Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/DhzbxrxxN92CtZ0VP5lZLSVEGpg.roa
File: DhzbxrxxN92CtZ0VP5lZLSVEGpg.roa (raw, json)
Hash identifier: ac6DaTRgGFxi5N/0nxkVMadrj+BDejeUbLiFQlU3g0Q=
Subject key identifier: 0E:1C:DB:C6:BC:71:37:DD:82:B5:9D:15:3F:99:59:2D:25:44:1A:98
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 018CC2DB213D1FF372EB7173318EA9F2AC9D
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/DhzbxrxxN92CtZ0VP5lZLSVEGpg.roa
Signing time: Mon 01 Jan 2024 02:29:49 +0000
ROA not before: Mon 01 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39280
IP address blocks: 81.21.80.0/21 maxlen: 21
81.21.80.0/20 maxlen: 20
81.21.88.0/21 maxlen: 21
93.184.224.0/21 maxlen: 21
93.184.224.0/20 maxlen: 20
93.184.232.0/21 maxlen: 21
46.228.176.0/21 maxlen: 21
46.228.176.0/20 maxlen: 20
46.228.184.0/21 maxlen: 21
185.41.202.0/23 maxlen: 23
185.41.200.0/23 maxlen: 23
185.41.200.0/22 maxlen: 22
46.18.64.0/21 maxlen: 21
46.18.64.0/22 maxlen: 22
46.18.68.0/22 maxlen: 22
2a03:ba40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:21:3d:1f:f3:72:eb:71:73:31:8e:a9:f2:ac:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Jan 1 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e1cdbc6bc7137dd82b59d153f99592d25441a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:a7:ca:08:10:fd:b5:2f:b0:5d:69:1c:79:
c1:dc:3c:74:ef:d5:f1:8c:f6:7c:c1:15:2b:9b:47:
57:ff:52:96:36:a5:47:9c:f5:0a:4f:56:fb:20:3e:
fe:0b:35:70:0d:e4:c0:86:1b:2d:c8:39:48:63:cf:
db:2b:1a:8b:cb:fd:54:3b:b0:7f:7e:82:4a:9c:c8:
69:77:07:d7:a1:d7:3a:6a:b8:e6:be:2d:6c:a8:14:
93:f7:b8:02:5f:21:17:a5:8a:f3:0f:d0:a0:9c:dc:
4c:77:ba:60:5b:bc:ef:21:e1:01:0a:b1:fe:3c:0a:
20:39:84:d4:91:bd:64:0b:83:0a:9b:23:bc:7f:f7:
73:80:ba:59:b1:d8:18:c0:0d:a5:5c:eb:6a:a5:f4:
2a:ce:7f:08:c3:70:d1:6e:33:7b:14:6e:c8:6a:86:
9c:18:04:b1:05:dc:ff:b3:a3:8b:61:93:d0:58:81:
db:01:29:14:57:5b:12:71:5e:4a:31:82:6b:ef:0d:
6f:63:1a:28:e1:b3:98:d2:bc:d1:bf:68:ec:cf:fa:
00:f5:fa:1b:5c:ed:29:9e:d6:17:e1:4e:3f:e3:fa:
4d:22:57:17:b5:db:93:0a:e4:ec:81:59:c0:2e:4d:
81:d2:6b:78:db:10:5e:6e:a1:25:39:86:8e:ba:ab:
66:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1C:DB:C6:BC:71:37:DD:82:B5:9D:15:3F:99:59:2D:25:44:1A:98
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/DhzbxrxxN92CtZ0VP5lZLSVEGpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.64.0/21
46.228.176.0/20
81.21.80.0/20
93.184.224.0/20
185.41.200.0/22
IPv6:
2a03:ba40::/32
Signature Algorithm: sha256WithRSAEncryption
53:95:89:90:2d:66:70:74:7f:0d:c7:e7:33:e2:b3:4f:59:3d:
38:b9:1f:76:61:8c:1c:27:15:bd:6d:50:f6:be:6d:b7:36:62:
b9:58:ca:ba:56:f3:c4:79:67:18:35:7f:2b:56:d4:78:55:ce:
7d:6c:93:b1:80:79:57:f6:35:0c:4c:dd:a6:99:86:06:9b:a3:
51:71:0d:0c:30:7a:85:48:04:fd:9c:de:85:2a:eb:96:88:0b:
c9:73:0b:ed:b4:bc:e6:ac:ff:2d:fb:25:2b:26:ca:37:17:87:
40:8e:1b:11:cf:63:49:86:4f:7f:46:fd:7c:a8:28:3b:d0:c8:
22:ad:e6:45:5b:09:6a:03:e2:b5:5d:cf:40:d2:0e:b5:c0:ed:
a1:11:74:5d:f2:72:bc:4f:43:f8:99:a9:7b:15:40:4c:a1:d8:
bc:dc:4e:a3:a9:0b:0a:2d:25:d6:51:07:df:62:5e:ec:4d:86:
e6:3d:4c:fe:10:76:2d:e2:7e:4d:68:0b:51:b5:c9:eb:fe:f3:
b8:2f:1a:93:01:94:e8:1e:92:bf:7d:a2:a9:27:bd:d8:1e:8f:
a4:21:05:45:c9:7e:e2:83:6b:e8:2c:95:12:50:78:10:2f:5a:
ab:a9:f8:85:75:27:bc:58:0b:16:1f:b3:b9:45:8e:67:7a:03:
f4:18:30:d4
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYzC2yE9H/Ny63FzMY6p8qydMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNGRkMmQwNmQ5MjBlNDAzOTMzZmRiMmNkMTk4NDg5MzU1
MjU3OWMwHhcNMjQwMTAxMDIyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTFjZGJjNmJjNzEzN2RkODJiNTlkMTUzZjk5NTkyZDI1NDQxYTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6KnyggQ/bUvsF1pHHnB3Dx079Xx
jPZ8wRUrm0dX/1KWNqVHnPUKT1b7ID7+CzVwDeTAhhstyDlIY8/bKxqLy/1UO7B/
foJKnMhpdwfXodc6arjmvi1sqBST97gCXyEXpYrzD9CgnNxMd7pgW7zvIeEBCrH+
PAogOYTUkb1kC4MKmyO8f/dzgLpZsdgYwA2lXOtqpfQqzn8Iw3DRbjN7FG7Iaoac
GASxBdz/s6OLYZPQWIHbASkUV1sScV5KMYJr7w1vYxoo4bOY0rzRv2jsz/oA9fob
XO0pntYX4U4/4/pNIlcXtduTCuTsgVnALk2B0mt42xBebqElOYaOuqtmPQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFA4c28a8cTfdgrWdFT+ZWS0lRBqYMB8GA1UdIwQY
MBaAFI1N0tBtkg5AOTP9ss0ZhIk1UlecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalUzUzBHMlNEa0E1TV8yeXpSbUVpVFZTVjV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mNjIxYTctZTA4MC00MjU1LTkyNmQt
MzJmZjMxY2VlYzhiLzEvRGh6YnhyeHhOOTJDdFowVlA1bFpMU1ZFR3BnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mNjIxYTctZTA4MC00MjU1LTkyNmQtMzJmZjMxY2VlYzhi
LzEvalUzUzBHMlNEa0E1TV8yeXpSbUVpVFZTVjV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDLhJAAwQE
LuSwAwQEURVQAwQEXbjgAwQCuSnIMA0EAgACMAcDBQAqA7pAMA0GCSqGSIb3DQEB
CwUAA4IBAQBTlYmQLWZwdH8Nx+cz4rNPWT04uR92YYwcJxW9bVD2vm23NmK5WMq6
VvPEeWcYNX8rVtR4Vc59bJOxgHlX9jUMTN2mmYYGm6NRcQ0MMHqFSAT9nN6FKuuW
iAvJcwvttLzmrP8t+yUrJso3F4dAjhsRz2NJhk9/Rv18qCg70MgireZFWwlqA+K1
Xc9A0g61wO2hEXRd8nK8T0P4mal7FUBModi83E6jqQsKLSXWUQffYl7sTYbmPUz+
EHYt4n5NaAtRtcnr/vO4LxqTAZToHpK/faKpJ73YHo+kIQVFyX7ig2voLJUSUHgQ
L1qrqfiFdSe8WAsWH7O5RY5negP0GDDU
-----END CERTIFICATE-----
Generated at Sat Jun 8 05:06:24 2024 by rpki-client on console-fra.rpki-client.org