Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/Ly64dheAKvHm6ytW_A_ytKSUCHw.roa
File: Ly64dheAKvHm6ytW_A_ytKSUCHw.roa (raw, json)
Hash identifier: ZVZiXmpQMityYcCyeUzDNejMdR9ffSGeIJWzk0nz7DA=
Subject key identifier: 2F:2E:B8:76:17:80:2A:F1:E6:EB:2B:56:FC:0F:F2:B4:A4:94:08:7C
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 018F3EBD7D35C3AECEE4C0996C3243A7D1C8
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/Ly64dheAKvHm6ytW_A_ytKSUCHw.roa
Signing time: Fri 03 May 2024 13:55:56 +0000
ROA not before: Fri 03 May 2024 13:55:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203053
IP address blocks: 31.14.56.0/24 maxlen: 24
37.156.4.0/24 maxlen: 24
37.156.180.0/24 maxlen: 24
37.156.181.0/24 maxlen: 24
85.204.69.0/24 maxlen: 24
86.105.228.0/24 maxlen: 24
86.107.43.0/24 maxlen: 24
86.107.78.0/24 maxlen: 24
86.107.79.0/24 maxlen: 24
89.36.154.0/24 maxlen: 24
89.37.29.0/24 maxlen: 24
89.39.209.0/24 maxlen: 24
89.40.32.0/24 maxlen: 24
89.40.33.0/24 maxlen: 24
89.42.13.0/24 maxlen: 24
89.44.105.0/24 maxlen: 24
93.113.54.0/24 maxlen: 24
93.113.55.0/24 maxlen: 24
93.114.248.0/24 maxlen: 24
93.119.122.0/24 maxlen: 24
94.176.213.0/24 maxlen: 24
176.126.172.0/24 maxlen: 24
176.223.167.0/24 maxlen: 24
185.146.84.0/22 maxlen: 22
185.146.85.0/24 maxlen: 24
185.146.86.0/24 maxlen: 24
185.146.87.0/24 maxlen: 24
188.212.127.0/24 maxlen: 24
188.212.252.0/24 maxlen: 24
188.212.255.0/24 maxlen: 24
188.214.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3e:bd:7d:35:c3:ae:ce:e4:c0:99:6c:32:43:a7:d1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: May 3 13:55:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f2eb87617802af1e6eb2b56fc0ff2b4a494087c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:e6:4f:b4:dc:87:f4:75:da:a1:6c:ed:39:
4b:e0:2d:90:16:4d:b1:93:d3:a2:a2:6d:88:62:bd:
42:7f:67:89:e0:c2:fe:3b:d3:29:77:91:28:4f:66:
68:f2:87:a3:2f:85:05:a3:99:ac:dc:ef:30:7c:d7:
73:ef:cc:19:3f:af:81:04:c8:56:ff:45:90:af:3e:
f6:80:33:74:52:44:ab:26:d4:3b:1b:8d:cc:16:11:
fe:7b:32:20:f1:e8:df:19:87:55:62:7b:51:11:42:
6f:00:03:66:64:74:26:51:34:5f:04:47:74:95:8a:
e9:6a:3d:68:af:ac:bf:b9:b0:e8:b0:ef:56:5d:8b:
fb:f5:6e:73:f0:b1:89:c5:f6:85:c3:90:7a:39:d8:
04:ca:f0:5d:ae:6b:fb:dd:37:1a:78:4e:93:51:38:
ae:f2:59:c6:17:b4:b2:47:00:46:14:07:d5:4b:2a:
0a:66:aa:2a:b6:26:19:16:41:51:90:31:86:dc:30:
d4:40:f4:79:2f:b3:fe:65:28:e4:ae:65:cb:6c:16:
c0:56:48:81:ac:9b:6c:b8:44:2a:36:e4:b1:81:36:
08:a2:07:00:4e:2f:de:23:1a:7b:94:36:04:14:2f:
ee:87:b2:55:6e:a0:3b:85:31:da:7d:57:7e:8f:2f:
7f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2E:B8:76:17:80:2A:F1:E6:EB:2B:56:FC:0F:F2:B4:A4:94:08:7C
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/Ly64dheAKvHm6ytW_A_ytKSUCHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.56.0/24
37.156.4.0/24
37.156.180.0/23
85.204.69.0/24
86.105.228.0/24
86.107.43.0/24
86.107.78.0/23
89.36.154.0/24
89.37.29.0/24
89.39.209.0/24
89.40.32.0/23
89.42.13.0/24
89.44.105.0/24
93.113.54.0/23
93.114.248.0/24
93.119.122.0/24
94.176.213.0/24
176.126.172.0/24
176.223.167.0/24
185.146.84.0/22
188.212.127.0/24
188.212.252.0/24
188.212.255.0/24
188.214.214.0/24
Signature Algorithm: sha256WithRSAEncryption
97:cc:8e:8d:8d:1f:19:9e:54:fb:43:79:b6:ce:30:fe:a4:ca:
03:9e:2d:c6:5f:6c:a5:d3:3a:a7:31:87:1c:03:dc:82:42:87:
c9:f8:a1:80:13:2a:66:2b:17:e8:2b:6c:23:fa:f7:85:1f:d3:
df:70:0f:71:08:b1:10:89:ef:ea:8e:00:eb:97:cc:00:3e:b2:
b4:b1:95:7e:03:ff:0d:9e:7e:64:ca:1e:24:85:d2:8c:2b:02:
aa:48:b6:f4:00:94:06:99:f7:7e:f4:cc:85:08:f7:6a:7a:64:
e3:4d:19:ed:8e:fc:ed:64:24:b4:c5:26:1f:eb:fa:cd:9a:f3:
82:b4:31:49:f2:aa:fa:2b:be:f4:55:12:94:6c:99:ab:f9:47:
92:ed:03:25:4d:73:73:88:ca:2c:43:45:d2:a9:a5:2c:ca:b4:
b6:ed:26:ed:27:bb:92:92:c1:9d:68:cd:3f:c3:f4:65:55:10:
82:17:62:45:80:26:78:52:4b:3b:12:4f:74:68:03:12:95:31:
fb:10:30:0d:3c:a2:ec:2e:f2:87:76:e8:26:69:2b:c2:5b:f4:
af:93:0b:cb:44:0d:92:0b:a6:f2:67:7b:4d:ad:89:25:01:3a:
a0:02:d7:03:d7:4f:f0:9a:45:cb:09:c1:47:9d:65:f7:14:a3:
8a:5a:1f:cf
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgISAY8+vX01w67O5MCZbDJDp9HIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNTVlMGI4NmYzZjUxMjUwNTQ4NjNjZjkyNjRlNjM0NmUw
OWJiYjcwHhcNMjQwNTAzMTM1NTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjJlYjg3NjE3ODAyYWYxZTZlYjJiNTZmYzBmZjJiNGE0OTQwODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriXmT7Tch/R12qFs7TlL4C2QFk2x
k9Oiom2IYr1Cf2eJ4ML+O9Mpd5EoT2Zo8oejL4UFo5ms3O8wfNdz78wZP6+BBMhW
/0WQrz72gDN0UkSrJtQ7G43MFhH+ezIg8ejfGYdVYntREUJvAANmZHQmUTRfBEd0
lYrpaj1or6y/ubDosO9WXYv79W5z8LGJxfaFw5B6OdgEyvBdrmv73TcaeE6TUTiu
8lnGF7SyRwBGFAfVSyoKZqoqtiYZFkFRkDGG3DDUQPR5L7P+ZSjkrmXLbBbAVkiB
rJtsuEQqNuSxgTYIogcATi/eIxp7lDYEFC/uh7JVbqA7hTHafVd+jy9/SQIDAQAB
o4ICmDCCApQwHQYDVR0OBBYEFC8uuHYXgCrx5usrVvwP8rSklAh8MB8GA1UdIwQY
MBaAFNBV4LhvP1ElBUhjz5Jk5jRuCbu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQt
Zjk4YzdmZWMxOTRlLzEvTHk2NGRoZUFLdkhtNnl0V19BX3l0S1NVQ0h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQtZjk4YzdmZWMxOTRl
LzEvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBAAf
DjgDBAAlnAQDBAElnLQDBABVzEUDBABWaeQDBABWaysDBAFWa04DBABZJJoDBABZ
JR0DBABZJ9EDBAFZKCADBABZKg0DBABZLGkDBAFdcTYDBABdcvgDBABdd3oDBABe
sNUDBACwfqwDBACw36cDBAK5klQDBAC81H8DBAC81PwDBAC81P8DBAC81tYwDQYJ
KoZIhvcNAQELBQADggEBAJfMjo2NHxmeVPtDebbOMP6kygOeLcZfbKXTOqcxhxwD
3IJCh8n4oYATKmYrF+grbCP694Uf099wD3EIsRCJ7+qOAOuXzAA+srSxlX4D/w2e
fmTKHiSF0owrAqpItvQAlAaZ9370zIUI92p6ZONNGe2O/O1kJLTFJh/r+s2a84K0
MUnyqvorvvRVEpRsmav5R5LtAyVNc3OIyixDRdKppSzKtLbtJu0nu5KSwZ1ozT/D
9GVVEIIXYkWAJnhSSzsST3RoAxKVMfsQMA08ouwu8od26CZpK8Jb9K+TC8tEDZIL
pvJne02tiSUBOqAC1wPXT/CaRcsJwUedZfcUo4paH88=
-----END CERTIFICATE-----
Generated at Sat Jun 8 02:51:16 2024 by rpki-client on console-ams.rpki-client.org