Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/3NhdegdyD8SzI7rnnhAeFUiujH8.roa
File: 3NhdegdyD8SzI7rnnhAeFUiujH8.roa (raw, json)
Hash identifier: IbFlK02V6L4y+fPCIasKCzSGEOoIUI7k43qRdPj2sCg=
Subject key identifier: DC:D8:5D:7A:07:72:0F:C4:B3:23:BA:E7:9E:10:1E:15:48:AE:8C:7F
Certificate issuer: /CN=b13099c38b6477a68c98019ff6e0040808078b90
Certificate serial: 018CCA2BAB617081E7102E0E7181645A504D
Authority key identifier: B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/3NhdegdyD8SzI7rnnhAeFUiujH8.roa
Signing time: Tue 02 Jan 2024 12:35:08 +0000
ROA not before: Tue 02 Jan 2024 12:35:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206347
IP address blocks: 185.32.92.0/22 maxlen: 24
185.193.168.0/22 maxlen: 24
138.124.160.0/20 maxlen: 24
37.48.225.0/24 maxlen: 24
37.48.226.0/23 maxlen: 23
138.124.175.0/24 maxlen: 24
37.48.228.0/24 maxlen: 24
37.48.231.0/24 maxlen: 24
185.67.232.0/22 maxlen: 24
185.102.132.0/22 maxlen: 24
2a0b:de40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:ab:61:70:81:e7:10:2e:0e:71:81:64:5a:50:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13099c38b6477a68c98019ff6e0040808078b90
Validity
Not Before: Jan 2 12:35:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcd85d7a07720fc4b323bae79e101e1548ae8c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:f0:13:6a:24:af:9a:4b:dd:ee:5a:5c:53:
5c:28:88:8e:11:c3:48:79:54:ea:aa:20:b8:90:16:
39:92:9b:a5:8a:86:aa:54:ec:20:41:b3:dd:ae:cd:
90:3f:bb:3b:0a:55:4c:d7:ab:ca:3a:f2:f8:9f:47:
9c:ce:ee:d8:47:d3:d6:c8:e3:14:3c:4e:30:17:8a:
8b:71:9d:8c:62:d9:b5:9b:98:7c:5f:e2:42:f6:93:
28:a9:56:bd:34:53:35:ef:b0:c3:3a:5f:1b:3f:56:
32:4e:24:75:47:e3:1b:d3:ae:3d:9d:6a:5f:84:44:
72:72:45:b7:50:fd:c0:0d:c3:52:19:e2:a2:17:ef:
de:23:fa:78:89:6a:6b:06:b1:56:5f:f4:0f:51:ca:
ac:ef:24:77:5e:c7:f6:a1:9d:74:4a:7e:ed:c1:05:
28:88:80:89:af:b7:16:dd:b6:35:3c:bb:78:5b:8b:
5a:a0:a3:6c:d7:52:73:bc:74:57:0f:cf:70:51:15:
04:c5:e2:da:d3:3e:0f:d4:01:7b:b8:48:c3:68:11:
b1:87:d5:fa:26:37:a3:d7:58:fe:07:26:08:aa:0c:
67:33:bc:bd:c5:85:58:eb:c7:6c:93:e7:b0:09:3a:
9c:de:b6:d5:42:74:9e:4b:79:98:88:d8:be:cb:d9:
21:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D8:5D:7A:07:72:0F:C4:B3:23:BA:E7:9E:10:1E:15:48:AE:8C:7F
X509v3 Authority Key Identifier:
keyid:B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/3NhdegdyD8SzI7rnnhAeFUiujH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.48.225.0-37.48.228.255
37.48.231.0/24
138.124.160.0/20
185.32.92.0/22
185.67.232.0/22
185.102.132.0/22
185.193.168.0/22
IPv6:
2a0b:de40::/29
Signature Algorithm: sha256WithRSAEncryption
57:02:e2:dc:82:29:aa:98:8f:fd:3f:f4:87:20:e7:13:5b:c3:
67:30:f1:7f:6a:8e:84:5c:19:27:96:f1:25:d5:c9:c5:6c:9c:
8a:f5:9a:68:cd:a5:63:eb:f9:31:c9:a0:5e:70:cb:95:98:c4:
8e:f1:a2:b1:6f:e8:71:ad:1f:29:36:1c:77:77:ca:69:0b:4a:
d7:d7:d7:ab:26:1d:e6:18:bb:54:57:31:a8:9c:e8:21:40:5d:
f1:7d:1e:05:8e:3d:20:7a:8a:41:b7:ec:d4:66:44:50:23:94:
39:e4:64:c6:4a:16:61:40:f0:ae:e6:0d:76:6a:b4:c1:7a:46:
4e:97:65:60:2f:c9:39:a1:4f:e4:e0:b3:7f:e2:5a:6b:b3:0e:
36:3e:7e:cb:9f:ad:e6:58:70:0c:ce:42:c9:a1:67:ce:c7:c4:
07:35:59:81:c9:3c:24:1c:d7:5d:fe:e1:99:77:c2:c4:6c:a6:
6e:ea:33:db:54:12:cb:5e:45:fe:02:ec:60:66:7d:95:a8:6a:
d0:bd:c7:01:ef:2b:74:29:40:f4:2b:1b:03:3f:02:04:fe:00:
e1:3b:05:f7:75:31:81:b5:37:e3:e2:8d:3c:b9:64:22:1e:60:
d7:09:d6:66:38:0a:4f:46:e3:af:db:15:96:f1:a9:a7:68:02:
c1:39:19:a2
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgISAYzKK6thcIHnEC4OcYFkWlBNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMzA5OWMzOGI2NDc3YTY4Yzk4MDE5ZmY2ZTAwNDA4MDgw
NzhiOTAwHhcNMjQwMTAyMTIzNTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2Q4NWQ3YTA3NzIwZmM0YjMyM2JhZTc5ZTEwMWUxNTQ4YWU4YzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFrwE2okr5pL3e5aXFNcKIiOEcNI
eVTqqiC4kBY5kpulioaqVOwgQbPdrs2QP7s7ClVM16vKOvL4n0eczu7YR9PWyOMU
PE4wF4qLcZ2MYtm1m5h8X+JC9pMoqVa9NFM177DDOl8bP1YyTiR1R+Mb0649nWpf
hERyckW3UP3ADcNSGeKiF+/eI/p4iWprBrFWX/QPUcqs7yR3Xsf2oZ10Sn7twQUo
iICJr7cW3bY1PLt4W4taoKNs11JzvHRXD89wURUExeLa0z4P1AF7uEjDaBGxh9X6
Jjej11j+ByYIqgxnM7y9xYVY68dsk+ewCTqc3rbVQnSeS3mYiNi+y9khRwIDAQAB
o4ICRDCCAkAwHQYDVR0OBBYEFNzYXXoHcg/EsyO6554QHhVIrox/MB8GA1UdIwQY
MBaAFLEwmcOLZHemjJgBn/bgBAgIB4uQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81OTJjZjAtMDNkZi00ODg2LWIwNjEt
Mjg0ZjdjOTYyMmI1LzEvM05oZGVnZHlEOFN6STdybm5oQWVGVWl1akg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy81OTJjZjAtMDNkZi00ODg2LWIwNjEtMjg0ZjdjOTYyMmI1
LzEvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA4BAIAATAyMAwDBAAlMOED
BAAlMOQDBAAlMOcDBASKfKADBAK5IFwDBAK5Q+gDBAK5ZoQDBAK5wagwDQQCAAIw
BwMFAyoL3kAwDQYJKoZIhvcNAQELBQADggEBAFcC4tyCKaqYj/0/9Icg5xNbw2cw
8X9qjoRcGSeW8SXVycVsnIr1mmjNpWPr+THJoF5wy5WYxI7xorFv6HGtHyk2HHd3
ymkLStfX16smHeYYu1RXMaic6CFAXfF9HgWOPSB6ikG37NRmRFAjlDnkZMZKFmFA
8K7mDXZqtMF6Rk6XZWAvyTmhT+Tgs3/iWmuzDjY+fsufreZYcAzOQsmhZ87HxAc1
WYHJPCQc113+4Zl3wsRspm7qM9tUEsteRf4C7GBmfZWoatC9xwHvK3QpQPQrGwM/
AgT+AOE7Bfd1MYG1N+PijTy5ZCIeYNcJ1mY4Ck9G46/bFZbxqadoAsE5GaI=
-----END CERTIFICATE-----
Generated at Fri Jun 7 16:22:47 2024 by rpki-client on console-ams.rpki-client.org