Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/stmMBbBNBdy4IND9tdb1cI5mg-s.roa
File: stmMBbBNBdy4IND9tdb1cI5mg-s.roa (raw, json)
Hash identifier: Pu7nhqa7FM87hST33cNo6WLmzpisS1O7CqJ3cYfjQ8k=
Subject key identifier: B2:D9:8C:05:B0:4D:05:DC:B8:20:D0:FD:B5:D6:F5:70:8E:66:83:EB
Certificate issuer: /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Certificate serial: 019223814A2B3979F79FFCC581C38D5829EF
Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/stmMBbBNBdy4IND9tdb1cI5mg-s.roa
Signing time: Tue 24 Sep 2024 10:08:48 +0000
ROA not before: Tue 24 Sep 2024 10:08:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35539
IP address blocks: 31.134.192.0/21 maxlen: 21
46.160.192.0/18 maxlen: 18
46.160.192.0/19 maxlen: 19
46.160.192.0/20 maxlen: 20
46.160.208.0/20 maxlen: 20
46.160.224.0/19 maxlen: 19
46.160.224.0/20 maxlen: 20
46.160.240.0/20 maxlen: 20
93.95.160.0/21 maxlen: 21
93.95.160.0/22 maxlen: 22
93.95.160.0/23 maxlen: 23
93.95.162.0/23 maxlen: 23
93.95.164.0/22 maxlen: 22
93.95.164.0/23 maxlen: 23
93.95.166.0/23 maxlen: 23
93.123.128.0/17 maxlen: 17
93.123.128.0/18 maxlen: 18
93.123.128.0/19 maxlen: 19
93.123.160.0/19 maxlen: 19
93.123.192.0/18 maxlen: 18
93.123.192.0/19 maxlen: 19
93.123.224.0/19 maxlen: 19
95.131.208.0/21 maxlen: 21
95.131.208.0/22 maxlen: 22
95.131.208.0/23 maxlen: 23
95.131.210.0/23 maxlen: 23
95.131.212.0/22 maxlen: 22
95.131.212.0/23 maxlen: 23
95.131.214.0/23 maxlen: 23
217.194.240.0/20 maxlen: 20
217.194.240.0/21 maxlen: 21
217.194.240.0/22 maxlen: 22
217.194.244.0/22 maxlen: 22
217.194.248.0/21 maxlen: 21
217.194.248.0/22 maxlen: 22
217.194.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:23:81:4a:2b:39:79:f7:9f:fc:c5:81:c3:8d:58:29:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Validity
Not Before: Sep 24 10:08:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2d98c05b04d05dcb820d0fdb5d6f5708e6683eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:7d:a5:bc:18:dd:44:19:f3:2e:07:0a:d1:
89:9e:82:d1:cd:30:a3:5f:f4:fc:6f:05:00:b5:5e:
37:7b:45:6b:68:07:f6:3b:6a:7c:1e:b3:91:63:91:
79:59:de:4e:7f:0f:32:bb:21:27:38:60:62:b4:99:
0c:7c:99:bb:de:2e:5f:84:93:0b:08:34:d8:a7:1e:
f0:f9:b6:0d:dd:f9:70:55:e8:0f:91:f6:b3:12:49:
04:1c:5a:56:3d:62:b9:24:ae:e0:ad:cf:65:09:5e:
41:86:5a:40:38:00:34:6c:ba:f4:17:e0:11:d4:b7:
2c:4f:b9:ac:70:ec:a8:04:62:00:da:c0:5a:95:37:
9f:bd:ff:01:58:59:cf:ee:f5:2b:51:99:b3:7a:48:
85:5f:91:b9:a5:98:0d:80:60:be:83:7e:b4:41:1b:
12:b6:f3:30:21:73:86:ac:79:fd:df:a4:56:ab:3e:
3c:78:d0:2b:02:c4:95:f0:55:e1:77:da:9f:83:92:
57:46:84:85:06:cd:6d:c9:37:f5:ae:72:ba:ed:d9:
db:43:94:60:76:41:13:a8:10:68:f3:04:df:92:f1:
42:c0:28:d3:e3:75:4e:89:ea:46:78:a6:85:9e:23:
84:ae:81:9d:ca:2a:fe:8e:97:58:58:ab:13:4d:04:
67:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D9:8C:05:B0:4D:05:DC:B8:20:D0:FD:B5:D6:F5:70:8E:66:83:EB
X509v3 Authority Key Identifier:
keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/stmMBbBNBdy4IND9tdb1cI5mg-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.192.0/21
46.160.192.0/18
93.95.160.0/21
93.123.128.0/17
95.131.208.0/21
217.194.240.0/20
Signature Algorithm: sha256WithRSAEncryption
80:1d:ff:30:4d:8a:73:88:4f:dc:91:7d:c0:23:1c:19:19:cf:
d4:db:2d:47:e5:33:a6:83:ce:98:ee:7f:b2:25:eb:9d:8b:c6:
b7:97:4f:2f:d6:1a:2a:f0:e9:7f:3f:0c:f6:ac:4b:45:47:0c:
f3:3c:b8:68:52:a3:0f:c8:5e:eb:1a:19:64:54:88:74:a3:3f:
19:d1:4a:be:88:8f:b0:d2:85:29:93:63:00:bd:df:de:02:c3:
c7:47:c1:89:eb:1d:cc:17:6b:2c:92:1c:58:ff:c8:d2:06:cb:
e6:23:7a:a9:7e:92:a9:1b:f2:cc:d5:1e:ac:e5:19:a3:14:01:
0b:81:ad:4a:db:04:97:e0:be:63:14:eb:b6:87:7a:36:55:da:
ec:82:84:6e:e4:75:ed:00:a0:f3:57:2d:91:dd:74:7c:21:a4:
e4:79:c8:ae:53:f5:6e:5c:a8:ff:23:2b:e8:6e:97:f1:e0:9b:
09:07:44:7a:58:ad:07:51:36:3c:84:7a:cc:b7:3b:cb:39:c8:
9b:33:13:c8:3b:b3:79:ca:53:f0:89:20:b0:fd:7d:40:33:ee:
a0:64:97:b3:bf:1a:b0:ee:5e:32:83:49:33:0d:e3:5a:c7:4b:
2f:b9:47:2c:71:5a:41:4b:64:96:16:c7:c1:4f:b7:8b:2b:7e:
01:a1:80:17
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZIjgUorOXn3n/zFgcONWCnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MjA0NDZmNzlmZmMyZDdjM2E5ZWYzNDBjZTlkZTI1NzIz
YTcxOWEwHhcNMjQwOTI0MTAwODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmQ5OGMwNWIwNGQwNWRjYjgyMGQwZmRiNWQ2ZjU3MDhlNjY4M2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5R9pbwY3UQZ8y4HCtGJnoLRzTCj
X/T8bwUAtV43e0VraAf2O2p8HrORY5F5Wd5Ofw8yuyEnOGBitJkMfJm73i5fhJML
CDTYpx7w+bYN3flwVegPkfazEkkEHFpWPWK5JK7grc9lCV5BhlpAOAA0bLr0F+AR
1LcsT7mscOyoBGIA2sBalTefvf8BWFnP7vUrUZmzekiFX5G5pZgNgGC+g360QRsS
tvMwIXOGrHn936RWqz48eNArAsSV8FXhd9qfg5JXRoSFBs1tyTf1rnK67dnbQ5Rg
dkETqBBo8wTfkvFCwCjT43VOiepGeKaFniOEroGdyir+jpdYWKsTTQRnqwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFLLZjAWwTQXcuCDQ/bXW9XCOZoPrMB8GA1UdIwQY
MBaAFOUgRG95/8LXw6nvNAzp3iVyOnGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVNCRWIzbl93dGZEcWU4MERPbmVKWEk2Y1pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTFlZjItNzAxMi00YTZlLThhMWMt
MGUwZTEzN2U1NTkxLzEvc3RtTUJiQk5CZHk0SU5EOXRkYjFjSTVtZy1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMTFlZjItNzAxMi00YTZlLThhMWMtMGUwZTEzN2U1NTkx
LzEvNVNCRWIzbl93dGZEcWU4MERPbmVKWEk2Y1pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDH4bAAwQG
LqDAAwQDXV+gAwQHXXuAAwQDX4PQAwQE2cLwMA0GCSqGSIb3DQEBCwUAA4IBAQCA
Hf8wTYpziE/ckX3AIxwZGc/U2y1H5TOmg86Y7n+yJeudi8a3l08v1hoq8Ol/Pwz2
rEtFRwzzPLhoUqMPyF7rGhlkVIh0oz8Z0Uq+iI+w0oUpk2MAvd/eAsPHR8GJ6x3M
F2sskhxY/8jSBsvmI3qpfpKpG/LM1R6s5RmjFAELga1K2wSX4L5jFOu2h3o2Vdrs
goRu5HXtAKDzVy2R3XR8IaTkeciuU/VuXKj/Iyvobpfx4JsJB0R6WK0HUTY8hHrM
tzvLOcibMxPIO7N5ylPwiSCw/X1AM+6gZJezvxqw7l4yg0kzDeNax0svuUcscVpB
S2SWFsfBT7eLK34BoYAX
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:57:49 2024 by rpki-client on console-fra.rpki-client.org