Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/RQB3slHNrFYshgHlZSTcrZqUn-E.roa
File: RQB3slHNrFYshgHlZSTcrZqUn-E.roa (raw, json)
Hash identifier: L1s0s6KX4Ji2pPtoDY0AsQPuKiCnFBcUjdUmPIvCVE0=
Subject key identifier: 45:00:77:B2:51:CD:AC:56:2C:86:01:E5:65:24:DC:AD:9A:94:9F:E1
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018FD9240677937E98A6E19B4BABB97620FB
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/RQB3slHNrFYshgHlZSTcrZqUn-E.roa
Signing time: Sun 02 Jun 2024 13:29:27 +0000
ROA not before: Sun 02 Jun 2024 13:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56534
IP address blocks: 5.188.85.0/24 maxlen: 24
37.139.36.0/22 maxlen: 22
37.139.36.0/24 maxlen: 24
37.139.37.0/24 maxlen: 24
37.139.39.0/24 maxlen: 24
37.139.44.0/22 maxlen: 22
37.139.44.0/24 maxlen: 24
37.139.45.0/24 maxlen: 24
37.139.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d9:24:06:77:93:7e:98:a6:e1:9b:4b:ab:b9:76:20:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jun 2 13:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=450077b251cdac562c8601e56524dcad9a949fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:49:55:46:62:48:62:61:16:b6:d8:29:6e:f0:
7e:91:d8:ac:89:b2:51:0d:b8:fc:75:4e:6f:01:f3:
d1:b5:2a:bc:2b:f7:ad:8a:29:30:21:a0:a2:f0:ad:
e2:0c:65:3b:cc:15:e2:3e:3b:d8:6a:ea:d4:db:70:
2d:8e:54:dc:dc:bb:3a:88:e0:11:41:73:81:12:b5:
84:de:ee:e2:b6:48:0c:88:d5:84:9b:67:77:40:22:
b8:86:52:d7:b9:ac:bc:8e:82:45:a8:b6:d9:d1:70:
62:07:b5:d9:07:17:dc:14:30:cb:9d:30:87:d2:1f:
e6:73:49:a5:3a:89:56:a8:4a:a5:2c:9d:75:37:f9:
12:1a:14:df:f5:d2:46:88:77:f4:bb:65:da:e7:f5:
b6:01:c5:d8:7d:ba:ea:4a:78:af:d9:96:3b:77:49:
c3:fe:9b:17:6e:70:ba:98:1f:25:6f:a6:fb:25:09:
1a:22:17:55:de:d1:58:c2:15:18:aa:9c:81:81:5d:
6c:76:c7:b9:83:5b:d4:e8:9b:3c:36:52:6a:06:ca:
32:62:8a:82:29:0b:50:92:cd:56:a6:29:e5:f7:58:
c4:6e:7e:17:68:a0:21:14:8c:21:60:c5:17:4b:c2:
94:8a:d8:4b:9c:bc:9a:c0:4e:e3:bf:d8:01:67:6f:
a9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:00:77:B2:51:CD:AC:56:2C:86:01:E5:65:24:DC:AD:9A:94:9F:E1
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/RQB3slHNrFYshgHlZSTcrZqUn-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.85.0/24
37.139.36.0/22
37.139.44.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:9b:51:f3:f7:ae:9c:a8:7f:dd:98:61:e8:b6:02:e8:f3:38:
10:2b:2c:02:1f:d3:3f:81:b0:89:86:ac:b5:34:be:cc:82:90:
36:08:c9:f4:7e:5d:a8:11:e1:75:2b:0b:43:53:80:ed:2d:51:
00:8f:b4:fd:f8:6a:87:a7:3b:33:98:a4:96:ca:3f:ca:19:0c:
38:32:7b:45:e5:0f:da:4d:76:1f:30:4f:3e:92:14:eb:07:aa:
72:3b:c8:c3:dc:90:98:97:8d:25:03:9d:dd:2e:a2:b4:97:99:
26:08:80:09:5d:9f:d8:1c:b8:4d:60:29:ae:fa:45:7b:71:6e:
a5:b8:7a:2c:68:4c:6a:b1:a8:a8:f3:ed:03:f7:3f:aa:d6:5c:
7d:35:30:2e:2d:b4:0b:d8:4f:b4:e1:b1:6d:5b:68:db:59:98:
42:ed:9b:39:7d:15:97:67:92:99:fd:30:06:ef:69:58:b1:72:
f3:d7:09:22:81:92:be:99:ce:0a:26:48:f2:2d:de:34:84:41:
0f:42:5b:ba:b6:83:b2:b4:08:0a:78:22:ff:29:88:05:35:b0:
2b:21:85:dc:52:5f:4c:35:2e:22:58:3c:db:32:d3:a2:b6:cf:
7f:78:a6:8c:4c:73:c6:b5:a4:3d:80:9e:f1:1c:15:69:12:d1:
8b:08:fd:3d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY/ZJAZ3k36YpuGbS6u5diD7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjQwNjAyMTMyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTAwNzdiMjUxY2RhYzU2MmM4NjAxZTU2NTI0ZGNhZDlhOTQ5ZmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqElVRmJIYmEWttgpbvB+kdisibJR
Dbj8dU5vAfPRtSq8K/etiikwIaCi8K3iDGU7zBXiPjvYaurU23AtjlTc3Ls6iOAR
QXOBErWE3u7itkgMiNWEm2d3QCK4hlLXuay8joJFqLbZ0XBiB7XZBxfcFDDLnTCH
0h/mc0mlOolWqEqlLJ11N/kSGhTf9dJGiHf0u2Xa5/W2AcXYfbrqSniv2ZY7d0nD
/psXbnC6mB8lb6b7JQkaIhdV3tFYwhUYqpyBgV1sdse5g1vU6Js8NlJqBsoyYoqC
KQtQks1Wpinl91jEbn4XaKAhFIwhYMUXS8KUithLnLyawE7jv9gBZ2+p7wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEUAd7JRzaxWLIYB5WUk3K2alJ/hMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvUlFCM3NsSE5yRllzaGdIbFpTVGNyWnFVbi1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABbxVAwQC
JYskAwQCJYssMA0GCSqGSIb3DQEBCwUAA4IBAQAcm1Hz966cqH/dmGHotgLo8zgQ
KywCH9M/gbCJhqy1NL7MgpA2CMn0fl2oEeF1KwtDU4DtLVEAj7T9+GqHpzszmKSW
yj/KGQw4MntF5Q/aTXYfME8+khTrB6pyO8jD3JCYl40lA53dLqK0l5kmCIAJXZ/Y
HLhNYCmu+kV7cW6luHosaExqsaio8+0D9z+q1lx9NTAuLbQL2E+04bFtW2jbWZhC
7Zs5fRWXZ5KZ/TAG72lYsXLz1wkigZK+mc4KJkjyLd40hEEPQlu6toOytAgKeCL/
KYgFNbArIYXcUl9MNS4iWDzbMtOits9/eKaMTHPGtaQ9gJ7xHBVpEtGLCP09
-----END CERTIFICATE-----
Generated at Sat Sep 28 04:10:23 2024 by rpki-client on console-fra.rpki-client.org