Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/fLo0a7R7nSP8_pW2F5-WC4CA190.roa
File: fLo0a7R7nSP8_pW2F5-WC4CA190.roa (raw, json)
Hash identifier: kr7XGXhIIou9hINoqkUxTdjLrnIPDtZ8T9TGZsvogNg=
Subject key identifier: 7C:BA:34:6B:B4:7B:9D:23:FC:FE:95:B6:17:9F:96:0B:80:80:D7:DD
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 018CC3B6856FB9B507A28BF0F2FF180B1BC4
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/fLo0a7R7nSP8_pW2F5-WC4CA190.roa
Signing time: Mon 01 Jan 2024 06:29:27 +0000
ROA not before: Mon 01 Jan 2024 06:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39150
IP address blocks: 95.85.83.0/24 maxlen: 24
95.85.83.128/25 maxlen: 25
95.85.83.0/25 maxlen: 25
91.196.139.0/24 maxlen: 24
91.196.138.0/24 maxlen: 24
91.196.137.0/24 maxlen: 24
91.196.136.0/24 maxlen: 24
109.196.133.0/24 maxlen: 24
93.179.94.0/24 maxlen: 24
93.179.93.0/24 maxlen: 24
93.179.121.0/24 maxlen: 24
93.179.120.0/24 maxlen: 24
195.182.8.0/24 maxlen: 24
93.179.69.0/24 maxlen: 24
93.179.68.0/23 maxlen: 23
93.179.66.0/24 maxlen: 24
95.181.213.0/24 maxlen: 24
95.181.212.0/23 maxlen: 23
2a04:8681::/32 maxlen: 32
2a04:8680::/32 maxlen: 32
2a09:d5c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:85:6f:b9:b5:07:a2:8b:f0:f2:ff:18:0b:1b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cba346bb47b9d23fcfe95b6179f960b8080d7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:32:23:85:1a:fe:4c:a0:32:45:ac:df:74:b3:
95:e4:bd:62:7b:7c:e9:b4:59:9d:c7:7c:71:51:c5:
7d:2a:bc:38:fb:0b:5c:10:39:4f:88:b9:d3:d3:46:
3b:9f:19:b2:7b:2b:0f:5c:59:ad:00:32:19:6f:d3:
2e:c3:43:c4:80:cb:90:15:86:8a:37:41:34:c3:44:
3c:61:bf:c1:42:63:29:86:c3:1d:27:63:36:3b:f0:
3f:82:a8:fa:e4:e0:dc:c1:6b:40:0f:03:79:f2:67:
e4:cd:c8:42:e9:00:4b:1a:c0:30:f7:03:f1:d3:26:
cc:0a:2d:60:4a:39:c4:32:7a:36:cb:46:5f:c4:c9:
bb:7c:f2:ad:d1:ed:95:0d:17:04:f5:6a:5d:56:f2:
da:76:bb:60:45:1f:57:45:f4:55:b2:cc:2a:b3:17:
e5:57:2f:30:ce:3b:be:2b:fd:d4:fb:fe:e7:91:1d:
b4:a1:ad:a4:7b:a2:54:88:a9:b3:4a:60:8d:2a:ad:
95:a0:d7:d8:07:0d:c3:bd:fa:a1:1c:e2:41:d7:08:
71:da:e3:ee:d8:bb:fa:c0:03:02:a7:95:55:ec:c9:
87:79:59:50:93:43:78:08:0c:a4:7d:eb:f9:6d:f3:
02:18:67:fc:a4:c2:5c:f0:17:84:6b:38:af:b6:59:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BA:34:6B:B4:7B:9D:23:FC:FE:95:B6:17:9F:96:0B:80:80:D7:DD
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/fLo0a7R7nSP8_pW2F5-WC4CA190.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.136.0/22
93.179.66.0/24
93.179.68.0/23
93.179.93.0-93.179.94.255
93.179.120.0/23
95.85.83.0/24
95.181.212.0/23
109.196.133.0/24
195.182.8.0/24
IPv6:
2a04:8680::/31
2a09:d5c0::/32
Signature Algorithm: sha256WithRSAEncryption
4c:ee:66:05:90:fb:b1:26:69:3a:85:cc:6f:f1:a0:50:ab:92:
e3:75:3a:0f:e0:60:33:ba:45:05:47:bf:d6:b3:e4:0e:d3:b1:
6f:26:fe:fc:ef:87:5c:1b:80:bb:61:01:77:17:ed:7c:b4:5f:
0d:82:c3:51:90:3e:32:56:b0:44:f3:92:49:51:24:e5:61:56:
c0:f7:00:58:b8:f4:3a:80:9f:ae:0f:c9:4e:96:8b:e7:a1:ed:
27:fe:b5:1f:6e:68:3c:92:2b:01:93:b8:d7:f1:10:7b:31:87:
21:df:ed:d8:d0:c8:fd:27:26:f6:2a:c0:26:8f:60:16:64:d8:
7c:72:da:d7:ae:f9:e7:88:69:5c:4d:e0:cd:45:96:05:d8:2e:
3b:ba:8f:a1:07:f2:a5:2c:ae:65:84:1b:43:bc:5e:29:f5:f0:
76:a6:8b:1d:b3:75:e3:85:b5:6d:5f:b9:a5:73:10:40:7c:d1:
99:63:46:0d:df:74:87:c3:79:de:3d:08:53:b1:20:79:b4:66:
3b:ae:6e:7a:b0:1c:49:70:e4:98:e5:98:55:3c:48:9e:51:75:
66:35:03:8b:cf:ae:79:55:46:dc:dd:73:d8:5c:7e:8f:44:da:
ae:d8:12:a2:04:d9:85:c7:56:34:64:1c:70:eb:a1:86:9b:99:
18:a2:01:24
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAYzDtoVvubUHoovw8v8YCxvEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy
OWZmODQwHhcNMjQwMTAxMDYyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2JhMzQ2YmI0N2I5ZDIzZmNmZTk1YjYxNzlmOTYwYjgwODBkN2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzIjhRr+TKAyRazfdLOV5L1ie3zp
tFmdx3xxUcV9Krw4+wtcEDlPiLnT00Y7nxmyeysPXFmtADIZb9Muw0PEgMuQFYaK
N0E0w0Q8Yb/BQmMphsMdJ2M2O/A/gqj65ODcwWtADwN58mfkzchC6QBLGsAw9wPx
0ybMCi1gSjnEMno2y0ZfxMm7fPKt0e2VDRcE9WpdVvLadrtgRR9XRfRVsswqsxfl
Vy8wzju+K/3U+/7nkR20oa2ke6JUiKmzSmCNKq2VoNfYBw3DvfqhHOJB1whx2uPu
2Lv6wAMCp5VV7MmHeVlQk0N4CAykfev5bfMCGGf8pMJc8BeEazivtllhUQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFHy6NGu0e50j/P6VtheflguAgNfdMB8GA1UdIwQY
MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt
MjhmYzc3OTY3NzYzLzEvZkxvMGE3UjduU1A4X3BXMkY1LVdDNENBMTkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz
LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBEBAIAATA+AwQCW8SIAwQA
XbNCAwQBXbNEMAwDBABds10DBABds14DBAFds3gDBABfVVMDBAFftdQDBABtxIUD
BADDtggwFAQCAAIwDgMFASoEhoADBQAqCdXAMA0GCSqGSIb3DQEBCwUAA4IBAQBM
7mYFkPuxJmk6hcxv8aBQq5LjdToP4GAzukUFR7/Ws+QO07FvJv7874dcG4C7YQF3
F+18tF8NgsNRkD4yVrBE85JJUSTlYVbA9wBYuPQ6gJ+uD8lOlovnoe0n/rUfbmg8
kisBk7jX8RB7MYch3+3Y0Mj9Jyb2KsAmj2AWZNh8ctrXrvnniGlcTeDNRZYF2C47
uo+hB/KlLK5lhBtDvF4p9fB2posds3XjhbVtX7mlcxBAfNGZY0YN33SHw3nePQhT
sSB5tGY7rm56sBxJcOSY5ZhVPEieUXVmNQOLz655VUbc3XPYXH6PRNqu2BKiBNmF
x1Y0ZBxw66GGm5kYogEk
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:06 2024 by rpki-client on console-fra.rpki-client.org