Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/uRxAkO0VD8K2UqCbgGXwVmX7uJ4.roa
File: uRxAkO0VD8K2UqCbgGXwVmX7uJ4.roa (raw, json)
Hash identifier: 9/hPoXVDP+7tt/TcWt2QZMdAKcGAf/ZLz4gB4D/g334=
Subject key identifier: B9:1C:40:90:ED:15:0F:C2:B6:52:A0:9B:80:65:F0:56:65:FB:B8:9E
Certificate issuer: /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial: 018CC9BCE0D930CE84928953BB6E475827C0
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/uRxAkO0VD8K2UqCbgGXwVmX7uJ4.roa
Signing time: Tue 02 Jan 2024 10:34:07 +0000
ROA not before: Tue 02 Jan 2024 10:34:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41364
IP address blocks: 185.140.168.0/22 maxlen: 22
194.116.108.0/22 maxlen: 22
194.116.106.0/23 maxlen: 23
194.116.112.0/21 maxlen: 21
194.116.124.0/23 maxlen: 23
194.116.120.0/22 maxlen: 22
194.116.126.0/24 maxlen: 24
194.116.127.0/24 maxlen: 24
194.116.72.0/23 maxlen: 23
194.116.74.0/23 maxlen: 23
194.116.76.0/22 maxlen: 24
194.116.80.0/23 maxlen: 23
194.116.82.0/24 maxlen: 24
194.116.83.0/24 maxlen: 24
194.116.84.0/24 maxlen: 24
194.116.85.0/24 maxlen: 24
194.116.86.0/23 maxlen: 23
194.116.88.0/22 maxlen: 22
194.116.94.0/23 maxlen: 23
194.116.92.0/24 maxlen: 24
194.116.93.0/24 maxlen: 24
194.116.100.0/24 maxlen: 24
194.116.100.0/22 maxlen: 24
194.116.101.0/24 maxlen: 24
194.116.102.0/23 maxlen: 23
194.116.104.0/24 maxlen: 24
194.116.105.0/24 maxlen: 24
193.42.134.0/24 maxlen: 24
2a07:1ec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:e0:d9:30:ce:84:92:89:53:bb:6e:47:58:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Validity
Not Before: Jan 2 10:34:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b91c4090ed150fc2b652a09b8065f05665fbb89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2b:61:4b:6d:57:20:0c:a4:aa:02:be:46:7a:
a9:2e:46:3c:5a:db:a8:e3:08:19:e2:47:9a:17:bb:
8a:4e:68:bc:0d:26:33:fd:9d:a6:11:77:37:ea:f9:
74:a1:75:20:a4:e9:75:77:3b:ac:69:18:e8:b2:51:
4d:33:06:b5:83:09:47:1b:09:30:88:76:7d:ef:9d:
25:32:57:77:4e:e8:6d:ee:ac:77:39:65:e7:01:2d:
9e:21:8b:f2:bd:90:9a:a8:ea:e3:3f:9b:25:38:55:
11:29:f5:99:f4:4d:28:c4:aa:15:e9:10:ea:a6:74:
b4:6d:49:fe:5e:9f:86:84:3e:24:ce:f7:60:f8:21:
fd:fb:94:77:cc:1d:bf:9b:97:25:34:29:03:6f:60:
15:4c:09:51:6c:33:21:62:be:a0:94:64:99:82:d6:
28:47:a8:c0:45:e0:05:7a:a5:02:81:e3:8c:19:9d:
f5:29:e8:d9:66:cc:92:02:3d:30:d9:4c:5e:31:42:
33:d5:8d:ef:68:31:4f:22:e0:b0:a1:8d:58:be:db:
6c:87:87:66:7c:fa:66:bb:51:56:ce:46:f7:09:4a:
c8:80:14:6d:38:93:fb:8c:9f:6f:35:9d:b8:c6:e3:
e1:97:99:65:d2:2e:7e:b6:dc:8a:b6:db:7b:22:9a:
33:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1C:40:90:ED:15:0F:C2:B6:52:A0:9B:80:65:F0:56:65:FB:B8:9E
X509v3 Authority Key Identifier:
keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/uRxAkO0VD8K2UqCbgGXwVmX7uJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.168.0/22
193.42.134.0/24
194.116.72.0-194.116.95.255
194.116.100.0-194.116.127.255
IPv6:
2a07:1ec0::/29
Signature Algorithm: sha256WithRSAEncryption
51:35:c9:4d:30:44:1b:61:33:eb:4c:0c:ca:8c:cf:b6:24:92:
89:c5:38:fd:02:be:31:be:1d:02:9f:5d:16:6e:35:2b:ed:3f:
b2:5a:ba:5d:44:c9:c2:a8:30:3d:c5:ff:7b:2b:8c:1d:c1:88:
ae:5f:af:cc:f4:20:21:bb:45:d3:89:90:1b:63:5c:87:7e:79:
ec:04:1e:ef:41:34:c3:56:4e:1c:bb:ec:ca:7d:7c:e6:42:bc:
a4:62:64:27:9f:b2:29:16:c6:0f:04:74:49:78:42:31:34:e7:
2d:0e:78:23:b1:31:45:ce:e5:75:0d:1f:ff:5f:44:a8:5d:d9:
b5:6b:cc:0e:39:27:e5:38:6e:33:3a:69:02:bc:77:14:ac:11:
29:95:98:6b:0d:17:ee:54:ae:ed:27:3b:b3:48:ab:bb:0d:01:
14:5d:f1:66:ed:4a:09:7d:03:ac:b7:85:07:6b:0e:a2:4b:ac:
79:cc:a7:a6:b8:7a:43:61:52:32:b9:1b:fe:24:c9:46:5b:5c:
e6:f4:2c:cd:fa:e3:8f:d1:86:5d:48:1a:c3:d2:d5:07:53:56:
d5:3b:9f:33:55:00:5d:5f:48:7d:e2:f7:f1:75:1b:74:45:74:
02:5a:a8:2c:c8:21:f1:90:47:6c:89:a9:19:34:e3:52:c0:82:
f4:c1:78:2e
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAYzJvODZMM6EkolTu25HWCfAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjODg3MzAyZDFlNzQwZjVmOTg0ODFmYjRiN2E0NjE2OTZi
ZmU1YzEwHhcNMjQwMTAyMTAzNDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTFjNDA5MGVkMTUwZmMyYjY1MmEwOWI4MDY1ZjA1NjY1ZmJiODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCthS21XIAykqgK+RnqpLkY8Wtuo
4wgZ4keaF7uKTmi8DSYz/Z2mEXc36vl0oXUgpOl1dzusaRjoslFNMwa1gwlHGwkw
iHZ9750lMld3Tuht7qx3OWXnAS2eIYvyvZCaqOrjP5slOFURKfWZ9E0oxKoV6RDq
pnS0bUn+Xp+GhD4kzvdg+CH9+5R3zB2/m5clNCkDb2AVTAlRbDMhYr6glGSZgtYo
R6jAReAFeqUCgeOMGZ31KejZZsySAj0w2UxeMUIz1Y3vaDFPIuCwoY1Yvttsh4dm
fPpmu1FWzkb3CUrIgBRtOJP7jJ9vNZ24xuPhl5ll0i5+ttyKttt7Ipoz4wIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFLkcQJDtFQ/CtlKgm4Bl8FZl+7ieMB8GA1UdIwQY
MBaAFCyIcwLR50D1+YSB+0t6RhaWv+XBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEloekF0SG5RUFg1aElIN1MzcEdGcGFfNWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NDViNzQtZDhmYi00NDg4LWJiZmQt
YzAyOGQ5MWViYzljLzEvdVJ4QWtPMFZEOEsyVXFDYmdHWHdWbVg3dUo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82NDViNzQtZDhmYi00NDg4LWJiZmQtYzAyOGQ5MWViYzlj
LzEvTEloekF0SG5RUFg1aElIN1MzcEdGcGFfNWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAuBAIAATAoAwQCuYyoAwQA
wSqGMAwDBAPCdEgDBAXCdEAwDAMEAsJ0ZAMEB8J0ADANBAIAAjAHAwUDKgcewDAN
BgkqhkiG9w0BAQsFAAOCAQEAUTXJTTBEG2Ez60wMyozPtiSSicU4/QK+Mb4dAp9d
Fm41K+0/slq6XUTJwqgwPcX/eyuMHcGIrl+vzPQgIbtF04mQG2Nch3557AQe70E0
w1ZOHLvsyn185kK8pGJkJ5+yKRbGDwR0SXhCMTTnLQ54I7ExRc7ldQ0f/19EqF3Z
tWvMDjkn5ThuMzppArx3FKwRKZWYaw0X7lSu7Sc7s0iruw0BFF3xZu1KCX0DrLeF
B2sOokusecynprh6Q2FSMrkb/iTJRltc5vQszfrjj9GGXUgaw9LVB1NW1TufM1UA
XV9IfeL38XUbdEV0AlqoLMgh8ZBHbImpGTTjUsCC9MF4Lg==
-----END CERTIFICATE-----
Generated at Sun May 19 20:34:21 2024 by rpki-client on console-fra.rpki-client.org