Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/IOiTz57WBnzsDSfb-wiVVvhiSvk.roa
File: IOiTz57WBnzsDSfb-wiVVvhiSvk.roa (raw, json)
Hash identifier: YBgnytpxEyMKK9bcGjkT9YGjmgxVECxd2kgMS8eM66M=
Subject key identifier: 20:E8:93:CF:9E:D6:06:7C:EC:0D:27:DB:FB:08:95:56:F8:62:4A:F9
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 018CC801339F3CAC7790E5565C7904CD0AC4
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/IOiTz57WBnzsDSfb-wiVVvhiSvk.roa
Signing time: Tue 02 Jan 2024 02:29:31 +0000
ROA not before: Tue 02 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5501
IP address blocks: 129.233.128.0/17 maxlen: 17
153.96.220.0/22 maxlen: 22
153.96.253.0/24 maxlen: 24
153.96.254.0/24 maxlen: 24
129.233.252.0/24 maxlen: 24
129.233.252.0/22 maxlen: 22
129.233.253.0/24 maxlen: 24
192.102.165.0/24 maxlen: 24
129.233.255.0/24 maxlen: 24
129.233.254.0/24 maxlen: 24
192.102.172.0/23 maxlen: 23
192.102.171.0/24 maxlen: 24
192.44.0.0/22 maxlen: 22
153.96.54.0/23 maxlen: 23
192.44.10.0/24 maxlen: 24
192.44.13.0/24 maxlen: 24
192.44.17.0/24 maxlen: 24
192.44.24.0/24 maxlen: 24
192.44.37.0/24 maxlen: 24
153.96.0.0/21 maxlen: 21
153.96.10.0/24 maxlen: 24
153.96.8.0/23 maxlen: 23
153.96.12.0/22 maxlen: 22
153.96.16.0/23 maxlen: 23
153.96.24.0/24 maxlen: 24
153.96.18.0/24 maxlen: 24
137.251.0.0/16 maxlen: 16
153.96.19.0/24 maxlen: 24
192.42.64.0/24 maxlen: 24
192.42.63.0/24 maxlen: 24
153.96.144.0/23 maxlen: 23
129.233.0.0/17 maxlen: 17
2a03:db80:4410::/48 maxlen: 48
2a03:db80:4424::/48 maxlen: 48
2a03:db80:4404::/48 maxlen: 48
2a03:db80:4c84::/48 maxlen: 48
2a03:db80:4484::/48 maxlen: 48
2a03:db80:4c80::/48 maxlen: 48
2a03:db80:4480::/48 maxlen: 48
2a03:db80:4420::/48 maxlen: 48
2a03:db80:4414::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:33:9f:3c:ac:77:90:e5:56:5c:79:04:cd:0a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jan 2 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20e893cf9ed6067cec0d27dbfb089556f8624af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b0:55:9b:5e:fa:7b:0f:36:a7:08:52:de:80:
f2:b0:14:35:5c:a3:e3:48:19:c7:ab:66:f8:64:3c:
4e:68:8c:aa:e1:d3:48:e6:81:ab:98:07:a0:d5:0a:
1f:f8:1e:a3:a7:05:30:13:60:d7:d5:ab:98:ff:8c:
92:98:03:1c:51:55:4c:e8:32:ed:d9:9d:e6:85:59:
95:dc:d7:04:56:20:ad:8e:f5:0b:24:ef:b1:ab:af:
44:16:8f:b5:06:b0:5b:41:d1:39:11:94:2c:c9:e3:
aa:7c:61:bc:34:46:4b:8c:c0:11:9b:5d:ec:a9:f9:
2a:84:1c:fb:ed:c3:ba:c1:cf:7c:e5:13:f8:ef:bc:
4a:c1:c1:3f:bd:a8:5a:ac:a5:51:c3:05:f2:b7:d5:
89:17:07:d4:84:e8:51:d3:e6:19:c1:15:f9:b7:d5:
d8:99:be:3f:c7:58:d9:79:e0:86:e3:8d:53:e5:ac:
1e:fa:a5:3f:cb:f1:c6:c2:8f:e1:70:22:f0:ac:3b:
b1:8d:1c:de:f7:d1:fa:87:5a:3d:eb:24:b0:f7:e1:
8f:68:2d:1c:4e:c7:41:fa:a6:09:70:8c:c6:c7:1b:
fe:10:48:32:67:79:1e:a1:7b:3f:ea:55:c7:3a:51:
ac:07:33:7f:bf:c5:c0:a2:24:cd:4b:ad:7f:98:7c:
f8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E8:93:CF:9E:D6:06:7C:EC:0D:27:DB:FB:08:95:56:F8:62:4A:F9
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/IOiTz57WBnzsDSfb-wiVVvhiSvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.233.0.0/16
137.251.0.0/16
153.96.0.0-153.96.10.255
153.96.12.0-153.96.19.255
153.96.24.0/24
153.96.54.0/23
153.96.144.0/23
153.96.220.0/22
153.96.253.0-153.96.254.255
192.42.63.0-192.42.64.255
192.44.0.0/22
192.44.10.0/24
192.44.13.0/24
192.44.17.0/24
192.44.24.0/24
192.44.37.0/24
192.102.165.0/24
192.102.171.0-192.102.173.255
IPv6:
2a03:db80:4404::/48
2a03:db80:4410::/48
2a03:db80:4414::/48
2a03:db80:4420::/48
2a03:db80:4424::/48
2a03:db80:4480::/48
2a03:db80:4484::/48
2a03:db80:4c80::/48
2a03:db80:4c84::/48
Signature Algorithm: sha256WithRSAEncryption
29:97:50:f9:33:35:d6:ca:c3:32:e5:28:19:76:ca:eb:b8:6a:
67:96:d6:e5:80:f2:70:d2:bb:56:05:4c:ce:12:e5:5b:a7:b0:
a6:57:54:5f:f2:00:92:08:1f:81:1e:7f:30:86:3f:95:6e:80:
b9:9e:03:82:a2:36:b5:de:01:2a:71:ae:e8:32:1d:49:c1:1d:
2c:d3:b2:5e:61:d8:e5:8a:33:04:2a:79:50:f2:91:9c:74:7e:
d9:66:6e:fe:e8:82:0b:8d:83:fa:04:70:12:be:86:65:9f:9b:
f8:43:04:aa:f3:bc:09:e4:dd:3a:c2:1a:da:c7:40:a3:70:4b:
0b:a5:f9:42:93:b1:f1:b9:e2:26:3f:63:65:94:44:a9:31:46:
4e:9b:8d:87:b8:3d:4a:45:0d:0b:ca:b3:95:0c:2a:ae:c0:20:
80:8d:a4:49:25:c1:fe:65:83:6a:60:50:02:f3:06:73:f8:9e:
aa:76:e4:13:42:ae:9d:82:63:ad:8f:55:7e:0d:0c:c4:1b:1f:
7a:d8:ee:24:6e:cd:30:43:17:c2:62:dc:7d:70:23:3c:bd:8a:
89:90:dc:8e:c2:52:16:a7:dd:ec:20:b9:8e:72:ac:d4:41:5f:
1f:b4:99:86:cf:f8:22:37:55:ac:c6:ed:bb:f3:ee:c6:79:86:
89:b9:d4:4a
-----BEGIN CERTIFICATE-----
MIIF5zCCBM+gAwIBAgISAYzIATOfPKx3kOVWXHkEzQrEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YTc1ODI2ZTk5MTIyNWE0MjlmZjhhMWU3ZmZkYzgwNDY2
NDIwZGYwHhcNMjQwMTAyMDIyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGU4OTNjZjllZDYwNjdjZWMwZDI3ZGJmYjA4OTU1NmY4NjI0YWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7BVm176ew82pwhS3oDysBQ1XKPj
SBnHq2b4ZDxOaIyq4dNI5oGrmAeg1Qof+B6jpwUwE2DX1auY/4ySmAMcUVVM6DLt
2Z3mhVmV3NcEViCtjvULJO+xq69EFo+1BrBbQdE5EZQsyeOqfGG8NEZLjMARm13s
qfkqhBz77cO6wc985RP477xKwcE/vaharKVRwwXyt9WJFwfUhOhR0+YZwRX5t9XY
mb4/x1jZeeCG441T5awe+qU/y/HGwo/hcCLwrDuxjRze99H6h1o96ySw9+GPaC0c
TsdB+qYJcIzGxxv+EEgyZ3keoXs/6lXHOlGsBzN/v8XAoiTNS61/mHz4/QIDAQAB
o4IC8zCCAu8wHQYDVR0OBBYEFCDok8+e1gZ87A0n2/sIlVb4Ykr5MB8GA1UdIwQY
MBaAFHanWCbpkSJaQp/4oef/3IBGZCDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTct
YWQ4ZmJlYWE4ZGQ5LzEvSU9pVHo1N1dCbnpzRFNmYi13aVZWdmhpU3ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTctYWQ4ZmJlYWE4ZGQ5
LzEvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBBwYIKwYBBQUHAQcBAf8EgfcwgfQwgZgEAgABMIGRAwMA
gekDAwCJ+zALAwMFmWADBACZYAowDAMEAplgDAMEAplgEAMEAJlgGAMEAZlgNgME
AZlgkAMEAplg3DAMAwQAmWD9AwQAmWD+MAwDBADAKj8DBADAKkADBALALAADBADA
LAoDBADALA0DBADALBEDBADALBgDBADALCUDBADAZqUwDAMEAMBmqwMEAcBmrDBX
BAIAAjBRAwcAKgPbgEQEAwcAKgPbgEQQAwcAKgPbgEQUAwcAKgPbgEQgAwcAKgPb
gEQkAwcAKgPbgESAAwcAKgPbgESEAwcAKgPbgEyAAwcAKgPbgEyEMA0GCSqGSIb3
DQEBCwUAA4IBAQApl1D5MzXWysMy5SgZdsrruGpnltblgPJw0rtWBUzOEuVbp7Cm
V1Rf8gCSCB+BHn8whj+VboC5ngOCoja13gEqca7oMh1JwR0s07JeYdjlijMEKnlQ
8pGcdH7ZZm7+6IILjYP6BHASvoZln5v4QwSq87wJ5N06whrax0CjcEsLpflCk7Hx
ueImP2NllESpMUZOm42HuD1KRQ0LyrOVDCquwCCAjaRJJcH+ZYNqYFAC8wZz+J6q
duQTQq6dgmOtj1V+DQzEGx962O4kbs0wQxfCYtx9cCM8vYqJkNyOwlIWp93sILmO
cqzUQV8ftJmGz/giN1Wsxu278+7GeYaJudRK
-----END CERTIFICATE-----
Generated at Fri Jun 7 13:14:18 2024 by rpki-client on console-ams.rpki-client.org