Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/NCQMGXvrg9hZPurkeNZhOqxt3Vk.roa
File: NCQMGXvrg9hZPurkeNZhOqxt3Vk.roa (raw, json)
Hash identifier: QNYA9jTZeMpNw7XQDt6ntK/5ska9kWiiKNIJoE7RFg8=
Subject key identifier: 34:24:0C:19:7B:EB:83:D8:59:3E:EA:E4:78:D6:61:3A:AC:6D:DD:59
Certificate issuer: /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial: 018CC500B9274651AB8CCE7B26C1B6EE7DEC
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/NCQMGXvrg9hZPurkeNZhOqxt3Vk.roa
Signing time: Mon 01 Jan 2024 12:30:08 +0000
ROA not before: Mon 01 Jan 2024 12:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22822
IP address blocks: 95.140.224.0/22 maxlen: 22
95.140.224.0/20 maxlen: 24
87.248.192.0/19 maxlen: 24
46.228.144.0/20 maxlen: 24
87.248.210.0/23 maxlen: 23
87.248.212.0/23 maxlen: 23
216.247.120.0/21 maxlen: 24
185.178.54.0/24 maxlen: 24
185.178.53.0/24 maxlen: 24
185.178.55.0/24 maxlen: 24
185.178.52.0/24 maxlen: 24
185.178.52.0/22 maxlen: 22
46.183.88.0/21 maxlen: 24
178.249.105.0/24 maxlen: 24
178.249.104.0/21 maxlen: 24
185.116.100.0/22 maxlen: 22
178.79.203.0/24 maxlen: 24
178.79.214.0/23 maxlen: 23
178.79.230.0/23 maxlen: 23
178.79.232.0/22 maxlen: 22
178.79.228.0/23 maxlen: 23
178.79.236.0/22 maxlen: 22
178.79.240.0/21 maxlen: 21
178.79.248.0/21 maxlen: 21
178.79.196.0/23 maxlen: 23
178.79.192.0/18 maxlen: 24
2a02:3d0:601::/48 maxlen: 48
2a02:3d0:621::/48 maxlen: 48
2a02:3d0::/32 maxlen: 48
2a02:3d0:600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:b9:27:46:51:ab:8c:ce:7b:26:c1:b6:ee:7d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
Validity
Not Before: Jan 1 12:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34240c197beb83d8593eeae478d6613aac6ddd59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:c5:f5:6f:a8:72:11:bb:10:c8:63:b3:55:
1c:26:a7:8b:63:f1:56:05:55:30:75:23:df:c3:5f:
60:03:3b:22:48:aa:b4:89:30:e1:a0:6b:a1:a7:73:
14:97:17:7b:ca:b6:f8:ec:99:a2:53:07:0c:bc:dd:
7e:f5:08:24:a1:a6:95:cd:78:57:d2:f0:b5:1e:a9:
bb:e3:ed:e2:31:8a:06:62:f1:b5:1d:95:e1:b7:28:
71:f0:a4:b3:3c:9b:85:52:d3:c7:9c:57:6e:a8:7d:
a8:b5:27:15:eb:de:9a:7a:5b:9e:50:69:ea:81:e1:
33:54:82:15:f6:fd:df:af:e9:82:1b:6c:43:93:83:
28:ff:1b:33:a1:b6:65:a6:8b:e2:c9:97:de:41:05:
d2:ed:1a:39:4b:da:fe:bd:96:3e:cf:74:0a:8c:fa:
a3:7a:17:c8:48:71:38:55:3c:a7:5b:8f:7d:77:90:
cb:f1:29:29:d0:04:13:dc:ed:2f:04:27:48:d9:7a:
24:c2:36:88:b7:03:5c:d8:ad:09:ef:ed:89:3a:0a:
24:51:6c:69:8d:f9:d4:ed:9b:96:93:50:b3:a4:59:
bb:9d:06:f1:e7:9f:ee:90:42:4f:7b:5d:08:18:81:
ae:01:33:19:92:7d:e9:f5:bb:a7:00:d8:79:b1:92:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:24:0C:19:7B:EB:83:D8:59:3E:EA:E4:78:D6:61:3A:AC:6D:DD:59
X509v3 Authority Key Identifier:
keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/NCQMGXvrg9hZPurkeNZhOqxt3Vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.88.0/21
46.228.144.0/20
87.248.192.0/19
95.140.224.0/20
178.79.192.0/18
178.249.104.0/21
185.116.100.0/22
185.178.52.0/22
216.247.120.0/21
IPv6:
2a02:3d0::/32
Signature Algorithm: sha256WithRSAEncryption
49:fb:1e:20:d9:fb:de:f3:aa:36:1e:14:47:ec:96:d2:61:05:
14:0c:9a:7a:cd:aa:53:6b:d2:56:a4:16:b2:55:bf:cd:5c:3c:
b2:67:35:73:67:00:8b:fd:31:66:b5:d4:c3:a4:f1:b4:50:8c:
dc:f9:34:db:df:37:1e:e0:ee:6c:de:c0:be:f2:d3:ff:16:0e:
33:5d:02:88:fe:cf:ef:36:2b:8a:da:f7:5d:48:65:33:82:22:
b4:a5:88:95:34:0a:08:b7:a3:55:44:76:1f:bd:dd:f4:a4:35:
06:68:18:47:ac:a3:e7:3f:78:90:64:63:5c:50:03:4c:9a:2d:
7e:29:fc:0b:02:40:30:8c:1b:f9:85:a8:69:6a:ae:7c:d9:f2:
d6:75:6a:ab:d9:da:83:7a:14:28:a5:4e:0b:0b:c6:b0:19:5d:
db:8c:ac:da:5d:71:39:a7:4f:25:46:34:8a:dc:f7:e2:93:b3:
a3:3b:dd:7c:d5:4d:4f:9f:cf:cf:54:4b:d8:cc:1f:1b:d1:5d:
e3:75:62:bd:3f:8d:a3:cf:42:20:cf:da:ef:65:aa:b7:99:8a:
9f:0c:71:12:90:54:bb:c9:63:9a:5b:89:93:5a:c3:56:a0:09:
af:11:fd:a3:d5:c9:c2:a1:bf:00:95:c6:4d:13:cf:dd:6d:cd:
10:73:93:bd
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAYzFALknRlGrjM57JsG27n3sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZTM5NTNjNWNiNDUyZjE1OWY4ZTE1MDVmYzcwMmU4ODM2
NTdlNzIwHhcNMjQwMTAxMTIzMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDI0MGMxOTdiZWI4M2Q4NTkzZWVhZTQ3OGQ2NjEzYWFjNmRkZDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX7F9W+ochG7EMhjs1UcJqeLY/FW
BVUwdSPfw19gAzsiSKq0iTDhoGuhp3MUlxd7yrb47JmiUwcMvN1+9QgkoaaVzXhX
0vC1Hqm74+3iMYoGYvG1HZXhtyhx8KSzPJuFUtPHnFduqH2otScV696aelueUGnq
geEzVIIV9v3fr+mCG2xDk4Mo/xszobZlpoviyZfeQQXS7Ro5S9r+vZY+z3QKjPqj
ehfISHE4VTynW499d5DL8Skp0AQT3O0vBCdI2XokwjaItwNc2K0J7+2JOgokUWxp
jfnU7ZuWk1CzpFm7nQbx55/ukEJPe10IGIGuATMZkn3p9bunANh5sZJF9wIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFDQkDBl764PYWT7q5HjWYTqsbd1ZMB8GA1UdIwQY
MBaAFEDjlTxctFLxWfjhUF/HAuiDZX5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU9PVlBGeTBVdkZaLU9GUVg4Y0M2SU5sZm5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZDg1MDUtMzg5OS00YTllLThjZjEt
ZmE1YWYzOGRlYjVlLzEvTkNRTUdYdnJnOWhaUHVya2VOWmhPcXh0M1ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83ZDg1MDUtMzg5OS00YTllLThjZjEtZmE1YWYzOGRlYjVl
LzEvUU9PVlBGeTBVdkZaLU9GUVg4Y0M2SU5sZm5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDLrdYAwQE
LuSQAwQFV/jAAwQEX4zgAwQGsk/AAwQDsvloAwQCuXRkAwQCubI0AwQD2Pd4MA0E
AgACMAcDBQAqAgPQMA0GCSqGSIb3DQEBCwUAA4IBAQBJ+x4g2fve86o2HhRH7JbS
YQUUDJp6zapTa9JWpBayVb/NXDyyZzVzZwCL/TFmtdTDpPG0UIzc+TTb3zce4O5s
3sC+8tP/Fg4zXQKI/s/vNiuK2vddSGUzgiK0pYiVNAoIt6NVRHYfvd30pDUGaBhH
rKPnP3iQZGNcUANMmi1+KfwLAkAwjBv5hahpaq582fLWdWqr2dqDehQopU4LC8aw
GV3bjKzaXXE5p08lRjSK3Pfik7OjO9181U1Pn8/PVEvYzB8b0V3jdWK9P42jz0Ig
z9rvZaq3mYqfDHESkFS7yWOaW4mTWsNWoAmvEf2j1cnCob8AlcZNE8/dbc0Qc5O9
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:14:36 2024 by rpki-client on console-fra.rpki-client.org