Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/PQcYOcgDXmYOmGuMrmeHEJVZQlU.roa
File: PQcYOcgDXmYOmGuMrmeHEJVZQlU.roa (raw, json)
Hash identifier: V82IU6W+yln5rn3Y7qK+xpraNcBr5hqFrnq9lcocg10=
Subject key identifier: 3D:07:18:39:C8:03:5E:66:0E:98:6B:8C:AE:67:87:10:95:59:42:55
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 018CC9BB28E24FAE9B5738F1E7DBF731F789
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/PQcYOcgDXmYOmGuMrmeHEJVZQlU.roa
Signing time: Tue 02 Jan 2024 10:32:15 +0000
ROA not before: Tue 02 Jan 2024 10:32:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20857
IP address blocks: 188.240.52.0/22 maxlen: 22
93.119.0.0/20 maxlen: 24
84.247.8.0/21 maxlen: 24
195.8.195.0/24 maxlen: 24
85.10.128.0/19 maxlen: 24
89.41.168.0/22 maxlen: 24
87.253.128.0/19 maxlen: 24
31.14.96.0/22 maxlen: 24
185.10.48.0/22 maxlen: 24
77.72.144.0/21 maxlen: 24
95.170.64.0/19 maxlen: 24
80.69.64.0/19 maxlen: 24
195.135.195.0/24 maxlen: 24
185.108.112.0/22 maxlen: 24
37.97.128.0/17 maxlen: 24
86.105.244.0/22 maxlen: 24
188.241.148.0/22 maxlen: 22
149.210.128.0/17 maxlen: 24
141.138.136.0/21 maxlen: 24
37.34.56.0/21 maxlen: 24
2a01:7c8::/32 maxlen: 32
2a01:7c8:e000::/36 maxlen: 36
2a01:7c8:d000::/36 maxlen: 36
2a01:7c8:7000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:28:e2:4f:ae:9b:57:38:f1:e7:db:f7:31:f7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jan 2 10:32:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d071839c8035e660e986b8cae67871095594255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d2:b6:7f:f6:86:9e:00:3c:ab:cd:9d:76:c1:
cc:0c:25:c1:3f:a8:77:74:37:85:6c:58:5d:81:44:
96:fa:98:07:02:5c:d7:92:27:37:78:ea:0b:8d:ac:
44:e1:d6:cd:cf:bb:8e:a0:2c:66:88:fd:5f:2c:86:
98:75:59:f5:ba:c0:ff:a9:9f:74:3c:91:9d:36:af:
b9:cb:ae:5b:8f:50:5c:e1:06:c0:c2:06:eb:68:99:
2c:b0:35:34:02:34:a9:c2:a6:e9:6a:3d:d5:be:40:
5a:66:95:b1:be:e2:04:aa:d2:51:2b:42:9d:53:fc:
58:4f:79:a4:ab:bb:e3:a8:7c:17:49:9e:e8:d5:84:
c1:3e:68:8f:2b:81:af:3e:8b:0d:74:23:82:97:b4:
32:04:c1:1a:a7:b2:ff:f4:0b:8e:84:c3:4d:bf:d6:
44:18:00:1d:b9:11:6f:55:b1:7e:47:36:24:1a:7b:
4c:1a:55:62:ff:be:42:86:1a:f1:92:2d:d3:27:fe:
a9:0b:d2:c7:e6:9f:29:d1:7d:4d:50:ce:b0:4b:0b:
e3:c3:1a:11:f8:e8:05:4b:0b:f1:7b:62:71:2a:41:
38:51:b8:64:5b:f8:0a:c3:67:33:80:40:5d:a7:46:
3d:73:6e:d4:04:5c:12:2a:8d:6b:13:73:f5:c1:1e:
d0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:07:18:39:C8:03:5E:66:0E:98:6B:8C:AE:67:87:10:95:59:42:55
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/PQcYOcgDXmYOmGuMrmeHEJVZQlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.96.0/22
37.34.56.0/21
37.97.128.0/17
77.72.144.0/21
80.69.64.0/19
84.247.8.0/21
85.10.128.0/19
86.105.244.0/22
87.253.128.0/19
89.41.168.0/22
93.119.0.0/20
95.170.64.0/19
141.138.136.0/21
149.210.128.0/17
185.10.48.0/22
185.108.112.0/22
188.240.52.0/22
188.241.148.0/22
195.8.195.0/24
195.135.195.0/24
IPv6:
2a01:7c8::/32
Signature Algorithm: sha256WithRSAEncryption
22:c7:2b:66:25:e2:62:7b:63:24:13:d9:c9:31:e5:a7:ec:36:
a0:b9:9c:22:08:fa:64:6d:fc:67:b7:08:35:22:e5:cf:89:b9:
91:23:ec:fb:02:e3:3e:31:e7:00:b6:68:75:d9:5a:d4:e0:cb:
47:31:7a:43:f8:11:70:3a:23:55:43:24:ee:d0:e7:e8:75:f5:
c3:74:22:a4:52:00:3c:52:82:75:40:e9:ed:4f:9e:dc:8c:72:
7f:8b:7a:dd:f4:9e:d6:2b:53:31:23:8f:70:e8:4e:c0:9a:0a:
1f:d2:2e:33:f6:b6:24:b1:7b:ae:66:ce:ff:e3:fc:b8:98:0c:
50:3e:12:69:8f:c8:a2:64:9d:0e:37:6c:62:f0:d0:a5:09:86:
d6:06:a9:24:82:99:ed:46:31:5d:af:39:33:24:d0:f8:ce:90:
b6:d8:1e:a4:35:80:86:2e:30:79:19:5b:bf:8f:68:89:da:5c:
7d:11:25:30:b3:2b:7f:f7:db:39:4c:a7:67:29:4c:83:b3:94:
cb:cc:cd:d7:42:c5:c3:8e:46:cd:89:d7:dd:ea:92:66:c1:09:
31:60:f6:c1:80:7d:ca:e1:52:42:38:1b:0f:c6:b8:af:dc:75:
ac:b1:9f:f8:aa:54:e0:28:86:9b:b6:4d:16:c9:71:6a:6a:ff:
be:6c:4f:7f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgISAYzJuyjiT66bVzjx59v3MfeJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3
NTJhZTcwHhcNMjQwMTAyMTAzMjE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDA3MTgzOWM4MDM1ZTY2MGU5ODZiOGNhZTY3ODcxMDk1NTk0MjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNK2f/aGngA8q82ddsHMDCXBP6h3
dDeFbFhdgUSW+pgHAlzXkic3eOoLjaxE4dbNz7uOoCxmiP1fLIaYdVn1usD/qZ90
PJGdNq+5y65bj1Bc4QbAwgbraJkssDU0AjSpwqbpaj3VvkBaZpWxvuIEqtJRK0Kd
U/xYT3mkq7vjqHwXSZ7o1YTBPmiPK4GvPosNdCOCl7QyBMEap7L/9AuOhMNNv9ZE
GAAduRFvVbF+RzYkGntMGlVi/75Chhrxki3TJ/6pC9LH5p8p0X1NUM6wSwvjwxoR
+OgFSwvxe2JxKkE4UbhkW/gKw2czgEBdp0Y9c27UBFwSKo1rE3P1wR7QfwIDAQAB
o4ICjTCCAokwHQYDVR0OBBYEFD0HGDnIA15mDphrjK5nhxCVWUJVMB8GA1UdIwQY
MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt
MmI5MjBiZGUzOTkwLzEvUFFjWU9jZ0RYbVlPbUd1TXJtZUhFSlZaUWxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw
LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGiBggrBgEFBQcBBwEB/wSBkjCBjzB+BAIAATB4AwQCHw5g
AwQDJSI4AwQHJWGAAwQDTUiQAwQFUEVAAwQDVPcIAwQFVQqAAwQCVmn0AwQFV/2A
AwQCWSmoAwQEXXcAAwQFX6pAAwQDjYqIAwQHldKAAwQCuQowAwQCuWxwAwQCvPA0
AwQCvPGUAwQAwwjDAwQAw4fDMA0EAgACMAcDBQAqAQfIMA0GCSqGSIb3DQEBCwUA
A4IBAQAixytmJeJie2MkE9nJMeWn7DaguZwiCPpkbfxntwg1IuXPibmRI+z7AuM+
MecAtmh12VrU4MtHMXpD+BFwOiNVQyTu0OfodfXDdCKkUgA8UoJ1QOntT57cjHJ/
i3rd9J7WK1MxI49w6E7Amgof0i4z9rYksXuuZs7/4/y4mAxQPhJpj8iiZJ0ON2xi
8NClCYbWBqkkgpntRjFdrzkzJND4zpC22B6kNYCGLjB5GVu/j2iJ2lx9ESUwsyt/
99s5TKdnKUyDs5TLzM3XQsXDjkbNidfd6pJmwQkxYPbBgH3K4VJCOBsPxriv3HWs
sZ/4qlTgKIabtk0WyXFqav++bE9/
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:31:43 2024 by rpki-client on console-ams.rpki-client.org