Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/6gYTU7-G4C0zL2fDfE9i9u240Ss.roa
File: 6gYTU7-G4C0zL2fDfE9i9u240Ss.roa (raw, json)
Hash identifier: YTbDE8Kd0fW91IOoVqma7SgWq7AagccXwfGq/+UM658=
Subject key identifier: EA:06:13:53:BF:86:E0:2D:33:2F:67:C3:7C:4F:62:F6:ED:B8:D1:2B
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 019192B33193B0870AD8CBA43EA4936690F6
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/6gYTU7-G4C0zL2fDfE9i9u240Ss.roa
Signing time: Tue 27 Aug 2024 07:18:22 +0000
ROA not before: Tue 27 Aug 2024 07:18:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34267
IP address blocks: 37.19.32.0/19 maxlen: 19
37.19.32.0/20 maxlen: 20
84.42.32.0/19 maxlen: 24
84.42.72.0/21 maxlen: 24
94.75.128.0/18 maxlen: 18
109.198.192.0/19 maxlen: 19
109.198.192.0/21 maxlen: 21
213.155.192.0/19 maxlen: 19
213.155.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:92:b3:31:93:b0:87:0a:d8:cb:a4:3e:a4:93:66:90:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Aug 27 07:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea061353bf86e02d332f67c37c4f62f6edb8d12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:51:9c:8c:34:c2:50:a2:c8:94:e7:5e:b4:
bb:ad:69:f5:33:20:eb:c8:b2:1f:fe:8e:62:23:2d:
b2:3f:e1:29:e7:2c:b9:14:9f:b0:ec:93:c7:3b:4a:
53:09:34:3f:e9:47:93:be:47:1e:99:29:4e:ac:8a:
42:ff:f1:79:73:02:89:99:9d:29:bd:41:e3:53:0c:
f4:b9:8f:42:ae:83:8b:03:0e:bc:28:47:13:f0:96:
d9:aa:55:d1:14:a0:59:6f:95:2a:ee:20:95:0e:7b:
cc:83:19:9b:67:88:07:ed:9d:0a:72:00:ef:42:90:
04:11:e2:cd:b7:42:7c:eb:59:7c:4a:dd:2f:fa:7e:
e3:e9:2c:b4:9f:85:ec:a6:54:ee:eb:51:1f:f2:f2:
8a:c5:9c:bd:31:2f:21:cc:53:72:e8:de:ee:92:2d:
08:c8:9e:23:7a:34:ef:7a:a1:a9:ea:88:99:16:79:
94:e8:49:0f:f4:58:03:6d:e9:80:fe:c7:f6:0b:a5:
92:85:fb:78:30:8e:cb:64:68:35:9a:c8:74:43:34:
df:9b:41:0a:6b:86:45:ba:33:8e:86:83:11:12:89:
4b:0e:16:0c:fe:a6:e3:5e:d7:97:07:6f:96:c6:51:
3d:8f:d5:34:23:95:15:a6:d6:2b:2a:6f:0f:82:d2:
51:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:06:13:53:BF:86:E0:2D:33:2F:67:C3:7C:4F:62:F6:ED:B8:D1:2B
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/6gYTU7-G4C0zL2fDfE9i9u240Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.32.0/19
84.42.32.0/19
84.42.72.0/21
94.75.128.0/18
109.198.192.0/19
213.155.192.0/19
Signature Algorithm: sha256WithRSAEncryption
44:9b:91:c6:de:7f:0f:b8:c9:e4:57:03:02:f5:fa:ce:aa:d2:
6b:d8:b7:f1:09:f2:27:37:e1:86:63:91:d1:54:14:83:09:ff:
1d:08:76:6f:43:25:b7:d3:ed:9b:11:84:87:38:fa:9c:9c:a3:
99:00:c8:37:00:e7:b1:b8:a4:44:48:49:c7:f4:70:7e:c9:9b:
f8:05:58:ef:cf:78:14:7a:89:22:e0:6d:c4:8e:9b:92:25:2c:
8e:95:cc:2b:ad:a4:ab:2f:d7:32:a4:54:ef:b4:38:a3:5f:fa:
8b:48:d2:6d:04:1d:82:f6:ed:ec:8c:cd:24:c1:b5:e5:6c:dc:
dc:bd:20:01:9e:00:ba:01:28:c7:af:27:b1:65:35:19:d7:60:
eb:d6:8f:0f:c4:20:fa:75:09:87:5e:89:55:e8:72:6f:01:07:
e9:3e:e1:fb:41:bc:e6:fd:b2:d4:ef:75:86:81:37:1e:52:6e:
75:a7:85:8c:b5:69:d7:22:0c:f2:0b:99:e2:cf:4c:d6:01:d4:
36:ff:08:44:1b:7a:0e:a4:a2:29:1d:b7:89:f9:f4:12:a4:fa:
41:78:08:b0:ff:22:d4:e7:a5:11:ad:cc:f6:bd:37:e0:b2:5a:
d1:cc:ac:07:65:83:a5:2a:c2:e0:61:c5:7b:b6:8a:e7:3e:ed:
b6:3f:e9:cd
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZGSszGTsIcK2MukPqSTZpD2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjQwODI3MDcxODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTA2MTM1M2JmODZlMDJkMzMyZjY3YzM3YzRmNjJmNmVkYjhkMTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxRRnIw0wlCiyJTnXrS7rWn1MyDr
yLIf/o5iIy2yP+Ep5yy5FJ+w7JPHO0pTCTQ/6UeTvkcemSlOrIpC//F5cwKJmZ0p
vUHjUwz0uY9CroOLAw68KEcT8JbZqlXRFKBZb5Uq7iCVDnvMgxmbZ4gH7Z0KcgDv
QpAEEeLNt0J861l8St0v+n7j6Sy0n4XsplTu61Ef8vKKxZy9MS8hzFNy6N7uki0I
yJ4jejTveqGp6oiZFnmU6EkP9FgDbemA/sf2C6WShft4MI7LZGg1msh0QzTfm0EK
a4ZFujOOhoMREolLDhYM/qbjXteXB2+WxlE9j9U0I5UVptYrKm8PgtJRSwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFOoGE1O/huAtMy9nw3xPYvbtuNErMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvNmdZVFU3LUc0QzB6TDJmRGZFOWk5dTI0MFNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQFJRMgAwQF
VCogAwQDVCpIAwQGXkuAAwQFbcbAAwQF1ZvAMA0GCSqGSIb3DQEBCwUAA4IBAQBE
m5HG3n8PuMnkVwMC9frOqtJr2LfxCfInN+GGY5HRVBSDCf8dCHZvQyW30+2bEYSH
OPqcnKOZAMg3AOexuKRESEnH9HB+yZv4BVjvz3gUeoki4G3EjpuSJSyOlcwrraSr
L9cypFTvtDijX/qLSNJtBB2C9u3sjM0kwbXlbNzcvSABngC6ASjHryexZTUZ12Dr
1o8PxCD6dQmHXolV6HJvAQfpPuH7Qbzm/bLU73WGgTceUm51p4WMtWnXIgzyC5ni
z0zWAdQ2/whEG3oOpKIpHbeJ+fQSpPpBeAiw/yLU56URrcz2vTfgslrRzKwHZYOl
KsLgYcV7tornPu22P+nN
-----END CERTIFICATE-----
Generated at Sat Sep 28 13:04:55 2024 by rpki-client on console-fra.rpki-client.org