Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/T7rKmq8kWmRNet7Viu2aPN3zo-M.roa
File: T7rKmq8kWmRNet7Viu2aPN3zo-M.roa (raw, json)
Hash identifier: yWPDPzSr/CN9JZkYfYOLhkQmHGmzk952ycTEHI/uQtE=
Subject key identifier: 4F:BA:CA:9A:AF:24:5A:64:4D:7A:DE:D5:8A:ED:9A:3C:DD:F3:A3:E3
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 018DECD796B34F946ABCCF306EB50B1B394C
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/T7rKmq8kWmRNet7Viu2aPN3zo-M.roa
Signing time: Tue 27 Feb 2024 23:12:48 +0000
ROA not before: Tue 27 Feb 2024 23:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32787
IP address blocks: 45.82.106.0/24 maxlen: 24
45.82.107.0/24 maxlen: 24
86.104.226.0/24 maxlen: 24
91.235.107.0/24 maxlen: 24
185.16.88.0/24 maxlen: 24
185.16.89.0/24 maxlen: 24
185.16.90.0/24 maxlen: 24
185.16.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 08:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ec:d7:96:b3:4f:94:6a:bc:cf:30:6e:b5:0b:1b:39:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: Feb 27 23:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fbaca9aaf245a644d7aded58aed9a3cddf3a3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:b4:24:78:fc:8f:1a:67:24:f6:39:45:cb:
e7:73:fe:e9:13:8c:26:29:0f:3f:2d:1d:f8:2a:0c:
3f:59:ed:d2:66:17:b1:aa:e4:72:d1:b0:15:52:f6:
28:1b:8e:b4:39:c7:7d:f0:ba:79:24:27:98:d7:85:
f1:ef:cf:9c:c7:97:ec:19:6b:99:32:b6:a0:98:39:
35:b2:3d:86:41:1c:6e:31:88:40:f9:83:92:9f:91:
85:64:15:78:1d:99:e2:42:90:af:71:e3:e5:a9:41:
93:d6:83:36:ab:0f:57:b2:e8:89:5d:8d:4d:c0:44:
24:a1:63:f8:03:10:b6:50:80:d4:91:9a:1f:7c:46:
97:85:4d:42:d1:9f:44:12:e0:c5:28:56:a2:eb:33:
a0:26:d0:9a:e8:6f:e3:6e:af:d4:93:cd:6e:cc:0c:
d2:fc:80:d7:19:30:91:2c:f4:cd:54:5a:f2:42:83:
f3:6f:3c:f2:7b:0a:bc:0a:b1:3b:da:8d:d3:af:57:
71:39:e9:99:1c:0c:b8:48:c5:18:78:d5:3c:8a:84:
53:83:ca:77:9b:45:a9:40:46:ca:eb:65:48:e8:52:
fa:7e:d9:8e:21:5c:8e:7c:b3:91:cd:de:fe:4e:a0:
38:0a:10:b8:0c:3d:ab:0d:b7:7d:31:34:de:bf:6f:
26:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BA:CA:9A:AF:24:5A:64:4D:7A:DE:D5:8A:ED:9A:3C:DD:F3:A3:E3
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/T7rKmq8kWmRNet7Viu2aPN3zo-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.106.0/23
86.104.226.0/24
91.235.107.0/24
185.16.88.0/22
Signature Algorithm: sha256WithRSAEncryption
38:d9:a4:10:5e:40:12:9b:f5:3e:59:26:bd:65:40:22:9f:34:
02:07:4b:51:3d:53:f8:ef:73:de:05:8b:68:00:6e:89:f0:23:
bb:d3:d0:af:cc:5e:d5:b0:c8:20:a6:27:51:a6:ed:1e:83:58:
2f:ca:20:4d:24:b1:d1:46:d5:00:85:ef:93:e2:8f:c3:2b:21:
e0:82:7a:b5:cc:1f:cb:23:2c:04:d7:d0:49:ad:29:c8:11:32:
b1:8b:17:77:23:24:42:68:a2:64:f4:2b:ed:23:6d:2e:c7:e8:
c8:ee:ec:70:ef:e8:53:cd:4e:97:f6:4a:6c:3e:81:5b:5d:7a:
ff:01:da:9e:54:45:29:eb:38:b3:5a:1e:d2:f1:13:34:5c:d7:
c0:1f:20:29:10:88:96:3f:e4:23:70:66:1a:2b:f7:d1:cb:12:
99:65:85:7b:de:d7:07:ec:8b:66:1e:88:54:dd:6a:61:d7:15:
fa:7b:51:a0:44:fc:5f:70:9f:7c:2a:eb:6f:33:19:ce:e4:c3:
80:33:bc:2e:ae:4b:b5:6d:e1:1d:05:2f:68:15:e3:30:ed:79:
01:a4:3f:9a:f9:f0:57:14:2e:c7:72:2f:d6:d8:cb:a3:89:3e:
ac:6e:81:50:71:cf:54:4e:41:17:15:d3:e3:2a:3b:03:5c:6c:
81:51:e9:c2
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY3s15azT5RqvM8wbrULGzlMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjQyMzYwYTM5NzBhODA4MDE2ZmRmOGQ4ZGJhMzk2YzVh
MWQwMzQwHhcNMjQwMjI3MjMxMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmJhY2E5YWFmMjQ1YTY0NGQ3YWRlZDU4YWVkOWEzY2RkZjNhM2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe60JHj8jxpnJPY5Rcvnc/7pE4wm
KQ8/LR34Kgw/We3SZhexquRy0bAVUvYoG460Ocd98Lp5JCeY14Xx78+cx5fsGWuZ
MragmDk1sj2GQRxuMYhA+YOSn5GFZBV4HZniQpCvcePlqUGT1oM2qw9XsuiJXY1N
wEQkoWP4AxC2UIDUkZoffEaXhU1C0Z9EEuDFKFai6zOgJtCa6G/jbq/Uk81uzAzS
/IDXGTCRLPTNVFryQoPzbzzyewq8CrE72o3Tr1dxOemZHAy4SMUYeNU8ioRTg8p3
m0WpQEbK62VI6FL6ftmOIVyOfLORzd7+TqA4ChC4DD2rDbd9MTTev28mRwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFE+6ypqvJFpkTXre1Yrtmjzd86PjMB8GA1UdIwQY
MBaAFPH0I2CjlwqAgBb9+Njbo5bFodA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMt
ZDRmMDhiZTA1MGQ1LzEvVDdyS21xOGtXbVJOZXQ3Vml1MmFQTjN6by1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMtZDRmMDhiZTA1MGQ1
LzEvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLVJqAwQA
VmjiAwQAW+trAwQCuRBYMA0GCSqGSIb3DQEBCwUAA4IBAQA42aQQXkASm/U+WSa9
ZUAinzQCB0tRPVP473PeBYtoAG6J8CO709CvzF7VsMggpidRpu0eg1gvyiBNJLHR
RtUAhe+T4o/DKyHggnq1zB/LIywE19BJrSnIETKxixd3IyRCaKJk9CvtI20ux+jI
7uxw7+hTzU6X9kpsPoFbXXr/AdqeVEUp6zizWh7S8RM0XNfAHyApEIiWP+QjcGYa
K/fRyxKZZYV73tcH7ItmHohU3Wph1xX6e1GgRPxfcJ98KutvMxnO5MOAM7wurku1
beEdBS9oFeMw7XkBpD+a+fBXFC7Hci/W2MujiT6sboFQcc9UTkEXFdPjKjsDXGyB
UenC
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:37:36 2024 by rpki-client on console-ams.rpki-client.org