Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/X4S9KmsL8qhHYKZd9AWGDRke6zM.roa
File: X4S9KmsL8qhHYKZd9AWGDRke6zM.roa (raw, json)
Hash identifier: +25tJ3qHS/2iKasbcgjwcPNK1O9F4VilbjVymgpOXaU=
Subject key identifier: 5F:84:BD:2A:6B:0B:F2:A8:47:60:A6:5D:F4:05:86:0D:19:1E:EB:33
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 018CC3B7053B6585EB2227F7A8E36C2BC8C4
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/X4S9KmsL8qhHYKZd9AWGDRke6zM.roa
Signing time: Mon 01 Jan 2024 06:30:00 +0000
ROA not before: Mon 01 Jan 2024 06:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47330
IP address blocks: 188.213.69.0/24 maxlen: 24
188.213.66.0/24 maxlen: 24
188.213.67.0/24 maxlen: 24
188.213.68.0/24 maxlen: 24
188.213.65.0/24 maxlen: 24
37.156.28.0/23 maxlen: 23
92.114.16.0/22 maxlen: 22
2a00:5ca6::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:05:3b:65:85:eb:22:27:f7:a8:e3:6c:2b:c8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jan 1 06:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f84bd2a6b0bf2a84760a65df405860d191eeb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:58:d0:47:ca:e2:82:39:10:3a:9e:43:40:
fc:91:78:61:fe:e6:9c:47:dc:e0:54:52:a6:b4:b8:
12:ff:1c:78:67:4f:6f:f1:6a:95:79:cd:9c:ae:fb:
3b:54:95:96:cb:0a:55:22:ef:24:e9:ee:8c:6c:0f:
e2:af:b0:1c:59:53:67:07:27:93:64:eb:aa:e4:62:
9a:73:a8:61:d3:e0:1b:4c:09:90:24:96:61:64:f6:
77:f7:42:8f:1f:7e:4d:3c:7e:dd:64:8c:bd:5b:11:
ef:5e:c8:24:b2:59:f1:16:d5:c8:61:50:1c:15:5d:
9e:15:93:2d:a7:74:c3:31:fd:00:3d:f5:ac:5d:3e:
8b:d9:d2:71:3c:8c:6f:e1:bc:52:49:01:84:37:dd:
8b:20:aa:14:3e:8c:ad:2d:83:e7:6d:4c:af:c6:35:
7e:be:a2:88:60:97:63:0d:5d:ef:90:a0:b9:6e:d4:
00:27:12:55:97:01:7a:dc:0d:e7:fb:f0:96:74:8c:
5a:a8:dd:f0:ae:ff:fe:71:2f:cc:64:39:5d:80:98:
bf:b1:49:cd:e1:42:f3:a4:ec:bf:6c:8b:35:70:05:
69:b5:54:12:9e:30:94:ca:0c:5a:2f:1e:dc:f2:42:
28:28:af:fd:ac:65:cd:35:a6:c2:00:5f:01:73:87:
c5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:84:BD:2A:6B:0B:F2:A8:47:60:A6:5D:F4:05:86:0D:19:1E:EB:33
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/X4S9KmsL8qhHYKZd9AWGDRke6zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.28.0/23
92.114.16.0/22
188.213.65.0-188.213.69.255
IPv6:
2a00:5ca6::/31
Signature Algorithm: sha256WithRSAEncryption
72:10:f0:c4:61:49:a6:5f:9d:6d:e2:da:4a:cc:74:23:b9:11:
96:b1:13:48:4d:8e:63:75:73:58:78:90:f5:61:7f:8b:e2:6e:
72:88:13:f8:32:0f:fa:5a:ee:d0:39:19:26:37:9c:7b:1b:5a:
ea:69:b2:1e:04:dc:e9:49:f8:16:8a:de:04:1e:86:6d:0f:07:
d4:3b:94:f2:e2:13:93:dc:74:61:c0:9d:fc:b9:d3:19:f1:95:
b8:a0:04:fc:6b:07:6a:3a:6e:10:53:12:90:b1:e0:d8:46:a8:
74:e1:bf:11:fb:dd:14:c9:69:5a:fc:a1:07:91:d5:51:0b:4a:
24:e9:11:9a:c3:33:8c:30:e2:47:30:44:ae:09:a4:fb:fc:22:
5e:a4:a4:bc:9d:cf:f3:e7:0e:4f:3c:d3:3a:b8:9e:df:c8:12:
3e:59:b4:72:3e:98:df:28:08:80:17:c5:3f:1a:e9:f0:53:10:
b0:c0:81:61:89:d0:b4:29:6f:66:14:83:20:82:14:83:5e:a1:
33:89:47:1b:69:84:25:86:d6:c3:80:ae:8d:1c:d9:15:a0:ae:
6b:74:44:10:d0:ca:93:6b:2c:b2:d6:2d:b7:b7:b5:8e:09:3a:
6e:2c:40:80:3b:f8:d8:7c:7c:28:4f:90:aa:d3:ba:96:2b:bb:
a9:38:39:e0
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYzDtwU7ZYXrIif3qONsK8jEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4
OTk1YWIwHhcNMjQwMTAxMDYzMDAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Zjg0YmQyYTZiMGJmMmE4NDc2MGE2NWRmNDA1ODYwZDE5MWVlYjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeZY0EfK4oI5EDqeQ0D8kXhh/uac
R9zgVFKmtLgS/xx4Z09v8WqVec2crvs7VJWWywpVIu8k6e6MbA/ir7AcWVNnByeT
ZOuq5GKac6hh0+AbTAmQJJZhZPZ390KPH35NPH7dZIy9WxHvXsgkslnxFtXIYVAc
FV2eFZMtp3TDMf0APfWsXT6L2dJxPIxv4bxSSQGEN92LIKoUPoytLYPnbUyvxjV+
vqKIYJdjDV3vkKC5btQAJxJVlwF63A3n+/CWdIxaqN3wrv/+cS/MZDldgJi/sUnN
4ULzpOy/bIs1cAVptVQSnjCUygxaLx7c8kIoKK/9rGXNNabCAF8Bc4fFlQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFF+EvSprC/KoR2CmXfQFhg0ZHuszMB8GA1UdIwQY
MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt
NDBiNmQ2N2ZjZDk0LzEvWDRTOUttc0w4cWhIWUtaZDlBV0dEUmtlNnpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0
LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQBJZwcAwQC
XHIQMAwDBAC81UEDBAG81UQwDQQCAAIwBwMFASoAXKYwDQYJKoZIhvcNAQELBQAD
ggEBAHIQ8MRhSaZfnW3i2krMdCO5EZaxE0hNjmN1c1h4kPVhf4vibnKIE/gyD/pa
7tA5GSY3nHsbWuppsh4E3OlJ+BaK3gQehm0PB9Q7lPLiE5PcdGHAnfy50xnxlbig
BPxrB2o6bhBTEpCx4NhGqHThvxH73RTJaVr8oQeR1VELSiTpEZrDM4ww4kcwRK4J
pPv8Il6kpLydz/PnDk880zq4nt/IEj5ZtHI+mN8oCIAXxT8a6fBTELDAgWGJ0LQp
b2YUgyCCFINeoTOJRxtphCWG1sOAro0c2RWgrmt0RBDQypNrLLLWLbe3tY4JOm4s
QIA7+Nh8fChPkKrTupYru6k4OeA=
-----END CERTIFICATE-----
Generated at Sun Jun 30 08:21:40 2024 by rpki-client on console-ams.rpki-client.org