Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/LOSFGh-4kVwsksLXcZu--po7Gzo.roa
File: LOSFGh-4kVwsksLXcZu--po7Gzo.roa (raw, json)
Hash identifier: C4S/vWav2FwV+VNO3PWNChbx1DdKqPdxPQ76/ijw2tU=
Subject key identifier: 2C:E4:85:1A:1F:B8:91:5C:2C:92:C2:D7:71:9B:BE:FA:9A:3B:1B:3A
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018CC86FBB6CD205E0E78B4456B6101B6ED0
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/LOSFGh-4kVwsksLXcZu--po7Gzo.roa
Signing time: Tue 02 Jan 2024 04:30:14 +0000
ROA not before: Tue 02 Jan 2024 04:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3561
IP address blocks: 77.36.112.0/21 maxlen: 24
77.36.124.0/22 maxlen: 22
93.120.96.0/22 maxlen: 22
46.151.36.0/22 maxlen: 24
91.237.44.0/22 maxlen: 24
194.33.102.0/23 maxlen: 24
194.33.100.0/23 maxlen: 24
194.33.100.0/22 maxlen: 24
81.161.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:bb:6c:d2:05:e0:e7:8b:44:56:b6:10:1b:6e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ce4851a1fb8915c2c92c2d7719bbefa9a3b1b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:23:cb:6f:84:5a:95:21:49:84:8f:9a:81:
8f:c5:79:e5:e1:c5:f9:98:94:50:54:9e:c7:f4:86:
aa:55:7d:2e:8a:4e:3c:0d:68:47:36:45:8f:b7:e8:
0a:68:df:43:bc:1b:28:ba:17:c5:bf:86:42:88:78:
15:c7:64:62:10:e3:24:6d:7d:3f:40:4c:60:a2:fe:
a1:f7:7a:72:0f:c0:7a:70:64:53:9f:ab:8e:ad:a4:
4e:1f:84:7f:96:37:83:d9:a4:53:d7:ce:65:e3:6e:
40:8f:55:25:6d:76:dd:5a:65:3c:38:e3:d9:96:c3:
95:bd:6d:6a:1f:cf:df:94:e3:64:45:5f:30:04:f5:
f6:45:ef:9c:ef:e5:e5:5c:7c:10:e9:c8:ec:99:f1:
4d:ad:54:e3:92:2a:c7:ab:4b:1f:29:60:f3:ce:f0:
d2:0e:71:31:76:80:da:45:59:9b:28:34:cf:9d:43:
bc:b4:76:25:3b:cd:69:eb:4f:20:34:ad:6e:5d:f3:
5e:a9:99:f6:e5:71:7b:8b:ec:53:ee:b7:3a:c4:78:
4f:e1:e2:d1:ee:da:bc:c2:c5:e4:d4:f6:d6:85:a7:
4b:bc:9c:03:74:5d:8e:11:68:be:b8:5c:50:86:39:
4a:9e:b9:9b:e2:dc:9e:13:80:d1:f0:78:08:d9:d8:
94:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E4:85:1A:1F:B8:91:5C:2C:92:C2:D7:71:9B:BE:FA:9A:3B:1B:3A
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/LOSFGh-4kVwsksLXcZu--po7Gzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.36.0/22
77.36.112.0/21
77.36.124.0/22
81.161.4.0/22
91.237.44.0/22
93.120.96.0/22
194.33.100.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:72:73:e7:04:07:c1:45:7c:90:aa:d6:30:a3:71:b3:cc:91:
e1:6d:b2:b5:6f:d2:41:1e:f1:cb:89:1e:ed:78:a9:5a:cf:d0:
a4:92:c3:e8:01:c9:6d:4a:d4:b0:ce:9b:ed:2c:f2:c2:8e:31:
da:f3:b1:bd:20:40:e3:bd:b8:c9:d9:1e:c8:d5:ba:1e:60:0f:
3b:af:b0:c4:94:69:af:3c:6d:bc:77:c3:68:1a:1d:f7:b7:bc:
26:6b:8e:f4:b6:07:93:89:96:32:6f:cd:58:ee:f2:1a:a0:8e:
57:8c:97:4e:43:6d:26:ca:00:25:28:fa:27:2e:9a:9f:18:ef:
fb:e0:63:7f:4c:17:f9:30:52:2e:7f:15:d8:9a:44:06:72:60:
41:f3:54:22:65:6d:13:69:3b:a4:3f:c4:63:8b:a1:5a:8f:bb:
ae:b2:d2:50:22:4c:50:5f:4e:e5:ad:3f:d4:1e:0f:0e:58:26:
96:a9:a7:93:76:0b:a6:ad:1b:70:27:4e:1c:ec:98:d7:81:63:
11:3b:2e:b6:d6:b7:8d:a3:47:70:0f:4e:ca:26:65:d1:2d:ac:
90:e4:8b:fb:27:76:d5:c7:54:1c:ee:af:17:ed:20:54:a7:c4:
48:49:bf:9d:62:8f:c6:e6:47:c8:47:f7:bf:90:cd:6c:af:99:
9b:9d:bc:22
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYzIb7ts0gXg54tEVrYQG27QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjQwMTAyMDQzMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2U0ODUxYTFmYjg5MTVjMmM5MmMyZDc3MTliYmVmYTlhM2IxYjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDIjy2+EWpUhSYSPmoGPxXnl4cX5
mJRQVJ7H9IaqVX0uik48DWhHNkWPt+gKaN9DvBsouhfFv4ZCiHgVx2RiEOMkbX0/
QExgov6h93pyD8B6cGRTn6uOraROH4R/ljeD2aRT185l425Aj1UlbXbdWmU8OOPZ
lsOVvW1qH8/flONkRV8wBPX2Re+c7+XlXHwQ6cjsmfFNrVTjkirHq0sfKWDzzvDS
DnExdoDaRVmbKDTPnUO8tHYlO81p608gNK1uXfNeqZn25XF7i+xT7rc6xHhP4eLR
7tq8wsXk1PbWhadLvJwDdF2OEWi+uFxQhjlKnrmb4tyeE4DR8HgI2diUHwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFCzkhRofuJFcLJLC13GbvvqaOxs6MB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvTE9TRkdoLTRrVndza3NMWGNadS0tcG83R3pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCLpckAwQD
TSRwAwQCTSR8AwQCUaEEAwQCW+0sAwQCXXhgAwQCwiFkMA0GCSqGSIb3DQEBCwUA
A4IBAQCmcnPnBAfBRXyQqtYwo3GzzJHhbbK1b9JBHvHLiR7teKlaz9CkksPoAclt
StSwzpvtLPLCjjHa87G9IEDjvbjJ2R7I1boeYA87r7DElGmvPG28d8NoGh33t7wm
a470tgeTiZYyb81Y7vIaoI5XjJdOQ20mygAlKPonLpqfGO/74GN/TBf5MFIufxXY
mkQGcmBB81QiZW0TaTukP8Rji6Faj7uustJQIkxQX07lrT/UHg8OWCaWqaeTdgum
rRtwJ04c7JjXgWMROy621reNo0dwD07KJmXRLayQ5Iv7J3bVx1Qc7q8X7SBUp8RI
Sb+dYo/G5kfIR/e/kM1sr5mbnbwi
-----END CERTIFICATE-----
Generated at Mon May 6 17:57:20 2024 by rpki-client on console-ams.rpki-client.org