Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/CfBp2ubaQf0zLp1aneZdupfPIPE.roa
File: CfBp2ubaQf0zLp1aneZdupfPIPE.roa (raw, json)
Hash identifier: cVxbSZA5Qpbsh7EPFAe7fSpVAabjjFW5xafo3stvWV4=
Subject key identifier: 09:F0:69:DA:E6:DA:41:FD:33:2E:9D:5A:9D:E6:5D:BA:97:CF:20:F1
Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial: 018CED4E4C0B5BD072B260A9AD50F91C2BF7
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/CfBp2ubaQf0zLp1aneZdupfPIPE.roa
Signing time: Tue 09 Jan 2024 08:19:40 +0000
ROA not before: Tue 09 Jan 2024 08:19:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197882
IP address blocks: 130.255.92.0/24 maxlen: 24
130.255.95.0/24 maxlen: 24
130.255.93.0/24 maxlen: 24
130.255.94.0/24 maxlen: 24
185.184.198.0/24 maxlen: 24
185.184.199.0/24 maxlen: 24
185.101.238.0/24 maxlen: 24
185.101.239.0/24 maxlen: 24
185.101.236.0/24 maxlen: 24
185.101.237.0/24 maxlen: 24
185.14.250.0/24 maxlen: 24
185.14.248.0/23 maxlen: 23
159.255.160.0/22 maxlen: 22
159.255.161.0/24 maxlen: 24
159.255.160.0/24 maxlen: 24
159.255.164.0/24 maxlen: 24
159.255.162.0/24 maxlen: 24
159.255.163.0/24 maxlen: 24
31.25.136.0/24 maxlen: 24
31.25.139.0/24 maxlen: 24
31.25.137.0/24 maxlen: 24
31.25.138.0/24 maxlen: 24
31.25.140.0/24 maxlen: 24
31.25.141.0/24 maxlen: 24
2a03:bcc0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:4e:4c:0b:5b:d0:72:b2:60:a9:ad:50:f9:1c:2b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Validity
Not Before: Jan 9 08:19:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09f069dae6da41fd332e9d5a9de65dba97cf20f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:38:58:dd:d2:d6:e0:e4:4c:3d:5a:59:74:
e6:a4:78:51:b8:0d:0a:78:28:eb:0a:8c:72:5c:1a:
1e:49:e0:02:29:65:47:76:6e:a3:79:2b:e1:88:d9:
46:e8:b6:de:6e:b9:2b:96:c8:95:42:df:0f:b6:02:
06:c6:9e:03:5e:a9:b9:83:e1:9d:6d:34:9f:77:37:
04:1c:9b:5f:c8:1a:cc:8c:59:c8:b7:79:e4:99:15:
4f:f8:de:99:2f:56:43:3d:6d:e2:2a:0a:08:d1:a4:
b4:76:8d:ef:34:2d:d9:1c:58:2b:a3:19:7a:ba:87:
e3:df:1e:d1:89:d7:9e:45:5e:25:0b:f9:c3:32:a6:
de:e9:5e:8a:48:10:24:a6:2d:ed:90:5e:88:14:63:
50:f5:f7:40:08:f7:f3:5c:bf:d7:71:d9:ea:1a:d9:
50:a5:2f:f0:b0:4e:49:3a:05:6c:8a:12:cb:44:3c:
c7:7f:c5:0f:60:04:cf:9a:cd:ff:40:da:29:66:6b:
ad:1d:03:8d:3b:0f:8c:ab:e9:68:15:34:c8:b6:65:
08:40:7a:b5:89:f2:09:44:51:64:8f:f9:2e:09:df:
76:c4:94:5c:30:16:36:61:f4:95:a7:92:e7:1a:cb:
fe:74:1f:b6:fe:a8:42:85:e3:77:3b:5c:22:80:4d:
c9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F0:69:DA:E6:DA:41:FD:33:2E:9D:5A:9D:E6:5D:BA:97:CF:20:F1
X509v3 Authority Key Identifier:
keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/CfBp2ubaQf0zLp1aneZdupfPIPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.136.0-31.25.141.255
130.255.92.0/22
159.255.160.0-159.255.164.255
185.14.248.0-185.14.250.255
185.101.236.0/22
185.184.198.0/23
IPv6:
2a03:bcc0:1::/48
Signature Algorithm: sha256WithRSAEncryption
82:66:ec:aa:0f:fd:5e:b6:32:83:83:70:13:d9:ba:6c:b7:69:
0c:11:e5:62:ec:94:aa:cf:df:7a:09:d9:83:5b:d8:21:f3:41:
bf:7d:64:aa:19:52:e6:7e:3e:34:4b:35:cb:96:3e:45:72:06:
86:c9:bf:ec:f2:32:d2:6b:77:86:36:2b:60:9c:b5:14:c0:ab:
16:6e:81:27:a1:fe:45:96:e9:70:a3:71:72:90:09:d6:b6:cb:
b3:7e:ce:cb:37:da:15:b4:9e:c3:e3:27:e0:ae:38:5b:44:f0:
85:b3:fd:49:dc:cc:6f:8c:37:d6:c5:84:6e:dc:19:31:d6:f3:
b6:85:e5:6b:7e:c1:2c:22:4d:0c:bf:e1:d2:28:3e:1f:ec:90:
65:8b:1f:4e:a3:4d:ea:c6:b5:c8:43:77:70:36:c5:61:9b:de:
ec:5f:68:7f:59:64:2b:07:f9:03:e3:69:35:d7:ac:00:c1:7a:
3f:0d:2e:f9:29:f8:f9:07:65:8e:98:0b:d6:5c:d8:53:0a:9a:
7b:6f:95:08:0f:59:50:e4:f4:4c:16:4a:c7:7f:be:9e:00:8d:
75:69:e4:26:37:b6:23:e6:d1:28:e3:09:5f:d9:ce:8b:91:f6:
66:25:1d:53:0d:bd:7a:86:e9:d4:6c:3a:0a:bf:57:79:12:48:
4f:af:7e:d4
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgISAYztTkwLW9BysmCprVD5HCv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNmY2YTM2ZWMyOTYwZDRkMDVmM2Q5ZGNiMTg3YjliOTA0
ZWE1OWIwHhcNMjQwMTA5MDgxOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWYwNjlkYWU2ZGE0MWZkMzMyZTlkNWE5ZGU2NWRiYTk3Y2YyMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7Q4WN3S1uDkTD1aWXTmpHhRuA0K
eCjrCoxyXBoeSeACKWVHdm6jeSvhiNlG6LbebrkrlsiVQt8PtgIGxp4DXqm5g+Gd
bTSfdzcEHJtfyBrMjFnIt3nkmRVP+N6ZL1ZDPW3iKgoI0aS0do3vNC3ZHFgroxl6
uofj3x7RideeRV4lC/nDMqbe6V6KSBAkpi3tkF6IFGNQ9fdACPfzXL/XcdnqGtlQ
pS/wsE5JOgVsihLLRDzHf8UPYATPms3/QNopZmutHQONOw+Mq+loFTTItmUIQHq1
ifIJRFFkj/kuCd92xJRcMBY2YfSVp5LnGsv+dB+2/qhCheN3O1wigE3JkQIDAQAB
o4ICUDCCAkwwHQYDVR0OBBYEFAnwadrm2kH9My6dWp3mXbqXzyDxMB8GA1UdIwQY
MBaAFKtvajbsKWDU0F89ncsYe5uQTqWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUt
OTRiYjgzYTIwMDI5LzEvQ2ZCcDJ1YmFRZjB6THAxYW5lWmR1cGZQSVBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUtOTRiYjgzYTIwMDI5
LzEvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBCBAIAATA8MAwDBAMfGYgD
BAEfGYwDBAKC/1wwDAMEBZ//oAMEAJ//pDAMAwQDuQ74AwQAuQ76AwQCuWXsAwQB
ubjGMA8EAgACMAkDBwAqA7zAAAEwDQYJKoZIhvcNAQELBQADggEBAIJm7KoP/V62
MoODcBPZumy3aQwR5WLslKrP33oJ2YNb2CHzQb99ZKoZUuZ+PjRLNcuWPkVyBobJ
v+zyMtJrd4Y2K2CctRTAqxZugSeh/kWW6XCjcXKQCda2y7N+zss32hW0nsPjJ+Cu
OFtE8IWz/UnczG+MN9bFhG7cGTHW87aF5Wt+wSwiTQy/4dIoPh/skGWLH06jTerG
tchDd3A2xWGb3uxfaH9ZZCsH+QPjaTXXrADBej8NLvkp+PkHZY6YC9Zc2FMKmntv
lQgPWVDk9EwWSsd/vp4AjXVp5CY3tiPm0SjjCV/ZzouR9mYlHVMNvXqG6dRsOgq/
V3kSSE+vftQ=
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:38:50 2024 by rpki-client on console-fra.rpki-client.org