Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/P1xznfzpqxU99R0xb2PS5VcU1Hw.roa
File: P1xznfzpqxU99R0xb2PS5VcU1Hw.roa (raw, json)
Hash identifier: btJRvMne+RNHW6xTYn9O0CRuLxWyU6du5EUnoERNZgs=
Subject key identifier: 3F:5C:73:9D:FC:E9:AB:15:3D:F5:1D:31:6F:63:D2:E5:57:14:D4:7C
Certificate issuer: /CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Certificate serial: 018CC2DB1457E61596A05F95ADBFCE09DA8A
Authority key identifier: 6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/P1xznfzpqxU99R0xb2PS5VcU1Hw.roa
Signing time: Mon 01 Jan 2024 02:29:46 +0000
ROA not before: Mon 01 Jan 2024 02:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38917
IP address blocks: 185.24.112.0/22 maxlen: 24
109.111.64.0/19 maxlen: 24
87.255.224.0/20 maxlen: 24
87.255.224.0/19 maxlen: 24
149.255.16.0/22 maxlen: 22
87.255.240.0/20 maxlen: 24
87.255.252.0/24 maxlen: 24
217.175.32.0/20 maxlen: 24
87.255.248.0/22 maxlen: 24
176.110.192.0/21 maxlen: 21
176.110.200.0/22 maxlen: 22
176.110.206.0/23 maxlen: 23
176.110.208.0/21 maxlen: 24
185.86.112.0/20 maxlen: 24
194.32.156.0/22 maxlen: 22
2a04:2cc0::/32 maxlen: 32
2a04:2cc3::/32 maxlen: 32
2a04:2cc5::/32 maxlen: 32
2a04:2cc6::/32 maxlen: 32
2a04:2cc2::/32 maxlen: 32
2a04:2cc1::/32 maxlen: 32
2a04:2cc7::/32 maxlen: 32
2a04:2cc4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:14:57:e6:15:96:a0:5f:95:ad:bf:ce:09:da:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Validity
Not Before: Jan 1 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f5c739dfce9ab153df51d316f63d2e55714d47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:15:ee:cf:5a:9b:71:a6:93:9a:ba:f1:57:27:
de:d1:3c:44:0d:31:d1:2b:a8:41:9b:4d:58:33:b4:
de:ee:82:45:86:d5:cc:1a:bf:55:98:e8:27:0a:24:
e7:65:91:8e:22:b9:e0:86:f1:b1:7a:f1:10:14:42:
a9:e4:7b:39:44:ab:3f:3b:26:28:4c:a9:31:88:da:
29:8c:71:d2:04:52:32:38:56:9c:da:da:0b:b5:13:
34:84:80:01:4a:d3:61:02:d8:61:23:78:8c:41:2c:
a9:e1:51:08:5a:7b:11:68:1d:ca:a8:0f:6f:52:98:
fb:ad:00:ea:52:d7:a1:82:2d:4e:29:0f:1d:99:fe:
7a:6f:46:e0:f5:d5:8d:03:93:ec:8a:2f:cf:b7:79:
ee:65:fe:c8:cc:37:b6:32:eb:d8:b2:f7:77:69:63:
7c:72:b9:61:0f:24:18:21:d8:17:3e:97:9b:49:7f:
38:22:34:51:a4:34:be:65:50:19:6f:c1:90:54:67:
2e:b8:19:d4:50:c3:b5:cd:00:43:14:b3:1a:10:8d:
43:9d:bb:6f:3c:5b:07:38:1f:e4:81:f1:b5:7c:35:
de:5d:02:92:69:c7:e9:d9:4c:a0:8a:91:2f:0f:ab:
76:ec:68:ef:e1:79:88:a6:2d:2a:b5:c2:3e:ee:85:
a2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5C:73:9D:FC:E9:AB:15:3D:F5:1D:31:6F:63:D2:E5:57:14:D4:7C
X509v3 Authority Key Identifier:
keyid:6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/P1xznfzpqxU99R0xb2PS5VcU1Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.255.224.0/19
109.111.64.0/19
149.255.16.0/22
176.110.192.0-176.110.203.255
176.110.206.0-176.110.215.255
185.24.112.0/22
185.86.112.0/20
194.32.156.0/22
217.175.32.0/20
IPv6:
2a04:2cc0::/29
Signature Algorithm: sha256WithRSAEncryption
a5:02:ce:e5:e6:bf:09:28:54:7e:e0:a6:ad:65:72:83:c3:2b:
52:74:2f:bf:8a:19:0c:32:07:bc:a6:77:eb:9e:14:70:c9:ec:
b2:3f:e3:db:03:8e:49:9f:37:a4:56:31:83:a2:51:72:e3:c3:
6d:62:d9:83:a3:a2:86:25:99:10:88:29:a7:8f:1d:a0:57:c3:
e0:5b:07:78:8d:e4:c8:12:88:a5:c4:a9:54:46:c8:c5:cb:50:
dd:62:24:ab:31:6f:7e:15:a8:15:d4:22:e7:7d:62:a3:75:4c:
61:04:ba:53:a1:40:36:ab:97:c0:ab:7c:92:e3:a3:bb:f1:3d:
ef:3f:9e:18:0e:90:1c:ba:c2:ee:11:4f:7c:7e:20:35:81:53:
e3:53:50:6e:51:4d:4d:04:9d:90:e0:b5:99:48:fd:d6:99:c6:
9d:25:77:52:9d:61:01:91:21:9f:dc:78:46:85:3d:1d:a4:2c:
97:f8:fc:1f:79:a9:e3:a7:a2:31:b1:d0:22:c8:c4:b6:f6:d5:
41:1a:32:43:88:f7:75:4b:da:bd:7b:a3:15:d7:07:98:35:bb:
f8:25:81:94:fb:28:c2:89:19:91:cc:6b:b2:e3:92:1a:96:2e:
a2:44:7b:5a:ed:9f:f6:c6:99:1d:72:04:56:fe:c8:7a:44:d6:
96:56:ef:34
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgISAYzC2xRX5hWWoF+Vrb/OCdqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWM1NzEyZmJiY2Q4MzI0MTlkNGM1ODg0YWUzYmMzYzRh
MTZlN2IwHhcNMjQwMTAxMDIyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjVjNzM5ZGZjZTlhYjE1M2RmNTFkMzE2ZjYzZDJlNTU3MTRkNDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hXuz1qbcaaTmrrxVyfe0TxEDTHR
K6hBm01YM7Te7oJFhtXMGr9VmOgnCiTnZZGOIrnghvGxevEQFEKp5Hs5RKs/OyYo
TKkxiNopjHHSBFIyOFac2toLtRM0hIABStNhAthhI3iMQSyp4VEIWnsRaB3KqA9v
Upj7rQDqUtehgi1OKQ8dmf56b0bg9dWNA5Psii/Pt3nuZf7IzDe2MuvYsvd3aWN8
crlhDyQYIdgXPpebSX84IjRRpDS+ZVAZb8GQVGcuuBnUUMO1zQBDFLMaEI1Dnbtv
PFsHOB/kgfG1fDXeXQKSacfp2UygipEvD6t27Gjv4XmIpi0qtcI+7oWiMQIDAQAB
o4ICWDCCAlQwHQYDVR0OBBYEFD9cc5386asVPfUdMW9j0uVXFNR8MB8GA1UdIwQY
MBaAFG9cVxL7vNgyQZ1MWISuO8PEoW57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjF4WEV2dTgyREpCblV4WWhLNDd3OFNoYm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNDAzY2MtNGU2Yy00ZmU5LTgzYTEt
NzU1MDUyOWQ4NDdhLzEvUDF4em5menBxeFU5OVIweGIyUFM1VmNVMUh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iNDAzY2MtNGU2Yy00ZmU5LTgzYTEtNzU1MDUyOWQ4NDdh
LzEvYjF4WEV2dTgyREpCblV4WWhLNDd3OFNoYm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTBMBAIAATBGAwQFV//gAwQF
bW9AAwQClf8QMAwDBAawbsADBAKwbsgwDAMEAbBuzgMEA7Bu0AMEArkYcAMEBLlW
cAMEAsIgnAMEBNmvIDANBAIAAjAHAwUDKgQswDANBgkqhkiG9w0BAQsFAAOCAQEA
pQLO5ea/CShUfuCmrWVyg8MrUnQvv4oZDDIHvKZ3654UcMnssj/j2wOOSZ83pFYx
g6JRcuPDbWLZg6OihiWZEIgpp48doFfD4FsHeI3kyBKIpcSpVEbIxctQ3WIkqzFv
fhWoFdQi531io3VMYQS6U6FANquXwKt8kuOju/E97z+eGA6QHLrC7hFPfH4gNYFT
41NQblFNTQSdkOC1mUj91pnGnSV3Up1hAZEhn9x4RoU9HaQsl/j8H3mp46eiMbHQ
IsjEtvbVQRoyQ4j3dUvavXujFdcHmDW7+CWBlPsowokZkcxrsuOSGpYuokR7Wu2f
9saZHXIEVv7IekTWllbvNA==
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:21:50 2024 by rpki-client on console-ams.rpki-client.org