Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ewvOF2wTawoLpnW1ibEaBTW8EGQ.roa
File: ewvOF2wTawoLpnW1ibEaBTW8EGQ.roa (raw, json)
Hash identifier: p1dyoFougwxzp28Xw/qvIal38OVirpmmQE9Bhhxkx6w=
Subject key identifier: 7B:0B:CE:17:6C:13:6B:0A:0B:A6:75:B5:89:B1:1A:05:35:BC:10:64
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01925E194C6CFD57A0203F682FE694A1B869
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ewvOF2wTawoLpnW1ibEaBTW8EGQ.roa
Signing time: Sat 05 Oct 2024 19:12:49 +0000
ROA not before: Sat 05 Oct 2024 19:12:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209371
IP address blocks: 91.194.55.0/24 maxlen: 24
185.88.175.0/24 maxlen: 24
185.184.24.0/24 maxlen: 24
185.243.181.0/24 maxlen: 24
185.249.200.0/24 maxlen: 24
185.249.201.0/24 maxlen: 24
185.249.203.0/24 maxlen: 24
193.160.140.0/24 maxlen: 24
193.223.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5e:19:4c:6c:fd:57:a0:20:3f:68:2f:e6:94:a1:b8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 5 19:12:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b0bce176c136b0a0ba675b589b11a0535bc1064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:8a:a7:d5:a5:21:26:6c:43:07:92:ca:76:
09:98:5d:66:cd:08:b4:b2:17:cc:89:55:b6:7b:d5:
38:78:6e:22:56:49:84:09:f8:05:88:c1:88:16:5b:
ac:45:92:2d:fc:2a:54:29:c3:eb:e6:28:17:37:bc:
7b:cd:ed:bc:c3:fc:66:32:b6:2f:60:c8:13:44:62:
1a:ef:5d:2c:0c:bb:95:38:51:43:c1:c1:c0:c7:52:
95:a1:22:ef:a9:71:3d:ab:48:22:6a:50:62:f5:f9:
11:76:d2:e8:af:e9:4f:29:1a:10:23:bd:ae:a4:da:
e9:ee:d3:45:69:a0:0d:94:2d:da:34:8b:49:e7:d4:
f2:dc:7e:30:98:e2:ab:08:c1:5c:c2:98:f9:c1:4d:
cd:b9:50:f0:12:d6:e9:9f:74:4b:fe:3c:f9:08:92:
10:3e:11:40:b8:1d:b2:16:ed:5c:41:3d:60:6e:5d:
81:a5:08:f2:b7:30:d9:89:e0:65:f8:88:ca:3a:5f:
66:d8:4c:a9:45:ad:89:4e:33:a6:78:71:f5:ae:07:
e4:98:5d:77:95:2d:20:eb:76:be:b9:9a:30:0b:2f:
cd:c2:f5:ef:be:f3:b1:94:d2:82:37:7f:8a:d3:94:
06:52:77:e6:96:2c:3c:e7:db:cf:79:38:4d:12:77:
76:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0B:CE:17:6C:13:6B:0A:0B:A6:75:B5:89:B1:1A:05:35:BC:10:64
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ewvOF2wTawoLpnW1ibEaBTW8EGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.55.0/24
185.88.175.0/24
185.184.24.0/24
185.243.181.0/24
185.249.200.0/23
185.249.203.0/24
193.160.140.0/24
193.223.106.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a2:b6:ed:fc:8e:00:f3:6b:43:20:e5:b5:6a:1e:d2:a4:d5:
cb:75:1f:e3:4c:33:7e:1b:ac:fa:c0:e6:19:40:ca:bc:0a:76:
18:51:4e:a2:53:a8:d3:cd:9f:50:e0:da:49:22:77:0e:ea:61:
48:b3:db:1b:e2:e4:1f:44:9d:37:d3:1c:fe:86:63:18:16:46:
44:dc:74:17:33:62:99:db:75:26:d2:8e:90:e9:bf:22:4e:9c:
20:05:1c:8b:92:ee:4f:3c:1c:e1:e0:e2:84:dc:72:32:8e:c1:
ab:9d:31:3e:37:ff:53:01:5d:3b:be:1a:71:92:88:b4:85:23:
fd:1c:2b:c7:22:2d:48:bb:a3:84:a4:46:90:4a:09:45:26:ec:
9c:3e:d4:27:63:83:c0:93:46:60:1d:da:cf:11:29:f1:b9:a4:
c9:e7:d6:47:0d:62:1d:0a:e8:e2:97:79:50:8a:9c:f6:2d:5f:
14:33:89:00:e9:0a:55:1c:9c:2e:84:2f:e7:21:ee:cb:6b:14:
5c:09:d0:a3:12:bd:c3:ce:e5:56:87:e6:b4:3b:7f:a5:a2:80:
66:2a:d6:0b:66:8d:c5:74:1c:fe:be:84:1a:89:aa:c8:24:0b:
51:04:bd:3f:4a:34:58:ff:26:10:02:ba:d9:85:6c:f7:2d:de:
2e:12:d5:9f
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZJeGUxs/VegID9oL+aUobhpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjQxMDA1MTkxMjQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjBiY2UxNzZjMTM2YjBhMGJhNjc1YjU4OWIxMWEwNTM1YmMxMDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSyKp9WlISZsQweSynYJmF1mzQi0
shfMiVW2e9U4eG4iVkmECfgFiMGIFlusRZIt/CpUKcPr5igXN7x7ze28w/xmMrYv
YMgTRGIa710sDLuVOFFDwcHAx1KVoSLvqXE9q0gialBi9fkRdtLor+lPKRoQI72u
pNrp7tNFaaANlC3aNItJ59Ty3H4wmOKrCMFcwpj5wU3NuVDwEtbpn3RL/jz5CJIQ
PhFAuB2yFu1cQT1gbl2BpQjytzDZieBl+IjKOl9m2EypRa2JTjOmeHH1rgfkmF13
lS0g63a+uZowCy/NwvXvvvOxlNKCN3+K05QGUnfmliw859vPeThNEnd2uwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFHsLzhdsE2sKC6Z1tYmxGgU1vBBkMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvZXd2T0Yyd1Rhd29McG5XMWliRWFCVFc4RUdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAW8I3AwQA
uVivAwQAubgYAwQAufO1AwQBufnIAwQAufnLAwQAwaCMAwQAwd9qMA0GCSqGSIb3
DQEBCwUAA4IBAQAtorbt/I4A82tDIOW1ah7SpNXLdR/jTDN+G6z6wOYZQMq8CnYY
UU6iU6jTzZ9Q4NpJIncO6mFIs9sb4uQfRJ030xz+hmMYFkZE3HQXM2KZ23Um0o6Q
6b8iTpwgBRyLku5PPBzh4OKE3HIyjsGrnTE+N/9TAV07vhpxkoi0hSP9HCvHIi1I
u6OEpEaQSglFJuycPtQnY4PAk0ZgHdrPESnxuaTJ59ZHDWIdCujil3lQipz2LV8U
M4kA6QpVHJwuhC/nIe7LaxRcCdCjEr3DzuVWh+a0O3+looBmKtYLZo3FdBz+voQa
iarIJAtRBL0/SjRY/yYQArrZhWz3Ld4uEtWf
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:11 2024 by rpki-client on console-ams.rpki-client.org