Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/DZvtQH59QCb4NChQdEVPEyUO0GE.roa
File: DZvtQH59QCb4NChQdEVPEyUO0GE.roa (raw, json)
Hash identifier: Zb0+xuymgfdMau71YC05BFj3X7p9yusk1K7UhLJTTpM=
Subject key identifier: 0D:9B:ED:40:7E:7D:40:26:F8:34:28:50:74:45:4F:13:25:0E:D0:61
Certificate issuer: /CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Certificate serial: 018F1040BAD2E56362485C20AEF1C2147483
Authority key identifier: 2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/DZvtQH59QCb4NChQdEVPEyUO0GE.roa
Signing time: Wed 24 Apr 2024 13:17:08 +0000
ROA not before: Wed 24 Apr 2024 13:17:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49720
IP address blocks: 91.236.224.0/24 maxlen: 24
91.236.225.0/24 maxlen: 24
91.236.226.0/24 maxlen: 24
91.236.227.0/24 maxlen: 24
185.168.128.0/22 maxlen: 22
185.168.128.0/24 maxlen: 24
185.168.129.0/24 maxlen: 24
185.168.130.0/23 maxlen: 23
185.250.20.0/22 maxlen: 22
185.250.20.0/24 maxlen: 24
185.250.21.0/24 maxlen: 24
185.250.22.0/24 maxlen: 24
185.250.23.0/24 maxlen: 24
193.107.136.0/24 maxlen: 24
193.107.138.0/24 maxlen: 24
195.182.194.0/24 maxlen: 24
195.182.195.0/24 maxlen: 24
2a0a:700::/32 maxlen: 32
2a0a:701::/32 maxlen: 32
2a0a:702::/32 maxlen: 32
2a0a:703::/32 maxlen: 32
2a0a:704::/32 maxlen: 32
2a0a:705::/32 maxlen: 32
2a0a:706::/32 maxlen: 32
2a0a:707::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:10:40:ba:d2:e5:63:62:48:5c:20:ae:f1:c2:14:74:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Validity
Not Before: Apr 24 13:17:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d9bed407e7d4026f834285074454f13250ed061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e6:6e:f9:ee:0a:d5:65:87:4a:76:2e:70:e2:
12:2d:93:52:44:ef:5f:91:29:04:9c:90:8a:73:89:
63:57:a9:17:55:dd:73:15:9b:4c:76:84:af:d4:00:
3a:95:93:78:85:47:96:3a:af:1a:04:36:4b:a8:62:
41:45:4d:5f:d0:0b:53:ca:89:5a:91:9a:8a:e6:4a:
70:39:38:6f:b0:83:31:e2:db:aa:f3:4b:bd:46:ea:
ca:62:ec:ce:21:a0:ab:de:83:07:7a:ea:79:54:e6:
c1:80:d7:2b:cc:f8:d4:cf:b3:0f:e9:ce:cb:1e:32:
fc:4f:a7:f1:43:3d:3c:ae:9e:93:79:49:7b:06:fb:
4c:26:2e:db:f7:eb:ed:f0:11:07:40:2f:c8:ab:d8:
21:6c:e9:f6:db:df:ab:c2:8b:c4:88:f8:73:3f:15:
50:0b:d7:a7:3c:bc:df:01:4b:da:73:1b:ab:8f:98:
ac:74:93:a2:18:c5:c8:72:eb:e1:f0:56:36:67:18:
97:39:5f:de:fb:40:f8:c6:1c:a1:71:cd:2e:0f:94:
bc:c0:ce:e1:2a:0c:5f:75:c2:d4:c6:51:b4:2c:ed:
4c:cf:a8:bc:1e:e4:5f:7d:45:a3:b9:d8:2c:e2:45:
e3:72:e0:ab:b7:ed:12:21:af:a0:12:3d:d4:14:dc:
78:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9B:ED:40:7E:7D:40:26:F8:34:28:50:74:45:4F:13:25:0E:D0:61
X509v3 Authority Key Identifier:
keyid:2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/DZvtQH59QCb4NChQdEVPEyUO0GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.224.0/22
185.168.128.0/22
185.250.20.0/22
193.107.136.0/24
193.107.138.0/24
195.182.194.0/23
IPv6:
2a0a:700::/29
Signature Algorithm: sha256WithRSAEncryption
70:ca:a5:de:c9:69:61:17:64:fe:2c:6d:7f:ab:59:b2:f7:9a:
ce:fd:25:a7:73:e6:a6:c6:e4:8b:90:4c:8a:48:f6:49:18:08:
b6:da:66:24:14:95:98:9f:4e:b1:f9:20:0e:8f:49:e2:ff:84:
56:6f:7d:f7:43:81:ce:58:94:0d:09:0f:ce:56:88:cf:cc:69:
e0:fd:53:4d:39:ab:6e:5a:42:6e:ce:95:50:9f:60:02:6e:69:
1e:cd:de:8b:6d:68:d9:d9:a9:25:58:75:c1:29:60:58:72:12:
55:6e:16:c8:b6:ce:3d:1f:6b:9b:6b:37:c0:a2:b1:bf:75:f7:
a0:1d:66:19:9a:c6:e1:3a:cb:96:03:c5:b9:b0:0a:83:97:52:
90:f6:24:ff:f3:65:33:37:d1:b5:1a:dd:f8:1a:ea:e0:f9:c0:
f3:84:3a:b5:88:36:6c:dc:dc:56:fa:4f:06:e2:d8:82:4d:29:
26:0a:eb:2f:04:91:9d:18:a8:fe:90:76:85:8a:90:4b:0c:7e:
29:65:da:ad:fe:69:6a:1c:d0:56:a5:09:21:d3:9a:1e:7d:91:
9e:8f:0e:c8:b1:9f:21:40:04:dc:e2:0c:ca:af:3d:2b:8a:5b:
8e:09:18:59:b8:90:99:e1:72:6a:46:f8:b1:f3:f8:93:12:81:
08:f6:7f:c0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAY8QQLrS5WNiSFwgrvHCFHSDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZDJmZTY0NjZkMDcwOTRhNDI1NmRhMmNjODQ3MDgzYzUw
MDZiMWEwHhcNMjQwNDI0MTMxNzA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDliZWQ0MDdlN2Q0MDI2ZjgzNDI4NTA3NDQ1NGYxMzI1MGVkMDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+Zu+e4K1WWHSnYucOISLZNSRO9f
kSkEnJCKc4ljV6kXVd1zFZtMdoSv1AA6lZN4hUeWOq8aBDZLqGJBRU1f0AtTyola
kZqK5kpwOThvsIMx4tuq80u9RurKYuzOIaCr3oMHeup5VObBgNcrzPjUz7MP6c7L
HjL8T6fxQz08rp6TeUl7BvtMJi7b9+vt8BEHQC/Iq9ghbOn229+rwovEiPhzPxVQ
C9enPLzfAUvacxurj5isdJOiGMXIcuvh8FY2ZxiXOV/e+0D4xhyhcc0uD5S8wM7h
KgxfdcLUxlG0LO1Mz6i8HuRffUWjudgs4kXjcuCrt+0SIa+gEj3UFNx4swIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFA2b7UB+fUAm+DQoUHRFTxMlDtBhMB8GA1UdIwQY
MBaAFCrS/mRm0HCUpCVtosyEcIPFAGsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3RMLVpHYlFjSlNrSlcyaXpJUndnOFVBYXhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YTMxZjMtN2FjZi00N2I0LWI5N2It
ZmEzMWUyZGM2YWJiLzEvRFp2dFFINTlRQ2I0TkNoUWRFVlBFeVVPMEdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84YTMxZjMtN2FjZi00N2I0LWI5N2ItZmEzMWUyZGM2YWJi
LzEvS3RMLVpHYlFjSlNrSlcyaXpJUndnOFVBYXhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCW+zgAwQC
uaiAAwQCufoUAwQAwWuIAwQAwWuKAwQBw7bCMA0EAgACMAcDBQMqCgcAMA0GCSqG
SIb3DQEBCwUAA4IBAQBwyqXeyWlhF2T+LG1/q1my95rO/SWnc+amxuSLkEyKSPZJ
GAi22mYkFJWYn06x+SAOj0ni/4RWb333Q4HOWJQNCQ/OVojPzGng/VNNOatuWkJu
zpVQn2ACbmkezd6LbWjZ2aklWHXBKWBYchJVbhbIts49H2ubazfAorG/dfegHWYZ
msbhOsuWA8W5sAqDl1KQ9iT/82UzN9G1Gt34Gurg+cDzhDq1iDZs3NxW+k8G4tiC
TSkmCusvBJGdGKj+kHaFipBLDH4pZdqt/mlqHNBWpQkh05oefZGejw7IsZ8hQATc
4gzKrz0riluOCRhZuJCZ4XJqRvix8/iTEoEI9n/A
-----END CERTIFICATE-----
Generated at Fri Jun 7 22:35:31 2024 by rpki-client on console-ams.rpki-client.org