:fe:74:6c:14:4a:97:3e:03:9e:39:
b9:5a:1d:63:e8:33:d1:73:66:f9:ca:9d:00:ba:b7:
cf:e3:11:61:30:08:f6:13:ad:5f:39:42:b6:21:61:
ca:a6:7a:c3:c0:58:3e:0b:30:d0:5c:b7:b9:e6:b9:
09:fe:e6:59:7c:58:cd:86:f3:dd:f1:48:5f:20:71:
cf:2d:1c:c0:d1:26:1f:16:f2:26:ef:6a:47:9c:1b:
5f:6b:0e:ad:9c:f1:d4:ef:6f:a0:77:d3:05:d4:e4:
a2:0b:dd:0c:7a:97:b1:54:40:fe:86:fe:97:b3:06:
09:92:dd:05:23:33:41:da:a8:2f:e4:91:02:40:ad:
1d:50:19:17:a4:6a:73:16:24:7d:a6:2d:41:f0:dd:
f4:5a:cc:31:45:8b:b6:f4:8d:12:32:50:34:14:d1:
20:95:f1:95:46:e6:8d:92:f7:71:8c:ad:ff:7b:47:
95:ba:6c:79:92:13:8d:54:87:5d:59:62:a3:44:08:
d6:ee:63:c1:a6:28:70:68:dd:89:f3:ea:34:f6:ea:
81:f6:db:11:91:a7:c8:de:26:a5:dc:ca:75:7a:fb:
f7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:01:47:AC:1A:84:2F:9A:AA:43:26:4F:A0:82:27:98:0B:08:22:03
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sgFHrBqEL5qqQyZPoIInmAsIIgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/22
185.238.188.0/22
IPv6:
2a06:de01:d0::/44
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c1:8a2f::/48
2a0e:97c4:ac00::/38
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:ccc3:ccca::/48
2a10:ccc3:cccc::/48
2a10:ccc3:ccce::/47
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
11:e7:68:3d:76:e3:bb:a5:57:7a:35:cf:3e:f4:66:86:37:e2:
cd:08:82:12:f5:91:3c:1f:03:e3:07:d4:9a:43:5b:24:28:90:
cf:c6:34:03:ad:98:04:79:92:df:97:5c:95:38:9f:19:92:dc:
6e:e6:2e:8e:2a:a5:66:44:0a:fe:60:81:ad:62:97:35:68:45:
b1:d5:a9:f4:6a:28:c0:40:ed:04:a1:f4:e1:af:db:36:da:6f:
58:11:1e:07:b7:89:82:ae:ca:39:ef:3f:3c:fd:46:64:ba:2c:
ea:79:37:67:e9:d7:c3:a4:2c:49:08:c4:8a:c5:b0:df:3d:30:
04:73:cd:19:be:1d:7e:d3:f6:aa:c6:c6:cb:6a:88:b6:9d:2b:
9f:cb:97:af:c3:4a:56:9b:af:e9:96:e8:b9:91:9d:3b:eb:54:
3a:da:42:7e:88:df:e6:92:e9:70:9d:06:67:29:69:3c:e9:66:
92:38:ff:b8:1b:ec:e5:49:e9:78:72:62:51:ca:84:b7:e2:62:
e6:b2:0f:16:a6:dc:c3:cb:ee:2e:d8:27:f9:92:1e:a6:98:5e:
6d:fb:e2:52:7d:05:11:d4:87:c4:c1:97:d9:4f:f8:fb:c0:00:
2e:e9:2c:70:a6:95:73:73:71:59:53:d7:1b:71:b2:ae:4f:a7:
ec:c5:07:11
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAY8zhuLZNCeaCZdgLVF+/nr5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwNTAxMDk0MDI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjAxNDdhYzFhODQyZjlhYWE0MzI2NGZhMDgyMjc5ODBiMDgyMjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTsUkwHMl0Huh9CFAfOPrtPjg+Gc
0yTKcub/9NZxs7nR0v50bBRKlz4Dnjm5Wh1j6DPRc2b5yp0AurfP4xFhMAj2E61f
OUK2IWHKpnrDwFg+CzDQXLe55rkJ/uZZfFjNhvPd8UhfIHHPLRzA0SYfFvIm72pH
nBtfaw6tnPHU72+gd9MF1OSiC90MepexVED+hv6XswYJkt0FIzNB2qgv5JECQK0d
UBkXpGpzFiR9pi1B8N30WswxRYu29I0SMlA0FNEglfGVRuaNkvdxjK3/e0eVumx5
khONVIddWWKjRAjW7mPBpihwaN2J8+o09uqB9tsRkafI3ial3Mp1evv3twIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFLIBR6wahC+aqkMmT6CCJ5gLCCIDMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvc2dGSHJCcUVMNXFxUXlaUG9JSW5tQXNJSWdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHJBggrBgEFBQcBBwEB/wSBuTCBtjASBAIAATAMAwQCLZR0
AwQCue68MIGfBAIAAjCBmAMHBCoG3gEA0AMGACoMO4f/AwcAKg6XwAdQMBIDBwAq
DpfAB5EDBwAqDpfAB5IDBwAqDpfBii8DBgIqDpfErAMHACoOsQcJ9AMHACoOsQcJ
9gMHACoOsQcN8gMHACoOsQcYcAMHACoOsQcbngMHACoOsQcniwMHACoQzMPMygMH
ACoQzMPMzAMHASoQzMPMzgMGAioQzMeQMA0GCSqGSIb3DQEBCwUAA4IBAQAR52g9
duO7pVd6Nc8+9GaGN+LNCIIS9ZE8HwPjB9SaQ1skKJDPxjQDrZgEeZLfl1yVOJ8Z
ktxu5i6OKqVmRAr+YIGtYpc1aEWx1an0aijAQO0EofThr9s22m9YER4Ht4mCrso5
7z88/UZkuizqeTdn6dfDpCxJCMSKxbDfPTAEc80Zvh1+0/aqxsbLaoi2nSufy5ev
w0pWm6/plui5kZ0761Q62kJ+iN/mkulwnQZnKWk86WaSOP+4G+zlSel4cmJRyoS3
4mLmsg8WptzDy+4u2Cf5kh6mmF5t++JSfQUR1IfEwZfZT/j7wAAu6SxwppVzc3FZ
U9cbcbKuT6fsxQcR
-----END CERTIFICATE-----
Generated at Mon May 20 03:53:25 2024 by rpki-client on console-fra.rpki-client.org