Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/nAwv123t8GzWZzxwcPzZPM-N22s.roa
File: nAwv123t8GzWZzxwcPzZPM-N22s.roa (raw, json)
Hash identifier: w42sEe4DaK+PzkjGSJhqBX6vZJ1FmbeYzJtGTbpsrgw=
Subject key identifier: 9C:0C:2F:D7:6D:ED:F0:6C:D6:67:3C:70:70:FC:D9:3C:CF:8D:DB:6B
Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Certificate serial: 01902A66BCF8DA00F5A8447EAF654EFAE92C
Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/nAwv123t8GzWZzxwcPzZPM-N22s.roa
Signing time: Tue 18 Jun 2024 08:11:34 +0000
ROA not before: Tue 18 Jun 2024 08:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34949
IP address blocks: 109.239.112.0/23 maxlen: 23
109.239.112.0/24 maxlen: 24
109.239.113.0/24 maxlen: 24
109.239.114.0/23 maxlen: 24
109.239.116.0/23 maxlen: 23
109.239.116.0/24 maxlen: 24
109.239.117.0/24 maxlen: 24
109.239.118.0/23 maxlen: 23
109.239.118.0/24 maxlen: 24
109.239.119.0/24 maxlen: 24
109.239.122.0/23 maxlen: 23
109.239.122.0/24 maxlen: 24
109.239.123.0/24 maxlen: 24
109.239.124.0/23 maxlen: 23
109.239.125.0/24 maxlen: 24
109.239.126.0/23 maxlen: 23
109.239.126.0/24 maxlen: 24
109.239.127.0/24 maxlen: 24
159.100.32.0/23 maxlen: 23
159.100.32.0/24 maxlen: 24
159.100.33.0/24 maxlen: 24
159.100.34.0/23 maxlen: 23
159.100.34.0/24 maxlen: 24
159.100.35.0/24 maxlen: 24
159.100.38.0/23 maxlen: 23
159.100.38.0/24 maxlen: 24
159.100.39.0/24 maxlen: 24
159.100.40.0/23 maxlen: 23
159.100.40.0/24 maxlen: 24
159.100.41.0/24 maxlen: 24
159.100.42.0/23 maxlen: 23
159.100.42.0/24 maxlen: 24
159.100.43.0/24 maxlen: 24
159.100.44.0/24 maxlen: 24
185.60.24.0/23 maxlen: 23
185.60.24.0/24 maxlen: 24
185.60.25.0/24 maxlen: 24
185.60.26.0/23 maxlen: 23
185.60.26.0/24 maxlen: 24
185.85.224.0/23 maxlen: 23
185.85.224.0/24 maxlen: 24
185.85.225.0/24 maxlen: 24
185.85.226.0/23 maxlen: 23
185.85.226.0/24 maxlen: 24
185.85.227.0/24 maxlen: 24
217.112.48.0/23 maxlen: 24
217.112.49.0/24 maxlen: 24
217.112.50.0/23 maxlen: 23
217.112.50.0/24 maxlen: 24
217.112.51.0/24 maxlen: 24
217.112.52.0/23 maxlen: 23
217.112.52.0/24 maxlen: 24
217.112.53.0/24 maxlen: 24
217.112.54.0/23 maxlen: 23
217.112.54.0/24 maxlen: 24
217.112.55.0/24 maxlen: 24
217.112.56.0/23 maxlen: 23
217.112.56.0/24 maxlen: 24
217.112.57.0/24 maxlen: 24
217.112.58.0/23 maxlen: 23
217.112.58.0/24 maxlen: 24
217.112.59.0/24 maxlen: 24
217.112.60.0/23 maxlen: 23
217.112.60.0/24 maxlen: 24
217.112.61.0/24 maxlen: 24
217.112.62.0/23 maxlen: 24
217.112.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2a:66:bc:f8:da:00:f5:a8:44:7e:af:65:4e:fa:e9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Validity
Not Before: Jun 18 08:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c0c2fd76dedf06cd6673c7070fcd93ccf8ddb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:09:cf:a4:19:41:6d:62:d6:e7:71:21:7a:
0f:82:d6:48:b1:89:44:ee:a9:1e:7a:8b:75:45:bf:
92:38:21:eb:09:29:47:02:ee:21:49:48:9c:23:ae:
da:3b:66:d3:f5:cb:8a:9f:a2:66:6e:fe:24:51:4c:
ca:35:a2:0a:1a:c7:26:07:d5:d6:b1:13:41:b5:1a:
af:45:71:2c:4f:72:32:14:c7:79:61:d1:a2:13:b3:
77:59:9d:dd:13:a4:d5:c1:14:35:c6:9a:94:da:a5:
5d:5b:9b:b9:be:6f:63:b7:3e:ba:2a:62:a3:d1:ed:
49:c5:2d:67:5c:ba:07:97:de:ad:56:11:5d:bb:87:
81:9f:e4:76:fb:3a:a4:5b:8d:c5:c3:21:51:bf:cd:
67:53:cc:b0:1b:bb:c9:23:1f:69:98:8b:c6:0d:fa:
eb:a7:f8:1d:a2:75:79:37:d5:5b:ed:12:da:fc:d4:
cc:f6:cc:fc:cd:cb:b6:d0:76:3c:0d:24:c8:78:68:
9d:3b:3e:16:09:db:de:f5:93:15:0b:28:7b:1a:3e:
b1:94:df:12:45:f9:34:51:85:93:fd:64:13:bf:60:
b8:2b:f0:19:62:ca:4c:9e:d2:8c:68:f1:32:fd:87:
d7:93:96:bd:8e:1d:c4:0b:39:7b:99:1f:b3:b9:51:
3d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0C:2F:D7:6D:ED:F0:6C:D6:67:3C:70:70:FC:D9:3C:CF:8D:DB:6B
X509v3 Authority Key Identifier:
keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/nAwv123t8GzWZzxwcPzZPM-N22s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.239.112.0/21
109.239.122.0-109.239.127.255
159.100.32.0/22
159.100.38.0-159.100.44.255
185.60.24.0/22
185.85.224.0/22
217.112.48.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:77:f8:2d:81:00:47:19:bf:fb:be:9b:e2:cd:eb:e6:d5:06:
f0:7e:b3:78:0e:cf:2d:4d:9f:ec:66:9a:d8:4d:56:f4:ff:d8:
31:54:bf:ca:f4:2a:d5:5e:d9:08:ad:6b:05:28:b8:3a:9d:3f:
2d:f9:c1:77:8a:c9:be:a2:54:63:e5:ca:54:fd:5c:9c:cc:fd:
67:a2:12:11:31:b8:20:61:47:29:47:59:a9:35:4c:1d:d7:98:
6c:0f:93:55:c4:ee:b9:55:4d:f1:15:2c:ac:30:2a:37:b7:35:
cb:a5:db:06:bf:2a:15:9a:ce:ce:48:89:9d:80:09:2a:4f:bd:
60:c2:98:b3:e9:af:ce:06:77:b2:d5:d4:0c:d1:fa:83:cf:f5:
90:aa:3b:5c:8b:4f:34:b1:67:32:d2:7b:36:de:08:d6:48:4c:
cf:2b:4f:2e:a8:a5:a7:8b:7f:ba:92:a2:09:89:1e:28:c8:47:
cb:2c:01:55:f2:f8:b1:af:33:60:ec:d5:3b:f1:ce:cc:60:bf:
b6:2d:da:eb:38:ed:2d:a2:51:e1:3d:94:fb:9e:ee:44:93:ec:
22:11:68:54:f2:4c:86:cf:6f:f4:a1:b8:3d:83:94:d7:37:0b:
7a:8f:95:e4:3b:38:d8:7a:62:3b:57:2c:61:c7:88:89:99:c7:
25:0f:da:fb
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAZAqZrz42gD1qER+r2VO+uksMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ODRiNTNlYzA2OWUzMDI2MjM1OTZmYjNhYTc5ZjVkNzgy
YzA5ZjkwHhcNMjQwNjE4MDgxMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzBjMmZkNzZkZWRmMDZjZDY2NzNjNzA3MGZjZDkzY2NmOGRkYjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+MJz6QZQW1i1udxIXoPgtZIsYlE
7qkeeot1Rb+SOCHrCSlHAu4hSUicI67aO2bT9cuKn6Jmbv4kUUzKNaIKGscmB9XW
sRNBtRqvRXEsT3IyFMd5YdGiE7N3WZ3dE6TVwRQ1xpqU2qVdW5u5vm9jtz66KmKj
0e1JxS1nXLoHl96tVhFdu4eBn+R2+zqkW43FwyFRv81nU8ywG7vJIx9pmIvGDfrr
p/gdonV5N9Vb7RLa/NTM9sz8zcu20HY8DSTIeGidOz4WCdve9ZMVCyh7Gj6xlN8S
Rfk0UYWT/WQTv2C4K/AZYspMntKMaPEy/YfXk5a9jh3ECzl7mR+zuVE9+wIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFJwML9dt7fBs1mc8cHD82TzPjdtrMB8GA1UdIwQY
MBaAFFSEtT7AaeMCYjWW+zqnn114LAn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jYTYxOGMtMzVjZS00ZDMxLWJiODkt
Y2U4ZGQ2ODk4YjI3LzEvbkF3djEyM3Q4R3pXWnp4d2NQelpQTS1OMjJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jYTYxOGMtMzVjZS00ZDMxLWJiODktY2U4ZGQ2ODk4YjI3
LzEvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQDbe9wMAwD
BAFt73oDBAdt7wADBAKfZCAwDAMEAZ9kJgMEAJ9kLAMEArk8GAMEArlV4AMEBNlw
MDANBgkqhkiG9w0BAQsFAAOCAQEAanf4LYEARxm/+76b4s3r5tUG8H6zeA7PLU2f
7Gaa2E1W9P/YMVS/yvQq1V7ZCK1rBSi4Op0/LfnBd4rJvqJUY+XKVP1cnMz9Z6IS
ETG4IGFHKUdZqTVMHdeYbA+TVcTuuVVN8RUsrDAqN7c1y6XbBr8qFZrOzkiJnYAJ
Kk+9YMKYs+mvzgZ3stXUDNH6g8/1kKo7XItPNLFnMtJ7Nt4I1khMzytPLqilp4t/
upKiCYkeKMhHyywBVfL4sa8zYOzVO/HOzGC/ti3a6zjtLaJR4T2U+57uRJPsIhFo
VPJMhs9v9KG4PYOU1zcLeo+V5Ds42HpiO1csYceIiZnHJQ/a+w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:32 2024 by rpki-client on console-fra.rpki-client.org