Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/6Al_kVf_l9Cs-6s4xQ5I9UaaZi4.roa
File: 6Al_kVf_l9Cs-6s4xQ5I9UaaZi4.roa (raw, json)
Hash identifier: EvkOvhe1iFwxHRZGBtj5Li6e1x2vOm/cS/sr0uE+Tcg=
Subject key identifier: E8:09:7F:91:57:FF:97:D0:AC:FB:AB:38:C5:0E:48:F5:46:9A:66:2E
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 018CC493582CB65B1E79C7FE38672757D69E
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/6Al_kVf_l9Cs-6s4xQ5I9UaaZi4.roa
Signing time: Mon 01 Jan 2024 10:30:39 +0000
ROA not before: Mon 01 Jan 2024 10:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31334
IP address blocks: 83.169.128.0/18 maxlen: 24
185.19.196.0/22 maxlen: 22
31.16.0.0/14 maxlen: 24
91.64.0.0/14 maxlen: 24
188.192.0.0/14 maxlen: 24
88.134.0.0/16 maxlen: 24
24.134.0.0/16 maxlen: 16
146.52.0.0/16 maxlen: 24
37.4.0.0/15 maxlen: 23
109.84.0.0/15 maxlen: 15
109.47.0.0/16 maxlen: 16
77.20.0.0/14 maxlen: 24
77.24.0.0/16 maxlen: 16
178.24.0.0/14 maxlen: 24
95.88.0.0/14 maxlen: 24
77.25.0.0/17 maxlen: 23
2a02:8100::/27 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:58:2c:b6:5b:1e:79:c7:fe:38:67:27:57:d6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Jan 1 10:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8097f9157ff97d0acfbab38c50e48f5469a662e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:2f:8c:5c:66:16:c0:81:ce:a5:fb:c2:11:
86:a0:dd:70:34:12:0d:11:76:77:78:80:c6:0c:b3:
44:d2:cb:dd:1f:f2:d9:76:1b:88:cb:c5:4f:18:c9:
f8:70:fc:96:2a:3c:db:5e:37:a8:22:89:c9:ca:35:
55:84:1e:7d:45:ed:fa:d5:62:a9:4a:bb:56:bc:f2:
69:b0:51:1b:f1:bd:21:07:93:7c:63:29:27:90:e4:
5d:4e:59:2d:5e:74:92:fc:5b:22:6d:f8:86:14:87:
91:c2:ac:26:d8:4a:b1:de:e2:67:0a:f9:2d:ac:15:
c6:c8:84:20:98:22:29:b2:f8:22:a6:04:2c:d2:2a:
14:08:f9:20:c8:14:00:6a:bb:f0:bd:09:8e:c3:60:
30:b4:14:1f:fb:09:c9:a9:85:49:bb:2a:0c:ca:0e:
3d:22:e6:32:71:60:96:3d:ce:ef:12:97:29:9e:02:
8f:c6:49:ae:29:8b:9d:b6:27:85:d5:59:0b:28:6d:
2d:11:dc:8b:57:95:6a:e9:91:ad:20:da:0f:ee:e5:
51:a6:1b:e6:f4:80:9a:da:65:df:4b:2b:cc:39:d7:
b8:c4:9f:f2:cc:f3:28:aa:e6:86:95:2f:5f:8b:9d:
58:e9:cb:55:02:f0:06:b9:c6:be:83:5e:66:0d:82:
a6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:09:7F:91:57:FF:97:D0:AC:FB:AB:38:C5:0E:48:F5:46:9A:66:2E
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/6Al_kVf_l9Cs-6s4xQ5I9UaaZi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.134.0.0/16
31.16.0.0/14
37.4.0.0/15
77.20.0.0-77.25.127.255
83.169.128.0/18
88.134.0.0/16
91.64.0.0/14
95.88.0.0/14
109.47.0.0/16
109.84.0.0/15
146.52.0.0/16
178.24.0.0/14
185.19.196.0/22
188.192.0.0/14
IPv6:
2a02:8100::/27
Signature Algorithm: sha256WithRSAEncryption
11:db:69:1a:20:f4:04:b8:ba:29:95:2b:ca:f0:11:ad:25:44:
0e:a3:53:87:68:35:65:d4:5a:99:23:f5:1e:99:f2:f0:66:11:
2a:b3:07:36:30:75:1a:a1:66:e9:65:e8:f6:ad:05:39:fa:6e:
d8:52:9d:b6:ac:de:96:a7:5a:cb:29:c0:ed:b2:b5:a8:e9:38:
12:b7:b9:03:0d:fd:fb:bb:12:82:af:40:2f:08:db:92:9e:68:
ab:29:4d:79:e7:fb:14:6c:29:c6:af:49:de:31:61:77:00:89:
52:84:42:98:a6:8b:72:54:b8:9d:61:98:7a:5c:85:47:e8:83:
a7:1f:8f:45:49:0f:a5:8c:be:5e:36:78:53:8f:f7:9a:14:9f:
72:3d:3b:b9:b1:41:5e:0f:7c:07:95:99:44:06:83:f7:86:a5:
d7:e5:99:03:b4:40:0e:dc:05:35:62:8a:e6:26:9a:30:65:92:
80:bf:a2:3f:87:6c:5e:63:94:9d:d7:9f:53:26:a7:fa:bf:1d:
da:03:fe:31:18:d2:4d:a6:b6:6e:c4:53:b9:94:c8:51:99:0b:
ce:53:98:5c:ce:b6:7e:95:e2:3e:ef:08:0a:51:67:15:03:00:
d5:15:3f:0a:d7:5b:62:9a:d9:f5:05:f4:46:c2:77:b3:70:16:
4f:d1:a1:8d
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgISAYzEk1gstlseecf+OGcnV9aeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2JhYWZjNjRiMzNlNDNkYjc4ZGM3YWVkNjA1ZWY3MDQw
NmQ5YWYwHhcNMjQwMTAxMTAzMDM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODA5N2Y5MTU3ZmY5N2QwYWNmYmFiMzhjNTBlNDhmNTQ2OWE2NjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDkvjFxmFsCBzqX7whGGoN1wNBIN
EXZ3eIDGDLNE0svdH/LZdhuIy8VPGMn4cPyWKjzbXjeoIonJyjVVhB59Re361WKp
SrtWvPJpsFEb8b0hB5N8YyknkORdTlktXnSS/FsibfiGFIeRwqwm2Eqx3uJnCvkt
rBXGyIQgmCIpsvgipgQs0ioUCPkgyBQAarvwvQmOw2AwtBQf+wnJqYVJuyoMyg49
IuYycWCWPc7vEpcpngKPxkmuKYudtieF1VkLKG0tEdyLV5Vq6ZGtINoP7uVRphvm
9ICa2mXfSyvMOde4xJ/yzPMoquaGlS9fi51Y6ctVAvAGuca+g15mDYKm9wIDAQAB
o4ICYjCCAl4wHQYDVR0OBBYEFOgJf5FX/5fQrPurOMUOSPVGmmYuMB8GA1UdIwQY
MBaAFOQ7qvxksz5D23jceu1gXvcEBtmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTIt
ZTY4MTJkYWI2OTk5LzEvNkFsX2tWZl9sOUNzLTZzNHhRNUk5VWFhWmk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTItZTY4MTJkYWI2OTk5
LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBWBAIAATBQAwMAGIYDAwIf
EAMDASUEMAsDAwJNFAMEB00ZAAMEBlOpgAMDAFiGAwMCW0ADAwJfWAMDAG0vAwMB
bVQDAwCSNAMDArIYAwQCuRPEAwMCvMAwDQQCAAIwBwMFBSoCgQAwDQYJKoZIhvcN
AQELBQADggEBABHbaRog9AS4uimVK8rwEa0lRA6jU4doNWXUWpkj9R6Z8vBmESqz
BzYwdRqhZull6PatBTn6bthSnbas3panWsspwO2ytajpOBK3uQMN/fu7EoKvQC8I
25KeaKspTXnn+xRsKcavSd4xYXcAiVKEQpimi3JUuJ1hmHpchUfog6cfj0VJD6WM
vl42eFOP95oUn3I9O7mxQV4PfAeVmUQGg/eGpdflmQO0QA7cBTViiuYmmjBlkoC/
oj+HbF5jlJ3Xn1Mmp/q/HdoD/jEY0k2mtm7EU7mUyFGZC85TmFzOtn6V4j7vCApR
ZxUDANUVPwrXW2Ka2fUF9EbCd7NwFk/RoY0=
-----END CERTIFICATE-----
Generated at Sat Jun 8 03:03:36 2024 by rpki-client on console-fra.rpki-client.org