Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/XizF5ZoOmPEs7I7KGrYirYfxWwA.roa
File: XizF5ZoOmPEs7I7KGrYirYfxWwA.roa (raw, json)
Hash identifier: n11Xx+9A4J7cvK4tX7KCmP4z9oV8Xcy/MuQQ3MlGWCY=
Subject key identifier: 5E:2C:C5:E5:9A:0E:98:F1:2C:EC:8E:CA:1A:B6:22:AD:87:F1:5B:00
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 018D461813DD325532EB6C476F93511B733E
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/XizF5ZoOmPEs7I7KGrYirYfxWwA.roa
Signing time: Fri 26 Jan 2024 14:06:39 +0000
ROA not before: Fri 26 Jan 2024 14:06:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42248
IP address blocks: 89.106.96.0/24 maxlen: 24
89.106.97.0/24 maxlen: 24
89.106.98.0/24 maxlen: 24
89.106.99.0/24 maxlen: 24
89.106.100.0/24 maxlen: 24
89.106.106.0/24 maxlen: 24
89.106.110.0/23 maxlen: 23
89.106.112.0/23 maxlen: 23
89.106.114.0/23 maxlen: 23
89.106.116.0/23 maxlen: 23
89.106.118.0/23 maxlen: 23
89.106.120.0/23 maxlen: 23
89.106.122.0/23 maxlen: 23
89.106.124.0/23 maxlen: 23
89.106.126.0/24 maxlen: 24
94.139.216.0/21 maxlen: 21
178.75.224.0/21 maxlen: 21
178.75.232.0/21 maxlen: 21
178.239.224.0/20 maxlen: 20
185.44.124.0/22 maxlen: 22
185.52.50.0/24 maxlen: 24
185.52.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:46:18:13:dd:32:55:32:eb:6c:47:6f:93:51:1b:73:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Jan 26 14:06:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e2cc5e59a0e98f12cec8eca1ab622ad87f15b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b2:43:73:1d:51:c8:bd:bb:2d:1d:de:77:42:
7d:80:eb:ee:4b:65:06:bf:5d:56:c4:3c:2b:20:9b:
2e:64:d0:13:0c:1d:53:16:63:a4:ca:7b:ed:59:a3:
43:82:e8:94:18:29:4a:e7:4c:c7:6f:28:aa:b0:b3:
de:2e:6d:2e:a2:49:ef:85:f8:b0:98:1b:43:a6:77:
82:46:ea:39:54:d8:e2:40:f5:c1:70:46:76:1c:8f:
2d:c8:0c:a7:c0:0d:e7:c1:17:ec:7a:34:b6:40:22:
b5:c1:b8:cc:35:69:d0:77:dd:d4:3f:8d:0d:79:2a:
f8:a3:37:64:77:4f:f7:fb:c3:49:38:b1:f9:d3:8d:
30:76:c3:2c:95:32:52:5c:3b:68:56:2c:8e:65:76:
62:de:21:a5:72:77:c9:b8:48:d6:e1:fb:e9:5f:33:
18:1f:c1:cd:09:f9:f0:f3:64:4f:8a:dc:96:9d:3a:
96:1f:ed:0b:62:e4:0b:a1:2d:96:7f:4a:7e:6f:e8:
86:44:0e:3b:ef:3a:ea:a5:79:86:a6:b0:50:4c:6f:
fe:d1:24:dc:d6:7c:fc:68:2f:3d:8e:90:a9:4a:11:
fb:9c:1b:f1:48:7d:52:52:a2:40:3b:81:d6:c9:97:
03:23:2f:f7:89:f0:ce:a4:fe:0d:25:d7:69:21:2e:
ee:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2C:C5:E5:9A:0E:98:F1:2C:EC:8E:CA:1A:B6:22:AD:87:F1:5B:00
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/XizF5ZoOmPEs7I7KGrYirYfxWwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.96.0-89.106.100.255
89.106.106.0/24
89.106.110.0-89.106.126.255
94.139.216.0/21
178.75.224.0/20
178.239.224.0/20
185.44.124.0/22
185.52.50.0/23
Signature Algorithm: sha256WithRSAEncryption
e1:1f:ec:8f:53:06:21:4e:1b:06:f8:a8:5e:a6:45:06:4c:62:
62:e4:56:46:e6:ae:e6:16:36:73:d7:d3:a5:24:bd:bb:44:4a:
94:b9:5d:38:fa:df:8d:7e:7f:27:bf:f5:23:3e:97:7d:5a:c7:
62:eb:11:45:4b:f7:35:29:ef:52:c3:c9:fc:42:4e:8a:ca:03:
bc:2f:c1:2e:e5:04:3b:10:2b:0e:f0:e9:e1:c3:de:0b:4a:db:
14:fa:84:d9:e1:c1:80:ad:79:fc:95:e8:c3:bd:93:65:42:dd:
10:21:3e:b5:01:62:30:4e:6c:c7:70:50:f4:11:da:4b:6f:f2:
f5:de:09:83:ad:35:10:4c:83:87:11:70:5b:9a:6c:f7:74:70:
30:71:e8:1f:bc:06:f3:0e:78:cf:3e:24:9a:5a:4a:44:a5:72:
ce:ad:b3:b8:b8:86:c7:b8:d6:d6:fe:76:bd:f0:46:d6:24:63:
3c:ef:fa:8b:60:39:1b:bb:86:12:52:b3:94:78:e1:b0:c7:a9:
28:1a:b9:de:ea:e6:46:68:c5:34:dc:74:aa:92:eb:4d:c1:37:
47:61:05:23:5a:14:44:69:64:8e:3a:9e:a8:af:c1:6e:37:a7:
fa:72:9c:19:47:0f:cb:39:3a:1d:9a:c4:33:5b:98:12:67:fd:
c6:1b:1f:fd
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAY1GGBPdMlUy62xHb5NRG3M+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ODE2Nzc0YjdjNTY2NWQ2N2E4NmMyMGNlYjY0ODdiNWI3
OGIzOGQwHhcNMjQwMTI2MTQwNjM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTJjYzVlNTlhMGU5OGYxMmNlYzhlY2ExYWI2MjJhZDg3ZjE1YjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLJDcx1RyL27LR3ed0J9gOvuS2UG
v11WxDwrIJsuZNATDB1TFmOkynvtWaNDguiUGClK50zHbyiqsLPeLm0uoknvhfiw
mBtDpneCRuo5VNjiQPXBcEZ2HI8tyAynwA3nwRfsejS2QCK1wbjMNWnQd93UP40N
eSr4ozdkd0/3+8NJOLH5040wdsMslTJSXDtoViyOZXZi3iGlcnfJuEjW4fvpXzMY
H8HNCfnw82RPityWnTqWH+0LYuQLoS2Wf0p+b+iGRA477zrqpXmGprBQTG/+0STc
1nz8aC89jpCpShH7nBvxSH1SUqJAO4HWyZcDIy/3ifDOpP4NJddpIS7ufwIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFF4sxeWaDpjxLOyOyhq2Iq2H8VsAMB8GA1UdIwQY
MBaAFGWBZ3S3xWZdZ6hsIM62SHtbeLONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYt
NmIxNDY5YzNiOTVhLzEvWGl6RjVab09tUEVzN0k3S0dyWWlyWWZ4V3dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYtNmIxNDY5YzNiOTVh
LzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAMAwDBAVZamAD
BABZamQDBABZamowDAMEAVlqbgMEAFlqfgMEA16L2AMEBLJL4AMEBLLv4AMEArks
fAMEAbk0MjANBgkqhkiG9w0BAQsFAAOCAQEA4R/sj1MGIU4bBvioXqZFBkxiYuRW
Ruau5hY2c9fTpSS9u0RKlLldOPrfjX5/J7/1Iz6XfVrHYusRRUv3NSnvUsPJ/EJO
isoDvC/BLuUEOxArDvDp4cPeC0rbFPqE2eHBgK15/JXow72TZULdECE+tQFiME5s
x3BQ9BHaS2/y9d4Jg601EEyDhxFwW5ps93RwMHHoH7wG8w54zz4kmlpKRKVyzq2z
uLiGx7jW1v52vfBG1iRjPO/6i2A5G7uGElKzlHjhsMepKBq53urmRmjFNNx0qpLr
TcE3R2EFI1oURGlkjjqeqK/Bbjen+nKcGUcPyzk6HZrEM1uYEmf9xhsf/Q==
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:54:05 2024 by rpki-client on console-ams.rpki-client.org