Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/FJDqlBgg1AmD-RraWkyw2rwZtl0.roa
File: FJDqlBgg1AmD-RraWkyw2rwZtl0.roa (raw, json)
Hash identifier: c8E442B7w7LIzEutkMjYq0AcGXknCsUs1HMQT42MFtI=
Subject key identifier: 14:90:EA:94:18:20:D4:09:83:F9:1A:DA:5A:4C:B0:DA:BC:19:B6:5D
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 018CC26D6F3223D434EC6FC4C027C956B2C5
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/FJDqlBgg1AmD-RraWkyw2rwZtl0.roa
Signing time: Mon 01 Jan 2024 00:30:00 +0000
ROA not before: Mon 01 Jan 2024 00:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42927
IP address blocks: 94.124.4.0/24 maxlen: 24
94.124.2.0/23 maxlen: 23
94.124.0.0/21 maxlen: 21
94.124.1.0/24 maxlen: 24
94.124.0.0/24 maxlen: 24
94.124.8.0/21 maxlen: 21
94.124.7.0/24 maxlen: 24
94.124.6.0/24 maxlen: 24
94.124.5.0/24 maxlen: 24
185.28.16.0/24 maxlen: 24
185.28.16.0/22 maxlen: 22
185.28.18.0/23 maxlen: 23
80.82.16.0/23 maxlen: 23
80.82.22.0/24 maxlen: 24
80.82.22.0/23 maxlen: 23
80.82.20.0/23 maxlen: 23
80.82.18.0/23 maxlen: 23
80.82.30.0/23 maxlen: 23
80.82.29.0/24 maxlen: 24
80.82.28.0/24 maxlen: 24
80.82.26.0/23 maxlen: 23
80.82.25.0/24 maxlen: 24
91.189.253.0/24 maxlen: 24
91.189.250.0/24 maxlen: 24
91.189.248.0/21 maxlen: 21
46.22.164.0/23 maxlen: 23
46.22.163.0/24 maxlen: 24
46.22.160.0/24 maxlen: 24
46.22.170.0/24 maxlen: 24
46.22.169.0/24 maxlen: 24
46.22.168.0/24 maxlen: 24
46.22.167.0/24 maxlen: 24
46.22.173.0/24 maxlen: 24
2a02:f78::/32 maxlen: 32
2a02:f7f:14::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:6f:32:23:d4:34:ec:6f:c4:c0:27:c9:56:b2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Jan 1 00:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1490ea941820d40983f91ada5a4cb0dabc19b65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:35:d5:fa:d7:3a:c4:41:e6:42:35:b3:3c:
aa:12:27:80:7a:1e:0d:29:74:35:a1:ef:c4:52:88:
e2:27:16:c9:22:5f:ca:73:0e:b2:93:77:44:51:55:
63:d4:d7:26:e5:91:ad:8f:99:1e:4d:0d:8e:23:a3:
8c:00:bd:a0:4e:40:90:89:17:1d:15:e7:4b:44:83:
07:ab:60:27:e7:b6:e4:c5:95:dd:20:3c:a8:b5:bf:
70:f8:30:82:c2:2c:dc:4f:d5:50:b5:71:3a:c7:53:
a3:42:de:71:1e:8f:b5:2e:bf:23:97:af:a1:8f:7c:
73:0a:6f:82:77:63:d0:a3:54:c2:e3:14:02:1d:89:
6a:c5:29:23:07:9f:10:c7:1f:56:bb:3a:e6:4d:af:
0e:b7:a3:65:95:d2:4c:12:52:30:09:97:c8:77:52:
03:e4:10:de:33:7f:ff:25:fc:47:8d:89:bc:1f:1f:
a4:1d:3f:32:b8:47:6b:6a:75:2a:8f:9d:1f:5b:b9:
03:31:3f:7f:e3:01:d6:48:c7:6b:f6:c9:ae:ca:d7:
d1:3f:24:4c:41:46:08:9b:3a:93:e1:f9:01:0e:0f:
1e:3a:8b:77:78:30:8e:f3:a3:86:92:42:85:b7:36:
21:05:68:3d:86:d0:ac:b9:89:18:93:80:f9:fd:90:
e8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:90:EA:94:18:20:D4:09:83:F9:1A:DA:5A:4C:B0:DA:BC:19:B6:5D
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/FJDqlBgg1AmD-RraWkyw2rwZtl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.160.0/24
46.22.163.0-46.22.165.255
46.22.167.0-46.22.170.255
46.22.173.0/24
80.82.16.0/21
80.82.25.0-80.82.31.255
91.189.248.0/21
94.124.0.0/20
185.28.16.0/22
IPv6:
2a02:f78::/32
2a02:f7f:14::/48
Signature Algorithm: sha256WithRSAEncryption
06:d0:41:1b:59:dc:1e:37:c8:95:23:c0:d5:d7:32:bb:fd:31:
5e:c0:48:8b:d0:85:fc:50:2c:e9:dd:b7:32:1e:53:8c:ff:6b:
ef:a3:e4:07:0b:41:d9:68:83:aa:10:9a:d1:77:9d:18:99:87:
76:cd:07:1d:58:e7:6a:44:c5:68:95:ca:41:f5:e8:9e:eb:15:
25:a2:13:cb:41:fa:20:20:72:c8:8e:36:ff:68:c1:71:f8:fa:
68:01:54:6a:cc:5c:fc:ab:b9:e1:a1:4c:a4:7d:71:da:47:9d:
f5:52:47:0a:eb:d8:98:07:fa:c9:7e:1c:98:e9:a9:58:38:26:
cf:84:24:4c:0d:27:c3:d6:a4:e9:86:b0:85:a0:7e:9d:16:35:
7e:92:4b:35:dc:53:7a:af:18:49:0c:90:27:50:ea:fd:6d:6d:
e1:e9:78:8a:b6:42:5f:c3:f6:ac:b5:8b:0a:20:ac:cf:db:92:
a6:86:05:ae:2f:4c:32:0d:63:86:3a:36:a1:b8:8d:eb:e3:4b:
8c:b8:09:1a:8f:f6:73:26:43:44:7f:fa:2b:92:d7:18:2c:7a:
e9:9a:ca:88:d6:62:90:95:65:7e:d5:e5:d0:a5:ad:16:68:f5:
be:d0:5a:63:79:af:cb:74:e8:73:97:d6:40:c9:e6:0d:5d:28:
1e:5d:9b:fc
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAYzCbW8yI9Q07G/EwCfJVrLFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYmZhMjk2MWZhMGUwYjA3MDQxMjkzZGRjMGMzNjkzYTll
MGEyMzgwHhcNMjQwMTAxMDAzMDAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDkwZWE5NDE4MjBkNDA5ODNmOTFhZGE1YTRjYjBkYWJjMTliNjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4k11frXOsRB5kI1szyqEieAeh4N
KXQ1oe/EUojiJxbJIl/Kcw6yk3dEUVVj1Ncm5ZGtj5keTQ2OI6OMAL2gTkCQiRcd
FedLRIMHq2An57bkxZXdIDyotb9w+DCCwizcT9VQtXE6x1OjQt5xHo+1Lr8jl6+h
j3xzCm+Cd2PQo1TC4xQCHYlqxSkjB58Qxx9WuzrmTa8Ot6NlldJMElIwCZfId1ID
5BDeM3//JfxHjYm8Hx+kHT8yuEdranUqj50fW7kDMT9/4wHWSMdr9smuytfRPyRM
QUYImzqT4fkBDg8eOot3eDCO86OGkkKFtzYhBWg9htCsuYkYk4D5/ZDoaQIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFBSQ6pQYINQJg/ka2lpMsNq8GbZdMB8GA1UdIwQY
MBaAFBG/opYfoOCwcEEpPdwMNpOp4KI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgt
Nzg3OTFjOTM1NmEzLzEvRkpEcWxCZ2cxQW1ELVJyYVdreXcycndadGwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgtNzg3OTFjOTM1NmEz
LzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBUBAIAATBOAwQALhagMAwD
BAAuFqMDBAEuFqQwDAMEAC4WpwMEAC4WqgMEAC4WrQMEA1BSEDAMAwQAUFIZAwQF
UFIAAwQDW734AwQEXnwAAwQCuRwQMBYEAgACMBADBQAqAg94AwcAKgIPfwAUMA0G
CSqGSIb3DQEBCwUAA4IBAQAG0EEbWdweN8iVI8DV1zK7/TFewEiL0IX8UCzp3bcy
HlOM/2vvo+QHC0HZaIOqEJrRd50YmYd2zQcdWOdqRMVolcpB9eie6xUlohPLQfog
IHLIjjb/aMFx+PpoAVRqzFz8q7nhoUykfXHaR531UkcK69iYB/rJfhyY6alYOCbP
hCRMDSfD1qTphrCFoH6dFjV+kks13FN6rxhJDJAnUOr9bW3h6XiKtkJfw/astYsK
IKzP25KmhgWuL0wyDWOGOjahuI3r40uMuAkaj/ZzJkNEf/orktcYLHrpmsqI1mKQ
lWV+1eXQpa0WaPW+0Fpjea/LdOhzl9ZAyeYNXSgeXZv8
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:06:24 2024 by rpki-client on console-fra.rpki-client.org