Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WprfFOcJ5EXsltJt8mAO-5AwfKQ.roa
File: WprfFOcJ5EXsltJt8mAO-5AwfKQ.roa (raw, json)
Hash identifier: Gr4noj1C/1D9iqFNuJpbz8RB8rajOgo078xq7TSV7GM=
Subject key identifier: 5A:9A:DF:14:E7:09:E4:45:EC:96:D2:6D:F2:60:0E:FB:90:30:7C:A4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01922E653EF27694F086361EDEB00FBB1162
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WprfFOcJ5EXsltJt8mAO-5AwfKQ.roa
Signing time: Thu 26 Sep 2024 12:53:59 +0000
ROA not before: Thu 26 Sep 2024 12:53:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34577
IP address blocks: 37.60.141.0/24 maxlen: 32
87.120.0.0/22 maxlen: 32
87.120.12.0/24 maxlen: 32
87.120.14.0/23 maxlen: 32
87.120.44.0/23 maxlen: 32
87.120.45.119/32 maxlen: 32
87.120.178.0/23 maxlen: 32
87.120.180.0/22 maxlen: 32
87.120.184.0/23 maxlen: 32
87.120.190.0/24 maxlen: 32
87.121.48.0/22 maxlen: 32
87.121.88.0/23 maxlen: 32
93.123.40.0/22 maxlen: 32
93.123.40.0/24 maxlen: 32
93.123.41.0/24 maxlen: 32
93.123.42.0/24 maxlen: 32
93.123.43.0/24 maxlen: 32
93.123.44.0/24 maxlen: 32
93.123.47.0/24 maxlen: 32
93.123.66.0/24 maxlen: 32
93.123.67.0/24 maxlen: 32
93.123.96.0/22 maxlen: 32
94.156.123.0/24 maxlen: 32
212.73.149.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2e:65:3e:f2:76:94:f0:86:36:1e:de:b0:0f:bb:11:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 26 12:53:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a9adf14e709e445ec96d26df2600efb90307ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:82:d3:d8:34:49:75:60:6a:ed:f2:87:e7:5c:
1b:89:fd:a5:7d:af:95:31:b4:dd:7b:db:2e:4c:ae:
21:e0:c3:5a:7e:92:1a:20:a8:99:00:84:ff:65:82:
91:e5:c6:2f:5b:62:62:65:56:80:71:d5:8a:32:f5:
c4:09:e9:f7:79:c1:8f:ce:17:6f:90:03:8d:46:05:
ef:06:6f:9b:16:10:d6:85:6e:19:13:04:25:07:aa:
59:16:d5:57:d4:3d:e9:dc:17:a5:53:b1:e2:18:de:
9e:7a:c8:b4:12:3e:d1:1e:00:dc:22:59:08:42:ea:
56:f6:8f:8f:6e:ba:61:1f:b3:c6:07:26:48:27:28:
12:ab:72:bd:f7:84:42:85:1f:4a:62:74:87:34:0a:
7d:e6:cf:ec:4e:7c:12:e1:12:42:e7:e8:9a:3b:99:
41:15:42:3c:0c:bb:a6:13:5f:88:fa:51:73:c2:3f:
bd:91:30:f8:41:a2:e0:11:07:b5:74:cb:14:c2:b2:
01:ff:60:2b:8e:83:24:77:96:59:d6:cb:ad:8a:64:
ff:c9:e3:64:6a:b7:c5:8c:79:f1:9c:5f:83:ed:71:
fb:7a:ec:bd:0d:10:16:33:90:32:b2:0f:1a:85:0a:
1e:01:96:1f:75:53:c3:cf:51:d3:1b:98:07:7b:d7:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9A:DF:14:E7:09:E4:45:EC:96:D2:6D:F2:60:0E:FB:90:30:7C:A4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WprfFOcJ5EXsltJt8mAO-5AwfKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.141.0/24
87.120.0.0/22
87.120.12.0/24
87.120.14.0/23
87.120.44.0/23
87.120.178.0-87.120.185.255
87.120.190.0/24
87.121.48.0/22
87.121.88.0/23
93.123.40.0-93.123.44.255
93.123.47.0/24
93.123.66.0/23
93.123.96.0/22
94.156.123.0/24
212.73.149.0/24
Signature Algorithm: sha256WithRSAEncryption
80:68:73:be:fe:62:60:4c:fc:56:30:27:f7:cb:28:f1:6e:09:
ae:18:85:88:72:e6:51:27:39:c7:ad:bf:2d:18:73:e5:1d:b2:
cb:50:93:6a:35:95:be:0b:4b:d6:fe:fc:a7:e7:51:b1:ed:92:
66:76:55:a2:cc:ef:7f:a5:62:5f:f2:08:87:02:41:25:aa:86:
18:9e:47:a2:4b:23:c2:a5:24:ad:23:39:54:6a:4d:30:bb:27:
5c:10:e4:33:08:78:99:8f:bd:53:b0:b4:f7:a4:86:d7:a6:60:
b3:43:d5:95:c2:fd:f2:99:b0:ee:77:9f:07:45:14:cd:21:9d:
80:7d:e1:b5:b7:13:4a:ed:c7:36:f8:ba:c7:cd:85:78:08:e6:
88:88:cd:d4:60:0d:34:a2:fc:7f:53:a3:97:b7:98:c2:a7:c0:
fe:bd:bb:1e:1e:12:8e:7c:7b:4d:59:ca:e2:b5:8e:dc:03:fa:
3f:5f:7f:8f:94:43:54:54:20:a5:99:d5:10:b8:74:81:c9:65:
d3:b2:1c:ac:41:bf:c1:b5:a3:d1:84:0e:a4:81:ed:cd:eb:c4:
b1:87:dd:95:0f:68:9e:fd:13:dc:de:0d:7d:a8:ed:a3:9f:db:
b8:64:2a:cb:c0:f6:64:6d:9c:01:73:58:61:42:9a:37:77:31:
26:54:d5:ce
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAZIuZT7ydpTwhjYe3rAPuxFiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwOTI2MTI1MzU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTlhZGYxNGU3MDllNDQ1ZWM5NmQyNmRmMjYwMGVmYjkwMzA3Y2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkILT2DRJdWBq7fKH51wbif2lfa+V
MbTde9suTK4h4MNafpIaIKiZAIT/ZYKR5cYvW2JiZVaAcdWKMvXECen3ecGPzhdv
kAONRgXvBm+bFhDWhW4ZEwQlB6pZFtVX1D3p3BelU7HiGN6eesi0Ej7RHgDcIlkI
QupW9o+PbrphH7PGByZIJygSq3K994RChR9KYnSHNAp95s/sTnwS4RJC5+iaO5lB
FUI8DLumE1+I+lFzwj+9kTD4QaLgEQe1dMsUwrIB/2ArjoMkd5ZZ1sutimT/yeNk
arfFjHnxnF+D7XH7euy9DRAWM5Aysg8ahQoeAZYfdVPDz1HTG5gHe9eAIQIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFFqa3xTnCeRF7JbSbfJgDvuQMHykMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvV3ByZkZPY0o1RVhzbHRKdDhtQU8tNUF3ZktRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEACU8jQME
Ald4AAMEAFd4DAMEAVd4DgMEAVd4LDAMAwQBV3iyAwQBV3i4AwQAV3i+AwQCV3kw
AwQBV3lYMAwDBANdeygDBABdeywDBABdey8DBAFde0IDBAJde2ADBABenHsDBADU
SZUwDQYJKoZIhvcNAQELBQADggEBAIBoc77+YmBM/FYwJ/fLKPFuCa4YhYhy5lEn
Ocetvy0Yc+UdsstQk2o1lb4LS9b+/KfnUbHtkmZ2VaLM73+lYl/yCIcCQSWqhhie
R6JLI8KlJK0jOVRqTTC7J1wQ5DMIeJmPvVOwtPekhtemYLND1ZXC/fKZsO53nwdF
FM0hnYB94bW3E0rtxzb4usfNhXgI5oiIzdRgDTSi/H9To5e3mMKnwP69ux4eEo58
e01ZyuK1jtwD+j9ff4+UQ1RUIKWZ1RC4dIHJZdOyHKxBv8G1o9GEDqSB7c3rxLGH
3ZUPaJ79E9zeDX2o7aOf27hkKsvA9mRtnAFzWGFCmjd3MSZU1c4=
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:35:58 2024 by rpki-client on console-ams.rpki-client.org