Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/34lPr2zd0MvHk1UDDz4eHpr7Sv8.roa
File: 34lPr2zd0MvHk1UDDz4eHpr7Sv8.roa (raw, json)
Hash identifier: 9PMBHa2cnayDdJCpFGXDotHG0Y7ZL9M/XnT1YTOUkrY=
Subject key identifier: DF:89:4F:AF:6C:DD:D0:CB:C7:93:55:03:0F:3E:1E:1E:9A:FB:4A:FF
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018CCA29CFF1926DE31DECC6C5A0F978426F
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/34lPr2zd0MvHk1UDDz4eHpr7Sv8.roa
Signing time: Tue 02 Jan 2024 12:33:07 +0000
ROA not before: Tue 02 Jan 2024 12:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14576
IP address blocks: 185.68.246.0/24 maxlen: 24
185.89.43.0/24 maxlen: 24
185.89.42.0/24 maxlen: 24
185.68.247.0/24 maxlen: 24
194.104.10.0/24 maxlen: 24
194.104.9.0/24 maxlen: 24
194.104.8.0/24 maxlen: 24
185.68.184.0/24 maxlen: 24
5.181.169.0/24 maxlen: 24
5.181.168.0/24 maxlen: 24
213.108.3.0/24 maxlen: 24
213.108.1.0/24 maxlen: 24
213.108.0.0/24 maxlen: 24
185.77.220.0/22 maxlen: 24
5.183.252.0/24 maxlen: 24
213.232.122.0/24 maxlen: 24
213.232.120.0/24 maxlen: 24
83.171.226.0/24 maxlen: 24
83.171.225.0/24 maxlen: 24
83.171.224.0/24 maxlen: 24
77.220.192.0/24 maxlen: 24
83.171.227.0/24 maxlen: 24
77.220.195.0/24 maxlen: 24
141.98.84.0/24 maxlen: 24
141.98.87.0/24 maxlen: 24
5.183.255.0/24 maxlen: 24
45.10.165.0/24 maxlen: 24
45.10.164.0/24 maxlen: 24
185.88.36.0/24 maxlen: 24
45.10.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:cf:f1:92:6d:e3:1d:ec:c6:c5:a0:f9:78:42:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 2 12:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df894faf6cddd0cbc79355030f3e1e1e9afb4aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d6:b5:a9:3c:86:3c:51:9e:df:bf:04:0b:df:
5d:a5:54:1b:33:3b:69:7f:f2:d4:4c:6a:c7:23:5d:
2f:14:95:d9:5f:72:58:47:c3:8b:43:4e:ad:2a:f8:
6a:82:c2:7a:17:5a:ef:87:87:b6:32:08:c3:3c:a9:
00:d5:f1:92:0d:79:17:c0:1c:e2:48:53:91:bf:16:
1a:ac:59:0f:af:c8:42:74:f0:48:32:ae:e8:a4:50:
32:10:a9:90:f6:08:75:f4:f2:0f:ac:f8:4e:7e:9e:
90:4c:fe:7e:44:5b:4d:04:5c:7c:78:54:b0:53:50:
07:ac:ce:43:78:cb:a4:9b:a3:52:74:c7:34:11:f4:
78:e5:0b:36:cb:ea:61:e5:74:10:a2:72:05:78:5a:
8a:8b:64:d2:45:be:23:86:66:9b:c1:c6:76:71:e3:
af:1a:08:b2:02:7a:82:95:a2:9c:83:f5:2d:f0:54:
f4:65:0c:93:46:ab:3d:62:cc:90:36:e7:e2:1e:b1:
3e:67:81:d9:5f:e6:59:94:4e:61:2b:c3:52:2b:ce:
aa:d8:71:4c:5f:e0:82:fd:3f:6d:bd:ee:e7:a5:1a:
0e:de:e0:c8:82:02:1f:d8:08:66:7e:62:80:19:7f:
e7:1c:6c:d3:23:a0:4e:e4:62:9a:d7:c7:72:88:5b:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:89:4F:AF:6C:DD:D0:CB:C7:93:55:03:0F:3E:1E:1E:9A:FB:4A:FF
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/34lPr2zd0MvHk1UDDz4eHpr7Sv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.168.0/23
5.183.252.0/24
5.183.255.0/24
45.10.164.0/23
45.10.167.0/24
77.220.192.0/24
77.220.195.0/24
83.171.224.0/22
141.98.84.0/24
141.98.87.0/24
185.68.184.0/24
185.68.246.0/23
185.77.220.0/22
185.88.36.0/24
185.89.42.0/23
194.104.8.0-194.104.10.255
213.108.0.0/23
213.108.3.0/24
213.232.120.0/24
213.232.122.0/24
Signature Algorithm: sha256WithRSAEncryption
61:1d:5a:d3:62:dc:dd:c6:db:c1:98:4a:85:f7:b7:88:aa:cc:
82:55:11:26:e3:8d:51:08:8b:e8:49:c1:f8:d5:1e:b1:20:99:
b4:61:7d:a0:0d:ab:5e:29:83:34:22:dc:00:55:53:e3:3d:1f:
18:6e:07:51:c6:07:1a:aa:35:46:82:14:a9:47:3e:98:85:0c:
e9:8a:7c:fe:26:a8:05:20:ac:a2:a0:d8:26:0d:bb:46:94:6d:
48:9c:c5:c7:59:8d:a4:72:54:ce:e6:f9:8c:87:19:8b:58:d1:
ff:21:a2:c6:07:c2:1d:a6:d5:47:22:29:14:46:db:01:28:f8:
0a:43:30:e3:d4:fc:90:2e:45:f3:88:e3:ae:27:1f:ec:fb:f1:
06:58:89:a8:54:50:6e:b5:52:64:ef:dc:1d:aa:a7:04:2b:f7:
37:c8:d6:83:5a:8e:dd:33:63:52:8e:db:72:32:f0:c3:b4:6b:
75:17:cd:e7:55:72:70:51:2e:bb:bf:f8:3b:33:20:3a:bd:2f:
e5:04:1a:8f:7a:c3:9d:4e:cf:05:3b:27:eb:be:83:af:3e:f2:
da:11:d6:e6:a0:be:26:43:8e:05:60:10:8f:62:54:18:45:e9:
d0:ee:e2:fc:77:6a:ba:ab:74:53:0d:f3:5f:39:79:c2:6c:57:
11:37:49:ee
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAYzKKc/xkm3jHezGxaD5eEJvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjQwMTAyMTIzMzA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjg5NGZhZjZjZGRkMGNiYzc5MzU1MDMwZjNlMWUxZTlhZmI0YWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlda1qTyGPFGe378EC99dpVQbMztp
f/LUTGrHI10vFJXZX3JYR8OLQ06tKvhqgsJ6F1rvh4e2MgjDPKkA1fGSDXkXwBzi
SFORvxYarFkPr8hCdPBIMq7opFAyEKmQ9gh19PIPrPhOfp6QTP5+RFtNBFx8eFSw
U1AHrM5DeMukm6NSdMc0EfR45Qs2y+ph5XQQonIFeFqKi2TSRb4jhmabwcZ2ceOv
GgiyAnqClaKcg/Ut8FT0ZQyTRqs9YsyQNufiHrE+Z4HZX+ZZlE5hK8NSK86q2HFM
X+CC/T9tve7npRoO3uDIggIf2AhmfmKAGX/nHGzTI6BO5GKa18dyiFuGzQIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFN+JT69s3dDLx5NVAw8+Hh6a+0r/MB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvMzRsUHIyemQwTXZIazFVRER6NGVIcHI3U3Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYADBAEF
tagDBAAFt/wDBAAFt/8DBAEtCqQDBAAtCqcDBABN3MADBABN3MMDBAJTq+ADBACN
YlQDBACNYlcDBAC5RLgDBAG5RPYDBAK5TdwDBAC5WCQDBAG5WSowDAMEA8JoCAME
AMJoCgMEAdVsAAMEANVsAwMEANXoeAMEANXoejANBgkqhkiG9w0BAQsFAAOCAQEA
YR1a02Lc3cbbwZhKhfe3iKrMglURJuONUQiL6EnB+NUesSCZtGF9oA2rXimDNCLc
AFVT4z0fGG4HUcYHGqo1RoIUqUc+mIUM6Yp8/iaoBSCsoqDYJg27RpRtSJzFx1mN
pHJUzub5jIcZi1jR/yGixgfCHabVRyIpFEbbASj4CkMw49T8kC5F84jjricf7Pvx
BliJqFRQbrVSZO/cHaqnBCv3N8jWg1qO3TNjUo7bcjLww7RrdRfN51VycFEuu7/4
OzMgOr0v5QQaj3rDnU7PBTsn676Drz7y2hHW5qC+JkOOBWAQj2JUGEXp0O7i/Hdq
uqt0Uw3zXzl5wmxXETdJ7g==
-----END CERTIFICATE-----
Generated at Mon May 20 11:38:09 2024 by rpki-client on console-fra.rpki-client.org