Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/I6XN9KrReF7SrTFN_uvpkwhMQwQ.roa
File: I6XN9KrReF7SrTFN_uvpkwhMQwQ.roa (raw, json)
Hash identifier: aEuBN8t8PfSpmSrQgd1Ji/ZXdRMQpCw/tEj6mqr/DCM=
Subject key identifier: 23:A5:CD:F4:AA:D1:78:5E:D2:AD:31:4D:FE:EB:E9:93:08:4C:43:04
Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial: 01922433D31751571A1C3E56C148F4FB634D
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/I6XN9KrReF7SrTFN_uvpkwhMQwQ.roa
Signing time: Tue 24 Sep 2024 13:23:49 +0000
ROA not before: Tue 24 Sep 2024 13:23:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35579
IP address blocks: 37.122.220.0/22 maxlen: 24
78.142.66.0/23 maxlen: 23
78.142.80.0/22 maxlen: 24
78.142.85.0/24 maxlen: 24
78.142.86.0/23 maxlen: 23
78.142.88.0/23 maxlen: 23
78.142.90.0/24 maxlen: 24
78.142.91.0/24 maxlen: 24
78.142.118.0/24 maxlen: 24
78.142.119.0/24 maxlen: 24
78.142.120.0/24 maxlen: 24
78.142.121.0/24 maxlen: 24
91.226.156.0/22 maxlen: 24
92.63.213.0/24 maxlen: 24
195.16.239.0/24 maxlen: 24
195.16.240.0/24 maxlen: 24
195.16.244.0/24 maxlen: 24
195.16.248.0/23 maxlen: 24
195.16.250.0/24 maxlen: 24
195.16.252.0/24 maxlen: 24
195.69.104.0/22 maxlen: 24
2a04:5080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:24:33:d3:17:51:57:1a:1c:3e:56:c1:48:f4:fb:63:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
Validity
Not Before: Sep 24 13:23:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23a5cdf4aad1785ed2ad314dfeebe993084c4304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:e4:f6:f4:13:5e:fb:b2:4b:e7:a6:6f:21:
24:d2:5f:ae:1f:3e:da:63:9c:33:e2:17:31:e7:7f:
22:2f:05:bb:65:1a:83:9b:cd:bf:39:97:0d:44:b4:
f4:10:b4:f9:b3:ad:18:f0:d6:95:f0:89:4c:96:08:
56:e4:64:30:0b:16:84:46:7c:e4:cc:e2:5c:b4:84:
99:4a:f4:07:74:1f:c9:85:86:d8:77:db:6e:ed:69:
40:53:a0:62:42:51:af:1a:a2:5f:a7:7e:12:bb:c4:
25:45:e0:d5:ab:c5:05:f1:9e:eb:25:8a:d1:c2:3b:
1f:4f:bb:93:3b:80:b1:b4:4b:98:ab:49:70:a5:46:
34:4d:50:7e:ba:fe:00:41:a0:d3:9b:e2:7a:ef:a9:
33:43:84:3f:09:1d:d0:74:00:a4:7e:2c:9c:3f:00:
8a:19:7b:15:89:61:bd:0d:d6:80:e6:84:e2:3e:94:
56:5e:9b:7a:bf:06:21:2c:fd:ed:c2:3a:bf:1f:19:
15:2f:6e:2b:1f:76:64:16:da:5f:81:4b:ae:77:15:
c8:31:19:e6:ef:c1:c2:7d:38:af:5a:d4:76:52:79:
ff:ee:ad:9d:f9:23:62:2c:b3:29:72:7a:ba:07:1c:
61:54:11:ad:8f:ff:5e:44:28:47:5a:13:07:6b:c1:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A5:CD:F4:AA:D1:78:5E:D2:AD:31:4D:FE:EB:E9:93:08:4C:43:04
X509v3 Authority Key Identifier:
keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/I6XN9KrReF7SrTFN_uvpkwhMQwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.220.0/22
78.142.66.0/23
78.142.80.0/22
78.142.85.0-78.142.91.255
78.142.118.0-78.142.121.255
91.226.156.0/22
92.63.213.0/24
195.16.239.0-195.16.240.255
195.16.244.0/24
195.16.248.0-195.16.250.255
195.16.252.0/24
195.69.104.0/22
IPv6:
2a04:5080::/29
Signature Algorithm: sha256WithRSAEncryption
21:a2:16:da:57:19:07:3e:b0:a7:a3:3b:62:d3:54:82:ee:fa:
cc:7e:3f:93:18:92:9b:d3:59:34:cd:dd:46:7c:1b:88:bd:93:
a0:9e:42:6f:57:b3:64:89:c5:3b:77:7f:b1:0f:ae:5f:5b:f3:
e5:de:26:07:a8:2b:16:09:0c:5e:e0:93:45:df:53:75:28:b5:
03:ec:74:4c:8a:c0:a2:45:39:fb:7e:4e:87:cc:73:b3:47:b9:
d9:ff:8b:b9:7e:a8:ce:df:d6:b8:00:fe:1e:75:f9:45:fb:c4:
3c:b3:8a:98:fd:20:58:ec:4c:cd:6b:e3:66:36:3c:fd:f9:b3:
12:fd:22:0b:3e:28:29:9a:58:47:98:09:b6:17:aa:d1:5f:3b:
dc:53:f4:d6:1f:4f:52:8e:97:84:97:31:5e:13:a2:d0:0a:28:
e3:fa:9b:7b:0f:c1:5e:2f:05:f6:21:c4:68:ad:dd:bc:ae:af:
b4:e5:8c:14:b4:dc:a4:67:91:ef:07:52:82:43:a6:ec:73:be:
2a:f8:0d:09:c1:44:85:e5:dd:21:73:ba:32:c3:0f:46:e1:82:
c1:84:1d:34:ec:d8:ab:af:ec:ba:49:c1:a2:06:e1:71:a3:4f:
ff:a2:8e:aa:8f:4c:5a:18:57:89:e6:2a:ad:22:67:6e:3b:0f:
07:04:eb:a6
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgISAZIkM9MXUVcaHD5WwUj0+2NNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDY1MjE2ODEyZWQyNGZkMWM3MTk4NzFhNTlhOTcxZGVj
MzBhMjYwHhcNMjQwOTI0MTMyMzQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2E1Y2RmNGFhZDE3ODVlZDJhZDMxNGRmZWViZTk5MzA4NGM0MzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySnk9vQTXvuyS+embyEk0l+uHz7a
Y5wz4hcx538iLwW7ZRqDm82/OZcNRLT0ELT5s60Y8NaV8IlMlghW5GQwCxaERnzk
zOJctISZSvQHdB/JhYbYd9tu7WlAU6BiQlGvGqJfp34Su8QlReDVq8UF8Z7rJYrR
wjsfT7uTO4CxtEuYq0lwpUY0TVB+uv4AQaDTm+J676kzQ4Q/CR3QdACkfiycPwCK
GXsViWG9DdaA5oTiPpRWXpt6vwYhLP3twjq/HxkVL24rH3ZkFtpfgUuudxXIMRnm
78HCfTivWtR2Unn/7q2d+SNiLLMpcnq6BxxhVBGtj/9eRChHWhMHa8FLOwIDAQAB
o4ICfDCCAngwHQYDVR0OBBYEFCOlzfSq0Xhe0q0xTf7r6ZMITEMEMB8GA1UdIwQY
MBaAFDrWUhaBLtJP0ccZhxpZqXHewwomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTct
NDY1MzhjYTUzODNjLzEvSTZYTjlLclJlRjdTclRGTl91dnBrd2hNUXdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTctNDY1MzhjYTUzODNj
LzEvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MG4EAgABMGgDBAIletwD
BAFOjkIDBAJOjlAwDAMEAE6OVQMEAk6OWDAMAwQBTo52AwQBTo54AwQCW+KcAwQA
XD/VMAwDBADDEO8DBADDEPADBADDEPQwDAMEA8MQ+AMEAMMQ+gMEAMMQ/AMEAsNF
aDANBAIAAjAHAwUDKgRQgDANBgkqhkiG9w0BAQsFAAOCAQEAIaIW2lcZBz6wp6M7
YtNUgu76zH4/kxiSm9NZNM3dRnwbiL2ToJ5Cb1ezZInFO3d/sQ+uX1vz5d4mB6gr
FgkMXuCTRd9TdSi1A+x0TIrAokU5+35Oh8xzs0e52f+LuX6ozt/WuAD+HnX5RfvE
PLOKmP0gWOxMzWvjZjY8/fmzEv0iCz4oKZpYR5gJtheq0V873FP01h9PUo6XhJcx
XhOi0Aoo4/qbew/BXi8F9iHEaK3dvK6vtOWMFLTcpGeR7wdSgkOm7HO+KvgNCcFE
heXdIXO6MsMPRuGCwYQdNOzYq6/suknBogbhcaNP/6KOqo9MWhhXieYqrSJnbjsP
BwTrpg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:32 2024 by rpki-client on console-ams.rpki-client.org