Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/tdLkRsWrS9fMjkASVL6QS25G53Y.roa
File: tdLkRsWrS9fMjkASVL6QS25G53Y.roa (raw, json)
Hash identifier: SE/oRzq3URYvs6LUcUBnZoqQZfiX1NqwE7KJvkFsZm4=
Subject key identifier: B5:D2:E4:46:C5:AB:4B:D7:CC:8E:40:12:54:BE:90:4B:6E:46:E7:76
Certificate issuer: /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial: 018FBF16A2F34FB3E4554BAD560FE2F16B9D
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/tdLkRsWrS9fMjkASVL6QS25G53Y.roa
Signing time: Tue 28 May 2024 12:04:42 +0000
ROA not before: Tue 28 May 2024 12:04:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49635
IP address blocks: 27.0.172.0/22 maxlen: 24
46.183.112.0/21 maxlen: 24
79.143.88.0/21 maxlen: 24
80.240.126.0/23 maxlen: 24
85.208.20.0/22 maxlen: 24
93.189.88.0/21 maxlen: 24
103.23.60.0/23 maxlen: 24
161.22.40.0/21 maxlen: 24
185.166.212.0/22 maxlen: 24
185.253.152.0/22 maxlen: 24
185.254.204.0/22 maxlen: 24
187.33.144.0/20 maxlen: 24
200.234.224.0/20 maxlen: 24
217.71.200.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bf:16:a2:f3:4f:b3:e4:55:4b:ad:56:0f:e2:f1:6b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Validity
Not Before: May 28 12:04:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5d2e446c5ab4bd7cc8e401254be904b6e46e776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ec:2e:83:37:ee:fc:6d:cc:fa:d7:7e:84:b5:
c8:ea:3b:96:c8:36:39:81:be:26:4b:e5:ed:34:79:
23:bd:6b:68:0b:2f:8d:71:38:33:3e:60:2e:d6:a9:
4f:e6:47:2e:26:04:5a:09:bf:c3:18:49:3c:ab:18:
99:82:a1:73:c5:88:35:29:24:9f:19:06:19:a5:7d:
dc:ed:94:bc:50:bb:4b:64:f1:42:d4:01:a0:97:08:
bd:03:eb:08:6f:60:b5:16:cb:68:fe:d6:86:fb:be:
3e:23:1e:cb:f0:71:9e:ac:93:43:1b:77:12:4a:61:
34:55:af:6b:cb:be:0d:0f:4e:be:f2:d6:d1:a2:d4:
2d:e6:11:87:2f:99:b3:68:78:3f:36:a9:cb:32:26:
dc:f4:64:0e:30:ca:e1:7a:44:ba:89:78:5c:d2:0f:
f9:d6:8a:e9:2a:c2:84:bc:de:e8:ad:eb:7a:d1:01:
23:c6:c5:65:a9:f5:3f:27:52:b3:a9:46:b8:7d:ab:
6f:c5:52:dc:8e:dc:7b:f5:59:2b:be:91:99:9f:aa:
5d:05:0b:77:57:d9:06:c4:ab:80:ed:1c:65:f4:94:
1e:d0:83:89:5c:41:0f:d2:41:35:94:a2:95:29:0d:
f1:2e:38:a0:52:c6:25:78:45:3c:9b:d0:f6:12:d1:
f8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D2:E4:46:C5:AB:4B:D7:CC:8E:40:12:54:BE:90:4B:6E:46:E7:76
X509v3 Authority Key Identifier:
keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/tdLkRsWrS9fMjkASVL6QS25G53Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.172.0/22
46.183.112.0/21
79.143.88.0/21
80.240.126.0/23
85.208.20.0/22
93.189.88.0/21
103.23.60.0/23
161.22.40.0/21
185.166.212.0/22
185.253.152.0/22
185.254.204.0/22
187.33.144.0/20
200.234.224.0/20
217.71.200.0/21
Signature Algorithm: sha256WithRSAEncryption
83:9b:25:39:3d:00:cd:db:e8:ec:cd:dd:cd:e2:d2:b1:af:13:
a7:af:82:4f:23:2a:2c:07:0b:2a:dd:65:5b:36:a0:c1:f5:2f:
11:00:f1:14:13:3f:f9:48:70:54:f6:60:20:6e:d7:f7:9b:d9:
23:ae:4b:8a:3c:c8:69:46:ed:de:15:4b:a3:09:7e:8f:bc:d3:
b4:3b:60:da:66:a0:54:74:01:29:d9:49:76:7b:d3:c6:f0:ec:
c3:7e:e2:0a:26:aa:09:20:b0:da:05:5f:3a:ce:cc:71:d5:f7:
28:13:33:ef:8c:a1:7d:87:21:06:50:2e:ac:97:49:89:cc:dc:
f6:0f:82:8c:96:62:ae:7f:92:69:38:cb:70:85:4e:b6:59:7a:
f3:1b:46:d2:eb:e4:9b:1e:07:17:59:56:19:e8:b5:6e:f0:dc:
30:2c:9e:64:6e:3c:91:9a:de:c5:1e:43:b7:3a:e3:85:9e:20:
90:18:c3:81:12:70:4f:3f:b2:36:0f:0a:d0:42:c7:86:a7:50:
ac:d7:c3:c6:27:79:7d:e0:60:f5:56:de:4e:41:64:da:f8:94:
a7:ec:d8:60:e4:5b:0f:d4:25:d1:15:23:98:da:98:0b:b3:19:
49:2c:ae:35:8a:5c:b3:a3:da:77:ca:a8:d0:23:58:70:b3:a6:
4f:3a:63:67
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAY+/FqLzT7PkVUutVg/i8WudMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NTYwZTNlNzJjNjA3OWEwNGU3ZDFmNjEwM2I5ZGY3ODk3
OWE1MjIwHhcNMjQwNTI4MTIwNDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWQyZTQ0NmM1YWI0YmQ3Y2M4ZTQwMTI1NGJlOTA0YjZlNDZlNzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ewugzfu/G3M+td+hLXI6juWyDY5
gb4mS+XtNHkjvWtoCy+NcTgzPmAu1qlP5kcuJgRaCb/DGEk8qxiZgqFzxYg1KSSf
GQYZpX3c7ZS8ULtLZPFC1AGglwi9A+sIb2C1Fsto/taG+74+Ix7L8HGerJNDG3cS
SmE0Va9ry74ND06+8tbRotQt5hGHL5mzaHg/NqnLMibc9GQOMMrhekS6iXhc0g/5
1orpKsKEvN7oret60QEjxsVlqfU/J1KzqUa4fatvxVLcjtx79VkrvpGZn6pdBQt3
V9kGxKuA7Rxl9JQe0IOJXEEP0kE1lKKVKQ3xLjigUsYleEU8m9D2EtH4SwIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFLXS5EbFq0vXzI5AElS+kEtuRud2MB8GA1UdIwQY
MBaAFAdWDj5yxgeaBOfR9hA7nfeJeaUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wNjk5OGQtOGNkOS00OTkzLTlmZTct
ODIyMWQyMTQzNzk2LzEvdGRMa1JzV3JTOWZNamtBU1ZMNlFTMjVHNTNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wNjk5OGQtOGNkOS00OTkzLTlmZTctODIyMWQyMTQzNzk2
LzEvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQCGwCsAwQD
LrdwAwQDT49YAwQBUPB+AwQCVdAUAwQDXb1YAwQBZxc8AwQDoRYoAwQCuabUAwQC
uf2YAwQCuf7MAwQEuyGQAwQEyOrgAwQD2UfIMA0GCSqGSIb3DQEBCwUAA4IBAQCD
myU5PQDN2+jszd3N4tKxrxOnr4JPIyosBwsq3WVbNqDB9S8RAPEUEz/5SHBU9mAg
btf3m9kjrkuKPMhpRu3eFUujCX6PvNO0O2DaZqBUdAEp2Ul2e9PG8OzDfuIKJqoJ
ILDaBV86zsxx1fcoEzPvjKF9hyEGUC6sl0mJzNz2D4KMlmKuf5JpOMtwhU62WXrz
G0bS6+SbHgcXWVYZ6LVu8NwwLJ5kbjyRmt7FHkO3OuOFniCQGMOBEnBPP7I2DwrQ
QseGp1Cs18PGJ3l94GD1Vt5OQWTa+JSn7Nhg5FsP1CXRFSOY2pgLsxlJLK41ilyz
o9p3yqjQI1hws6ZPOmNn
-----END CERTIFICATE-----
Generated at Mon Jun 24 10:11:22 2024 by rpki-client on console-fra.rpki-client.org