Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/svQ_CDdXUJ6yAVdnPXLsGh3wO3s.roa
File: svQ_CDdXUJ6yAVdnPXLsGh3wO3s.roa (raw, json)
Hash identifier: SY/ycIiC3tiD47jtZZYs/Cy3RrtjBBu4maMnEKneLDs=
Subject key identifier: B2:F4:3F:08:37:57:50:9E:B2:01:57:67:3D:72:EC:1A:1D:F0:3B:7B
Certificate issuer: /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial: 018DA77E31E6EC3290D5642A93CD5F9AC870
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/svQ_CDdXUJ6yAVdnPXLsGh3wO3s.roa
Signing time: Wed 14 Feb 2024 12:01:21 +0000
ROA not before: Wed 14 Feb 2024 12:01:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57391
IP address blocks: 88.135.40.0/24 maxlen: 24
88.135.41.0/24 maxlen: 24
88.135.42.0/24 maxlen: 24
88.135.43.0/24 maxlen: 24
88.135.44.0/24 maxlen: 24
88.135.45.0/24 maxlen: 24
88.135.46.0/23 maxlen: 23
88.135.46.0/24 maxlen: 24
88.135.47.0/24 maxlen: 24
185.67.101.0/24 maxlen: 24
185.132.80.0/24 maxlen: 24
185.132.82.0/24 maxlen: 24
185.233.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:7e:31:e6:ec:32:90:d5:64:2a:93:cd:5f:9a:c8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Validity
Not Before: Feb 14 12:01:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2f43f083757509eb20157673d72ec1a1df03b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:1e:29:53:f9:6d:9e:15:0c:66:c8:38:34:
ba:7f:8a:5a:f0:cf:25:9a:48:77:73:08:ff:5c:e7:
6f:96:87:ab:5a:13:69:de:92:1a:54:7c:be:60:5a:
64:9a:5e:3d:ed:aa:8a:6e:12:4e:2c:2d:9c:12:a5:
64:81:47:9a:7c:ec:64:12:15:e7:ab:02:b4:b8:6c:
0b:f7:8f:ad:76:6f:3e:6d:e6:ef:e5:0a:08:dd:c9:
d5:2e:3f:8c:05:03:84:25:2b:e0:52:33:68:4a:41:
d5:9a:92:c3:f7:04:fd:fb:49:41:27:bc:04:95:3f:
9d:8d:c1:9b:13:74:35:07:31:6c:f9:3e:11:cc:12:
b1:12:6f:47:d5:5b:6e:9b:87:dc:b0:72:1b:63:15:
26:11:a1:a9:77:a3:05:83:6f:4f:eb:e1:1f:99:5f:
5f:d7:08:0a:f6:2f:78:e4:81:1d:5c:44:7a:0f:e5:
45:ca:a5:b7:ba:ba:21:a6:09:a5:bc:d8:72:c4:ed:
c4:a4:43:89:e1:d5:f8:2c:23:14:69:49:2e:50:f1:
4b:fb:de:49:47:eb:d2:99:fd:47:62:06:78:19:d4:
0a:32:b2:af:f2:1a:c7:50:7c:32:74:7e:1c:54:44:
3b:b0:66:3c:38:fc:1c:bf:85:e5:8b:c0:82:85:41:
09:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F4:3F:08:37:57:50:9E:B2:01:57:67:3D:72:EC:1A:1D:F0:3B:7B
X509v3 Authority Key Identifier:
keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/svQ_CDdXUJ6yAVdnPXLsGh3wO3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.40.0/21
185.67.101.0/24
185.132.80.0/24
185.132.82.0/24
185.233.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:c4:d6:ab:6d:68:35:a6:44:d2:34:83:85:97:42:12:22:f1:
8b:8b:6b:5b:cd:1a:18:a7:0c:2a:a9:56:6a:a1:12:76:40:ee:
a0:fb:1b:a3:ae:12:46:85:bc:a1:81:4b:e2:90:bd:92:6a:54:
10:c6:de:08:53:55:ce:a7:90:10:70:2f:89:9b:3b:ad:b2:af:
f6:15:1a:72:ec:16:8b:60:51:19:7b:4f:2f:70:b8:16:46:79:
f1:69:91:0a:6c:64:61:53:42:b5:d4:a9:d6:ed:7b:ab:03:5e:
d0:2e:a5:f0:96:2a:be:32:0b:25:61:a6:c5:26:ac:0c:e2:3c:
b4:09:50:a9:94:f8:a6:e3:9e:d9:cd:e2:ec:6a:70:52:15:0f:
d8:a7:da:fc:19:90:fe:fe:26:9f:d9:b3:f0:65:88:f8:ef:7a:
e8:34:d7:95:97:5e:a4:93:b9:b4:84:ae:f0:30:45:2a:d2:71:
1f:d2:78:7d:00:f4:f2:02:07:b3:ac:ea:3d:db:e4:42:5b:cb:
68:94:cf:3c:f5:fe:77:58:6a:a9:b1:d4:f8:7f:72:5a:2f:4a:
2a:15:6f:7b:0d:f1:1c:87:03:0c:2a:4d:df:fc:f8:40:df:0b:
5e:d9:79:57:84:04:c7:21:58:52:09:0b:46:32:a6:1f:14:26:
2e:e0:fd:55
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAY2nfjHm7DKQ1WQqk81fmshwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZDE0MTE4ZGJkMjI3Mjk4ZGFhODBjN2FjYWIxMWVlYTZk
NjNlMjEwHhcNMjQwMjE0MTIwMTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmY0M2YwODM3NTc1MDllYjIwMTU3NjczZDcyZWMxYTFkZjAzYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm8eKVP5bZ4VDGbIODS6f4pa8M8l
mkh3cwj/XOdvloerWhNp3pIaVHy+YFpkml497aqKbhJOLC2cEqVkgUeafOxkEhXn
qwK0uGwL94+tdm8+bebv5QoI3cnVLj+MBQOEJSvgUjNoSkHVmpLD9wT9+0lBJ7wE
lT+djcGbE3Q1BzFs+T4RzBKxEm9H1Vtum4fcsHIbYxUmEaGpd6MFg29P6+EfmV9f
1wgK9i945IEdXER6D+VFyqW3urohpgmlvNhyxO3EpEOJ4dX4LCMUaUkuUPFL+95J
R+vSmf1HYgZ4GdQKMrKv8hrHUHwydH4cVEQ7sGY8OPwcv4Xli8CChUEJMwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFLL0Pwg3V1CesgFXZz1y7Bod8Dt7MB8GA1UdIwQY
MBaAFLbRQRjb0icpjaqAx6yrEe6m1j4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHRGQkdOdlNKeW1OcW9ESHJLc1I3cWJXUGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZDUxZDctNjRmZC00YzczLTllOGMt
MGUzN2UxMWQwZWMzLzEvc3ZRX0NEZFhVSjZ5QVZkblBYTHNHaDN3TzNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lZDUxZDctNjRmZC00YzczLTllOGMtMGUzN2UxMWQwZWMz
LzEvdHRGQkdOdlNKeW1OcW9ESHJLc1I3cWJXUGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDWIcoAwQA
uUNlAwQAuYRQAwQAuYRSAwQAuekOMA0GCSqGSIb3DQEBCwUAA4IBAQAdxNarbWg1
pkTSNIOFl0ISIvGLi2tbzRoYpwwqqVZqoRJ2QO6g+xujrhJGhbyhgUvikL2SalQQ
xt4IU1XOp5AQcC+Jmzutsq/2FRpy7BaLYFEZe08vcLgWRnnxaZEKbGRhU0K11KnW
7XurA17QLqXwliq+MgslYabFJqwM4jy0CVCplPim457ZzeLsanBSFQ/Yp9r8GZD+
/iaf2bPwZYj473roNNeVl16kk7m0hK7wMEUq0nEf0nh9APTyAgezrOo92+RCW8to
lM889f53WGqpsdT4f3JaL0oqFW97DfEchwMMKk3f/PhA3wte2XlXhATHIVhSCQtG
MqYfFCYu4P1V
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:24:53 2024 by rpki-client on console-fra.rpki-client.org