Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/1-DANoXzmqsA1I42Ou5XVhJr4dMQ.roa
File: 1-DANoXzmqsA1I42Ou5XVhJr4dMQ.roa (raw, json)
Hash identifier: 1Nyx5OuBzAi5tVSoN3Qt9spnM1Efm02StNudVPyA6fE=
Subject key identifier: F8:30:0D:A1:7C:E6:AA:C0:35:23:8D:8E:BB:95:D5:84:9A:F8:74:C4
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 018CC348ABF623FE4C635B419608F7CB183D
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/1-DANoXzmqsA1I42Ou5XVhJr4dMQ.roa
Signing time: Mon 01 Jan 2024 04:29:28 +0000
ROA not before: Mon 01 Jan 2024 04:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49223
IP address blocks: 185.145.232.0/24 maxlen: 24
188.244.118.0/24 maxlen: 24
37.140.240.0/24 maxlen: 24
193.104.183.0/24 maxlen: 24
62.204.33.0/24 maxlen: 24
146.19.186.0/24 maxlen: 24
95.130.228.0/24 maxlen: 24
194.32.105.0/24 maxlen: 24
83.138.49.0/24 maxlen: 24
193.163.124.0/24 maxlen: 24
213.109.158.0/24 maxlen: 24
91.247.186.0/24 maxlen: 24
5.181.54.0/24 maxlen: 24
176.126.126.0/24 maxlen: 24
146.19.41.0/24 maxlen: 24
89.248.64.0/24 maxlen: 24
212.52.8.0/24 maxlen: 24
193.228.228.0/24 maxlen: 24
185.201.253.0/24 maxlen: 24
46.18.106.0/24 maxlen: 24
194.156.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ab:f6:23:fe:4c:63:5b:41:96:08:f7:cb:18:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 04:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8300da17ce6aac035238d8ebb95d5849af874c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:75:df:2a:51:34:4c:e5:f8:45:c9:51:a2:44:
83:24:0a:e7:17:7e:ac:88:fd:4d:72:4d:7d:4a:75:
66:6f:49:0e:50:bb:50:70:03:6d:bc:e8:c3:c3:9b:
cc:e2:f9:84:1e:01:01:f9:35:fc:10:ea:0d:24:25:
ac:4c:c7:ca:be:12:07:2f:89:13:a4:dc:77:38:a2:
63:a3:bc:6d:5c:6e:bd:25:81:a3:db:38:48:0e:73:
cc:5e:28:bd:11:83:3d:58:19:86:a7:4a:d1:20:11:
0f:f3:9e:40:22:74:c7:e5:1e:c6:3f:bc:16:d6:3d:
cd:80:57:94:2f:67:2e:a0:05:68:3a:ad:7a:1f:b4:
0b:ef:a6:16:b2:1c:9b:af:8e:36:db:e4:17:b8:5d:
39:7e:ef:42:03:1d:a0:4d:71:56:e4:15:e0:97:1a:
11:7c:14:2b:dd:26:4e:a0:78:4d:a5:00:b9:bb:50:
d8:f5:63:bf:03:e0:b5:ce:02:53:20:45:ec:52:df:
32:cc:9d:35:bf:eb:1b:29:7b:b7:e9:32:9a:20:1a:
9b:aa:4c:3c:eb:c1:da:b8:81:89:b0:f9:75:5a:9a:
4e:e3:d5:d2:b6:f3:88:79:6d:06:d0:ec:8a:cc:d9:
9b:a3:60:ee:74:c9:14:d1:a6:73:63:99:53:bd:ec:
9f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:30:0D:A1:7C:E6:AA:C0:35:23:8D:8E:BB:95:D5:84:9A:F8:74:C4
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/1-DANoXzmqsA1I42Ou5XVhJr4dMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.54.0/24
37.140.240.0/24
46.18.106.0/24
62.204.33.0/24
83.138.49.0/24
89.248.64.0/24
91.247.186.0/24
95.130.228.0/24
146.19.41.0/24
146.19.186.0/24
176.126.126.0/24
185.145.232.0/24
185.201.253.0/24
188.244.118.0/24
193.104.183.0/24
193.163.124.0/24
193.228.228.0/24
194.32.105.0/24
194.156.78.0/24
212.52.8.0/24
213.109.158.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c6:9e:46:f8:c1:2e:29:5d:25:5e:7c:1a:52:fa:22:62:ae:
46:24:ec:5b:1e:20:25:9c:a8:d6:96:81:4a:1a:c8:c8:db:39:
0d:9a:fb:f6:fc:fb:51:ec:c4:d6:4a:9b:12:22:69:4b:a8:86:
c9:da:a0:0b:b3:af:f8:f8:8d:0e:cb:3d:dc:4f:3b:a0:e1:f7:
1b:39:bd:e4:35:fe:4d:ef:65:0e:90:cb:44:bb:b8:78:a6:0c:
e3:b0:2c:24:a9:ca:db:32:14:85:93:70:f2:0f:4f:99:1a:27:
54:27:f6:07:bb:df:66:13:bf:d4:6f:5c:52:9d:cc:07:64:3f:
98:2f:95:e1:88:84:a7:31:71:8b:50:82:77:74:d3:02:74:5c:
9a:5a:e7:8f:92:61:f8:9d:bf:12:8e:74:be:1f:ed:84:57:69:
73:1e:0d:7c:2a:8d:c9:ff:de:ac:65:45:6c:bf:2e:cb:ed:3d:
2d:f8:ef:47:f6:3f:eb:35:80:54:b8:df:90:ad:b6:c7:31:60:
54:66:18:3c:82:8d:83:fd:5d:10:10:43:4f:5b:95:3a:f8:22:
5b:ce:4e:c6:db:09:1d:b5:d9:6f:37:61:54:bd:bb:90:a0:c5:
62:43:49:b6:01:db:54:41:8e:fd:2c:80:67:98:9f:7a:57:1c:
33:f6:83:db
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgISAYzDSKv2I/5MY1tBlgj3yxg9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjQwMTAxMDQyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODMwMGRhMTdjZTZhYWMwMzUyMzhkOGViYjk1ZDU4NDlhZjg3NGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznXfKlE0TOX4RclRokSDJArnF36s
iP1Nck19SnVmb0kOULtQcANtvOjDw5vM4vmEHgEB+TX8EOoNJCWsTMfKvhIHL4kT
pNx3OKJjo7xtXG69JYGj2zhIDnPMXii9EYM9WBmGp0rRIBEP855AInTH5R7GP7wW
1j3NgFeUL2cuoAVoOq16H7QL76YWshybr4422+QXuF05fu9CAx2gTXFW5BXglxoR
fBQr3SZOoHhNpQC5u1DY9WO/A+C1zgJTIEXsUt8yzJ01v+sbKXu36TKaIBqbqkw8
68HauIGJsPl1WppO49XStvOIeW0G0OyKzNmbo2DudMkU0aZzY5lTveyfAQIDAQAB
o4IChjCCAoIwHQYDVR0OBBYEFPgwDaF85qrANSONjruV1YSa+HTEMB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvMS1EQU5vWHptcXNBMUk0Mk91NVhWaEpyNGRNUS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzAvMmMzMzE2LWVmYzctNDk1Mi05ZWZlLThjMTUzOTY1YmFj
OS8xL0RTbVpCQ3hlSUFhOVd1dDZCZDRlbHFYbk5tUS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBmgYIKwYBBQUHAQcBAf8EgYowgYcwgYQEAgABMH4DBAAF
tTYDBAAljPADBAAuEmoDBAA+zCEDBABTijEDBABZ+EADBABb97oDBABfguQDBACS
EykDBACSE7oDBACwfn4DBAC5kegDBAC5yf0DBAC89HYDBADBaLcDBADBo3wDBADB
5OQDBADCIGkDBADCnE4DBADUNAgDBADVbZ4wDQYJKoZIhvcNAQELBQADggEBAJDG
nkb4wS4pXSVefBpS+iJirkYk7FseICWcqNaWgUoayMjbOQ2a+/b8+1HsxNZKmxIi
aUuohsnaoAuzr/j4jQ7LPdxPO6Dh9xs5veQ1/k3vZQ6Qy0S7uHimDOOwLCSpytsy
FIWTcPIPT5kaJ1Qn9ge732YTv9RvXFKdzAdkP5gvleGIhKcxcYtQgnd00wJ0XJpa
54+SYfidvxKOdL4f7YRXaXMeDXwqjcn/3qxlRWy/LsvtPS3470f2P+s1gFS435Ct
tscxYFRmGDyCjYP9XRAQQ09blTr4IlvOTsbbCR212W83YVS9u5CgxWJDSbYB21RB
jv0sgGeYn3pXHDP2g9s=
-----END CERTIFICATE-----
Generated at Fri May 10 17:43:11 2024 by rpki-client on console-fra.rpki-client.org