Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/kpLt1oB6Q9zfjcxxEE_ITqjZGKI.roa
File: kpLt1oB6Q9zfjcxxEE_ITqjZGKI.roa (raw, json)
Hash identifier: yF68vHtN0vWxNPUXKz3rhJkczSu4tgXHqMX997aPDUA=
Subject key identifier: 92:92:ED:D6:80:7A:43:DC:DF:8D:CC:71:10:4F:C8:4E:A8:D9:18:A2
Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Certificate serial: 018CCA298DAEC67349FC0734FADC5531AE87
Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/kpLt1oB6Q9zfjcxxEE_ITqjZGKI.roa
Signing time: Tue 02 Jan 2024 12:32:50 +0000
ROA not before: Tue 02 Jan 2024 12:32:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209181
IP address blocks: 185.252.3.0/24 maxlen: 24
185.252.2.0/24 maxlen: 24
185.252.1.0/24 maxlen: 24
185.252.0.0/24 maxlen: 24
2.58.192.0/24 maxlen: 24
2.58.192.0/22 maxlen: 22
2.58.195.0/24 maxlen: 24
2.58.194.0/24 maxlen: 24
2.58.193.0/24 maxlen: 24
79.143.17.0/24 maxlen: 24
79.143.16.0/24 maxlen: 24
79.143.18.0/24 maxlen: 24
2a09:e9c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:8d:ae:c6:73:49:fc:07:34:fa:dc:55:31:ae:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Validity
Not Before: Jan 2 12:32:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9292edd6807a43dcdf8dcc71104fc84ea8d918a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:86:3d:c5:98:78:49:6d:5f:9e:a4:83:af:4f:
1a:ec:8d:60:b3:19:4e:b0:ef:08:e6:a4:66:6a:34:
d8:0f:76:44:c6:6e:d5:21:2a:5a:28:e8:61:e7:b7:
fb:02:de:bc:90:16:fd:25:e2:93:51:aa:0a:13:ef:
72:50:91:84:48:a3:2b:c6:b4:0f:71:61:16:b2:5e:
54:16:70:c6:f8:05:ac:2b:83:b9:e3:80:89:94:d1:
ef:73:fc:b7:b7:27:47:3e:4b:c8:ea:06:c9:ab:dc:
96:64:cf:e3:33:bc:d8:8f:f6:b6:93:a8:68:ea:9e:
52:63:04:c6:4b:a4:b2:69:69:15:49:a3:72:2f:16:
45:32:ed:2e:96:d2:c6:e8:2f:cf:c0:22:ad:4f:3d:
54:3d:77:79:88:af:6f:cf:87:34:f9:d9:69:d5:57:
7e:27:6f:e6:48:9e:f8:89:fe:c3:c4:b7:89:fe:6e:
13:9b:54:6c:2b:c5:26:b6:9e:04:af:ad:43:d4:e7:
67:82:01:a4:88:44:cc:ef:06:b1:c8:12:0f:a9:c9:
03:cc:cf:40:31:2c:92:1e:c5:c3:1d:de:b2:84:11:
b6:da:bf:45:22:c5:52:0a:36:2b:da:18:4c:54:1e:
72:e4:1d:b8:bf:33:65:cc:a6:57:26:c2:8c:d9:ed:
44:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:92:ED:D6:80:7A:43:DC:DF:8D:CC:71:10:4F:C8:4E:A8:D9:18:A2
X509v3 Authority Key Identifier:
keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/kpLt1oB6Q9zfjcxxEE_ITqjZGKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.192.0/22
79.143.16.0-79.143.18.255
185.252.0.0/22
IPv6:
2a09:e9c0::/29
Signature Algorithm: sha256WithRSAEncryption
bc:68:93:ff:b5:3f:88:17:a3:56:ea:5a:ac:94:4f:1f:19:50:
5d:ea:00:8f:ee:be:72:96:44:cc:e4:f4:40:b8:c8:0e:7a:1e:
ff:04:20:de:32:7a:8e:63:c0:a3:0b:1c:be:bc:f3:e2:67:d4:
da:43:68:e9:1b:5e:7c:ae:4b:ba:22:9e:00:3f:fa:0a:18:13:
45:0f:26:de:3c:5a:75:e0:05:4e:04:f0:e4:fd:26:eb:1c:a4:
39:a8:d6:a4:e1:02:46:01:82:08:d4:42:6c:2d:d3:5e:c0:db:
15:cb:ab:7f:c5:8b:e3:b9:4c:bd:4c:46:ce:5e:86:ef:1d:f1:
9e:65:7a:ce:5f:0c:92:6b:07:5c:a0:65:60:a8:a7:71:ee:4b:
38:ce:1c:91:72:94:b8:78:7d:b6:7f:fa:e1:46:e6:e2:e2:a7:
56:b7:90:9b:1a:5c:b5:0e:88:e3:91:7c:4d:b9:e0:33:d0:8b:
3e:c0:52:d5:7c:66:00:3e:72:b3:2c:57:8f:a8:d5:41:0c:18:
4e:56:a3:a9:71:f4:c7:2b:ca:1c:be:ca:a0:96:6b:03:a6:27:
d2:6f:1c:b8:b3:87:98:09:6d:6d:ed:f4:4d:2f:43:11:8f:69:
f3:6a:17:fa:2e:1c:42:54:26:e9:03:62:c1:f8:69:e4:63:fc:
8f:5e:06:f8
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYzKKY2uxnNJ/Ac0+txVMa6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YThmZjRjOWM1NjY2N2Q5OTAyNWQ3ZjAxNTkxY2JmNzdh
ZDJmMDkwHhcNMjQwMTAyMTIzMjUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjkyZWRkNjgwN2E0M2RjZGY4ZGNjNzExMDRmYzg0ZWE4ZDkxOGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYY9xZh4SW1fnqSDr08a7I1gsxlO
sO8I5qRmajTYD3ZExm7VISpaKOhh57f7At68kBb9JeKTUaoKE+9yUJGESKMrxrQP
cWEWsl5UFnDG+AWsK4O544CJlNHvc/y3tydHPkvI6gbJq9yWZM/jM7zYj/a2k6ho
6p5SYwTGS6SyaWkVSaNyLxZFMu0ultLG6C/PwCKtTz1UPXd5iK9vz4c0+dlp1Vd+
J2/mSJ74if7DxLeJ/m4Tm1RsK8Umtp4Er61D1OdnggGkiETM7waxyBIPqckDzM9A
MSySHsXDHd6yhBG22r9FIsVSCjYr2hhMVB5y5B24vzNlzKZXJsKM2e1EMwIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFJKS7daAekPc343McRBPyE6o2RiiMB8GA1UdIwQY
MBaAFIao/0ycVmZ9mQJdfwFZHL93rS8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQt
MDZhNDk5NjhjMmQzLzEva3BMdDFvQjZROXpmamN4eEVFX0lUcWpaR0tJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQtMDZhNDk5NjhjMmQz
LzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQCAjrAMAwD
BARPjxADBABPjxIDBAK5/AAwDQQCAAIwBwMFAyoJ6cAwDQYJKoZIhvcNAQELBQAD
ggEBALxok/+1P4gXo1bqWqyUTx8ZUF3qAI/uvnKWRMzk9EC4yA56Hv8EIN4yeo5j
wKMLHL688+Jn1NpDaOkbXnyuS7oingA/+goYE0UPJt48WnXgBU4E8OT9JuscpDmo
1qThAkYBggjUQmwt017A2xXLq3/Fi+O5TL1MRs5ehu8d8Z5les5fDJJrB1ygZWCo
p3HuSzjOHJFylLh4fbZ/+uFG5uLip1a3kJsaXLUOiOORfE254DPQiz7AUtV8ZgA+
crMsV4+o1UEMGE5Wo6lx9Mcryhy+yqCWawOmJ9JvHLizh5gJbW3t9E0vQxGPafNq
F/ouHEJUJukDYsH4aeRj/I9eBvg=
-----END CERTIFICATE-----
Generated at Wed May 1 22:36:53 2024 by rpki-client on console-fra.rpki-client.org