Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/oyQl-p0yHveWQ5WbLsqdKR5R4IA.roa
File: oyQl-p0yHveWQ5WbLsqdKR5R4IA.roa (raw, json)
Hash identifier: FDh2QEgnpWDg9F22qrW73bU8CFk28iAsmB2pry11r1Q=
Subject key identifier: A3:24:25:FA:9D:32:1E:F7:96:43:95:9B:2E:CA:9D:29:1E:51:E0:80
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 018CC2DAEEA671212042642D7A7121D26512
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/oyQl-p0yHveWQ5WbLsqdKR5R4IA.roa
Signing time: Mon 01 Jan 2024 02:29:37 +0000
ROA not before: Mon 01 Jan 2024 02:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47215
IP address blocks: 5.11.48.0/21 maxlen: 24
109.75.176.0/20 maxlen: 24
93.190.64.0/21 maxlen: 24
185.32.116.0/22 maxlen: 24
95.130.248.0/21 maxlen: 24
95.130.253.0/24 maxlen: 24
185.143.164.0/22 maxlen: 24
141.101.32.0/21 maxlen: 24
185.65.88.0/22 maxlen: 24
2a00:12c0::/29 maxlen: 48
2a00:12c0::/32 maxlen: 48
2a04:4cc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ee:a6:71:21:20:42:64:2d:7a:71:21:d2:65:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Jan 1 02:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a32425fa9d321ef79643959b2eca9d291e51e080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:ad:e2:19:ee:fb:92:a0:9b:45:12:d6:76:
45:51:63:5b:22:a9:5a:5b:bd:c3:41:25:d0:02:c1:
23:51:17:9b:16:54:78:94:d2:f1:68:5e:8e:85:3d:
61:45:4e:b6:6b:82:f7:6f:85:d7:c9:41:d5:cf:b8:
87:67:cd:e7:29:24:32:bc:cd:33:0a:2e:15:63:c6:
a3:b1:5c:23:b6:9c:7f:a9:69:15:21:85:60:a5:98:
f7:0a:57:0c:ae:bd:a4:2d:0d:93:9a:c0:5a:9a:3d:
94:a8:00:3e:f9:de:8a:6f:45:99:31:12:c6:0c:b8:
1b:4b:5f:99:35:18:d3:ac:95:5d:b4:97:51:fc:db:
dd:45:5d:a2:9f:9c:0e:1b:83:60:10:1e:20:e2:2e:
65:bc:bb:1e:53:9d:72:a1:05:ed:42:b4:42:c9:15:
0b:e4:9b:40:25:59:fe:55:27:62:9f:3d:29:e4:f1:
83:c7:a6:5c:4f:9a:e9:9e:db:ec:d5:b8:b0:dd:70:
62:91:ba:e7:43:77:9b:80:c2:3a:20:11:58:4e:cd:
85:8f:48:0d:3b:d7:87:25:36:48:ad:74:39:fa:03:
94:47:74:b5:89:ba:c4:42:ee:13:6d:4d:39:5f:4a:
d8:4b:ce:0f:02:07:ae:5e:34:12:66:5c:d5:85:43:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:24:25:FA:9D:32:1E:F7:96:43:95:9B:2E:CA:9D:29:1E:51:E0:80
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/oyQl-p0yHveWQ5WbLsqdKR5R4IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.48.0/21
93.190.64.0/21
95.130.248.0/21
109.75.176.0/20
141.101.32.0/21
185.32.116.0/22
185.65.88.0/22
185.143.164.0/22
IPv6:
2a00:12c0::/29
2a04:4cc0::/29
Signature Algorithm: sha256WithRSAEncryption
2a:87:4b:e8:51:fd:30:64:ac:8d:3b:44:81:19:c2:91:fd:d2:
42:2f:18:f9:1e:ca:89:c4:8f:8a:3b:fa:f8:78:eb:63:d5:68:
94:0f:ca:66:df:12:2a:2d:c3:fd:95:d4:6f:b3:bf:5c:4b:dd:
18:51:c9:29:fd:2d:ee:54:e2:fd:8f:99:14:02:9e:c4:89:2b:
e0:de:e0:3a:74:f4:a4:a7:f8:2b:8b:eb:3f:d3:01:fd:0c:98:
d0:ca:d8:37:01:a0:4b:77:b4:66:03:d3:43:76:82:2a:c7:83:
1f:72:a9:57:00:d6:54:d4:4c:a8:51:8c:ab:cb:ee:19:2f:f4:
36:68:68:78:24:4b:31:07:38:14:2e:6d:70:8c:98:54:3c:3b:
3a:df:2b:81:af:c2:47:f2:b8:55:73:f0:04:a5:84:de:e8:36:
f5:a3:0b:7c:d8:a3:8f:aa:8b:80:ca:aa:fc:6b:21:32:4c:02:
d0:8e:a1:3c:23:d3:70:50:d3:e4:79:ec:db:61:3c:ac:96:56:
bf:a0:2f:c9:1b:a7:50:be:2a:81:db:af:d4:a2:92:ab:3f:22:
53:22:51:d2:1d:ba:20:27:a0:9e:6f:20:44:81:15:8f:37:2e:
99:e8:e6:9f:19:41:45:ab:d7:d6:5a:ed:88:ff:e7:6e:38:3a:
cf:22:56:29
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAYzC2u6mcSEgQmQtenEh0mUSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1
ZmIwMmYwHhcNMjQwMTAxMDIyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzI0MjVmYTlkMzIxZWY3OTY0Mzk1OWIyZWNhOWQyOTFlNTFlMDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTWt4hnu+5Kgm0US1nZFUWNbIqla
W73DQSXQAsEjURebFlR4lNLxaF6OhT1hRU62a4L3b4XXyUHVz7iHZ83nKSQyvM0z
Ci4VY8ajsVwjtpx/qWkVIYVgpZj3ClcMrr2kLQ2TmsBamj2UqAA++d6Kb0WZMRLG
DLgbS1+ZNRjTrJVdtJdR/NvdRV2in5wOG4NgEB4g4i5lvLseU51yoQXtQrRCyRUL
5JtAJVn+VSdinz0p5PGDx6ZcT5rpntvs1biw3XBikbrnQ3ebgMI6IBFYTs2Fj0gN
O9eHJTZIrXQ5+gOUR3S1ibrEQu4TbU05X0rYS84PAgeuXjQSZlzVhUO0AwIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFKMkJfqdMh73lkOVmy7KnSkeUeCAMB8GA1UdIwQY
MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt
NzQxYzFkOGRlYTJiLzEvb3lRbC1wMHlIdmVXUTVXYkxzcWRLUjVSNElBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi
LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQDBQswAwQD
Xb5AAwQDX4L4AwQEbUuwAwQDjWUgAwQCuSB0AwQCuUFYAwQCuY+kMBQEAgACMA4D
BQMqABLAAwUDKgRMwDANBgkqhkiG9w0BAQsFAAOCAQEAKodL6FH9MGSsjTtEgRnC
kf3SQi8Y+R7KicSPijv6+HjrY9VolA/KZt8SKi3D/ZXUb7O/XEvdGFHJKf0t7lTi
/Y+ZFAKexIkr4N7gOnT0pKf4K4vrP9MB/QyY0MrYNwGgS3e0ZgPTQ3aCKseDH3Kp
VwDWVNRMqFGMq8vuGS/0NmhoeCRLMQc4FC5tcIyYVDw7Ot8rga/CR/K4VXPwBKWE
3ug29aMLfNijj6qLgMqq/GshMkwC0I6hPCPTcFDT5Hns22E8rJZWv6AvyRunUL4q
gduv1KKSqz8iUyJR0h26ICegnm8gRIEVjzcumejmnxlBRavX1lrtiP/nbjg6zyJW
KQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:37:47 2024 by rpki-client on console-fra.rpki-client.org