Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/XQBXN1sbu-Uhjd9fkaxT-_8dCmw.roa
File: XQBXN1sbu-Uhjd9fkaxT-_8dCmw.roa (raw, json)
Hash identifier: ISwsIkXan7Yw9TmUgPV7unT8cZRZqUmdMd/pLZcLOAU=
Subject key identifier: 5D:00:57:37:5B:1B:BB:E5:21:8D:DF:5F:91:AC:53:FB:FF:1D:0A:6C
Certificate issuer: /CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
Certificate serial: 018CC7274744746D0CDEC38FC70AF09236C5
Authority key identifier: C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/XQBXN1sbu-Uhjd9fkaxT-_8dCmw.roa
Signing time: Mon 01 Jan 2024 22:31:29 +0000
ROA not before: Mon 01 Jan 2024 22:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35575
IP address blocks: 88.211.96.0/21 maxlen: 21
88.211.104.0/21 maxlen: 21
46.149.240.0/20 maxlen: 20
88.211.112.0/21 maxlen: 21
188.127.64.0/19 maxlen: 19
88.211.120.0/22 maxlen: 22
88.211.124.0/23 maxlen: 23
88.211.126.0/23 maxlen: 23
84.19.40.0/21 maxlen: 21
84.19.48.0/21 maxlen: 21
185.25.236.0/22 maxlen: 22
84.19.56.0/21 maxlen: 21
88.211.64.0/21 maxlen: 21
88.211.64.0/18 maxlen: 18
209.42.0.0/19 maxlen: 19
88.211.72.0/21 maxlen: 21
88.211.80.0/20 maxlen: 20
185.152.216.0/22 maxlen: 22
185.219.92.0/22 maxlen: 22
84.19.32.0/21 maxlen: 21
84.19.32.0/19 maxlen: 19
2a02:29d0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:47:44:74:6d:0c:de:c3:8f:c7:0a:f0:92:36:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
Validity
Not Before: Jan 1 22:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d0057375b1bbbe5218ddf5f91ac53fbff1d0a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f1:2c:b1:69:3f:e0:64:16:38:d1:ea:7c:ba:
cd:3a:e3:79:57:68:c7:6a:ee:3a:02:4e:9c:93:12:
d5:95:3e:de:ab:ad:6b:c9:0c:ee:04:89:cc:2f:b4:
45:02:8b:d1:c6:52:58:46:4e:51:0a:ae:0c:e9:73:
6b:93:99:c5:49:62:57:b2:29:f0:08:f7:ab:f5:d0:
b2:eb:5e:4a:66:34:c2:31:fb:6b:d4:14:af:b7:68:
58:92:3c:a5:5f:05:c2:4d:ba:51:3b:79:49:e7:cf:
8e:3d:4d:e3:1d:e4:24:b0:6a:db:07:2a:05:cb:c0:
ac:7c:22:cd:89:cc:e3:01:fb:ec:90:a8:e5:8f:df:
cf:34:96:c0:44:be:b9:20:fc:b9:e5:93:ae:82:ab:
6a:0c:5d:ca:ee:ff:39:b1:08:60:5d:55:46:00:02:
ec:01:30:1d:4d:4f:7c:64:12:a5:3b:cc:55:96:c0:
b5:d1:97:39:31:96:d6:dd:e6:fb:19:64:15:d8:f0:
43:54:0a:be:98:58:8c:34:af:fe:3f:2b:eb:b0:b9:
30:06:b2:4a:c9:b5:86:0d:37:46:be:5c:f5:43:63:
31:40:e2:ee:96:83:18:23:12:df:c1:f1:1b:e4:0d:
2d:33:13:96:23:85:1f:17:05:3f:b1:a1:2e:7b:25:
c4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:00:57:37:5B:1B:BB:E5:21:8D:DF:5F:91:AC:53:FB:FF:1D:0A:6C
X509v3 Authority Key Identifier:
keyid:C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/XQBXN1sbu-Uhjd9fkaxT-_8dCmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.240.0/20
84.19.32.0/19
88.211.64.0/18
185.25.236.0/22
185.152.216.0/22
185.219.92.0/22
188.127.64.0/19
209.42.0.0/19
IPv6:
2a02:29d0::/32
Signature Algorithm: sha256WithRSAEncryption
e5:65:f5:3e:9a:6d:76:4a:fb:9d:fe:6e:76:68:55:e0:08:98:
44:cc:2a:0d:ee:c8:de:9b:f4:ca:8e:de:b1:fe:c2:e2:ef:05:
da:7a:f7:99:5f:28:e3:31:50:d0:f4:6f:2e:30:3f:3a:a8:3e:
56:01:02:fe:af:51:98:8e:c9:2a:c8:bd:bf:c0:e5:12:f7:f3:
20:c5:3a:c1:ad:40:f3:fa:36:55:8e:c9:c7:e2:bd:5a:a8:30:
9b:57:29:15:1f:2a:23:1a:8e:31:38:10:9e:28:26:66:f8:1b:
83:82:f1:67:ca:b0:39:57:77:bc:c7:bf:b7:b2:e8:81:db:8e:
c0:63:81:0c:d3:c4:47:0f:00:a1:24:e1:13:a3:a4:f9:bc:bf:
db:d4:cb:06:22:c4:00:fd:28:88:7f:1a:ab:d8:84:a8:ad:26:
fc:da:3a:11:1c:a1:7b:a3:1e:64:67:f3:97:d2:b5:b4:0f:95:
ae:4d:33:02:60:09:d4:21:0f:ac:19:62:c6:a3:9d:35:20:a9:
f0:54:ad:9b:12:d4:66:78:bc:13:ba:d2:be:28:19:49:2b:27:
f3:3e:13:a2:22:ab:df:c3:10:48:37:cd:69:46:a9:52:56:01:
47:b4:07:78:b3:35:6e:a6:bc:bb:6b:f5:3d:ef:ef:d0:d8:da:
2e:97:06:18
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAYzHJ0dEdG0M3sOPxwrwkjbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwY2FjOGQ1MjRhNWZlYzdmYzgzYTIzODMwZmJmOTIyNmE3
NjAxYWUwHhcNMjQwMTAxMjIzMTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDAwNTczNzViMWJiYmU1MjE4ZGRmNWY5MWFjNTNmYmZmMWQwYTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofEssWk/4GQWONHqfLrNOuN5V2jH
au46Ak6ckxLVlT7eq61ryQzuBInML7RFAovRxlJYRk5RCq4M6XNrk5nFSWJXsinw
CPer9dCy615KZjTCMftr1BSvt2hYkjylXwXCTbpRO3lJ58+OPU3jHeQksGrbByoF
y8CsfCLNiczjAfvskKjlj9/PNJbARL65IPy55ZOugqtqDF3K7v85sQhgXVVGAALs
ATAdTU98ZBKlO8xVlsC10Zc5MZbW3eb7GWQV2PBDVAq+mFiMNK/+PyvrsLkwBrJK
ybWGDTdGvlz1Q2MxQOLuloMYIxLfwfEb5A0tMxOWI4UfFwU/saEueyXEiwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFF0AVzdbG7vlIY3fX5GsU/v/HQpsMB8GA1UdIwQY
MBaAFMDKyNUkpf7H/IOiODD7+SJqdgGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd01ySTFTU2xfc2Y4ZzZJNE1QdjVJbXAyQWE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85ZjViODEtYWU0ZC00NmE0LWJiODIt
NzY1NWM4OWYxNGQ2LzEvWFFCWE4xc2J1LVVoamQ5ZmtheFQtXzhkQ213LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85ZjViODEtYWU0ZC00NmE0LWJiODItNzY1NWM4OWYxNGQ2
LzEvd01ySTFTU2xfc2Y4ZzZJNE1QdjVJbXAyQWE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQELpXwAwQF
VBMgAwQGWNNAAwQCuRnsAwQCuZjYAwQCudtcAwQFvH9AAwQF0SoAMA0EAgACMAcD
BQAqAinQMA0GCSqGSIb3DQEBCwUAA4IBAQDlZfU+mm12Svud/m52aFXgCJhEzCoN
7sjem/TKjt6x/sLi7wXaeveZXyjjMVDQ9G8uMD86qD5WAQL+r1GYjskqyL2/wOUS
9/MgxTrBrUDz+jZVjsnH4r1aqDCbVykVHyojGo4xOBCeKCZm+BuDgvFnyrA5V3e8
x7+3suiB247AY4EM08RHDwChJOETo6T5vL/b1MsGIsQA/SiIfxqr2ISorSb82joR
HKF7ox5kZ/OX0rW0D5WuTTMCYAnUIQ+sGWLGo501IKnwVK2bEtRmeLwTutK+KBlJ
KyfzPhOiIqvfwxBIN81pRqlSVgFHtAd4szVupry7a/U97+/Q2NoulwYY
-----END CERTIFICATE-----
Generated at Sat Apr 27 15:46:04 2024 by rpki-client on console-ams.rpki-client.org