Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/lOpLMmDWkVm6Uv-65iHg-tlLKnw.roa
File: lOpLMmDWkVm6Uv-65iHg-tlLKnw.roa (raw, json)
Hash identifier: Atkq/x7/z0gk3dXhG2rqN3yDNhKOFbO7AuVZf8ADmuI=
Subject key identifier: 94:EA:4B:32:60:D6:91:59:BA:52:FF:BA:E6:21:E0:FA:D9:4B:2A:7C
Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial: 018CC94DBC328AC964F0E1903E7DE8400415
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/lOpLMmDWkVm6Uv-65iHg-tlLKnw.roa
Signing time: Tue 02 Jan 2024 08:32:43 +0000
ROA not before: Tue 02 Jan 2024 08:32:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206747
IP address blocks: 25.26.27.0/24 maxlen: 24
25.129.198.0/23 maxlen: 23
25.129.196.0/23 maxlen: 23
25.25.25.0/24 maxlen: 24
195.130.30.0/24 maxlen: 24
195.130.31.0/24 maxlen: 24
195.130.28.0/24 maxlen: 24
195.130.29.0/24 maxlen: 24
2a08:600:ee::/47 maxlen: 47
2a08:600:99::/48 maxlen: 48
2a08:600:4::/48 maxlen: 48
2a08:600:ff::/48 maxlen: 48
2a08:600:2::/48 maxlen: 48
2a08:600:3::/48 maxlen: 48
2a08:600:1::/48 maxlen: 48
2a08:600::/48 maxlen: 48
2a08:600:e0::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:bc:32:8a:c9:64:f0:e1:90:3e:7d:e8:40:04:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Validity
Not Before: Jan 2 08:32:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94ea4b3260d69159ba52ffbae621e0fad94b2a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f0:ca:40:94:46:51:5e:08:ef:50:9f:b6:b8:
81:81:d7:44:8c:1d:3d:be:b9:29:23:0f:b0:52:e5:
2c:76:a8:fd:c9:d1:8c:8f:8a:f8:bf:38:73:cc:dc:
f1:01:11:97:37:b2:b6:b0:9c:f9:9b:22:c8:16:1b:
62:e2:47:cf:82:95:f9:d9:e0:b0:78:b2:b8:89:79:
85:81:33:b0:29:c3:c6:f0:36:8e:1d:ea:83:90:72:
8d:40:6f:cb:6a:52:ad:0d:29:9c:ad:a3:ae:b3:a5:
ca:cb:2e:67:c5:c0:f9:92:90:dd:e1:7b:56:e7:14:
ff:a2:70:24:68:4d:65:eb:0a:74:13:6a:aa:3d:cd:
81:34:fd:20:0b:a5:26:24:39:7a:57:f5:a4:ca:c6:
a5:3d:c4:68:45:bd:58:34:00:41:3e:fb:61:d3:14:
a8:98:f7:08:82:45:f5:ed:08:8d:59:35:e7:b4:08:
f1:b9:81:da:a2:cb:c3:27:02:38:f6:0c:cb:59:83:
1e:32:63:fd:e0:e0:69:ec:18:5d:e2:93:40:ce:73:
cd:ea:6d:62:cf:32:85:b6:61:29:19:fa:28:c0:35:
53:05:99:e9:14:58:0c:30:db:17:6e:d6:5a:5c:80:
86:14:b7:45:fe:12:29:25:c2:fc:eb:4b:94:74:f1:
fc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EA:4B:32:60:D6:91:59:BA:52:FF:BA:E6:21:E0:FA:D9:4B:2A:7C
X509v3 Authority Key Identifier:
keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/lOpLMmDWkVm6Uv-65iHg-tlLKnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
25.25.25.0/24
25.26.27.0/24
25.129.196.0/22
195.130.28.0/22
IPv6:
2a08:600::-2a08:600:4:ffff:ffff:ffff:ffff:ffff
2a08:600:99::/48
2a08:600:e0::/47
2a08:600:ee::/47
2a08:600:ff::/48
Signature Algorithm: sha256WithRSAEncryption
af:3f:60:8f:14:3d:23:f5:83:b1:b9:4e:d4:a2:ab:67:4b:2d:
5e:5c:bd:b1:fd:c3:0a:1d:0c:7f:c9:81:71:eb:27:fe:bb:99:
f2:eb:4c:8b:e9:8a:bd:db:eb:bd:53:f9:37:72:09:33:5c:13:
9e:5e:b1:1d:81:98:f1:a9:98:dd:0f:09:ba:c1:fc:ec:b9:d7:
ad:6d:1a:5e:2d:3a:5b:63:b8:a3:1f:a3:af:f0:d6:59:36:68:
50:c7:d0:2a:56:90:17:9e:2f:dd:45:bb:18:2f:d5:29:15:5f:
18:9c:98:63:73:1e:6e:96:ec:9e:7a:4e:cd:5e:3b:30:cd:29:
6a:1f:d7:46:9e:ea:d5:bc:e1:b9:9a:42:54:3c:de:1d:f9:0d:
8b:58:2e:7d:4a:51:58:54:c2:e9:46:2c:cd:36:8a:d1:d4:7a:
6b:55:49:f7:d5:1a:8b:0b:8b:ea:8d:c5:d0:10:7f:7a:dc:45:
44:95:1c:f8:2f:28:10:42:bd:d9:82:22:bd:30:7d:35:0c:b5:
c7:7c:e2:43:fb:ad:58:eb:68:bd:91:67:3b:f1:2b:98:de:81:
ec:b6:ef:f4:02:5c:c9:c3:da:69:c5:e2:e7:4f:41:89:fa:a8:
4e:d0:2c:6c:4a:39:31:b6:47:ab:97:f2:c1:55:ba:a5:d2:14:
76:62:ba:cb
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgISAYzJTbwyislk8OGQPn3oQAQVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDRlMTllMmJiNGU3MDIzY2MxYmExMGQ0OWI3NGVkZTRi
Zjg2NWMwHhcNMjQwMTAyMDgzMjQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGVhNGIzMjYwZDY5MTU5YmE1MmZmYmFlNjIxZTBmYWQ5NGIyYTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPDKQJRGUV4I71CftriBgddEjB09
vrkpIw+wUuUsdqj9ydGMj4r4vzhzzNzxARGXN7K2sJz5myLIFhti4kfPgpX52eCw
eLK4iXmFgTOwKcPG8DaOHeqDkHKNQG/LalKtDSmcraOus6XKyy5nxcD5kpDd4XtW
5xT/onAkaE1l6wp0E2qqPc2BNP0gC6UmJDl6V/WkysalPcRoRb1YNABBPvth0xSo
mPcIgkX17QiNWTXntAjxuYHaosvDJwI49gzLWYMeMmP94OBp7Bhd4pNAznPN6m1i
zzKFtmEpGfoowDVTBZnpFFgMMNsXbtZaXICGFLdF/hIpJcL860uUdPH8rQIDAQAB
o4ICWDCCAlQwHQYDVR0OBBYEFJTqSzJg1pFZulL/uuYh4PrZSyp8MB8GA1UdIwQY
MBaAFNxE4Z4rtOcCPMG6ENSbdO3kv4ZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80NmY1YjktNjAwMC00MDcyLTg5ZjIt
NGM4MmFjZTcyYzg1LzEvbE9wTE1tRFdrVm02VXYtNjVpSGctdGxMS253LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80NmY1YjktNjAwMC00MDcyLTg5ZjItNGM4MmFjZTcyYzg1
LzEvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTAeBAIAATAYAwQAGRkZAwQA
GRobAwQCGYHEAwQCw4IcMDsEAgACMDUwDwMEASoIBgMHACoIBgAABAMHACoIBgAA
mQMHASoIBgAA4AMHASoIBgAA7gMHACoIBgAA/zANBgkqhkiG9w0BAQsFAAOCAQEA
rz9gjxQ9I/WDsblO1KKrZ0stXly9sf3DCh0Mf8mBcesn/ruZ8utMi+mKvdvrvVP5
N3IJM1wTnl6xHYGY8amY3Q8JusH87LnXrW0aXi06W2O4ox+jr/DWWTZoUMfQKlaQ
F54v3UW7GC/VKRVfGJyYY3MebpbsnnpOzV47MM0pah/XRp7q1bzhuZpCVDzeHfkN
i1gufUpRWFTC6UYszTaK0dR6a1VJ99UaiwuL6o3F0BB/etxFRJUc+C8oEEK92YIi
vTB9NQy1x3ziQ/utWOtovZFnO/ErmN6B7Lbv9AJcycPaacXi509BifqoTtAsbEo5
MbZHq5fywVW6pdIUdmK6yw==
-----END CERTIFICATE-----
Generated at Sun May 12 15:27:08 2024 by rpki-client on console-ams.rpki-client.org