Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/tJbyxZEoPryX3zgFCfPAldoDAq8.roa
File: tJbyxZEoPryX3zgFCfPAldoDAq8.roa (raw, json)
Hash identifier: kyPQ8In524+vFNdQAVPIuIMRP+lC7XYNxa/I0ZCgCnM=
Subject key identifier: B4:96:F2:C5:91:28:3E:BC:97:DF:38:05:09:F3:C0:95:DA:03:02:AF
Certificate issuer: /CN=d44de659759b0274124a7b481d0976840b7ade06
Certificate serial: 018CC9BC4EC5A0E98B123032BC074FDB137B
Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/tJbyxZEoPryX3zgFCfPAldoDAq8.roa
Signing time: Tue 02 Jan 2024 10:33:30 +0000
ROA not before: Tue 02 Jan 2024 10:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34714
IP address blocks: 193.238.56.0/22 maxlen: 22
185.238.56.0/22 maxlen: 22
91.201.76.0/22 maxlen: 22
91.213.34.0/24 maxlen: 24
37.143.168.0/24 maxlen: 24
37.143.175.0/24 maxlen: 24
193.32.140.0/24 maxlen: 24
2a03:8f80::/32 maxlen: 32
2a03:8f81::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:4e:c5:a0:e9:8b:12:30:32:bc:07:4f:db:13:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06
Validity
Not Before: Jan 2 10:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b496f2c591283ebc97df380509f3c095da0302af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:12:55:bf:1a:74:a6:eb:7b:da:46:88:2a:ee:
aa:7b:08:1b:48:c4:ef:67:45:24:e6:b7:2e:7b:51:
4c:7b:1a:ef:8f:a9:da:4e:8e:14:44:39:16:fa:57:
1e:05:dc:7c:46:27:d2:5b:9c:30:a6:20:23:39:6e:
17:b0:4e:e0:ad:12:aa:b0:0d:a3:0d:cf:8b:15:26:
40:ff:00:c0:1f:7e:7a:1a:72:b1:71:48:aa:e2:8c:
5d:31:91:bd:de:30:84:7f:31:ca:d7:54:5b:9e:d7:
af:7f:d2:a9:a3:53:58:e0:89:ec:f1:d0:d9:6b:85:
8c:0f:fc:29:1c:aa:b0:58:13:40:c8:72:2a:67:39:
0f:74:c7:4c:fa:f3:4c:c5:f4:8a:43:3d:86:36:9e:
76:6b:b0:03:df:34:fc:4e:41:da:07:c7:25:46:f7:
bc:45:cb:b4:35:96:6b:fd:3a:aa:64:ec:46:1d:e7:
7a:a7:80:33:d6:c9:d3:0d:b5:6b:ff:8d:59:9d:34:
a1:ac:b4:95:ba:1d:99:83:b6:12:5b:ea:62:f9:bc:
9d:4e:da:9e:9c:d3:dc:5b:09:50:e1:08:10:0d:13:
aa:e2:29:c5:bf:36:a0:29:d3:e1:8e:55:0f:cc:04:
f2:1a:82:34:c6:d9:53:e3:59:5e:2b:f3:15:b7:b2:
f6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:96:F2:C5:91:28:3E:BC:97:DF:38:05:09:F3:C0:95:DA:03:02:AF
X509v3 Authority Key Identifier:
keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/tJbyxZEoPryX3zgFCfPAldoDAq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.168.0/24
37.143.175.0/24
91.201.76.0/22
91.213.34.0/24
185.238.56.0/22
193.32.140.0/24
193.238.56.0/22
IPv6:
2a03:8f80::/31
Signature Algorithm: sha256WithRSAEncryption
84:b3:53:d6:cc:d4:24:33:6e:a5:5a:68:ef:31:f5:a8:f9:11:
dc:12:0b:01:b9:d0:3d:34:94:22:bc:99:83:e3:86:6d:84:17:
5f:52:d8:6e:6a:da:bb:0f:64:50:92:ba:23:13:21:79:11:57:
dd:e2:64:cb:bc:86:55:c0:94:65:ab:3a:93:23:cc:1b:3e:ae:
c6:b5:4c:28:af:5a:00:5c:7e:4e:f1:73:43:c2:61:a1:4f:03:
fc:8f:dd:aa:56:27:bc:d8:7f:56:cf:90:1a:eb:f4:ff:dd:bf:
ca:08:69:cc:b5:c1:05:27:54:02:1a:c4:ce:46:24:5a:21:2e:
0a:f1:00:ae:e0:ae:72:38:46:ec:7e:99:4b:36:b1:be:3a:76:
1b:3c:0f:cc:a0:11:27:cd:22:15:87:16:5c:b3:6d:54:c8:f5:
7f:c6:f2:75:e8:21:09:62:77:04:0d:ff:42:76:4c:62:db:40:
54:1b:1d:20:cd:f3:ff:2b:60:85:35:06:e8:f6:93:72:c4:d2:
24:7b:20:b5:67:19:e0:bb:88:4f:4e:44:d4:02:37:37:0d:c0:
b0:1d:00:cf:9c:6d:19:10:ad:d5:f4:8e:5a:87:c4:70:82:40:
33:37:ea:0a:48:19:69:eb:05:bb:db:e2:e3:fd:8d:7e:e9:68:
4c:bf:5a:cc
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAYzJvE7FoOmLEjAyvAdP2xN7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NGRlNjU5NzU5YjAyNzQxMjRhN2I0ODFkMDk3Njg0MGI3
YWRlMDYwHhcNMjQwMTAyMTAzMzMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDk2ZjJjNTkxMjgzZWJjOTdkZjM4MDUwOWYzYzA5NWRhMDMwMmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxJVvxp0put72kaIKu6qewgbSMTv
Z0Uk5rcue1FMexrvj6naTo4URDkW+lceBdx8RifSW5wwpiAjOW4XsE7grRKqsA2j
Dc+LFSZA/wDAH356GnKxcUiq4oxdMZG93jCEfzHK11Rbntevf9Kpo1NY4Ins8dDZ
a4WMD/wpHKqwWBNAyHIqZzkPdMdM+vNMxfSKQz2GNp52a7AD3zT8TkHaB8clRve8
Rcu0NZZr/TqqZOxGHed6p4Az1snTDbVr/41ZnTShrLSVuh2Zg7YSW+pi+bydTtqe
nNPcWwlQ4QgQDROq4inFvzagKdPhjlUPzATyGoI0xtlT41leK/MVt7L2zwIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFLSW8sWRKD68l984BQnzwJXaAwKvMB8GA1UdIwQY
MBaAFNRN5ll1mwJ0Ekp7SB0JdoQLet4GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUUzbVdYV2JBblFTU250SUhRbDJoQXQ2M2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83NTIxNmQtNjg0Yi00N2NjLWE5NWUt
ZGI0ZDM5ZGM0ZWM3LzEvdEpieXhaRW9QcnlYM3pnRkNmUEFsZG9EQXE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy83NTIxNmQtNjg0Yi00N2NjLWE5NWUtZGI0ZDM5ZGM0ZWM3
LzEvMUUzbVdYV2JBblFTU250SUhRbDJoQXQ2M2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQAJY+oAwQA
JY+vAwQCW8lMAwQAW9UiAwQCue44AwQAwSCMAwQCwe44MA0EAgACMAcDBQEqA4+A
MA0GCSqGSIb3DQEBCwUAA4IBAQCEs1PWzNQkM26lWmjvMfWo+RHcEgsBudA9NJQi
vJmD44ZthBdfUthuatq7D2RQkrojEyF5EVfd4mTLvIZVwJRlqzqTI8wbPq7GtUwo
r1oAXH5O8XNDwmGhTwP8j92qVie82H9Wz5Aa6/T/3b/KCGnMtcEFJ1QCGsTORiRa
IS4K8QCu4K5yOEbsfplLNrG+OnYbPA/MoBEnzSIVhxZcs21UyPV/xvJ16CEJYncE
Df9Cdkxi20BUGx0gzfP/K2CFNQbo9pNyxNIkeyC1Zxngu4hPTkTUAjc3DcCwHQDP
nG0ZEK3V9I5ah8RwgkAzN+oKSBlp6wW72+Lj/Y1+6WhMv1rM
-----END CERTIFICATE-----
Generated at Sun May 19 06:19:47 2024 by rpki-client on console-ams.rpki-client.org