Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/41inKs2yTgIgP7Chioo94ya5ILg.roa
File: 41inKs2yTgIgP7Chioo94ya5ILg.roa (raw, json)
Hash identifier: bhCtk0cZp0hdAKuaLt7vAFINAdOSy5VIarNd96C2ElQ=
Subject key identifier: E3:58:A7:2A:CD:B2:4E:02:20:3F:B0:A1:8A:8A:3D:E3:26:B9:20:B8
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 018E5908FD18659B59DF6CB739B3E79FA531
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/41inKs2yTgIgP7Chioo94ya5ILg.roa
Signing time: Tue 19 Mar 2024 23:25:45 +0000
ROA not before: Tue 19 Mar 2024 23:25:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 31.210.152.0/24 maxlen: 24
31.210.153.0/24 maxlen: 24
31.210.154.0/24 maxlen: 24
31.210.155.0/24 maxlen: 24
31.210.156.0/24 maxlen: 24
31.210.157.0/24 maxlen: 24
31.210.158.0/24 maxlen: 24
31.210.159.0/24 maxlen: 24
37.247.96.0/24 maxlen: 24
37.247.97.0/24 maxlen: 24
37.247.98.0/24 maxlen: 24
37.247.99.0/24 maxlen: 24
37.247.100.0/24 maxlen: 24
37.247.101.0/24 maxlen: 24
37.247.102.0/24 maxlen: 24
37.247.103.0/24 maxlen: 24
37.247.104.0/24 maxlen: 24
37.247.105.0/24 maxlen: 24
37.247.106.0/24 maxlen: 24
37.247.107.0/24 maxlen: 24
37.247.108.0/24 maxlen: 24
37.247.109.0/24 maxlen: 24
37.247.110.0/24 maxlen: 24
37.247.111.0/24 maxlen: 24
46.20.0.0/24 maxlen: 24
46.20.1.0/24 maxlen: 24
46.20.2.0/24 maxlen: 24
46.20.3.0/24 maxlen: 24
46.20.4.0/24 maxlen: 24
46.20.5.0/24 maxlen: 24
46.20.6.0/24 maxlen: 24
46.20.7.0/24 maxlen: 24
46.20.8.0/24 maxlen: 24
46.20.9.0/24 maxlen: 24
46.20.10.0/24 maxlen: 24
46.20.11.0/24 maxlen: 24
46.20.12.0/24 maxlen: 24
46.20.13.0/24 maxlen: 24
46.20.14.0/24 maxlen: 24
46.20.15.0/24 maxlen: 24
89.107.224.0/24 maxlen: 24
89.107.225.0/24 maxlen: 24
89.107.226.0/24 maxlen: 24
89.107.227.0/24 maxlen: 24
89.107.228.0/24 maxlen: 24
89.107.229.0/24 maxlen: 24
89.107.230.0/24 maxlen: 24
89.107.231.0/24 maxlen: 24
95.130.168.0/24 maxlen: 24
95.130.169.0/24 maxlen: 24
95.130.170.0/24 maxlen: 24
95.130.171.0/24 maxlen: 24
95.130.172.0/24 maxlen: 24
95.130.173.0/24 maxlen: 24
95.130.174.0/24 maxlen: 24
95.130.175.0/24 maxlen: 24
109.235.248.0/24 maxlen: 24
109.235.249.0/24 maxlen: 24
109.235.250.0/24 maxlen: 24
109.235.251.0/24 maxlen: 24
109.235.252.0/24 maxlen: 24
109.235.253.0/24 maxlen: 24
109.235.254.0/24 maxlen: 24
109.235.255.0/24 maxlen: 24
185.29.120.0/24 maxlen: 24
185.29.121.0/24 maxlen: 24
185.29.122.0/24 maxlen: 24
185.29.123.0/24 maxlen: 24
2a04:4280::/29 maxlen: 48
2a04:4280:10::/48 maxlen: 48
2a04:4280:100::/48 maxlen: 48
2a04:4280:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 02:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:59:08:fd:18:65:9b:59:df:6c:b7:39:b3:e7:9f:a5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Mar 19 23:25:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e358a72acdb24e02203fb0a18a8a3de326b920b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8f:d2:ea:ae:72:47:15:09:0f:e0:93:ef:31:
73:e7:02:1b:bb:e2:3b:b4:bc:87:c9:c8:15:f9:e7:
b6:2f:7e:92:3e:e6:4f:86:2e:b2:15:e0:47:4d:6a:
05:03:09:77:7d:34:dc:14:2d:94:72:e9:2c:9c:98:
77:dd:ef:e5:f1:b9:a3:7b:8c:44:eb:d8:db:69:9e:
98:80:87:a9:b9:71:e8:d7:a6:50:71:a7:27:e6:21:
79:ee:31:22:9f:1c:6d:cd:93:1a:c2:69:73:39:90:
8d:73:e4:12:5a:52:a8:57:c8:83:32:9b:70:e2:84:
c3:a5:64:18:41:bc:5b:21:06:86:73:21:04:c1:9b:
82:be:5f:2e:d0:eb:fa:32:ff:fa:8b:5a:34:49:5a:
62:7f:08:da:59:43:7d:49:13:ad:e9:91:3e:67:50:
e8:ac:16:86:44:f6:e2:b5:c5:f2:e6:be:09:dc:fa:
7d:1d:a2:b3:db:ef:d9:b4:fb:5d:c6:2f:61:97:ad:
99:c1:e3:f0:fb:99:aa:60:49:ea:c1:b3:f3:36:be:
8f:cc:0c:e6:8d:68:11:f6:cc:b2:e7:ce:cb:15:fe:
25:0a:f0:b3:0b:06:b1:12:0f:b2:12:dc:60:23:7f:
e9:2a:f7:d3:bf:bb:c1:d5:24:95:71:10:4f:ad:c1:
a1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:58:A7:2A:CD:B2:4E:02:20:3F:B0:A1:8A:8A:3D:E3:26:B9:20:B8
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/41inKs2yTgIgP7Chioo94ya5ILg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.152.0/21
37.247.96.0/20
46.20.0.0/20
89.107.224.0/21
95.130.168.0/21
109.235.248.0/21
185.29.120.0/22
IPv6:
2a04:4280::/29
Signature Algorithm: sha256WithRSAEncryption
1a:46:8c:17:3e:8a:75:aa:dc:cc:96:3d:bd:e2:a0:63:77:c7:
50:fd:0e:d1:78:c4:7d:be:bf:45:b4:f2:53:53:db:b4:28:26:
17:1c:c9:9f:96:20:74:e3:b9:42:e7:38:b5:54:16:31:40:9a:
62:e3:54:96:21:56:ea:d4:37:6a:0f:82:c7:ca:d9:67:98:7f:
1e:5e:6d:7a:bc:89:f0:0c:bd:05:e2:a2:1f:3c:21:3b:5f:d4:
45:91:44:3e:1e:56:fa:93:9a:50:26:58:60:99:83:95:b1:3d:
d6:c0:18:9b:64:14:42:a2:a7:d5:46:ad:52:7e:24:af:be:d6:
b8:dc:ed:20:81:4e:68:99:1b:58:ea:d9:ad:3d:62:0a:d9:04:
1f:bd:9a:1b:8b:86:6b:ea:62:df:f7:b1:87:dd:27:0a:40:c6:
93:c9:5d:98:a1:45:c7:6d:9a:45:a8:cb:87:47:8f:d5:07:64:
ff:b8:b6:7d:33:b1:a3:e5:98:8a:fe:3d:ad:fb:63:28:cf:8b:
9b:84:5a:ea:74:ce:28:5d:a9:cd:8b:65:4c:9d:42:8d:d9:0d:
49:43:ef:03:a9:64:59:f9:a4:ba:bb:06:f6:e1:55:fd:98:8c:
9d:09:bb:cc:12:cb:37:f4:49:2a:3c:1d:f0:4e:00:9f:0f:fd:
99:5b:06:b8
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAY5ZCP0YZZtZ32y3ObPnn6UxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2
MDk4YjcwHhcNMjQwMzE5MjMyNTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzU4YTcyYWNkYjI0ZTAyMjAzZmIwYTE4YThhM2RlMzI2YjkyMGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI/S6q5yRxUJD+CT7zFz5wIbu+I7
tLyHycgV+ee2L36SPuZPhi6yFeBHTWoFAwl3fTTcFC2UcuksnJh33e/l8bmje4xE
69jbaZ6YgIepuXHo16ZQcacn5iF57jEinxxtzZMawmlzOZCNc+QSWlKoV8iDMptw
4oTDpWQYQbxbIQaGcyEEwZuCvl8u0Ov6Mv/6i1o0SVpifwjaWUN9SROt6ZE+Z1Do
rBaGRPbitcXy5r4J3Pp9HaKz2+/ZtPtdxi9hl62ZwePw+5mqYEnqwbPzNr6PzAzm
jWgR9syy587LFf4lCvCzCwaxEg+yEtxgI3/pKvfTv7vB1SSVcRBPrcGh0wIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFONYpyrNsk4CID+woYqKPeMmuSC4MB8GA1UdIwQY
MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt
NDQzYmU2M2ZjMTIzLzEvNDFpbktzMnlUZ0lnUDdDaGlvbzk0eWE1SUxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz
LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQDH9KYAwQE
JfdgAwQELhQAAwQDWWvgAwQDX4KoAwQDbev4AwQCuR14MA0EAgACMAcDBQMqBEKA
MA0GCSqGSIb3DQEBCwUAA4IBAQAaRowXPop1qtzMlj294qBjd8dQ/Q7ReMR9vr9F
tPJTU9u0KCYXHMmfliB047lC5zi1VBYxQJpi41SWIVbq1DdqD4LHytlnmH8eXm16
vInwDL0F4qIfPCE7X9RFkUQ+Hlb6k5pQJlhgmYOVsT3WwBibZBRCoqfVRq1SfiSv
vta43O0ggU5omRtY6tmtPWIK2QQfvZobi4Zr6mLf97GH3ScKQMaTyV2YoUXHbZpF
qMuHR4/VB2T/uLZ9M7Gj5ZiK/j2t+2Moz4ubhFrqdM4oXanNi2VMnUKN2Q1JQ+8D
qWRZ+aS6uwb24VX9mIydCbvMEss39EkqPB3wTgCfD/2ZWwa4
-----END CERTIFICATE-----
Generated at Thu May 2 09:20:13 2024 by rpki-client on console-fra.rpki-client.org