Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/EMMlDo_ZEo1KryYD--iKv-Ws7d0.roa
File: EMMlDo_ZEo1KryYD--iKv-Ws7d0.roa (raw, json)
Hash identifier: K2IQUKVGfwqms1WTMz6O+nrKH0VpEEn3Hldc+B0M+C8=
Subject key identifier: 10:C3:25:0E:8F:D9:12:8D:4A:AF:26:03:FB:E8:8A:BF:E5:AC:ED:DD
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018CC6B7ADF86EAF3B045E34A760E8A92B84
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/EMMlDo_ZEo1KryYD--iKv-Ws7d0.roa
Signing time: Mon 01 Jan 2024 20:29:35 +0000
ROA not before: Mon 01 Jan 2024 20:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34665
IP address blocks: 84.54.28.0/22 maxlen: 22
45.140.171.0/24 maxlen: 24
213.139.229.0/24 maxlen: 24
45.139.31.0/24 maxlen: 24
45.139.29.0/24 maxlen: 24
45.139.28.0/24 maxlen: 24
45.145.163.0/24 maxlen: 24
45.137.55.0/24 maxlen: 24
45.137.52.0/24 maxlen: 24
45.145.171.0/24 maxlen: 24
45.145.168.0/24 maxlen: 24
45.137.191.0/24 maxlen: 24
45.137.188.0/24 maxlen: 24
109.94.211.0/24 maxlen: 24
45.94.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ad:f8:6e:af:3b:04:5e:34:a7:60:e8:a9:2b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 20:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10c3250e8fd9128d4aaf2603fbe88abfe5aceddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:29:10:1a:30:cb:61:65:84:eb:87:dc:20:0d:
a8:38:6d:c7:da:6d:7f:56:c5:a4:d8:ba:21:e6:f1:
4b:b7:f6:62:ab:43:4e:11:36:2f:c7:48:c8:4f:46:
4a:25:e3:22:a9:72:4e:16:88:b1:a1:ea:f5:a3:11:
3f:1b:b1:4b:5a:7c:16:83:4d:a1:87:fd:73:61:44:
a5:b6:b9:eb:76:97:55:67:24:a9:58:f4:b6:4d:96:
b7:58:a7:ea:8a:7d:c7:de:59:87:86:f7:76:96:a2:
65:f3:bb:59:0a:b7:4a:eb:3d:e6:bd:70:a7:61:73:
26:cc:6e:63:64:58:09:64:ff:9f:40:03:d8:fd:00:
40:76:06:0f:3e:e3:d7:d9:80:7c:92:b3:cd:5a:a2:
a2:57:43:71:5e:8d:06:ad:2d:86:d6:a5:e5:37:34:
f2:3e:80:14:67:00:da:c9:d5:9e:2f:b5:ee:b7:17:
0a:6a:ad:4c:31:32:74:76:ae:b4:22:44:10:97:09:
ac:70:95:17:31:76:ac:0d:87:a2:6e:4e:ab:c3:9c:
2d:d5:ec:ab:43:61:99:64:fa:91:e8:68:f0:cc:5a:
09:1d:97:b7:3c:08:d3:40:cc:36:28:82:73:c4:95:
de:32:0a:db:31:ee:66:d5:83:41:ce:b5:0e:90:2a:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C3:25:0E:8F:D9:12:8D:4A:AF:26:03:FB:E8:8A:BF:E5:AC:ED:DD
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/EMMlDo_ZEo1KryYD--iKv-Ws7d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.23.0/24
45.137.52.0/24
45.137.55.0/24
45.137.188.0/24
45.137.191.0/24
45.139.28.0/23
45.139.31.0/24
45.140.171.0/24
45.145.163.0/24
45.145.168.0/24
45.145.171.0/24
84.54.28.0/22
109.94.211.0/24
213.139.229.0/24
Signature Algorithm: sha256WithRSAEncryption
40:a9:08:8e:c7:8a:8a:d1:b6:9e:42:e9:a8:15:6b:6b:97:7a:
c0:ee:e4:0a:eb:9b:14:40:c3:d5:f8:d5:81:69:77:3e:e9:ac:
18:45:82:9a:a1:c4:32:18:77:c0:4e:82:77:09:42:b9:3a:1f:
6f:a9:56:10:1c:97:e2:2f:2f:62:ca:cb:83:4b:8c:21:fc:7a:
27:e9:1c:54:70:0e:f2:7b:05:ae:49:a5:b7:46:0a:76:14:29:
9c:0b:3f:fe:2c:b0:5f:76:0c:93:73:d2:85:4f:d0:c9:c5:2b:
89:7e:30:94:7a:5b:22:2e:d7:69:07:06:95:36:73:77:40:f2:
61:32:4f:5b:39:fd:e8:61:97:41:9f:d8:53:ee:1f:12:2a:7a:
8b:57:40:91:4c:7c:d9:ea:4a:cc:97:51:52:4e:5c:c6:8c:5a:
40:fa:83:af:2d:a4:f5:c3:3b:ac:46:06:56:92:dd:22:14:67:
05:9a:51:68:40:db:61:5a:e4:29:71:ca:12:fc:b7:97:63:ab:
31:d1:10:cd:ca:9c:cf:48:38:bf:50:e5:93:c7:c3:e4:8f:86:
48:34:36:83:24:b3:00:d2:37:8f:84:bf:6e:5b:11:b9:92:f8:
d8:3c:16:41:6a:43:33:85:e3:02:49:69:6d:c8:5b:5e:8b:af:
0c:44:c1:a0
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAYzGt634bq87BF40p2DoqSuEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjQwMTAxMjAyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGMzMjUwZThmZDkxMjhkNGFhZjI2MDNmYmU4OGFiZmU1YWNlZGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSkQGjDLYWWE64fcIA2oOG3H2m1/
VsWk2Loh5vFLt/Ziq0NOETYvx0jIT0ZKJeMiqXJOFoixoer1oxE/G7FLWnwWg02h
h/1zYUSltrnrdpdVZySpWPS2TZa3WKfqin3H3lmHhvd2lqJl87tZCrdK6z3mvXCn
YXMmzG5jZFgJZP+fQAPY/QBAdgYPPuPX2YB8krPNWqKiV0NxXo0GrS2G1qXlNzTy
PoAUZwDaydWeL7XutxcKaq1MMTJ0dq60IkQQlwmscJUXMXasDYeibk6rw5wt1eyr
Q2GZZPqR6GjwzFoJHZe3PAjTQMw2KIJzxJXeMgrbMe5m1YNBzrUOkCrpLQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFBDDJQ6P2RKNSq8mA/voir/lrO3dMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvRU1NbERvX1pFbzFLcnlZRC0taUt2LVdzN2QwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQALV4XAwQA
LYk0AwQALYk3AwQALYm8AwQALYm/AwQBLYscAwQALYsfAwQALYyrAwQALZGjAwQA
LZGoAwQALZGrAwQCVDYcAwQAbV7TAwQA1YvlMA0GCSqGSIb3DQEBCwUAA4IBAQBA
qQiOx4qK0baeQumoFWtrl3rA7uQK65sUQMPV+NWBaXc+6awYRYKaocQyGHfAToJ3
CUK5Oh9vqVYQHJfiLy9iysuDS4wh/Hon6RxUcA7yewWuSaW3Rgp2FCmcCz/+LLBf
dgyTc9KFT9DJxSuJfjCUelsiLtdpBwaVNnN3QPJhMk9bOf3oYZdBn9hT7h8SKnqL
V0CRTHzZ6krMl1FSTlzGjFpA+oOvLaT1wzusRgZWkt0iFGcFmlFoQNthWuQpccoS
/LeXY6sx0RDNypzPSDi/UOWTx8Pkj4ZINDaDJLMA0jePhL9uWxG5kvjYPBZBakMz
heMCSWltyFtei68MRMGg
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:41:54 2024 by rpki-client on console-ams.rpki-client.org