Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/pFbiqH-AVSDrlPibCAm8Tx_RqxA.roa
File: pFbiqH-AVSDrlPibCAm8Tx_RqxA.roa (raw, json)
Hash identifier: vFuC/8HQDnoiduSFW3F9UL5SoiQWkcbKC8xi6F6oli4=
Subject key identifier: A4:56:E2:A8:7F:80:55:20:EB:94:F8:9B:08:09:BC:4F:1F:D1:AB:10
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 018CC7272BB48CDFACE864067D8D30BCDE22
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/pFbiqH-AVSDrlPibCAm8Tx_RqxA.roa
Signing time: Mon 01 Jan 2024 22:31:22 +0000
ROA not before: Mon 01 Jan 2024 22:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56911
IP address blocks: 176.58.80.0/21 maxlen: 21
185.169.238.0/23 maxlen: 24
185.169.237.0/24 maxlen: 24
185.169.236.0/23 maxlen: 24
185.169.236.0/24 maxlen: 24
195.234.92.0/24 maxlen: 24
185.49.248.0/22 maxlen: 24
185.146.64.0/24 maxlen: 24
2a0a:7300::/32 maxlen: 36
2a01:a620::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:2b:b4:8c:df:ac:e8:64:06:7d:8d:30:bc:de:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Jan 1 22:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a456e2a87f805520eb94f89b0809bc4f1fd1ab10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:86:f6:e3:eb:74:59:11:e8:73:17:41:86:dc:
4c:e0:de:bc:db:db:92:49:8c:e4:0a:5c:1d:f3:43:
33:cb:83:73:ad:61:7f:f4:fb:ee:13:1b:cb:a2:56:
a9:20:c6:4f:70:53:18:df:68:6a:82:05:ff:3e:30:
50:52:2b:8d:b1:39:cc:7a:08:38:a6:0c:df:3a:6f:
30:aa:f2:64:f8:7f:43:e3:ca:92:b2:fb:2d:1a:a0:
31:93:56:e8:8c:f0:5c:1c:65:38:c4:46:f9:16:df:
e3:ee:c1:94:56:07:64:7f:bc:71:82:04:9a:0c:5e:
6a:d4:b5:ab:e5:31:31:ab:de:0f:4e:03:2a:7f:52:
6a:cf:40:1a:d3:3f:47:dc:27:86:2d:26:69:72:47:
92:3a:6f:ea:88:5e:52:fd:11:14:1b:69:a6:f2:cc:
9e:36:cc:77:66:80:1f:49:20:00:49:9f:91:ee:8a:
6e:d0:55:73:e7:b6:51:39:d3:b2:c9:d7:89:29:ab:
0f:7c:78:53:d3:6b:a3:14:81:e2:2a:2d:44:28:d4:
53:4c:9d:14:63:68:48:a2:cb:b4:b9:fd:56:36:d4:
08:ac:0b:c4:d6:a6:30:a4:a8:a9:b2:3a:7d:80:77:
8f:20:a6:ca:55:fd:cc:ff:01:13:af:d4:60:e0:c3:
b8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:56:E2:A8:7F:80:55:20:EB:94:F8:9B:08:09:BC:4F:1F:D1:AB:10
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/pFbiqH-AVSDrlPibCAm8Tx_RqxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.58.80.0/21
185.49.248.0/22
185.146.64.0/24
185.169.236.0/22
195.234.92.0/24
IPv6:
2a01:a620::/32
2a0a:7300::/32
Signature Algorithm: sha256WithRSAEncryption
b1:48:a5:46:7c:08:df:df:72:73:7b:e0:aa:ad:7f:47:69:ff:
a0:00:bd:ce:43:2e:79:3d:ff:b2:fe:f9:e1:34:de:c3:2f:e5:
c2:3f:e2:7d:47:ea:1f:8f:eb:14:b9:0d:1f:7a:6d:60:76:95:
91:da:f7:07:a3:14:40:fc:00:a2:64:8b:95:a6:90:15:db:1a:
12:af:61:e8:de:02:b4:eb:b8:51:c7:60:f2:4c:b6:6d:4c:54:
f9:04:25:0f:59:47:36:18:be:b1:bd:d1:b9:d1:32:63:6a:db:
14:13:15:b1:db:29:7d:03:4e:4e:a0:24:7c:19:d8:c2:34:8e:
c2:e1:fa:6d:1e:bd:32:5a:e7:34:95:70:f1:c8:2c:c0:1c:66:
d5:08:76:1d:8d:f5:c0:29:9a:b4:5d:67:e2:2e:aa:c0:45:d1:
2c:72:ab:7b:c6:cc:a5:8b:7e:77:0b:7d:46:9b:e8:aa:9d:0a:
53:f0:8f:e9:15:77:b6:48:8f:05:39:f1:17:70:35:3d:ee:b7:
22:fb:72:e4:d8:00:60:ac:c1:81:09:f3:d2:f4:f7:b0:45:6e:
59:1d:9e:bc:31:51:21:7f:06:84:b2:05:97:8d:6a:4d:9f:bb:
29:f9:e8:78:6f:48:80:01:17:42:76:bd:21:a5:4f:93:f8:75:
51:2f:fe:21
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYzHJyu0jN+s6GQGfY0wvN4iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZjVlZDA0MGVmZTJlNTgxNzU0ZGViNWMzY2Q4MmQ5OWRm
ZWU4ZDkwHhcNMjQwMTAxMjIzMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDU2ZTJhODdmODA1NTIwZWI5NGY4OWIwODA5YmM0ZjFmZDFhYjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYb24+t0WRHocxdBhtxM4N6829uS
SYzkClwd80Mzy4NzrWF/9PvuExvLolapIMZPcFMY32hqggX/PjBQUiuNsTnMegg4
pgzfOm8wqvJk+H9D48qSsvstGqAxk1bojPBcHGU4xEb5Ft/j7sGUVgdkf7xxggSa
DF5q1LWr5TExq94PTgMqf1Jqz0Aa0z9H3CeGLSZpckeSOm/qiF5S/REUG2mm8sye
Nsx3ZoAfSSAASZ+R7opu0FVz57ZROdOyydeJKasPfHhT02ujFIHiKi1EKNRTTJ0U
Y2hIosu0uf1WNtQIrAvE1qYwpKipsjp9gHePIKbKVf3M/wETr9Rg4MO41wIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFKRW4qh/gFUg65T4mwgJvE8f0asQMB8GA1UdIwQY
MBaAFF317QQO/i5YF1TetcPNgtmd/ujZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iM2Q3NmYtNmVmOS00YzRhLTgxMmMt
YmVmZTRiMzRjNmYwLzEvcEZiaXFILUFWU0RybFBpYkNBbThUeF9ScXhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9iM2Q3NmYtNmVmOS00YzRhLTgxMmMtYmVmZTRiMzRjNmYw
LzEvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQDsDpQAwQC
uTH4AwQAuZJAAwQCuansAwQAw+pcMBQEAgACMA4DBQAqAaYgAwUAKgpzADANBgkq
hkiG9w0BAQsFAAOCAQEAsUilRnwI399yc3vgqq1/R2n/oAC9zkMueT3/sv754TTe
wy/lwj/ifUfqH4/rFLkNH3ptYHaVkdr3B6MUQPwAomSLlaaQFdsaEq9h6N4CtOu4
Ucdg8ky2bUxU+QQlD1lHNhi+sb3RudEyY2rbFBMVsdspfQNOTqAkfBnYwjSOwuH6
bR69MlrnNJVw8cgswBxm1Qh2HY31wCmatF1n4i6qwEXRLHKre8bMpYt+dwt9Rpvo
qp0KU/CP6RV3tkiPBTnxF3A1Pe63Ivty5NgAYKzBgQnz0vT3sEVuWR2evDFRIX8G
hLIFl41qTZ+7KfnoeG9IgAEXQna9IaVPk/h1US/+IQ==
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:03:24 2024 by rpki-client on console-fra.rpki-client.org