Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/pD6dNbGfaA2Fr_ZgiPxDW7AO9nM.roa
File: pD6dNbGfaA2Fr_ZgiPxDW7AO9nM.roa (raw, json)
Hash identifier: iO6rXqxTMMo5pW8SiBnOMdp0LddjQOJyVjOOUjSPR+w=
Subject key identifier: A4:3E:9D:35:B1:9F:68:0D:85:AF:F6:60:88:FC:43:5B:B0:0E:F6:73
Certificate issuer: /CN=adf0df77114741e13a17d7213e6956bf9627b558
Certificate serial: 019111EE70C56B0BF482F58668F48B56B3BD
Authority key identifier: AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/pD6dNbGfaA2Fr_ZgiPxDW7AO9nM.roa
Signing time: Fri 02 Aug 2024 07:12:04 +0000
ROA not before: Fri 02 Aug 2024 07:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62319
IP address blocks: 37.44.248.0/23 maxlen: 23
37.44.250.0/24 maxlen: 24
91.142.136.0/24 maxlen: 24
91.194.36.0/23 maxlen: 23
91.216.118.0/24 maxlen: 24
178.209.160.0/22 maxlen: 22
178.209.165.0/24 maxlen: 24
178.209.166.0/24 maxlen: 24
178.209.167.0/24 maxlen: 24
178.209.168.0/24 maxlen: 24
178.209.169.0/24 maxlen: 24
178.209.170.0/24 maxlen: 24
178.209.171.0/24 maxlen: 24
178.209.172.0/24 maxlen: 24
178.209.173.0/24 maxlen: 24
178.209.174.0/24 maxlen: 24
178.209.175.0/24 maxlen: 24
178.209.176.0/23 maxlen: 23
178.209.178.0/23 maxlen: 23
178.209.180.0/22 maxlen: 22
178.209.184.0/22 maxlen: 22
178.209.188.0/23 maxlen: 23
178.209.190.0/24 maxlen: 24
178.209.191.0/24 maxlen: 24
185.4.216.0/23 maxlen: 23
185.4.218.0/24 maxlen: 24
185.4.219.0/24 maxlen: 24
185.40.44.0/22 maxlen: 22
185.66.184.0/22 maxlen: 22
185.150.72.0/22 maxlen: 22
185.203.0.0/22 maxlen: 22
193.106.120.0/22 maxlen: 22
193.169.74.0/23 maxlen: 23
194.116.178.0/23 maxlen: 23
194.126.192.0/24 maxlen: 24
2a02:c900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:11:ee:70:c5:6b:0b:f4:82:f5:86:68:f4:8b:56:b3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf0df77114741e13a17d7213e6956bf9627b558
Validity
Not Before: Aug 2 07:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a43e9d35b19f680d85aff66088fc435bb00ef673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:05:99:f0:a3:b1:55:88:56:91:34:0a:73:
3b:14:a4:6e:18:e1:9c:74:75:f8:55:24:37:87:3d:
7a:c9:48:1e:89:6d:78:7b:56:d6:89:0d:64:ae:a1:
52:f6:b7:08:22:27:47:f0:64:d8:af:45:05:51:0e:
25:69:ba:0e:23:94:57:fc:de:c8:d8:ac:b1:95:29:
41:e9:9d:56:f8:4d:5b:90:fc:e0:23:e2:e5:28:e0:
9d:75:e7:43:20:84:9d:0d:4d:3a:35:cd:3c:da:d8:
5b:01:13:34:db:eb:46:c2:a3:56:c5:03:52:ee:b0:
bd:dd:ab:17:e4:6b:ad:73:a7:a7:c0:34:68:ed:2d:
88:9f:8b:57:03:07:12:c1:74:93:10:6f:d9:26:03:
5d:f6:10:e2:c0:31:d4:66:52:d9:fc:75:6b:dd:7d:
95:85:09:85:25:67:91:58:e5:ec:01:6d:61:ee:8b:
fe:af:f3:6e:26:b2:e0:d6:4e:4d:b8:57:27:99:02:
8f:53:07:90:c9:88:18:76:ce:2e:70:b4:0a:a6:18:
41:5b:36:26:ba:10:0d:6f:26:69:a5:34:5b:ea:cf:
1a:d4:fc:4e:57:21:b3:c3:3a:28:e2:d0:7d:5a:8b:
cf:e3:70:36:d6:32:dc:b3:8b:01:df:06:88:13:ac:
61:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3E:9D:35:B1:9F:68:0D:85:AF:F6:60:88:FC:43:5B:B0:0E:F6:73
X509v3 Authority Key Identifier:
keyid:AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/pD6dNbGfaA2Fr_ZgiPxDW7AO9nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.248.0-37.44.250.255
91.142.136.0/24
91.194.36.0/23
91.216.118.0/24
178.209.160.0/22
178.209.165.0-178.209.191.255
185.4.216.0/22
185.40.44.0/22
185.66.184.0/22
185.150.72.0/22
185.203.0.0/22
193.106.120.0/22
193.169.74.0/23
194.116.178.0/23
194.126.192.0/24
IPv6:
2a02:c900::/29
Signature Algorithm: sha256WithRSAEncryption
35:66:51:ce:13:bc:b8:bf:40:44:8d:ff:44:3e:88:c6:b3:6b:
99:6f:ca:fd:6f:be:c4:8f:c6:57:7e:fc:60:cf:92:de:ac:f1:
d5:67:27:60:8a:bd:4f:22:4b:0f:b0:db:c2:da:10:62:e2:b2:
2d:f9:55:eb:2b:c2:a7:50:ec:31:42:5b:3f:89:18:a2:61:83:
9d:cd:56:a4:47:a5:91:59:f2:1a:65:24:d1:78:4d:31:24:eb:
51:0a:91:97:3c:cf:03:cf:cb:1e:1a:00:c5:c6:75:8d:16:14:
92:58:5f:4a:18:0f:01:94:98:c3:4c:00:ca:98:bc:97:39:e2:
33:30:a4:6f:cb:e5:d3:9c:61:fd:56:fc:91:ca:47:e6:01:ef:
b5:d2:9b:0b:8a:50:2e:e8:24:8c:7f:61:51:2e:ce:9e:1d:71:
19:3b:16:61:38:a4:f8:18:92:0f:05:75:c0:41:26:7b:02:d8:
00:17:f5:25:5f:b4:c5:3b:53:da:23:af:bd:55:74:c1:07:f9:
48:4f:49:bf:a8:b4:18:dd:9f:c5:be:0d:9f:6e:7e:a2:5e:68:
9d:d3:6c:57:98:6d:5c:ba:dc:c8:a8:98:a4:28:1e:50:71:46:
01:a8:f4:c3:58:27:18:82:cd:c4:32:08:9b:f5:14:20:d5:64:
3f:ea:24:30
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZER7nDFawv0gvWGaPSLVrO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjBkZjc3MTE0NzQxZTEzYTE3ZDcyMTNlNjk1NmJmOTYy
N2I1NTgwHhcNMjQwODAyMDcxMjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDNlOWQzNWIxOWY2ODBkODVhZmY2NjA4OGZjNDM1YmIwMGVmNjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjoFmfCjsVWIVpE0CnM7FKRuGOGc
dHX4VSQ3hz16yUgeiW14e1bWiQ1krqFS9rcIIidH8GTYr0UFUQ4laboOI5RX/N7I
2KyxlSlB6Z1W+E1bkPzgI+LlKOCddedDIISdDU06Nc082thbARM02+tGwqNWxQNS
7rC93asX5Gutc6enwDRo7S2In4tXAwcSwXSTEG/ZJgNd9hDiwDHUZlLZ/HVr3X2V
hQmFJWeRWOXsAW1h7ov+r/NuJrLg1k5NuFcnmQKPUweQyYgYds4ucLQKphhBWzYm
uhANbyZppTRb6s8a1PxOVyGzwzoo4tB9WovP43A21jLcs4sB3waIE6xhtQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFKQ+nTWxn2gNha/2YIj8Q1uwDvZzMB8GA1UdIwQY
MBaAFK3w33cRR0HhOhfXIT5pVr+WJ7VYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZEZmR4RkhRZUU2RjljaFBtbFd2NVludFZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hMzBiZWEtOWU5My00MDkxLWI2ZTEt
ZTFlZjI3NzcyZWFmLzEvcEQ2ZE5iR2ZhQTJGcl9aZ2lQeERXN0FPOW5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9hMzBiZWEtOWU5My00MDkxLWI2ZTEtZTFlZjI3NzcyZWFm
LzEvcmZEZmR4RkhRZUU2RjljaFBtbFd2NVludFZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGUBggrBgEFBQcBBwEB/wSBhDCBgTBwBAIAATBqMAwDBAMl
LPgDBAAlLPoDBABbjogDBAFbwiQDBABb2HYDBAKy0aAwDAMEALLRpQMEBrLRgAME
ArkE2AMEArkoLAMEArlCuAMEArmWSAMEArnLAAMEAsFqeAMEAcGpSgMEAcJ0sgME
AMJ+wDANBAIAAjAHAwUDKgLJADANBgkqhkiG9w0BAQsFAAOCAQEANWZRzhO8uL9A
RI3/RD6IxrNrmW/K/W++xI/GV378YM+S3qzx1WcnYIq9TyJLD7DbwtoQYuKyLflV
6yvCp1DsMUJbP4kYomGDnc1WpEelkVnyGmUk0XhNMSTrUQqRlzzPA8/LHhoAxcZ1
jRYUklhfShgPAZSYw0wAypi8lzniMzCkb8vl05xh/Vb8kcpH5gHvtdKbC4pQLugk
jH9hUS7Onh1xGTsWYTik+BiSDwV1wEEmewLYABf1JV+0xTtT2iOvvVV0wQf5SE9J
v6i0GN2fxb4Nn25+ol5ondNsV5htXLrcyKiYpCgeUHFGAaj0w1gnGILNxDIIm/UU
INVkP+okMA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:27:58 2024 by rpki-client on console-fra.rpki-client.org