Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/tMuDF3GJS5Zn4AFaIGoDWmFR6XQ.roa
File: tMuDF3GJS5Zn4AFaIGoDWmFR6XQ.roa (raw, json)
Hash identifier: AQtXIUX8x0+WcLfQNxlDJTSyEDhKuxcaVMumR9tz4XI=
Subject key identifier: B4:CB:83:17:71:89:4B:96:67:E0:01:5A:20:6A:03:5A:61:51:E9:74
Certificate issuer: /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Certificate serial: 018CC3B6E04E3C2015623B0665AB433401B8
Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/tMuDF3GJS5Zn4AFaIGoDWmFR6XQ.roa
Signing time: Mon 01 Jan 2024 06:29:51 +0000
ROA not before: Mon 01 Jan 2024 06:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6697
IP address blocks: 178.120.0.0/13 maxlen: 24
86.57.128.0/17 maxlen: 24
93.84.0.0/15 maxlen: 24
37.212.0.0/14 maxlen: 23
37.45.0.0/16 maxlen: 21
194.158.192.0/19 maxlen: 24
37.44.64.0/18 maxlen: 21
82.209.192.0/18 maxlen: 24
185.152.136.0/22 maxlen: 24
2a02:2208::/29 maxlen: 44
2001:7f8:5a::/48 maxlen: 48
2a02:2208::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e0:4e:3c:20:15:62:3b:06:65:ab:43:34:01:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Validity
Not Before: Jan 1 06:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4cb831771894b9667e0015a206a035a6151e974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:e7:81:a8:f0:5d:3c:03:20:8f:b8:df:38:
19:d5:54:72:55:e6:e3:8b:7e:78:04:07:3c:5c:8a:
1a:48:f0:d8:c4:14:ed:3a:d9:81:fc:07:6b:91:96:
e4:0a:01:cf:a0:db:e8:8e:46:e1:3c:8f:85:9c:c9:
bd:ef:99:56:7c:12:77:83:b7:96:8b:f2:0e:fb:83:
83:a2:9b:4d:7b:6e:2b:f0:c0:ae:c8:4c:a0:43:f2:
e7:e2:53:74:b0:d3:89:a7:94:4e:5e:23:72:3a:62:
7c:fa:99:48:7e:71:83:d6:17:12:da:9f:85:2d:66:
61:ef:4a:9a:09:14:45:65:9d:9b:48:e4:94:66:91:
a7:2d:91:db:a0:9b:70:b0:a6:9e:5e:d3:07:e1:76:
6f:7d:5b:0a:ab:68:39:81:6f:a7:7e:9b:ca:2d:36:
72:e3:f4:e4:9a:da:5f:d8:b9:93:a4:f7:ee:a0:c0:
23:d2:a6:a1:b7:54:3c:0c:b1:1c:37:95:d0:88:59:
d6:00:b9:93:61:26:d6:37:ab:22:af:65:35:12:3e:
e6:fd:a6:52:18:87:41:38:96:21:09:42:c3:76:6b:
eb:95:71:41:7e:07:33:7d:1c:d2:a9:42:be:0e:67:
80:70:e2:02:a3:7b:a8:c0:64:47:15:00:6f:ff:67:
a8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CB:83:17:71:89:4B:96:67:E0:01:5A:20:6A:03:5A:61:51:E9:74
X509v3 Authority Key Identifier:
keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/tMuDF3GJS5Zn4AFaIGoDWmFR6XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.64.0/18
37.45.0.0/16
37.212.0.0/14
82.209.192.0/18
86.57.128.0/17
93.84.0.0/15
178.120.0.0/13
185.152.136.0/22
194.158.192.0/19
IPv6:
2001:7f8:5a::/48
2a02:2208::/29
Signature Algorithm: sha256WithRSAEncryption
1f:a9:56:73:6c:e0:2e:e5:a9:2f:c6:ec:82:45:c6:d1:47:5d:
a2:84:e6:e7:d4:78:20:a9:52:44:30:d8:c3:10:98:44:18:08:
01:d2:1f:c5:ad:01:73:6a:b9:65:5d:df:f3:32:ca:bf:72:6b:
42:32:51:1a:f8:95:74:e8:cc:c1:56:d3:69:6c:ed:ca:a1:a7:
71:99:ac:14:ce:5c:75:37:9f:45:17:27:41:b6:e4:4b:4f:f0:
07:c4:8d:eb:09:8b:f7:4e:ab:da:ac:13:2f:ed:12:f2:2e:92:
89:33:7f:b2:f5:d5:2e:39:71:7c:3b:19:e8:90:6c:d4:5d:57:
df:7a:a8:fd:f4:b9:a2:78:30:67:53:39:c8:3c:62:f5:4d:a7:
ef:51:6c:5f:9d:ba:9d:a4:9a:79:5a:24:59:7e:4e:50:e4:3f:
5b:51:ef:c5:2a:98:94:32:71:08:bf:5c:ad:7f:88:63:3a:c4:
f4:d7:95:7b:37:9f:30:f3:8f:db:21:6b:81:c4:70:a0:ff:48:
dc:2b:77:a6:22:1f:6f:00:98:55:88:c0:a2:81:f6:f2:06:04:
7e:5d:96:27:03:fa:7f:0f:dc:75:e4:1c:a0:c7:8f:44:23:14:
1f:14:cd:d4:fd:86:6f:e6:be:df:8e:26:3e:16:3e:b3:da:dc:
0a:21:b8:a1
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAYzDtuBOPCAVYjsGZatDNAG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiODgyY2Q2ZDE5NmFlMWY5Njg3MmFjYWU3ODMyMWJlN2E5
MmI4ZWIwHhcNMjQwMTAxMDYyOTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGNiODMxNzcxODk0Yjk2NjdlMDAxNWEyMDZhMDM1YTYxNTFlOTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtLngajwXTwDII+43zgZ1VRyVebj
i354BAc8XIoaSPDYxBTtOtmB/AdrkZbkCgHPoNvojkbhPI+FnMm975lWfBJ3g7eW
i/IO+4ODoptNe24r8MCuyEygQ/Ln4lN0sNOJp5ROXiNyOmJ8+plIfnGD1hcS2p+F
LWZh70qaCRRFZZ2bSOSUZpGnLZHboJtwsKaeXtMH4XZvfVsKq2g5gW+nfpvKLTZy
4/Tkmtpf2LmTpPfuoMAj0qaht1Q8DLEcN5XQiFnWALmTYSbWN6sir2U1Ej7m/aZS
GIdBOJYhCULDdmvrlXFBfgczfRzSqUK+DmeAcOICo3uowGRHFQBv/2eoKwIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFLTLgxdxiUuWZ+ABWiBqA1phUel0MB8GA1UdIwQY
MBaAFKuILNbRlq4flocqyueDIb56krjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTRnczF0R1dyaC1XaHlySzU0TWh2bnFTdU9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80YjZjYzktMDlkMy00Njc4LWIwYTct
OTUwYzE4MDU5NmQwLzEvdE11REYzR0pTNVpuNEFGYUlHb0RXbUZSNlhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80YjZjYzktMDlkMy00Njc4LWIwYTctOTUwYzE4MDU5NmQw
LzEvcTRnczF0R1dyaC1XaHlySzU0TWh2bnFTdU9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjA4BAIAATAyAwQGJSxAAwMA
JS0DAwIl1AMEBlLRwAMEB1Y5gAMDAV1UAwMDsngDBAK5mIgDBAXCnsAwFgQCAAIw
EAMHACABB/gAWgMFAyoCIggwDQYJKoZIhvcNAQELBQADggEBAB+pVnNs4C7lqS/G
7IJFxtFHXaKE5ufUeCCpUkQw2MMQmEQYCAHSH8WtAXNquWVd3/Myyr9ya0IyURr4
lXTozMFW02ls7cqhp3GZrBTOXHU3n0UXJ0G25EtP8AfEjesJi/dOq9qsEy/tEvIu
kokzf7L11S45cXw7GeiQbNRdV996qP30uaJ4MGdTOcg8YvVNp+9RbF+dup2kmnla
JFl+TlDkP1tR78UqmJQycQi/XK1/iGM6xPTXlXs3nzDzj9sha4HEcKD/SNwrd6Yi
H28AmFWIwKKB9vIGBH5dlicD+n8P3HXkHKDHj0QjFB8UzdT9hm/mvt+OJj4WPrPa
3AohuKE=
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:39:30 2024 by rpki-client on console-ams.rpki-client.org