Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/NMrDn4ATtRIWHPF9Tql1W4Ww7lc.roa
File: NMrDn4ATtRIWHPF9Tql1W4Ww7lc.roa (raw, json)
Hash identifier: xPht+61vkNeJJWUDjysXzxFpyYBm5uIP6VhFFH8bZIg=
Subject key identifier: 34:CA:C3:9F:80:13:B5:12:16:1C:F1:7D:4E:A9:75:5B:85:B0:EE:57
Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial: 019236EC9AAA22E0AB18F9FC724E36BB4BF8
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/NMrDn4ATtRIWHPF9Tql1W4Ww7lc.roa
Signing time: Sat 28 Sep 2024 04:38:48 +0000
ROA not before: Sat 28 Sep 2024 04:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197071
IP address blocks: 31.214.149.0/24 maxlen: 32
31.214.240.0/21 maxlen: 32
46.251.225.0/24 maxlen: 32
46.251.227.0/24 maxlen: 32
91.217.251.0/24 maxlen: 32
95.156.225.0/24 maxlen: 32
95.156.226.0/23 maxlen: 32
95.156.228.0/22 maxlen: 32
95.156.232.0/24 maxlen: 32
109.230.195.0/24 maxlen: 32
109.230.224.0/20 maxlen: 32
109.230.252.0/22 maxlen: 32
134.255.220.0/22 maxlen: 32
134.255.224.0/22 maxlen: 32
134.255.228.0/23 maxlen: 32
134.255.230.0/24 maxlen: 32
134.255.235.0/24 maxlen: 32
134.255.236.0/22 maxlen: 32
134.255.252.0/22 maxlen: 32
185.87.20.0/22 maxlen: 32
193.25.201.0/24 maxlen: 32
2a05:bec0::/29 maxlen: 128
2a05:bec0:53::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:36:ec:9a:aa:22:e0:ab:18:f9:fc:72:4e:36:bb:4b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Validity
Not Before: Sep 28 04:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34cac39f8013b512161cf17d4ea9755b85b0ee57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:c3:99:5a:a3:dc:e7:e0:a3:29:ca:c9:cc:
25:0c:cb:3d:d2:12:ec:99:5c:b1:c5:ea:22:73:86:
be:7f:28:3d:90:87:35:bd:61:ad:83:d1:8b:25:cf:
eb:e1:db:96:25:fd:71:cc:f9:9e:dc:10:64:48:50:
b7:86:cc:71:ca:85:af:26:36:01:04:a0:05:94:08:
77:ee:d1:d0:67:a0:32:57:75:9e:fb:18:b6:3b:87:
c6:03:94:8b:8c:a6:71:4b:2e:8d:4f:f0:35:73:71:
96:0c:cc:b9:5a:bb:a7:94:91:40:b9:32:62:19:20:
1b:3d:18:28:fe:56:51:83:e2:82:19:11:02:5d:29:
75:ff:3d:a1:a4:dc:51:54:1b:d4:02:c1:c1:0e:ad:
ed:13:43:af:8e:ec:b5:3c:38:eb:77:b7:70:a4:e5:
41:f4:ea:58:e3:74:a8:ba:1e:94:77:e0:8a:d3:df:
0a:41:a8:b8:ce:0d:17:96:7f:f8:1b:5c:ce:ec:90:
3f:5c:b6:5d:8e:ba:be:70:b8:5e:28:38:71:8d:44:
3a:41:7b:00:83:3f:43:1b:8a:ae:85:ee:53:94:01:
98:ba:25:6f:1a:1a:37:80:14:8e:62:e0:6a:2c:e7:
45:8d:f5:cc:0c:6f:7a:57:c0:e8:1b:5d:2a:c2:ff:
df:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CA:C3:9F:80:13:B5:12:16:1C:F1:7D:4E:A9:75:5B:85:B0:EE:57
X509v3 Authority Key Identifier:
keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/NMrDn4ATtRIWHPF9Tql1W4Ww7lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.149.0/24
31.214.240.0/21
46.251.225.0/24
46.251.227.0/24
91.217.251.0/24
95.156.225.0-95.156.232.255
109.230.195.0/24
109.230.224.0/20
109.230.252.0/22
134.255.220.0-134.255.230.255
134.255.235.0-134.255.239.255
134.255.252.0/22
185.87.20.0/22
193.25.201.0/24
IPv6:
2a05:bec0::/29
Signature Algorithm: sha256WithRSAEncryption
c6:a6:8c:e5:51:2b:96:e0:a6:53:6c:a2:1f:94:cb:37:3e:ef:
25:37:33:a9:cf:78:08:53:19:08:6b:f3:3e:f0:db:24:ab:ea:
66:55:5f:a4:8d:b3:65:09:da:08:7a:83:8d:b0:bb:1a:4e:52:
9e:f6:df:3a:b7:39:04:1c:95:b3:a8:9b:d2:32:8a:85:43:4d:
bb:fc:07:71:09:3c:12:fa:4a:8e:b8:a4:07:60:78:48:82:ae:
44:99:e8:b0:2f:c1:db:d0:2e:5e:c3:2e:93:0b:0a:89:9c:3d:
04:bd:a7:4f:66:a5:e6:3c:9c:48:36:9b:df:3e:7f:21:ff:0d:
c5:c4:b2:10:09:17:6d:c7:4f:88:6f:54:cf:eb:4a:2b:45:f4:
6f:7d:3b:94:b0:78:8e:f3:44:99:d1:f9:6f:73:ec:20:8f:16:
69:f0:38:a2:ab:a3:a7:43:73:48:6e:db:7f:0c:a5:31:d0:a5:
3d:4a:03:3e:65:95:53:e4:ce:ac:4d:5a:14:bb:ab:86:d1:ea:
ee:0b:97:07:11:91:8f:e9:1b:e1:ff:97:fa:60:e3:1e:ee:83:
43:99:af:f3:30:dd:08:59:03:f1:4e:42:14:08:1a:62:7b:ac:
42:ff:0e:e7:c4:6a:05:49:53:c3:fe:2d:0d:75:a7:2e:83:0d:
58:5d:4f:71
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgISAZI27JqqIuCrGPn8ck42u0v4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx
NTNjYmEwHhcNMjQwOTI4MDQzODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGNhYzM5ZjgwMTNiNTEyMTYxY2YxN2Q0ZWE5NzU1Yjg1YjBlZTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd3DmVqj3OfgoynKycwlDMs90hLs
mVyxxeoic4a+fyg9kIc1vWGtg9GLJc/r4duWJf1xzPme3BBkSFC3hsxxyoWvJjYB
BKAFlAh37tHQZ6AyV3We+xi2O4fGA5SLjKZxSy6NT/A1c3GWDMy5WrunlJFAuTJi
GSAbPRgo/lZRg+KCGRECXSl1/z2hpNxRVBvUAsHBDq3tE0Ovjuy1PDjrd7dwpOVB
9OpY43Souh6Ud+CK098KQai4zg0Xln/4G1zO7JA/XLZdjrq+cLheKDhxjUQ6QXsA
gz9DG4quhe5TlAGYuiVvGho3gBSOYuBqLOdFjfXMDG96V8DoG10qwv/fIQIDAQAB
o4ICgTCCAn0wHQYDVR0OBBYEFDTKw5+AE7USFhzxfU6pdVuFsO5XMB8GA1UdIwQY
MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt
NjViZTU1MDMxNjVkLzEvTk1yRG40QVR0UklXSFBGOVRxbDFXNFd3N2xjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk
LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzByBAIAATBsAwQAH9aV
AwQDH9bwAwQALvvhAwQALvvjAwQAW9n7MAwDBABfnOEDBABfnOgDBABt5sMDBARt
5uADBAJt5vwwDAMEAob/3AMEAIb/5jAMAwQAhv/rAwQEhv/gAwQChv/8AwQCuVcU
AwQAwRnJMA0EAgACMAcDBQMqBb7AMA0GCSqGSIb3DQEBCwUAA4IBAQDGpozlUSuW
4KZTbKIflMs3Pu8lNzOpz3gIUxkIa/M+8Nskq+pmVV+kjbNlCdoIeoONsLsaTlKe
9t86tzkEHJWzqJvSMoqFQ027/AdxCTwS+kqOuKQHYHhIgq5EmeiwL8Hb0C5ewy6T
CwqJnD0EvadPZqXmPJxINpvfPn8h/w3FxLIQCRdtx0+Ib1TP60orRfRvfTuUsHiO
80SZ0flvc+wgjxZp8Diiq6OnQ3NIbtt/DKUx0KU9SgM+ZZVT5M6sTVoUu6uG0eru
C5cHEZGP6Rvh/5f6YOMe7oNDma/zMN0IWQPxTkIUCBpie6xC/w7nxGoFSVPD/i0N
dacugw1YXU9x
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:51:32 2024 by rpki-client on console-fra.rpki-client.org