Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/Rt6DZuJJ7DXsSoO8BpWCjwL4ROQ.roa
File: Rt6DZuJJ7DXsSoO8BpWCjwL4ROQ.roa (raw, json)
Hash identifier: 7fspFwNz9WSNTD2rN5KehUecbLu2dRo1WLmoZbxBXDs=
Subject key identifier: 46:DE:83:66:E2:49:EC:35:EC:4A:83:BC:06:95:82:8F:02:F8:44:E4
Certificate issuer: /CN=3296d853639bc0192994293ebde09805d2d622a4
Certificate serial: 018CC94D8D1B4026CA4BCA4C1A63802B042E
Authority key identifier: 32:96:D8:53:63:9B:C0:19:29:94:29:3E:BD:E0:98:05:D2:D6:22:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/Rt6DZuJJ7DXsSoO8BpWCjwL4ROQ.roa
Signing time: Tue 02 Jan 2024 08:32:31 +0000
ROA not before: Tue 02 Jan 2024 08:32:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62009
IP address blocks: 95.214.88.0/22 maxlen: 22
185.51.136.0/22 maxlen: 22
2a0f:8a80::/29 maxlen: 29
2a04:c240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:8d:1b:40:26:ca:4b:ca:4c:1a:63:80:2b:04:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3296d853639bc0192994293ebde09805d2d622a4
Validity
Not Before: Jan 2 08:32:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46de8366e249ec35ec4a83bc0695828f02f844e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ad:34:98:c5:8d:1b:d8:d7:06:79:c5:28:70:
5a:04:5c:f5:eb:6d:b3:ea:82:48:f0:a3:42:b3:a9:
d6:db:11:61:f9:e4:31:fe:ac:ab:0d:cc:7e:16:7c:
41:ae:a9:54:71:8f:34:0e:0d:eb:1d:91:6c:b6:fe:
e3:b4:3e:af:bb:5f:08:d3:0b:e3:4e:13:c3:8b:6d:
cd:2b:ed:1c:87:59:5a:ee:d9:21:7b:c1:70:ab:9b:
7f:64:d8:84:08:2d:d8:4f:f2:06:95:e7:24:a0:eb:
05:33:78:57:5c:9a:7e:06:f1:e2:49:7d:16:8c:db:
53:0f:f5:f0:a1:b9:09:8c:a4:09:04:96:72:c0:4e:
2d:ea:3f:9a:77:5f:5b:d6:e7:5a:1f:13:9f:80:78:
af:3c:28:e3:86:86:3f:ee:7c:1e:b5:f7:a5:d3:0d:
a2:14:c3:11:81:3a:89:24:2b:87:cc:57:5d:76:33:
fb:37:89:3a:80:45:ad:59:de:22:b2:16:4d:0c:1c:
b9:b3:e8:d2:56:51:d8:47:3e:c6:5d:39:ce:e3:5e:
32:ab:16:0d:57:f8:0f:93:17:b8:e1:85:6d:50:8e:
bb:26:55:35:91:0c:ec:fa:19:67:8b:b7:cf:03:e3:
fd:50:b9:1f:f7:fc:3a:8d:78:ca:42:dc:04:49:c7:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DE:83:66:E2:49:EC:35:EC:4A:83:BC:06:95:82:8F:02:F8:44:E4
X509v3 Authority Key Identifier:
keyid:32:96:D8:53:63:9B:C0:19:29:94:29:3E:BD:E0:98:05:D2:D6:22:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/Rt6DZuJJ7DXsSoO8BpWCjwL4ROQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.88.0/22
185.51.136.0/22
IPv6:
2a04:c240::/29
2a0f:8a80::/29
Signature Algorithm: sha256WithRSAEncryption
11:e9:38:ab:08:97:a3:ee:6a:94:03:23:39:89:85:b4:9d:c5:
e3:9e:a5:37:4a:ea:6e:5e:2b:59:9e:05:30:68:fc:aa:4c:30:
e0:36:7b:28:75:31:f6:ae:15:cb:14:90:49:5f:10:29:41:d9:
a3:22:e6:1e:96:30:aa:57:f5:3d:5f:b8:f5:98:6c:0c:fb:ac:
f1:81:d1:08:25:46:6b:d4:2e:57:f2:b8:98:71:f1:d6:28:dd:
fa:e7:27:7a:93:12:e3:d0:67:e0:a5:7d:92:77:aa:6a:b0:df:
bc:56:5f:8b:87:07:14:3e:ed:d1:c1:ff:86:04:46:d7:fe:79:
48:24:f0:8b:c0:db:e2:05:63:40:1b:e0:7c:67:a8:39:df:f6:
b5:c5:7c:7d:9a:17:be:77:7c:d9:a5:e3:7f:11:ce:be:88:de:
56:ff:01:c5:74:b5:72:e3:74:7c:b8:29:eb:92:fa:4e:ad:e4:
f9:d1:c3:57:51:68:b0:32:5e:bd:19:1f:0f:8c:b0:99:b3:cc:
3e:c8:bf:22:3e:f2:8e:2f:e8:e6:18:aa:52:ff:98:8f:3a:dc:
af:99:86:6d:23:ef:79:69:73:df:87:02:f9:e2:db:7c:24:1f:
39:16:ec:d9:af:0c:1c:26:a3:e5:24:e9:a9:03:ee:fa:b7:5b:
07:ca:ed:72
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYzJTY0bQCbKS8pMGmOAKwQuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyOTZkODUzNjM5YmMwMTkyOTk0MjkzZWJkZTA5ODA1ZDJk
NjIyYTQwHhcNMjQwMTAyMDgzMjMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmRlODM2NmUyNDllYzM1ZWM0YTgzYmMwNjk1ODI4ZjAyZjg0NGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4q00mMWNG9jXBnnFKHBaBFz1622z
6oJI8KNCs6nW2xFh+eQx/qyrDcx+FnxBrqlUcY80Dg3rHZFstv7jtD6vu18I0wvj
ThPDi23NK+0ch1la7tkhe8Fwq5t/ZNiECC3YT/IGleckoOsFM3hXXJp+BvHiSX0W
jNtTD/XwobkJjKQJBJZywE4t6j+ad19b1udaHxOfgHivPCjjhoY/7nwetfel0w2i
FMMRgTqJJCuHzFdddjP7N4k6gEWtWd4ishZNDBy5s+jSVlHYRz7GXTnO414yqxYN
V/gPkxe44YVtUI67JlU1kQzs+hlni7fPA+P9ULkf9/w6jXjKQtwESceMqQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEbeg2biSew17EqDvAaVgo8C+ETkMB8GA1UdIwQY
MBaAFDKW2FNjm8AZKZQpPr3gmAXS1iKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXBiWVUyT2J3QmtwbENrLXZlQ1lCZExXSXFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82NmYwN2QtYWRjYS00MGIwLWEwYTAt
ZTc2MTgxOWY0NzVlLzEvUnQ2RFp1Sko3RFhzU29POEJwV0Nqd0w0Uk9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82NmYwN2QtYWRjYS00MGIwLWEwYTAtZTc2MTgxOWY0NzVl
LzEvTXBiWVUyT2J3QmtwbENrLXZlQ1lCZExXSXFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCX9ZYAwQC
uTOIMBQEAgACMA4DBQMqBMJAAwUDKg+KgDANBgkqhkiG9w0BAQsFAAOCAQEAEek4
qwiXo+5qlAMjOYmFtJ3F456lN0rqbl4rWZ4FMGj8qkww4DZ7KHUx9q4VyxSQSV8Q
KUHZoyLmHpYwqlf1PV+49ZhsDPus8YHRCCVGa9QuV/K4mHHx1ijd+ucnepMS49Bn
4KV9kneqarDfvFZfi4cHFD7t0cH/hgRG1/55SCTwi8Db4gVjQBvgfGeoOd/2tcV8
fZoXvnd82aXjfxHOvojeVv8BxXS1cuN0fLgp65L6Tq3k+dHDV1FosDJevRkfD4yw
mbPMPsi/Ij7yji/o5hiqUv+Yjzrcr5mGbSPveWlz34cC+eLbfCQfORbs2a8MHCaj
5STpqQPu+rdbB8rtcg==
-----END CERTIFICATE-----
Generated at Thu Jun 20 11:52:05 2024 by rpki-client on console-ams.rpki-client.org