Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MdNhSogi1uXo5rZjT0x44yNA5gM.roa
File: MdNhSogi1uXo5rZjT0x44yNA5gM.roa (raw, json)
Hash identifier: +ni1sdcy8i9ze8DdNElNexLzDBSsotwc88YtMPcVF8c=
Subject key identifier: 31:D3:61:4A:88:22:D6:E5:E8:E6:B6:63:4F:4C:78:E3:23:40:E6:03
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0192F75258D57BE2BACA317B058C69395B52
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MdNhSogi1uXo5rZjT0x44yNA5gM.roa
Signing time: Mon 04 Nov 2024 13:17:01 +0000
ROA not before: Mon 04 Nov 2024 13:17:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 45.88.14.0/24 maxlen: 24
45.88.15.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
77.81.182.0/24 maxlen: 24
79.110.227.0/24 maxlen: 24
85.204.18.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.37.192.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
93.115.107.0/24 maxlen: 24
93.118.36.0/24 maxlen: 24
93.119.154.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
185.198.233.0/24 maxlen: 24
185.212.119.0/24 maxlen: 24
188.212.121.0/24 maxlen: 24
188.215.31.0/24 maxlen: 24
188.241.221.0/24 maxlen: 24
193.178.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f7:52:58:d5:7b:e2:ba:ca:31:7b:05:8c:69:39:5b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 4 13:17:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31d3614a8822d6e5e8e6b6634f4c78e32340e603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:5a:40:5a:db:21:70:1f:ac:13:71:56:8b:
23:0d:a4:ae:a9:47:e1:f8:36:fc:0d:e9:1b:34:94:
ee:e6:d4:40:11:09:df:d7:d7:b3:50:89:7d:ad:e5:
95:f0:5d:14:c1:4a:2a:41:19:6c:8d:50:f9:98:1b:
be:ce:43:8b:8a:90:03:8f:6d:cc:db:ee:03:6d:99:
30:21:d4:b2:fe:08:0f:bb:18:43:b6:46:d0:52:0c:
df:ef:90:b7:45:51:2c:3c:3b:c3:8e:e7:5c:cd:8a:
7d:29:75:de:72:28:58:40:54:73:85:f5:e1:30:43:
9d:e8:84:b5:f9:d0:d2:3c:32:3d:f7:09:95:45:08:
4c:1f:69:40:cf:8c:02:89:1d:e3:c4:5f:1b:27:eb:
88:8b:43:5f:19:fc:21:b7:9b:3b:32:50:87:40:07:
bc:12:ab:96:c4:49:8f:3c:f2:6a:32:6d:d0:fb:6d:
c3:86:2d:e9:8a:02:47:3b:8d:1e:55:21:12:92:2a:
d6:4b:27:59:f2:e1:69:f0:68:f8:da:36:56:c2:67:
be:91:6f:6d:37:69:74:89:f7:e4:4a:c4:41:c3:a7:
19:41:a7:f9:af:03:84:a4:37:d1:bf:23:78:71:39:
97:d4:1d:fc:c7:b2:41:8c:37:21:84:b3:12:ce:ef:
96:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D3:61:4A:88:22:D6:E5:E8:E6:B6:63:4F:4C:78:E3:23:40:E6:03
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MdNhSogi1uXo5rZjT0x44yNA5gM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.14.0/23
62.192.152.0/24
77.81.182.0/24
79.110.227.0/24
85.204.18.0/24
89.34.106.0/24
89.35.129.0/24
89.37.192.0/24
89.40.36.0/24
89.40.215.0/24
89.45.35.0/24
89.47.36.0/24
93.115.106.0/23
93.118.36.0/24
93.119.154.0/24
94.198.171.0/24
128.0.41.0/24
176.223.188.0/24
185.198.233.0/24
185.212.119.0/24
188.212.121.0/24
188.215.31.0/24
188.241.221.0/24
193.178.134.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7e:a4:35:82:db:60:73:ff:5b:3d:ed:09:76:de:67:ca:70:
f5:7d:1e:93:d3:e7:45:35:e6:0d:f6:ff:fe:14:18:6d:b7:b9:
16:01:7c:10:4e:6c:5e:34:e2:e2:a4:58:b1:e0:e5:c8:4a:74:
75:c2:66:b9:d1:a4:62:2b:a8:fb:f9:4f:21:ff:59:91:48:be:
cd:c8:c5:86:93:70:48:e7:6c:06:8a:41:c7:c9:df:d3:6b:cd:
d6:56:1b:ec:f6:a9:49:e0:03:8f:69:50:ae:00:3e:48:39:95:
b8:6c:0d:18:77:9e:98:32:2a:27:ec:70:82:04:aa:25:63:71:
86:07:55:0a:20:e5:ea:c6:9e:9a:75:2f:a2:d9:4b:73:b1:45:
62:2f:d6:ef:00:e0:6f:d5:d5:5b:5b:9f:bb:5e:ab:aa:af:55:
19:71:2c:7a:06:fd:5d:60:8d:df:8f:2d:b8:d4:07:2e:a2:76:
f0:b1:2e:3b:7e:55:f6:f9:22:0f:70:7b:9b:f4:f8:0e:d6:55:
5a:ca:b8:e1:74:27:97:ac:95:3e:29:e7:d0:21:bd:2c:70:7e:
ac:ee:24:73:ea:d0:3f:3d:32:05:8c:45:9d:ea:f2:87:ad:73:
95:fe:4a:a6:e7:c1:c3:b9:c8:ca:2c:f3:ef:ab:d4:11:7e:94:
9e:3e:42:1a
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgISAZL3UljVe+K6yjF7BYxpOVtSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQxMTA0MTMxNzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWQzNjE0YTg4MjJkNmU1ZThlNmI2NjM0ZjRjNzhlMzIzNDBlNjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3xaQFrbIXAfrBNxVosjDaSuqUfh
+Db8DekbNJTu5tRAEQnf19ezUIl9reWV8F0UwUoqQRlsjVD5mBu+zkOLipADj23M
2+4DbZkwIdSy/ggPuxhDtkbQUgzf75C3RVEsPDvDjudczYp9KXXecihYQFRzhfXh
MEOd6IS1+dDSPDI99wmVRQhMH2lAz4wCiR3jxF8bJ+uIi0NfGfwht5s7MlCHQAe8
EquWxEmPPPJqMm3Q+23Dhi3pigJHO40eVSESkirWSydZ8uFp8Gj42jZWwme+kW9t
N2l0iffkSsRBw6cZQaf5rwOEpDfRvyN4cTmX1B38x7JBjDchhLMSzu+W2QIDAQAB
o4ICmDCCApQwHQYDVR0OBBYEFDHTYUqIItbl6Oa2Y09MeOMjQOYDMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvTWROaFNvZ2kxdVhvNXJaalQweDQ0eU5BNWdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBAEt
WA4DBAA+wJgDBABNUbYDBABPbuMDBABVzBIDBABZImoDBABZI4EDBABZJcADBABZ
KCQDBABZKNcDBABZLSMDBABZLyQDBAFdc2oDBABddiQDBABdd5oDBABexqsDBACA
ACkDBACw37wDBAC5xukDBAC51HcDBAC81HkDBAC81x8DBAC88d0DBADBsoYwDQYJ
KoZIhvcNAQELBQADggEBABF+pDWC22Bz/1s97Ql23mfKcPV9HpPT50U15g32//4U
GG23uRYBfBBObF404uKkWLHg5chKdHXCZrnRpGIrqPv5TyH/WZFIvs3IxYaTcEjn
bAaKQcfJ39NrzdZWG+z2qUngA49pUK4APkg5lbhsDRh3npgyKifscIIEqiVjcYYH
VQog5erGnpp1L6LZS3OxRWIv1u8A4G/V1Vtbn7teq6qvVRlxLHoG/V1gjd+PLbjU
By6idvCxLjt+Vfb5Ig9we5v0+A7WVVrKuOF0J5eslT4p59AhvSxwfqzuJHPq0D89
MgWMRZ3q8oetc5X+SqbnwcO5yMos8++r1BF+lJ4+Qho=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:27:04 2024 by rpki-client on console-ams.rpki-client.org