Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ygJ4bFK74WT0fPfNLvrxWks4Ijw.roa
File: ygJ4bFK74WT0fPfNLvrxWks4Ijw.roa (raw, json)
Hash identifier: 6vJBj80+wCanOxPU+UfgHNdPExjCYpUOZjKuASUlErY=
Subject key identifier: CA:02:78:6C:52:BB:E1:64:F4:7C:F7:CD:2E:FA:F1:5A:4B:38:22:3C
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 018CD513B738971256E87C93E4AC2E96B93E
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ygJ4bFK74WT0fPfNLvrxWks4Ijw.roa
Signing time: Thu 04 Jan 2024 15:24:48 +0000
ROA not before: Thu 04 Jan 2024 15:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205072
IP address blocks: 185.149.108.0/22 maxlen: 24
109.109.128.0/20 maxlen: 24
217.8.119.0/24 maxlen: 24
45.155.21.0/24 maxlen: 24
45.155.20.0/22 maxlen: 22
195.5.176.0/24 maxlen: 24
45.137.36.0/22 maxlen: 22
87.239.16.0/21 maxlen: 24
194.26.214.0/24 maxlen: 24
146.19.83.0/24 maxlen: 24
45.147.88.0/22 maxlen: 22
193.22.80.0/24 maxlen: 24
195.5.161.0/24 maxlen: 24
195.5.170.0/24 maxlen: 24
195.5.168.0/24 maxlen: 24
2a0d:da00::/29 maxlen: 29
2a0d:da00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d5:13:b7:38:97:12:56:e8:7c:93:e4:ac:2e:96:b9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Jan 4 15:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca02786c52bbe164f47cf7cd2efaf15a4b38223c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a2:d5:47:62:6a:7c:28:8e:69:76:6a:ba:5f:
58:b7:14:c4:9e:1c:76:bf:ae:5b:91:d8:69:78:2d:
02:4c:24:69:a9:23:55:91:8e:a9:32:53:56:e1:19:
e6:ef:69:15:50:05:1c:f3:ef:f0:d4:1d:0f:d4:fd:
ba:c6:6d:3b:31:46:a4:73:9e:c1:9a:fe:49:76:44:
f7:a2:07:c1:c3:48:27:e1:9f:0a:98:57:3a:96:72:
78:ce:e8:51:9c:bb:aa:9a:8c:09:30:54:06:72:c7:
ac:fe:d8:16:83:21:48:cc:3e:fb:b3:3b:13:21:3c:
1c:9a:98:94:0b:49:00:04:d0:77:a2:ea:9e:33:ad:
e5:15:22:55:15:b8:8e:9f:46:ae:18:c8:c7:fd:55:
60:9d:6a:aa:f6:b2:a6:40:cb:ab:d7:a4:51:6e:39:
46:48:e3:b2:bb:a9:f9:1e:54:67:33:fd:26:c7:86:
2e:15:6c:91:b4:53:8c:2f:2b:fc:69:dc:43:29:0d:
a1:b6:26:98:6c:bc:03:4a:16:9b:0b:7f:7b:3f:3c:
34:c7:af:26:70:ef:57:35:a2:b9:09:96:90:87:a7:
e6:2b:dd:55:c8:4c:f3:42:9a:1a:a9:38:0f:ad:01:
e0:a6:64:e4:fb:16:b6:9f:ea:43:54:e4:5c:40:bb:
a0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:02:78:6C:52:BB:E1:64:F4:7C:F7:CD:2E:FA:F1:5A:4B:38:22:3C
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ygJ4bFK74WT0fPfNLvrxWks4Ijw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.36.0/22
45.147.88.0/22
45.155.20.0/22
87.239.16.0/21
109.109.128.0/20
146.19.83.0/24
185.149.108.0/22
193.22.80.0/24
194.26.214.0/24
195.5.161.0/24
195.5.168.0/24
195.5.170.0/24
195.5.176.0/24
217.8.119.0/24
IPv6:
2a0d:da00::/29
Signature Algorithm: sha256WithRSAEncryption
47:e1:a7:a6:f8:a6:f0:c9:64:da:c1:23:2f:e0:04:50:6c:65:
fb:25:65:57:f8:80:47:50:4e:a1:5f:50:af:79:59:00:b7:a6:
04:c7:52:7f:89:b2:f7:7c:0f:fa:17:33:13:53:87:be:27:1c:
4f:38:ed:45:9c:7e:21:ea:a8:95:0e:29:c1:38:19:f8:63:16:
3a:66:02:f8:6c:22:a9:8a:8a:af:a8:4f:21:3e:00:bb:f4:a1:
a2:90:33:b5:49:9b:86:62:71:f6:13:21:85:7f:ac:e7:76:61:
7f:66:53:d7:24:2c:35:f3:b5:5c:4a:9e:cc:2c:25:59:f9:0b:
7e:04:21:86:27:ef:f3:32:a0:f0:31:ff:75:26:a8:08:b3:ed:
58:d8:c8:1f:08:0f:4e:6c:cd:cc:b5:f4:87:ed:ed:ea:b3:05:
6c:b5:2f:f6:16:cd:02:1f:24:b1:2a:84:19:4e:67:80:8a:c9:
86:78:56:3e:c0:a0:b5:d8:20:9f:e2:2d:06:c4:1b:b2:25:1b:
cd:a7:aa:06:5c:c7:bf:66:15:0b:8e:85:96:fa:fc:84:8e:65:
94:28:9a:d6:3c:3e:c4:10:99:6e:71:4b:0a:25:5f:85:c5:7b:
8d:38:5b:21:3b:45:a1:34:30:cc:82:80:d4:f8:d6:1a:89:ad:
29:9f:58:35
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgISAYzVE7c4lxJW6HyT5Kwulrk+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZTkyYzM0MWU3Njk0NDNmZGUxZDI3NTY2MDQ0YjRiNjUx
NTkwNjAwHhcNMjQwMTA0MTUyNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTAyNzg2YzUyYmJlMTY0ZjQ3Y2Y3Y2QyZWZhZjE1YTRiMzgyMjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKLVR2JqfCiOaXZqul9YtxTEnhx2
v65bkdhpeC0CTCRpqSNVkY6pMlNW4Rnm72kVUAUc8+/w1B0P1P26xm07MUakc57B
mv5JdkT3ogfBw0gn4Z8KmFc6lnJ4zuhRnLuqmowJMFQGcses/tgWgyFIzD77szsT
ITwcmpiUC0kABNB3ouqeM63lFSJVFbiOn0auGMjH/VVgnWqq9rKmQMur16RRbjlG
SOOyu6n5HlRnM/0mx4YuFWyRtFOMLyv8adxDKQ2htiaYbLwDShabC397Pzw0x68m
cO9XNaK5CZaQh6fmK91VyEzzQpoaqTgPrQHgpmTk+xa2n+pDVORcQLugawIDAQAB
o4ICZjCCAmIwHQYDVR0OBBYEFMoCeGxSu+Fk9Hz3zS768VpLOCI8MB8GA1UdIwQY
MBaAFGbpLDQedpRD/eHSdWYES0tlFZBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84ZjE5NjgtYTc5YS00YTA3LWFjZTYt
YzFkMjk2ZjhmZDA3LzEveWdKNGJGSzc0V1QwZlBmTkx2cnhXa3M0SWp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS84ZjE5NjgtYTc5YS00YTA3LWFjZTYtYzFkMjk2ZjhmZDA3
LzEvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBaBAIAATBUAwQCLYkkAwQC
LZNYAwQCLZsUAwQDV+8QAwQEbW2AAwQAkhNTAwQCuZVsAwQAwRZQAwQAwhrWAwQA
wwWhAwQAwwWoAwQAwwWqAwQAwwWwAwQA2Qh3MA0EAgACMAcDBQMqDdoAMA0GCSqG
SIb3DQEBCwUAA4IBAQBH4aem+KbwyWTawSMv4ARQbGX7JWVX+IBHUE6hX1CveVkA
t6YEx1J/ibL3fA/6FzMTU4e+JxxPOO1FnH4h6qiVDinBOBn4YxY6ZgL4bCKpioqv
qE8hPgC79KGikDO1SZuGYnH2EyGFf6zndmF/ZlPXJCw187VcSp7MLCVZ+Qt+BCGG
J+/zMqDwMf91JqgIs+1Y2MgfCA9ObM3MtfSH7e3qswVstS/2Fs0CHySxKoQZTmeA
ismGeFY+wKC12CCf4i0GxBuyJRvNp6oGXMe/ZhULjoWW+vyEjmWUKJrWPD7EEJlu
cUsKJV+FxXuNOFshO0WhNDDMgoDU+NYaia0pn1g1
-----END CERTIFICATE-----
Generated at Sat Jun 29 23:59:14 2024 by rpki-client on console-ams.rpki-client.org