Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/uqBIxTnfxwKQ57eZAybXXhpE6tM.roa
File: uqBIxTnfxwKQ57eZAybXXhpE6tM.roa (raw, json)
Hash identifier: nqJ2xDuE1Xc3h3lXvbIQWfFp7LFjJliH8jq6zPPfvyg=
Subject key identifier: BA:A0:48:C5:39:DF:C7:02:90:E7:B7:99:03:26:D7:5E:1A:44:EA:D3
Certificate issuer: /CN=e8f239a70043734172d26378bf2106ae72552187
Certificate serial: 018CC42537F9166A90491992FACCAE186720
Authority key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/uqBIxTnfxwKQ57eZAybXXhpE6tM.roa
Signing time: Mon 01 Jan 2024 08:30:22 +0000
ROA not before: Mon 01 Jan 2024 08:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43846
IP address blocks: 37.0.64.0/21 maxlen: 24
79.140.144.0/20 maxlen: 24
79.140.151.0/24 maxlen: 24
185.12.43.0/24 maxlen: 24
185.12.40.0/22 maxlen: 24
185.80.96.0/22 maxlen: 24
89.207.192.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:37:f9:16:6a:90:49:19:92:fa:cc:ae:18:67:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f239a70043734172d26378bf2106ae72552187
Validity
Not Before: Jan 1 08:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=baa048c539dfc70290e7b7990326d75e1a44ead3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ef:b0:8d:4d:09:0a:8f:68:ad:c2:36:ea:d9:
c6:67:dc:d7:d1:02:31:9f:c2:b2:01:e4:25:85:10:
fe:27:53:61:79:72:27:25:ca:35:3f:2b:89:63:09:
f9:45:42:d0:e2:13:40:12:6e:40:b8:66:a1:ce:c5:
42:c6:bf:74:ed:34:70:5d:63:de:cf:cd:9c:69:79:
38:eb:da:e7:3f:48:7a:66:fd:48:8a:b4:40:7b:c8:
ca:ef:67:60:84:f4:6f:e5:1f:dc:58:da:9d:94:81:
1d:8f:1f:74:a9:a5:a0:0e:46:94:cb:49:7a:ca:a5:
db:47:d1:37:69:47:03:82:82:85:3e:64:8e:e4:34:
9a:2f:94:48:30:b5:90:57:de:5f:22:e9:00:7e:ef:
d4:dd:fa:72:fd:db:be:26:56:31:a1:8c:41:1f:ff:
44:32:7b:d2:2a:89:03:9d:37:99:0f:e0:4c:2d:c4:
fe:1a:71:f1:ef:4f:f5:bd:85:28:6c:87:0c:11:6b:
78:4d:ad:6a:43:9e:20:66:b1:b5:25:69:d4:49:cb:
66:6f:b0:18:a6:23:11:1d:00:a2:3f:32:4e:06:2f:
f3:ff:bb:a4:f8:00:f5:bb:6a:44:d0:5d:72:f8:c4:
ce:84:83:78:ce:d9:eb:66:d3:7c:50:20:c8:c4:8c:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A0:48:C5:39:DF:C7:02:90:E7:B7:99:03:26:D7:5E:1A:44:EA:D3
X509v3 Authority Key Identifier:
keyid:E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/uqBIxTnfxwKQ57eZAybXXhpE6tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.64.0/21
79.140.144.0/20
89.207.192.0/21
185.12.40.0/22
185.80.96.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:5e:0b:88:08:c5:88:f2:c5:10:f5:82:ee:6a:ce:5f:e4:0d:
f8:f2:87:e6:5f:13:45:ea:ab:2c:01:21:ab:9f:f1:10:f3:bb:
66:02:d4:89:5f:c2:ff:a2:ec:d7:d4:03:bf:67:6d:29:ff:7f:
c0:5e:3a:55:8b:5d:39:6d:28:bd:4c:65:21:6a:fb:52:1f:cd:
bc:e7:9a:62:01:d7:6f:73:1c:aa:65:ef:19:ca:c6:d1:d8:13:
35:58:f8:36:84:b7:5e:53:0c:69:3b:e2:fd:94:0a:f3:54:21:
e7:85:d8:b5:39:09:43:4a:67:f7:37:e0:85:e3:13:c8:61:30:
d7:0a:f4:6c:c7:5a:e9:d7:23:7d:3b:94:ba:4e:56:9c:6c:75:
57:8c:b6:da:85:7b:fb:19:ca:a6:c3:51:38:7a:49:3a:cc:8b:
24:0a:44:55:69:1a:06:f1:fc:bc:d6:73:c2:88:70:cc:56:87:
3a:f6:60:a5:cf:eb:b3:98:ac:70:54:eb:63:3f:68:c7:da:b5:
a5:65:2c:cf:58:fb:4b:e2:a7:63:93:2a:7b:81:79:56:49:35:
8e:74:af:c9:b4:95:2d:ec:62:35:fd:8a:ae:d6:8c:67:89:0b:
a5:eb:d8:df:41:17:0b:e7:7c:f8:f3:5b:49:4e:2e:b0:96:f4:
9e:03:d1:97
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzEJTf5FmqQSRmS+syuGGcgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZjIzOWE3MDA0MzczNDE3MmQyNjM3OGJmMjEwNmFlNzI1
NTIxODcwHhcNMjQwMTAxMDgzMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWEwNDhjNTM5ZGZjNzAyOTBlN2I3OTkwMzI2ZDc1ZTFhNDRlYWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu+wjU0JCo9orcI26tnGZ9zX0QIx
n8KyAeQlhRD+J1NheXInJco1PyuJYwn5RULQ4hNAEm5AuGahzsVCxr907TRwXWPe
z82caXk469rnP0h6Zv1IirRAe8jK72dghPRv5R/cWNqdlIEdjx90qaWgDkaUy0l6
yqXbR9E3aUcDgoKFPmSO5DSaL5RIMLWQV95fIukAfu/U3fpy/du+JlYxoYxBH/9E
MnvSKokDnTeZD+BMLcT+GnHx70/1vYUobIcMEWt4Ta1qQ54gZrG1JWnUSctmb7AY
piMRHQCiPzJOBi/z/7uk+AD1u2pE0F1y+MTOhIN4ztnrZtN8UCDIxIyj+wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFLqgSMU538cCkOe3mQMm114aROrTMB8GA1UdIwQY
MBaAFOjyOacAQ3NBctJjeL8hBq5yVSGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy80ZTkwMmEtMjk5Zi00ZGE3LTlhNmQt
NjY5YmQxMTNhMTc4LzEvdXFCSXhUbmZ4d0tRNTdlWkF5YlhYaHBFNnRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy80ZTkwMmEtMjk5Zi00ZGE3LTlhNmQtNjY5YmQxMTNhMTc4
LzEvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDJQBAAwQE
T4yQAwQDWc/AAwQCuQwoAwQCuVBgMA0GCSqGSIb3DQEBCwUAA4IBAQC/XguICMWI
8sUQ9YLuas5f5A348ofmXxNF6qssASGrn/EQ87tmAtSJX8L/ouzX1AO/Z20p/3/A
XjpVi105bSi9TGUhavtSH82855piAddvcxyqZe8ZysbR2BM1WPg2hLdeUwxpO+L9
lArzVCHnhdi1OQlDSmf3N+CF4xPIYTDXCvRsx1rp1yN9O5S6TlacbHVXjLbahXv7
Gcqmw1E4ekk6zIskCkRVaRoG8fy81nPCiHDMVoc69mClz+uzmKxwVOtjP2jH2rWl
ZSzPWPtL4qdjkyp7gXlWSTWOdK/JtJUt7GI1/Yqu1oxniQul69jfQRcL53z481tJ
Ti6wlvSeA9GX
-----END CERTIFICATE-----
Generated at Wed May 15 17:57:51 2024 by rpki-client on console-fra.rpki-client.org