Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/PkPyWjIdNt40wfrpscHIf-kqPvE.roa
File: PkPyWjIdNt40wfrpscHIf-kqPvE.roa (raw, json)
Hash identifier: Y4GNL1PFOhPq/rxqHL+df5ykIreWJ2xCBih1Nvn2zz8=
Subject key identifier: 3E:43:F2:5A:32:1D:36:DE:34:C1:FA:E9:B1:C1:C8:7F:E9:2A:3E:F1
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 018CC424528F52F2677D6A131C030ABDE59F
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/PkPyWjIdNt40wfrpscHIf-kqPvE.roa
Signing time: Mon 01 Jan 2024 08:29:23 +0000
ROA not before: Mon 01 Jan 2024 08:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31500
IP address blocks: 95.161.128.0/24 maxlen: 24
109.239.131.0/24 maxlen: 24
109.239.132.0/24 maxlen: 24
109.239.129.0/24 maxlen: 24
109.239.130.0/24 maxlen: 24
109.239.128.0/24 maxlen: 24
109.239.130.128/25 maxlen: 25
178.18.229.0/24 maxlen: 24
178.18.232.0/24 maxlen: 24
178.18.231.0/24 maxlen: 24
178.18.228.0/24 maxlen: 24
109.239.138.0/24 maxlen: 24
109.239.139.0/24 maxlen: 24
109.239.134.0/24 maxlen: 24
109.239.135.0/24 maxlen: 24
109.239.133.0/24 maxlen: 24
109.239.143.0/24 maxlen: 24
109.239.141.0/24 maxlen: 24
109.239.142.0/24 maxlen: 24
109.239.140.0/24 maxlen: 24
94.124.183.0/24 maxlen: 24
94.124.182.0/24 maxlen: 24
95.140.83.0/24 maxlen: 24
95.140.80.0/24 maxlen: 32
95.140.91.0/24 maxlen: 24
95.140.89.0/24 maxlen: 24
95.140.90.0/24 maxlen: 24
95.140.88.0/24 maxlen: 24
95.140.93.0/24 maxlen: 24
95.140.95.0/24 maxlen: 24
2001:b28:7b0c::/48 maxlen: 48
2001:b28::/32 maxlen: 32
2001:b28:9999::/48 maxlen: 48
2a03:5f80:2:10::/64 maxlen: 64
2a03:5f80:8::/46 maxlen: 46
2001:b28:9a9c::/48 maxlen: 48
2001:b28:4::/48 maxlen: 48
2a03:5f80::/46 maxlen: 46
2a03:5f80:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 07:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:52:8f:52:f2:67:7d:6a:13:1c:03:0a:bd:e5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jan 1 08:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e43f25a321d36de34c1fae9b1c1c87fe92a3ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:13:ee:76:a3:b0:26:38:a2:26:ee:10:3c:
9e:25:d9:cd:ef:23:4c:44:5f:30:31:6d:64:8f:79:
f7:bb:a3:ed:9f:49:6d:22:a8:07:f1:f6:6d:97:c4:
fc:f7:a9:bd:3d:5c:7b:45:05:4e:fe:f5:7d:a8:33:
b6:17:1e:68:a5:ea:fd:68:63:71:88:a8:98:21:db:
c4:6d:9c:b7:64:59:09:4d:f0:df:25:7d:12:82:a8:
0b:1e:94:2f:5f:4f:6d:6f:e2:a6:bd:c9:9c:1c:51:
50:a0:0d:39:da:b3:35:a3:aa:cc:eb:06:3b:90:cd:
35:bf:28:f8:e9:2c:7c:a6:cf:cc:4e:09:25:5b:d0:
f7:15:69:71:e7:2a:77:83:39:d7:b9:47:9d:5f:5d:
df:49:a3:d2:c7:0c:85:07:54:f5:8f:fb:3e:c2:4e:
ac:f9:4a:8f:42:0d:ff:dc:0d:d8:59:6f:d0:5f:b8:
d6:10:4d:4c:a2:2b:2a:72:99:e3:51:8b:16:35:bb:
66:dd:68:93:49:33:76:7c:13:6a:2b:4d:f6:0e:64:
69:59:1b:1d:51:b7:76:8b:68:13:da:eb:01:9e:62:
f2:9d:ca:c2:5d:6b:04:35:12:ca:3a:1f:48:9f:1f:
f6:6a:6e:07:02:a2:c9:5c:c4:c2:6a:1c:36:4e:45:
46:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:43:F2:5A:32:1D:36:DE:34:C1:FA:E9:B1:C1:C8:7F:E9:2A:3E:F1
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/PkPyWjIdNt40wfrpscHIf-kqPvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.182.0/23
95.140.80.0/24
95.140.83.0/24
95.140.88.0/22
95.140.93.0/24
95.140.95.0/24
95.161.128.0/24
109.239.128.0/21
109.239.138.0-109.239.143.255
178.18.228.0/23
178.18.231.0-178.18.232.255
IPv6:
2001:b28::/32
2a03:5f80::/46
2a03:5f80:8::/46
Signature Algorithm: sha256WithRSAEncryption
8a:10:b9:89:ca:ba:a5:8c:1d:01:89:72:92:c1:7d:49:ea:44:
6e:24:78:ef:00:0a:0b:ba:a3:db:ee:a4:ee:d0:ce:ef:93:dd:
ea:8b:e8:fa:b0:1f:44:dd:dd:cd:d4:90:65:17:6d:7d:6a:37:
05:3e:08:ca:e3:9d:c2:d2:28:62:4f:74:ee:ff:6c:cd:35:7e:
95:69:c3:00:99:31:11:8c:cf:da:cf:77:4a:bd:76:43:10:ce:
b6:7c:66:8a:7d:8e:ee:d2:c7:78:b7:57:62:ce:bf:68:14:c2:
0d:c7:ef:46:8b:22:0d:4c:9f:1f:b0:c6:61:c8:4f:66:52:69:
d8:0a:23:d4:32:28:f7:e7:4e:09:6b:82:f1:12:46:b6:70:c1:
6a:36:79:31:6f:55:70:6a:f5:8e:a3:98:87:2c:93:6d:fd:5d:
17:c1:89:4b:eb:dd:dd:9a:57:42:15:63:c8:fd:00:68:b9:fe:
ab:b2:96:2d:cb:0c:e3:4a:64:5c:a7:84:c6:f7:ed:b6:56:0d:
a3:05:f4:1a:c7:2f:c3:1a:2e:59:30:0c:65:8a:6a:52:ea:7e:
f1:9e:2b:b4:ed:6d:b1:28:c4:88:89:69:57:81:02:3b:de:9c:
3e:df:d1:3f:e0:08:c3:86:ca:54:2e:66:b5:d1:33:2b:15:29:
15:5a:ad:89
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgISAYzEJFKPUvJnfWoTHAMKveWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx
YTUxYjgwHhcNMjQwMTAxMDgyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTQzZjI1YTMyMWQzNmRlMzRjMWZhZTliMWMxYzg3ZmU5MmEzZWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPoT7najsCY4oibuEDyeJdnN7yNM
RF8wMW1kj3n3u6Ptn0ltIqgH8fZtl8T896m9PVx7RQVO/vV9qDO2Fx5oper9aGNx
iKiYIdvEbZy3ZFkJTfDfJX0SgqgLHpQvX09tb+KmvcmcHFFQoA052rM1o6rM6wY7
kM01vyj46Sx8ps/MTgklW9D3FWlx5yp3gznXuUedX13fSaPSxwyFB1T1j/s+wk6s
+UqPQg3/3A3YWW/QX7jWEE1MoisqcpnjUYsWNbtm3WiTSTN2fBNqK032DmRpWRsd
Ubd2i2gT2usBnmLyncrCXWsENRLKOh9Inx/2am4HAqLJXMTCahw2TkVGwQIDAQAB
o4ICdzCCAnMwHQYDVR0OBBYEFD5D8loyHTbeNMH66bHByH/pKj7xMB8GA1UdIwQY
MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt
NzY3NDE2NTI1MTBkLzEvUGtQeVdqSWROdDQwd2ZycHNjSElmLWtxUHZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk
LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGMBggrBgEFBQcBBwEB/wR9MHswWAQCAAEwUgMEAV58tgME
AF+MUAMEAF+MUwMEAl+MWAMEAF+MXQMEAF+MXwMEAF+hgAMEA23vgDAMAwQBbe+K
AwQEbe+AAwQBshLkMAwDBACyEucDBACyEugwHwQCAAIwGQMFACABCygDBwIqA1+A
AAADBwIqA1+AAAgwDQYJKoZIhvcNAQELBQADggEBAIoQuYnKuqWMHQGJcpLBfUnq
RG4keO8ACgu6o9vupO7Qzu+T3eqL6PqwH0Td3c3UkGUXbX1qNwU+CMrjncLSKGJP
dO7/bM01fpVpwwCZMRGMz9rPd0q9dkMQzrZ8Zop9ju7Sx3i3V2LOv2gUwg3H70aL
Ig1Mnx+wxmHIT2ZSadgKI9QyKPfnTglrgvESRrZwwWo2eTFvVXBq9Y6jmIcsk239
XRfBiUvr3d2aV0IVY8j9AGi5/quyli3LDONKZFynhMb37bZWDaMF9BrHL8MaLlkw
DGWKalLqfvGeK7TtbbEoxIiJaVeBAjvenD7f0T/gCMOGylQuZrXRMysVKRVarYk=
-----END CERTIFICATE-----
Generated at Fri Jun 28 16:18:28 2024 by rpki-client on console-fra.rpki-client.org