Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/L4replaSmBkVrtCczGyU9xRgiew.roa
File: L4replaSmBkVrtCczGyU9xRgiew.roa (raw, json)
Hash identifier: 4dhI2aUP6nN1kt9EFPYwY64nLx/5AlrVMmUGVnv+b1k=
Subject key identifier: 2F:8A:DE:A6:56:92:98:19:15:AE:D0:9C:CC:6C:94:F7:14:60:89:EC
Certificate issuer: /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial: 018CC5DBE6DC1205C5116F8BB36C5BA01782
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/L4replaSmBkVrtCczGyU9xRgiew.roa
Signing time: Mon 01 Jan 2024 16:29:32 +0000
ROA not before: Mon 01 Jan 2024 16:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205334
IP address blocks: 185.193.173.0/24 maxlen: 24
185.193.175.0/24 maxlen: 24
185.193.174.0/24 maxlen: 24
185.211.41.0/24 maxlen: 24
176.119.132.0/23 maxlen: 23
176.119.132.0/24 maxlen: 24
176.119.132.0/22 maxlen: 22
185.214.169.0/24 maxlen: 24
185.214.171.0/24 maxlen: 24
185.214.170.0/24 maxlen: 24
176.119.134.0/24 maxlen: 24
176.119.134.0/23 maxlen: 23
176.119.133.0/24 maxlen: 24
176.119.135.0/24 maxlen: 24
185.193.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e6:dc:12:05:c5:11:6f:8b:b3:6c:5b:a0:17:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Validity
Not Before: Jan 1 16:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f8adea65692981915aed09ccc6c94f7146089ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:35:99:ac:f9:ab:b0:1b:9b:13:97:2d:29:
87:f4:75:32:fc:77:fe:86:32:4b:1b:b0:97:24:de:
bc:b9:22:4b:60:df:21:07:65:92:45:df:33:a0:2c:
75:d7:73:b7:c0:73:3d:a4:8a:eb:06:65:1c:28:0c:
4f:bc:85:6b:35:76:20:f4:b4:97:d6:53:05:68:1d:
24:13:85:0d:d3:65:3c:03:a9:4c:a2:0b:21:75:d9:
a5:e9:e5:1b:5a:61:dc:4d:87:f8:89:ea:f4:7e:1b:
57:62:cf:56:4b:f3:e8:c4:8d:9e:9c:91:66:0a:88:
0e:1e:6a:1c:2a:ab:60:8b:e0:36:a0:ef:11:d2:5b:
2b:a3:ff:3d:0c:62:06:43:60:a6:7e:ee:7a:f0:d3:
f2:74:bc:72:ff:86:64:a7:cd:9a:2b:cc:53:09:f6:
19:20:bf:fc:9d:db:c4:c6:25:36:67:7a:5d:39:82:
0b:c1:11:37:ca:8f:56:8b:c7:c6:06:90:4a:ef:41:
a9:75:50:0e:40:16:6c:62:53:3b:88:23:3d:c2:43:
bd:96:d1:2f:33:95:28:6b:44:95:aa:d4:e4:b3:3b:
54:ca:2f:67:65:ce:28:a7:ba:42:83:75:77:4b:0f:
01:de:d2:4a:2d:65:a9:aa:8d:7a:7d:5e:96:ec:d1:
5d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8A:DE:A6:56:92:98:19:15:AE:D0:9C:CC:6C:94:F7:14:60:89:EC
X509v3 Authority Key Identifier:
keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/L4replaSmBkVrtCczGyU9xRgiew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.132.0/22
185.193.172.0/22
185.211.41.0/24
185.214.169.0-185.214.171.255
Signature Algorithm: sha256WithRSAEncryption
07:fc:6c:03:68:ab:d2:cd:13:29:fb:d7:ce:1e:7a:e0:a5:d4:
e0:7a:5b:3e:e9:3c:6c:f6:ae:d2:15:53:f5:ff:6a:58:85:28:
fd:f7:6f:20:42:60:20:8b:36:c9:b3:4a:a9:a5:01:dd:71:74:
a0:b0:1b:52:fb:97:79:73:ad:16:c0:ba:b0:48:95:13:1f:4a:
36:b4:8b:db:cc:d4:ce:af:b8:1c:ca:fc:76:80:59:75:55:21:
e2:48:05:48:94:d3:72:69:2f:da:4e:92:a4:82:d5:18:59:18:
83:d5:24:e3:42:7c:4d:1d:75:c1:1b:d6:52:46:2f:ce:1e:c2:
c7:8f:80:95:73:8b:91:42:c6:ca:2e:30:41:0f:74:83:4c:a6:
76:de:e6:60:5b:a5:c5:5b:11:da:ee:9a:aa:e5:60:7c:63:af:
78:bd:ea:66:0a:94:a9:94:98:1c:40:15:3e:5d:28:e8:49:dd:
43:da:20:b5:2f:a5:93:e3:11:7e:ef:2d:a8:bc:99:6d:0a:de:
4c:74:95:fb:4b:d7:8e:a3:53:8e:fa:c8:8e:46:24:d7:f3:3b:
e5:00:45:10:e5:87:00:90:00:c9:21:27:a7:0d:9d:ec:c1:9d:
9c:22:05:ff:6d:79:96:aa:b8:78:f7:d3:69:b7:d4:cb:cf:3c:
a0:7a:f4:b9
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYzF2+bcEgXFEW+Ls2xboBeCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxN2JmNGZiZWE4OTRmNDNlZWIzZGIxYjIxNmU1Nzc2NmUw
MWFiODEwHhcNMjQwMTAxMTYyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjhhZGVhNjU2OTI5ODE5MTVhZWQwOWNjYzZjOTRmNzE0NjA4OWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyU1maz5q7AbmxOXLSmH9HUy/Hf+
hjJLG7CXJN68uSJLYN8hB2WSRd8zoCx113O3wHM9pIrrBmUcKAxPvIVrNXYg9LSX
1lMFaB0kE4UN02U8A6lMogshddml6eUbWmHcTYf4ier0fhtXYs9WS/PoxI2enJFm
CogOHmocKqtgi+A2oO8R0lsro/89DGIGQ2Cmfu568NPydLxy/4Zkp82aK8xTCfYZ
IL/8ndvExiU2Z3pdOYILwRE3yo9Wi8fGBpBK70GpdVAOQBZsYlM7iCM9wkO9ltEv
M5Uoa0SVqtTksztUyi9nZc4op7pCg3V3Sw8B3tJKLWWpqo16fV6W7NFduQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFC+K3qZWkpgZFa7QnMxslPcUYInsMB8GA1UdIwQY
MBaAFNF79PvqiU9D7rPbGyFuV3ZuAauBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFh2MC0tcUpUMFB1czlzYklXNVhkbTRCcTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80MjE1MjktNzNlMi00OTE2LThiZDIt
MmMyMDFkMzBhZTA1LzEvTDRyZXBsYVNtQmtWcnRDY3pHeVU5eFJnaWV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80MjE1MjktNzNlMi00OTE2LThiZDItMmMyMDFkMzBhZTA1
LzEvMFh2MC0tcUpUMFB1czlzYklXNVhkbTRCcTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCsHeEAwQC
ucGsAwQAudMpMAwDBAC51qkDBAK51qgwDQYJKoZIhvcNAQELBQADggEBAAf8bANo
q9LNEyn7184eeuCl1OB6Wz7pPGz2rtIVU/X/aliFKP33byBCYCCLNsmzSqmlAd1x
dKCwG1L7l3lzrRbAurBIlRMfSja0i9vM1M6vuBzK/HaAWXVVIeJIBUiU03JpL9pO
kqSC1RhZGIPVJONCfE0ddcEb1lJGL84ewsePgJVzi5FCxsouMEEPdINMpnbe5mBb
pcVbEdrumqrlYHxjr3i96mYKlKmUmBxAFT5dKOhJ3UPaILUvpZPjEX7vLai8mW0K
3kx0lftL146jU476yI5GJNfzO+UARRDlhwCQAMkhJ6cNnezBnZwiBf9teZaquHj3
02m31MvPPKB69Lk=
-----END CERTIFICATE-----
Generated at Sat May 18 08:07:47 2024 by rpki-client on console-fra.rpki-client.org