Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3OFGNhbgvi9zJ7_Ws3HmBsOHm_I.roa
File: 3OFGNhbgvi9zJ7_Ws3HmBsOHm_I.roa (raw, json)
Hash identifier: Bcqu/Kagpe1GLQSOt3xmMQtCABJlX40WslSbWi7YZq4=
Subject key identifier: DC:E1:46:36:16:E0:BE:2F:73:27:BF:D6:B3:71:E6:06:C3:87:9B:F2
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A2A06B67211401F33DE5650351664
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3OFGNhbgvi9zJ7_Ws3HmBsOHm_I.roa
Signing time: Tue 02 Jan 2024 12:33:30 +0000
ROA not before: Tue 02 Jan 2024 12:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61390
IP address blocks: 93.171.40.0/22 maxlen: 24
92.38.33.0/24 maxlen: 24
93.170.108.0/22 maxlen: 24
146.158.60.0/22 maxlen: 24
93.171.182.0/23 maxlen: 24
93.170.232.0/22 maxlen: 24
146.120.120.0/22 maxlen: 24
146.120.236.0/22 maxlen: 24
95.46.116.0/22 maxlen: 24
146.120.252.0/22 maxlen: 24
93.170.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:2a:06:b6:72:11:40:1f:33:de:56:50:35:16:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dce1463616e0be2f7327bfd6b371e606c3879bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:15:f9:86:60:4f:bd:be:bf:ef:7a:0b:57:57:
7d:10:4b:06:22:53:62:37:e2:ac:78:d4:84:b0:5a:
44:80:51:cb:3b:1f:3c:b5:5c:b2:f4:7f:54:18:91:
22:18:15:ff:71:88:9b:4e:1f:2f:8d:ed:16:e4:1e:
02:ab:36:42:50:60:b6:32:1e:2e:06:1c:e1:43:45:
c4:2c:30:8c:4c:0c:5a:33:c4:a8:03:7b:64:2d:d4:
5f:4e:36:61:9f:7f:69:6a:07:33:61:c8:07:55:40:
d1:b0:5d:3a:eb:73:d9:40:34:a6:7f:eb:20:fc:6d:
06:08:ad:ea:d3:9a:5a:d3:1f:88:05:da:30:67:a7:
76:16:39:db:38:ff:f1:a2:67:e9:fe:76:ad:d7:bf:
56:85:8b:44:ea:27:98:db:84:ef:ae:28:14:55:5d:
61:16:90:8b:aa:c4:2f:96:4d:d7:1a:8d:cb:95:77:
c5:5a:b4:ca:dd:8d:6e:8f:f3:cb:83:3f:9e:00:98:
1d:6f:b0:2b:f3:fe:d5:aa:ed:2d:3a:71:05:49:fb:
92:42:d6:4c:a9:c3:c6:13:46:27:73:86:38:63:eb:
c2:67:93:a6:cf:6c:80:9d:d4:c6:98:d9:e1:56:24:
54:4f:a9:54:b7:d3:13:82:f6:d4:95:4d:68:8b:e7:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E1:46:36:16:E0:BE:2F:73:27:BF:D6:B3:71:E6:06:C3:87:9B:F2
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3OFGNhbgvi9zJ7_Ws3HmBsOHm_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.33.0/24
93.170.108.0/22
93.170.180.0/22
93.170.232.0/22
93.171.40.0/22
93.171.182.0/23
95.46.116.0/22
146.120.120.0/22
146.120.236.0/22
146.120.252.0/22
146.158.60.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:9b:00:16:6d:e7:eb:6c:a4:d0:e3:6d:d1:ea:4e:06:5b:84:
ac:2a:2c:dc:c0:28:f5:46:6a:9e:c4:3d:bb:f7:91:2f:24:3c:
18:0a:9b:d3:5a:56:1a:a5:dd:5c:97:86:18:ac:00:03:d3:ea:
93:6b:df:6a:b1:dc:a5:14:36:ca:51:50:6f:ae:64:7e:4b:21:
af:d2:a4:a4:16:a8:4e:ba:7e:43:eb:56:86:5e:fb:7c:58:69:
93:b1:79:6c:6b:9d:a2:24:c4:e7:bb:a2:29:fb:37:93:94:8a:
cf:b5:e0:f3:df:d2:4a:4a:f4:52:40:b9:06:34:99:e7:a9:20:
7a:20:d8:b7:bf:fc:dc:2f:bd:68:57:aa:28:95:14:21:7b:75:
00:01:7b:09:56:ca:18:74:2c:8b:11:83:75:b3:02:35:26:6e:
56:c9:cd:18:ff:85:ce:8a:37:0f:64:1f:55:ac:8d:e3:a7:eb:
c2:9e:3f:4a:4f:01:54:75:1d:21:ca:de:ab:a1:97:8a:0d:8b:
5a:37:8d:eb:04:ee:ac:f1:d7:8f:cf:c4:af:01:ad:58:82:a6:
8e:f1:96:49:c1:e5:9d:ad:12:e3:f4:bf:c5:ff:f9:1b:9f:66:
90:8d:4a:7f:c2:fa:81:26:b2:e1:bb:c8:61:28:05:e2:fa:9a:
ab:f3:24:5b
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYzKKioGtnIRQB8z3lZQNRZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2UxNDYzNjE2ZTBiZTJmNzMyN2JmZDZiMzcxZTYwNmMzODc5YmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxX5hmBPvb6/73oLV1d9EEsGIlNi
N+KseNSEsFpEgFHLOx88tVyy9H9UGJEiGBX/cYibTh8vje0W5B4CqzZCUGC2Mh4u
BhzhQ0XELDCMTAxaM8SoA3tkLdRfTjZhn39pagczYcgHVUDRsF0663PZQDSmf+sg
/G0GCK3q05pa0x+IBdowZ6d2FjnbOP/xomfp/nat179WhYtE6ieY24TvrigUVV1h
FpCLqsQvlk3XGo3LlXfFWrTK3Y1uj/PLgz+eAJgdb7Ar8/7Vqu0tOnEFSfuSQtZM
qcPGE0Ync4Y4Y+vCZ5Omz2yAndTGmNnhViRUT6lUt9MTgvbUlU1oi+fNpQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFNzhRjYW4L4vcye/1rNx5gbDh5vyMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvM09GR05oYmd2aTl6SjdfV3MzSG1Cc09IbV9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAXCYhAwQC
XapsAwQCXaq0AwQCXaroAwQCXasoAwQBXau2AwQCXy50AwQCknh4AwQCknjsAwQC
knj8AwQCkp48MA0GCSqGSIb3DQEBCwUAA4IBAQBfmwAWbefrbKTQ423R6k4GW4Ss
KizcwCj1RmqexD2795EvJDwYCpvTWlYapd1cl4YYrAAD0+qTa99qsdylFDbKUVBv
rmR+SyGv0qSkFqhOun5D61aGXvt8WGmTsXlsa52iJMTnu6Ip+zeTlIrPteDz39JK
SvRSQLkGNJnnqSB6INi3v/zcL71oV6oolRQhe3UAAXsJVsoYdCyLEYN1swI1Jm5W
yc0Y/4XOijcPZB9VrI3jp+vCnj9KTwFUdR0hyt6roZeKDYtaN43rBO6s8dePz8Sv
Aa1YgqaO8ZZJweWdrRLj9L/F//kbn2aQjUp/wvqBJrLhu8hhKAXi+pqr8yRb
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:31:03 2024 by rpki-client on console-ams.rpki-client.org