Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/svvLoWQt46_dAhcLkra7hT2TN-o.roa
File: svvLoWQt46_dAhcLkra7hT2TN-o.roa (raw, json)
Hash identifier: EdptWBYDCfI56cuLvUb4ja/IfNEIWOoMpcPuwxv+3zU=
Subject key identifier: B2:FB:CB:A1:64:2D:E3:AF:DD:02:17:0B:92:B6:BB:85:3D:93:37:EA
Certificate issuer: /CN=764928a97be955377013d382c62940e950dd212b
Certificate serial: 018CC2DB2942FAD43CD9130CD8E42A4A28B0
Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/svvLoWQt46_dAhcLkra7hT2TN-o.roa
Signing time: Mon 01 Jan 2024 02:29:51 +0000
ROA not before: Mon 01 Jan 2024 02:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13135
IP address blocks: 185.132.220.0/22 maxlen: 24
213.238.56.0/21 maxlen: 24
192.76.134.0/24 maxlen: 24
212.12.48.0/21 maxlen: 24
2a00:14b0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:29:42:fa:d4:3c:d9:13:0c:d8:e4:2a:4a:28:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764928a97be955377013d382c62940e950dd212b
Validity
Not Before: Jan 1 02:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2fbcba1642de3afdd02170b92b6bb853d9337ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:91:2c:8b:af:7f:52:3d:8d:95:21:a8:75:d8:
18:40:67:bf:a9:03:d1:cc:6a:57:a1:33:46:be:cc:
fb:0f:3f:32:6d:66:9e:48:b9:0b:95:96:7e:49:27:
d5:e5:6c:72:c4:06:a6:3d:9e:c7:18:f8:30:b6:a5:
9b:42:21:f7:80:81:9b:36:77:42:3f:6a:79:70:79:
be:8a:e6:1d:b9:7a:5d:80:f7:6c:1c:ba:9e:3f:f8:
dd:bb:3e:ad:67:d6:44:bb:2c:66:80:29:07:c2:27:
66:04:8f:da:cc:23:9b:d0:cf:5b:d4:e8:82:d7:e8:
a3:f5:23:0c:70:a8:24:6f:e0:4b:b5:ba:4c:98:5e:
62:cb:41:d4:3b:f7:70:ca:c6:79:02:63:44:b0:59:
c0:1e:da:38:38:f5:24:97:a8:26:a4:52:fa:2a:cc:
a6:0a:62:c3:d7:87:d7:dc:ad:52:25:96:a6:39:4b:
9a:d4:e2:60:cb:08:33:76:95:1f:3e:17:16:f8:85:
48:56:0a:be:70:f4:ca:44:11:33:27:7c:e3:ae:75:
5e:a8:ac:21:77:fb:7f:e0:68:b0:93:60:04:99:46:
7b:76:41:0d:fe:b8:de:45:eb:70:14:53:e8:72:90:
d5:0b:f3:cc:70:29:c1:37:ed:32:d3:bc:eb:5d:7b:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FB:CB:A1:64:2D:E3:AF:DD:02:17:0B:92:B6:BB:85:3D:93:37:EA
X509v3 Authority Key Identifier:
keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/svvLoWQt46_dAhcLkra7hT2TN-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.220.0/22
192.76.134.0/24
212.12.48.0/21
213.238.56.0/21
IPv6:
2a00:14b0::/32
Signature Algorithm: sha256WithRSAEncryption
1a:1b:23:b5:a1:7c:ab:cb:d7:5b:b0:3a:53:ca:2d:b5:d1:6a:
62:c5:f5:fa:d2:15:44:01:86:08:24:4a:47:14:5a:7e:12:96:
10:f9:a1:2e:2c:66:ba:8b:b5:1e:f2:74:d0:98:f8:d2:e9:22:
0b:f6:22:d6:f4:d9:8b:40:d2:5c:8a:11:48:64:85:c7:32:1b:
34:09:de:71:85:0f:1f:ad:ee:67:ed:50:a6:d5:f0:5a:d9:26:
ec:9e:d2:46:a9:34:fe:14:83:27:46:c9:5a:e5:77:17:fb:88:
b7:af:cd:f0:bf:ce:42:d5:c3:3c:56:6e:fc:93:a9:3e:22:ac:
85:b4:ca:ea:b0:bd:eb:9f:cd:10:55:01:2b:b3:c4:7a:9a:34:
09:56:c3:ba:11:c5:67:da:d5:d6:d1:48:2e:c7:df:c6:0b:db:
d4:85:84:11:3c:bf:65:0b:8f:56:62:1d:11:31:d7:34:be:b3:
28:01:fe:cc:78:fd:bc:5b:60:79:8c:b9:c9:36:7b:47:6d:6e:
28:a1:24:54:32:58:be:20:cc:9b:fe:10:22:18:37:53:35:42:
33:b0:56:ef:6a:c0:eb:c3:78:12:ab:90:87:4d:4f:d5:83:7b:
76:28:d4:6a:11:38:55:63:06:f1:80:03:62:3f:11:f2:77:52:
6e:23:07:f3
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYzC2ylC+tQ82RMM2OQqSiiwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDkyOGE5N2JlOTU1Mzc3MDEzZDM4MmM2Mjk0MGU5NTBk
ZDIxMmIwHhcNMjQwMTAxMDIyOTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmZiY2JhMTY0MmRlM2FmZGQwMjE3MGI5MmI2YmI4NTNkOTMzN2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JEsi69/Uj2NlSGoddgYQGe/qQPR
zGpXoTNGvsz7Dz8ybWaeSLkLlZZ+SSfV5WxyxAamPZ7HGPgwtqWbQiH3gIGbNndC
P2p5cHm+iuYduXpdgPdsHLqeP/jduz6tZ9ZEuyxmgCkHwidmBI/azCOb0M9b1OiC
1+ij9SMMcKgkb+BLtbpMmF5iy0HUO/dwysZ5AmNEsFnAHto4OPUkl6gmpFL6Ksym
CmLD14fX3K1SJZamOUua1OJgywgzdpUfPhcW+IVIVgq+cPTKRBEzJ3zjrnVeqKwh
d/t/4Giwk2AEmUZ7dkEN/rjeRetwFFPocpDVC/PMcCnBN+0y07zrXXtCnQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFLL7y6FkLeOv3QIXC5K2u4U9kzfqMB8GA1UdIwQY
MBaAFHZJKKl76VU3cBPTgsYpQOlQ3SErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDkt
YmMxNTIyNzg5ZDNiLzEvc3Z2TG9XUXQ0Nl9kQWhjTGtyYTdoVDJUTi1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDktYmMxNTIyNzg5ZDNi
LzEvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCuYTcAwQA
wEyGAwQD1AwwAwQD1e44MA0EAgACMAcDBQAqABSwMA0GCSqGSIb3DQEBCwUAA4IB
AQAaGyO1oXyry9dbsDpTyi210WpixfX60hVEAYYIJEpHFFp+EpYQ+aEuLGa6i7Ue
8nTQmPjS6SIL9iLW9NmLQNJcihFIZIXHMhs0Cd5xhQ8fre5n7VCm1fBa2SbsntJG
qTT+FIMnRsla5XcX+4i3r83wv85C1cM8Vm78k6k+IqyFtMrqsL3rn80QVQErs8R6
mjQJVsO6EcVn2tXW0Ugux9/GC9vUhYQRPL9lC49WYh0RMdc0vrMoAf7MeP28W2B5
jLnJNntHbW4ooSRUMli+IMyb/hAiGDdTNUIzsFbvasDrw3gSq5CHTU/Vg3t2KNRq
EThVYwbxgANiPxHyd1JuIwfz
-----END CERTIFICATE-----
Generated at Tue Jul 2 21:30:42 2024 by rpki-client on console-ams.rpki-client.org