Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/6zRBBdP3Iw44TIqOHwIWpO9Gw5E.roa
File: 6zRBBdP3Iw44TIqOHwIWpO9Gw5E.roa (raw, json)
Hash identifier: kaN/QpJS9NI/Z0qFnDPC5LKl34asIG0VTNvzZBIq8Pw=
Subject key identifier: EB:34:41:05:D3:F7:23:0E:38:4C:8A:8E:1F:02:16:A4:EF:46:C3:91
Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial: 018CC56E600D6BD1DD3C4BCE4192AA866BD0
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/6zRBBdP3Iw44TIqOHwIWpO9Gw5E.roa
Signing time: Mon 01 Jan 2024 14:29:54 +0000
ROA not before: Mon 01 Jan 2024 14:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62275
IP address blocks: 185.221.72.0/22 maxlen: 24
185.234.112.0/24 maxlen: 24
5.62.72.0/21 maxlen: 24
185.40.212.0/22 maxlen: 24
193.254.12.0/22 maxlen: 24
2a10:acc0::/29 maxlen: 29
2a0c:e2c0::/29 maxlen: 29
2a01:ab40::/29 maxlen: 48
2a0c:8000::/29 maxlen: 29
2a04:8640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:60:0d:6b:d1:dd:3c:4b:ce:41:92:aa:86:6b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Validity
Not Before: Jan 1 14:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb344105d3f7230e384c8a8e1f0216a4ef46c391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3a:ab:a3:9b:47:2b:60:3e:33:8a:5c:ba:8a:
5d:5e:da:e2:b0:c6:a6:55:c2:6b:d1:a1:95:55:1e:
b6:aa:c4:c7:6c:b7:a9:b0:37:25:c0:22:17:94:2a:
0c:11:70:a6:4c:c8:90:8f:f6:ed:4d:d6:f6:18:03:
3b:3c:d4:30:08:7a:92:a0:bb:62:33:37:c0:9b:44:
de:74:49:4a:1f:91:01:26:9f:34:12:16:fb:76:f6:
d6:e6:e9:b7:f7:98:74:fa:ef:98:14:ac:3d:1d:4c:
21:28:d0:c3:2a:80:a9:32:a1:c8:4d:86:75:02:c8:
c1:a2:b1:34:1b:9a:f2:d9:8b:14:39:43:c0:1c:f3:
04:19:05:29:3c:2b:fc:a8:81:45:97:42:26:3d:50:
30:66:9e:ea:f6:5e:55:d0:af:dc:a5:99:f3:a4:3b:
44:d9:28:4f:0a:b1:14:63:47:4c:67:50:b4:a9:00:
70:6c:be:5c:ae:c1:b5:d1:f9:20:fb:71:31:17:0f:
ed:28:d9:a7:12:76:30:41:32:8e:44:b5:55:c4:03:
6f:85:e9:bb:34:84:31:cc:c3:1f:a7:b4:e4:ff:2d:
bd:ba:85:df:77:51:09:da:26:f4:d0:67:a9:af:27:
ed:98:b5:cc:c3:9a:d1:a7:4d:03:29:f6:8c:08:1b:
79:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:34:41:05:D3:F7:23:0E:38:4C:8A:8E:1F:02:16:A4:EF:46:C3:91
X509v3 Authority Key Identifier:
keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/6zRBBdP3Iw44TIqOHwIWpO9Gw5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.72.0/21
185.40.212.0/22
185.221.72.0/22
185.234.112.0/24
193.254.12.0/22
IPv6:
2a01:ab40::/29
2a04:8640::/29
2a0c:8000::/29
2a0c:e2c0::/29
2a10:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
15:cd:58:0c:4c:04:e9:f3:b8:90:ce:75:35:c7:7f:8a:d5:f2:
02:85:2c:2d:bc:a4:85:bb:4a:8a:ff:29:69:96:f2:0a:24:83:
0f:6d:29:7e:63:2f:4b:65:9d:5f:e9:23:5a:24:7d:78:fe:72:
59:c9:3c:bf:76:16:4d:35:5e:e9:b1:0a:c2:19:c2:8d:b6:dd:
c9:bf:f6:1f:e8:b1:1a:13:ca:08:83:61:33:a2:de:68:46:eb:
b4:67:f6:67:66:ff:8a:18:d8:10:f6:12:62:23:9d:f2:39:32:
ce:30:89:a6:c7:be:ff:44:23:5b:d4:6e:d6:1e:a3:ed:76:e1:
6a:50:43:2c:99:aa:61:ec:4f:b2:eb:1f:ec:7c:1e:02:b8:78:
8e:35:d0:30:0a:0c:66:5f:14:c1:fc:15:28:aa:f8:3e:a3:6a:
5e:d5:54:18:4c:b4:67:8f:d3:84:d2:36:57:8b:40:59:f0:6b:
cc:6a:32:b5:94:ce:1b:69:9d:58:de:fc:aa:ae:de:82:7f:c6:
d4:fe:14:4f:f8:b1:53:0f:9c:f9:6c:a0:4b:9c:d4:1c:0c:b9:
1b:5c:02:a4:d7:f0:77:5c:29:f1:f5:3d:c0:b2:f4:fe:76:2c:
be:ca:ae:bd:73:79:fb:0d:23:d7:a5:a3:85:0f:4c:da:d9:e5:
78:9b:69:fb
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgISAYzFbmANa9HdPEvOQZKqhmvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNGU5NTkyMDBhZWE4ZmI5MjkxNThiNzNlOGMwZTY5YTg4
ZGM1ZTkwHhcNMjQwMTAxMTQyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjM0NDEwNWQzZjcyMzBlMzg0YzhhOGUxZjAyMTZhNGVmNDZjMzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Tqro5tHK2A+M4pcuopdXtrisMam
VcJr0aGVVR62qsTHbLepsDclwCIXlCoMEXCmTMiQj/btTdb2GAM7PNQwCHqSoLti
MzfAm0TedElKH5EBJp80Ehb7dvbW5um395h0+u+YFKw9HUwhKNDDKoCpMqHITYZ1
AsjBorE0G5ry2YsUOUPAHPMEGQUpPCv8qIFFl0ImPVAwZp7q9l5V0K/cpZnzpDtE
2ShPCrEUY0dMZ1C0qQBwbL5crsG10fkg+3ExFw/tKNmnEnYwQTKORLVVxANvhem7
NIQxzMMfp7Tk/y29uoXfd1EJ2ib00GepryftmLXMw5rRp00DKfaMCBt5iwIDAQAB
o4ICTDCCAkgwHQYDVR0OBBYEFOs0QQXT9yMOOEyKjh8CFqTvRsORMB8GA1UdIwQY
MBaAFB1OlZIArqj7kpFYtz6MDmmojcXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wNGQzNjQtNTYwZi00YjM2LThmMmEt
MmI1MzZjZjdiODI1LzEvNnpSQkJkUDNJdzQ0VElxT0h3SVdwTzlHdzVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wNGQzNjQtNTYwZi00YjM2LThmMmEtMmI1MzZjZjdiODI1
LzEvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTAkBAIAATAeAwQDBT5IAwQC
uSjUAwQCud1IAwQAuepwAwQCwf4MMCkEAgACMCMDBQMqAatAAwUDKgSGQAMFAyoM
gAADBQMqDOLAAwUDKhCswDANBgkqhkiG9w0BAQsFAAOCAQEAFc1YDEwE6fO4kM51
Ncd/itXyAoUsLbykhbtKiv8paZbyCiSDD20pfmMvS2WdX+kjWiR9eP5yWck8v3YW
TTVe6bEKwhnCjbbdyb/2H+ixGhPKCINhM6LeaEbrtGf2Z2b/ihjYEPYSYiOd8jky
zjCJpse+/0QjW9Ru1h6j7XbhalBDLJmqYexPsusf7HweArh4jjXQMAoMZl8UwfwV
KKr4PqNqXtVUGEy0Z4/ThNI2V4tAWfBrzGoytZTOG2mdWN78qq7egn/G1P4UT/ix
Uw+c+WygS5zUHAy5G1wCpNfwd1wp8fU9wLL0/nYsvsquvXN5+w0j16WjhQ9M2tnl
eJtp+w==
-----END CERTIFICATE-----
Generated at Sun May 19 06:34:03 2024 by rpki-client on console-ams.rpki-client.org