Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/FLWVEOzqRjxSad206noxqkwfu9g.roa
File: FLWVEOzqRjxSad206noxqkwfu9g.roa (raw, json)
Hash identifier: cdsUBTvMXZlUz3k0UCTn+EQ4p+gKtZV59WlpuCdduaU=
Subject key identifier: 14:B5:95:10:EC:EA:46:3C:52:69:DD:B4:EA:7A:31:AA:4C:1F:BB:D8
Certificate issuer: /CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
Certificate serial: 018DFDFBB6BE3F26F68E5610B870700F4F52
Authority key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/FLWVEOzqRjxSad206noxqkwfu9g.roa
Signing time: Sat 02 Mar 2024 07:05:48 +0000
ROA not before: Sat 02 Mar 2024 07:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59432
IP address blocks: 5.134.112.0/21 maxlen: 21
5.134.112.0/24 maxlen: 24
5.134.113.0/24 maxlen: 24
5.134.114.0/24 maxlen: 24
5.134.115.0/24 maxlen: 24
5.134.116.0/24 maxlen: 24
5.134.117.0/24 maxlen: 24
5.134.118.0/24 maxlen: 24
5.134.119.0/24 maxlen: 24
185.47.128.0/22 maxlen: 22
185.47.128.0/24 maxlen: 24
185.47.129.0/24 maxlen: 24
185.47.130.0/24 maxlen: 24
185.47.131.0/24 maxlen: 24
188.213.4.0/22 maxlen: 22
188.213.4.0/24 maxlen: 24
188.213.5.0/24 maxlen: 24
188.213.6.0/24 maxlen: 24
188.213.7.0/24 maxlen: 24
2a03:c7c0::/32 maxlen: 32
2a03:c7c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fd:fb:b6:be:3f:26:f6:8e:56:10:b8:70:70:0f:4f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
Validity
Not Before: Mar 2 07:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14b59510ecea463c5269ddb4ea7a31aa4c1fbbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:2d:94:68:1f:b6:12:95:70:fa:51:af:23:
18:fe:b4:f9:fc:b3:30:0e:7e:c8:e7:b1:b9:17:8b:
62:15:0c:6d:c8:35:6d:d4:57:08:76:ed:0d:59:07:
e1:57:f0:05:36:f5:0b:3c:04:33:c2:6a:3c:aa:19:
01:4d:bc:da:3b:68:33:d6:10:19:bc:72:9b:63:b4:
fa:b6:11:af:8b:e7:6e:77:43:a2:a7:61:99:9f:19:
63:42:eb:01:6e:1a:81:72:60:92:b5:fb:58:0f:1f:
36:79:26:9d:b1:0d:b0:11:0f:c6:5c:76:b7:da:c4:
a6:f2:ea:1e:7b:a3:cc:d8:90:cb:18:23:70:de:6c:
8b:05:d7:b2:c2:3a:37:f1:1f:bc:1b:c3:85:87:64:
36:7e:73:c8:9a:b2:51:2a:fc:5f:88:a1:51:12:fa:
e5:4a:36:1d:7e:73:b9:f5:65:80:6a:be:3d:50:5e:
4c:6b:66:fd:8e:9a:fa:08:6f:26:72:cf:50:ce:93:
a7:3f:07:c1:58:d6:97:84:ad:ca:cf:2a:4c:c7:d2:
f2:9a:96:08:7e:fc:7b:88:d8:df:24:c5:e8:d2:52:
48:06:d0:ea:c5:f3:00:f2:eb:2f:a5:2b:fa:96:68:
2e:f7:03:e7:5e:0e:d8:93:3d:97:e0:f8:88:99:0c:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B5:95:10:EC:EA:46:3C:52:69:DD:B4:EA:7A:31:AA:4C:1F:BB:D8
X509v3 Authority Key Identifier:
keyid:11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/FLWVEOzqRjxSad206noxqkwfu9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.112.0/21
185.47.128.0/22
188.213.4.0/22
IPv6:
2a03:c7c0::/31
Signature Algorithm: sha256WithRSAEncryption
9e:1e:01:51:9e:eb:66:4a:1e:84:af:b0:92:83:12:c5:fa:95:
1d:81:c1:0d:6b:86:f4:c4:a4:c0:9d:4d:91:f5:0d:81:8b:41:
df:79:06:e8:e5:89:39:e9:6f:14:45:4c:57:1a:fc:a6:f4:49:
c6:66:0d:50:9b:6e:48:6d:a5:16:73:0c:4f:f0:1c:8a:cb:46:
44:55:4c:df:99:9e:ff:a4:a7:cb:61:cd:da:1a:9a:94:5c:22:
59:88:4d:a2:1f:ea:66:40:02:92:01:cf:af:d3:2c:8a:7e:0e:
99:8f:be:47:9f:14:19:f2:45:70:33:04:5c:fa:16:08:ab:98:
b1:96:06:77:31:46:0e:ea:ae:26:24:82:4c:3e:23:9a:85:e9:
f8:e4:19:3d:f6:5e:01:44:a1:b9:e2:44:06:61:52:c5:f5:94:
5d:49:7a:39:dc:85:c6:74:1b:99:68:1d:37:f6:51:37:45:f4:
e2:eb:12:ff:a1:cc:53:30:3c:91:0b:b4:95:6c:85:f1:15:67:
b6:e5:64:74:fc:4d:34:44:7b:6c:1c:26:27:ce:41:99:a0:cc:
6e:84:e9:5b:95:ea:81:fe:b1:1f:b6:04:f2:12:d1:97:d9:33:
08:5f:0b:80:f4:cd:ba:8c:25:8f:3b:a5:01:82:15:c8:14:ca:
72:d2:e5:9c
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAY39+7a+Pyb2jlYQuHBwD09SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExN2Y4YzlhN2ZjN2YxMzY1OGQ2MmFmYmViNmYzOTg4MmRh
NTExY2MwHhcNMjQwMzAyMDcwNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGI1OTUxMGVjZWE0NjNjNTI2OWRkYjRlYTdhMzFhYTRjMWZiYmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwYtlGgfthKVcPpRryMY/rT5/LMw
Dn7I57G5F4tiFQxtyDVt1FcIdu0NWQfhV/AFNvULPAQzwmo8qhkBTbzaO2gz1hAZ
vHKbY7T6thGvi+dud0Oip2GZnxljQusBbhqBcmCStftYDx82eSadsQ2wEQ/GXHa3
2sSm8uoee6PM2JDLGCNw3myLBdeywjo38R+8G8OFh2Q2fnPImrJRKvxfiKFREvrl
SjYdfnO59WWAar49UF5Ma2b9jpr6CG8mcs9QzpOnPwfBWNaXhK3KzypMx9LympYI
fvx7iNjfJMXo0lJIBtDqxfMA8usvpSv6lmgu9wPnXg7Ykz2X4PiImQzkqQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFBS1lRDs6kY8UmndtOp6MapMH7vYMB8GA1UdIwQY
MBaAFBF/jJp/x/E2WNYq++tvOYgtpRHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xMjJiMmQtNWQ4Ny00NzhjLTg1MjIt
ODlkNjZhYzcyZTAyLzEvRkxXVkVPenFSanhTYWQyMDZub3hxa3dmdTlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xMjJiMmQtNWQ4Ny00NzhjLTg1MjItODlkNjZhYzcyZTAy
LzEvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDBYZwAwQC
uS+AAwQCvNUEMA0EAgACMAcDBQEqA8fAMA0GCSqGSIb3DQEBCwUAA4IBAQCeHgFR
nutmSh6Er7CSgxLF+pUdgcENa4b0xKTAnU2R9Q2Bi0HfeQbo5Yk56W8URUxXGvym
9EnGZg1Qm25IbaUWcwxP8ByKy0ZEVUzfmZ7/pKfLYc3aGpqUXCJZiE2iH+pmQAKS
Ac+v0yyKfg6Zj75HnxQZ8kVwMwRc+hYIq5ixlgZ3MUYO6q4mJIJMPiOahen45Bk9
9l4BRKG54kQGYVLF9ZRdSXo53IXGdBuZaB039lE3RfTi6xL/ocxTMDyRC7SVbIXx
FWe25WR0/E00RHtsHCYnzkGZoMxuhOlbleqB/rEftgTyEtGX2TMIXwuA9M26jCWP
O6UBghXIFMpy0uWc
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:42:27 2024 by rpki-client on console-fra.rpki-client.org