Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/FUlrEPcodaQE6sPzRi3JCNfdxeY.roa
File: FUlrEPcodaQE6sPzRi3JCNfdxeY.roa (raw, json)
Hash identifier: qM0TRfGKmmCORrWOW44IF5slD6R/As5gkpz3+WY7OyE=
Subject key identifier: 15:49:6B:10:F7:28:75:A4:04:EA:C3:F3:46:2D:C9:08:D7:DD:C5:E6
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018EE65EF8304AE021B8A35457E4EB56235F
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/FUlrEPcodaQE6sPzRi3JCNfdxeY.roa
Signing time: Tue 16 Apr 2024 10:06:07 +0000
ROA not before: Tue 16 Apr 2024 10:06:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50835
IP address blocks: 37.97.120.0/24 maxlen: 24
37.97.121.0/24 maxlen: 24
46.173.248.0/22 maxlen: 24
46.173.254.0/23 maxlen: 23
64.43.120.0/22 maxlen: 24
77.36.58.0/24 maxlen: 24
77.36.66.0/23 maxlen: 23
81.161.8.0/22 maxlen: 22
81.161.48.0/22 maxlen: 22
91.193.30.0/23 maxlen: 23
91.200.134.0/23 maxlen: 23
91.224.212.0/24 maxlen: 24
91.232.19.0/24 maxlen: 24
91.232.56.0/23 maxlen: 23
91.232.226.0/24 maxlen: 24
91.233.200.0/24 maxlen: 24
91.236.76.0/24 maxlen: 24
91.238.39.0/24 maxlen: 24
91.239.226.0/24 maxlen: 24
91.246.192.0/22 maxlen: 24
91.246.203.0/24 maxlen: 24
93.120.34.0/23 maxlen: 23
93.120.40.0/23 maxlen: 23
109.207.128.0/24 maxlen: 24
109.207.130.0/24 maxlen: 24
109.207.132.0/24 maxlen: 24
176.96.94.0/24 maxlen: 24
176.110.112.0/23 maxlen: 23
176.113.180.0/22 maxlen: 22
176.115.236.0/22 maxlen: 24
176.116.228.0/24 maxlen: 24
176.116.236.0/24 maxlen: 24
176.121.108.0/23 maxlen: 24
176.121.110.0/23 maxlen: 24
193.36.220.0/22 maxlen: 22
194.33.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:5e:f8:30:4a:e0:21:b8:a3:54:57:e4:eb:56:23:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Apr 16 10:06:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15496b10f72875a404eac3f3462dc908d7ddc5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:42:aa:03:8b:04:19:ca:c6:43:01:0e:14:3c:
ca:96:a6:3d:4e:ca:8a:5f:fc:97:4c:54:0e:13:3b:
95:e7:96:03:69:09:80:40:01:1e:1a:e9:07:b7:69:
93:bd:6a:90:b9:12:cf:f6:3c:da:c8:38:d5:e3:76:
79:ca:13:fe:9e:48:0d:0c:2d:33:cd:2c:a2:d1:f3:
c5:c3:af:96:40:08:ae:65:40:a2:6c:a7:a1:47:49:
a5:5f:16:3f:92:0c:50:ec:1c:bc:2f:3d:3b:86:9b:
64:98:6f:f8:74:c2:98:09:d9:6d:06:84:32:18:e8:
00:e9:d8:0e:64:13:c3:6e:6b:24:da:ee:c3:cd:d7:
1f:a1:6f:b8:98:bc:00:4f:52:5b:c1:18:c7:d5:79:
fa:9e:ed:23:d5:9e:c1:05:0b:83:96:a4:63:ab:db:
29:76:9c:a2:14:d2:c6:9c:52:a4:03:51:fe:a8:ca:
06:0b:23:3a:46:7a:29:f8:a9:67:e3:74:28:a1:56:
63:20:a6:12:71:7a:67:bd:ba:e6:ac:41:66:a3:fc:
ba:fc:52:49:74:1e:13:62:24:cf:9f:40:04:d5:4e:
ae:70:ce:03:8d:3c:16:2b:0e:6e:aa:b5:a2:9b:7d:
07:e1:5a:a6:df:7a:76:e3:f8:78:a3:6c:10:89:66:
b0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:49:6B:10:F7:28:75:A4:04:EA:C3:F3:46:2D:C9:08:D7:DD:C5:E6
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/FUlrEPcodaQE6sPzRi3JCNfdxeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.120.0/23
46.173.248.0/22
46.173.254.0/23
64.43.120.0/22
77.36.58.0/24
77.36.66.0/23
81.161.8.0/22
81.161.48.0/22
91.193.30.0/23
91.200.134.0/23
91.224.212.0/24
91.232.19.0/24
91.232.56.0/23
91.232.226.0/24
91.233.200.0/24
91.236.76.0/24
91.238.39.0/24
91.239.226.0/24
91.246.192.0/22
91.246.203.0/24
93.120.34.0/23
93.120.40.0/23
109.207.128.0/24
109.207.130.0/24
109.207.132.0/24
176.96.94.0/24
176.110.112.0/23
176.113.180.0/22
176.115.236.0/22
176.116.228.0/24
176.116.236.0/24
176.121.108.0/22
193.36.220.0/22
194.33.66.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:69:6f:19:3d:b2:55:e0:96:e0:05:df:82:6b:d5:33:d3:1d:
92:83:62:6f:9e:65:2c:ee:a9:39:3c:ec:5f:bd:44:03:77:8a:
b9:70:0e:fd:5e:1b:81:9c:6a:43:0e:38:92:15:a8:5f:a7:cc:
b1:8a:c8:b4:12:ac:f8:7d:e6:5a:f4:2b:66:5d:19:c7:d0:fb:
3e:99:f2:41:c2:89:f7:25:04:d8:fa:81:50:af:54:dc:3b:27:
7f:26:6d:9b:d1:f2:82:39:bf:aa:30:4b:57:50:c7:23:b0:10:
95:05:3f:dd:20:2c:54:80:3e:e9:07:4f:b6:3c:e3:f8:e8:40:
90:7e:08:19:4d:00:07:44:a9:f1:11:66:1a:03:07:b8:06:84:
94:fb:c4:bf:69:1b:76:05:2d:de:bf:63:19:63:c5:78:60:b5:
4e:d5:33:fc:b2:f2:2b:ab:79:2e:65:aa:8e:a7:03:d9:a1:fd:
b3:df:a8:e8:8a:8f:b3:20:01:aa:18:2f:c8:d3:e2:54:c4:5e:
e3:bf:fa:aa:c0:4b:1b:80:c0:d9:9a:85:32:b8:48:15:2c:8d:
db:46:2d:0a:7f:cd:6b:65:19:3d:04:a2:33:02:18:41:2d:11:
4e:82:f7:85:25:32:f3:74:fe:35:f5:61:ed:c2:be:71:71:c6:
94:18:b1:8b
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgISAY7mXvgwSuAhuKNUV+TrViNfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjQwNDE2MTAwNjA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTQ5NmIxMGY3Mjg3NWE0MDRlYWMzZjM0NjJkYzkwOGQ3ZGRjNWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUKqA4sEGcrGQwEOFDzKlqY9TsqK
X/yXTFQOEzuV55YDaQmAQAEeGukHt2mTvWqQuRLP9jzayDjV43Z5yhP+nkgNDC0z
zSyi0fPFw6+WQAiuZUCibKehR0mlXxY/kgxQ7By8Lz07hptkmG/4dMKYCdltBoQy
GOgA6dgOZBPDbmsk2u7DzdcfoW+4mLwAT1JbwRjH1Xn6nu0j1Z7BBQuDlqRjq9sp
dpyiFNLGnFKkA1H+qMoGCyM6Rnop+Kln43QooVZjIKYScXpnvbrmrEFmo/y6/FJJ
dB4TYiTPn0AE1U6ucM4DjTwWKw5uqrWim30H4Vqm33p24/h4o2wQiWawZwIDAQAB
o4IC1DCCAtAwHQYDVR0OBBYEFBVJaxD3KHWkBOrD80YtyQjX3cXmMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvRlVsckVQY29kYVFFNnNQelJpM0pDTmZkeGVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHpBggrBgEFBQcBBwEB/wSB2TCB1jCB0wQCAAEwgcwDBAEl
YXgDBAIurfgDBAEurf4DBAJAK3gDBABNJDoDBAFNJEIDBAJRoQgDBAJRoTADBAFb
wR4DBAFbyIYDBABb4NQDBABb6BMDBAFb6DgDBABb6OIDBABb6cgDBABb7EwDBABb
7icDBABb7+IDBAJb9sADBABb9ssDBAFdeCIDBAFdeCgDBABtz4ADBABtz4IDBABt
z4QDBACwYF4DBAGwbnADBAKwcbQDBAKwc+wDBACwdOQDBACwdOwDBAKweWwDBALB
JNwDBAHCIUIwDQYJKoZIhvcNAQELBQADggEBAAxpbxk9slXgluAF34Jr1TPTHZKD
Ym+eZSzuqTk87F+9RAN3irlwDv1eG4GcakMOOJIVqF+nzLGKyLQSrPh95lr0K2Zd
GcfQ+z6Z8kHCifclBNj6gVCvVNw7J38mbZvR8oI5v6owS1dQxyOwEJUFP90gLFSA
PukHT7Y84/joQJB+CBlNAAdEqfERZhoDB7gGhJT7xL9pG3YFLd6/YxljxXhgtU7V
M/yy8iureS5lqo6nA9mh/bPfqOiKj7MgAaoYL8jT4lTEXuO/+qrASxuAwNmahTK4
SBUsjdtGLQp/zWtlGT0EojMCGEEtEU6C94UlMvN0/jX1Ye3CvnFxxpQYsYs=
-----END CERTIFICATE-----
Generated at Fri May 24 01:05:28 2024 by rpki-client on console-fra.rpki-client.org