Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/eF0RBcxh4xKPgdjkQ-bttDiQDe0.roa
File: eF0RBcxh4xKPgdjkQ-bttDiQDe0.roa (raw, json)
Hash identifier: XAiBuOjCognZjDDTsWBWbCmUGGyR88VPsKMGMDe9+OI=
Subject key identifier: 78:5D:11:05:CC:61:E3:12:8F:81:D8:E4:43:E6:ED:B4:38:90:0D:ED
Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial: 018CC4934AC2141077A7C686BF9DC5A0392B
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/eF0RBcxh4xKPgdjkQ-bttDiQDe0.roa
Signing time: Mon 01 Jan 2024 10:30:36 +0000
ROA not before: Mon 01 Jan 2024 10:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198385
IP address blocks: 89.249.40.0/23 maxlen: 23
185.63.36.0/22 maxlen: 22
37.35.104.0/21 maxlen: 21
5.1.96.0/21 maxlen: 21
185.75.32.0/22 maxlen: 22
2a03:2040::/29 maxlen: 29
2a00:e6c0::/32 maxlen: 32
2a03:2040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:4a:c2:14:10:77:a7:c6:86:bf:9d:c5:a0:39:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Validity
Not Before: Jan 1 10:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=785d1105cc61e3128f81d8e443e6edb438900ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:38:d0:9e:75:84:0b:0f:70:b8:26:91:02:23:
b3:2a:c1:24:c8:8f:28:05:3b:cf:cd:f2:99:86:dd:
14:be:2a:a3:ca:8a:40:c3:b1:c0:3c:08:db:22:34:
6a:0b:f6:4e:16:fe:d0:97:aa:79:77:ef:2f:be:81:
73:b9:17:05:01:fd:3f:82:34:ac:8d:f4:65:c6:bf:
91:c1:08:6f:ad:c4:24:73:3b:aa:cd:13:cf:49:32:
b3:2c:5f:83:58:38:6b:86:7c:79:a5:f7:05:fa:92:
a3:36:f4:8e:73:49:67:d3:63:df:ca:a6:a9:07:11:
ec:b2:e4:98:24:88:18:7a:c0:c9:c7:82:5c:d3:a7:
55:96:48:6b:9e:08:50:6d:8d:77:b9:ed:9f:89:d5:
c6:b7:e6:fc:b2:46:a3:02:59:d6:17:85:83:20:b1:
b8:ba:ae:67:4f:96:b8:33:2d:cf:72:48:56:b1:02:
bb:85:c5:af:b2:36:64:ba:56:72:b8:52:a1:48:b9:
fe:dd:13:ba:95:ce:ab:8e:29:b4:24:04:24:da:ee:
58:dd:ab:39:04:50:66:b0:5f:48:6a:d6:27:81:18:
39:61:45:66:61:11:54:dd:d7:31:00:f9:6c:e1:47:
04:72:f2:bf:b7:3e:af:57:7f:98:47:ec:d9:13:7b:
5b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5D:11:05:CC:61:E3:12:8F:81:D8:E4:43:E6:ED:B4:38:90:0D:ED
X509v3 Authority Key Identifier:
keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/eF0RBcxh4xKPgdjkQ-bttDiQDe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.96.0/21
37.35.104.0/21
89.249.40.0/23
185.63.36.0/22
185.75.32.0/22
IPv6:
2a00:e6c0::/32
2a03:2040::/29
Signature Algorithm: sha256WithRSAEncryption
85:10:58:e0:e8:3a:5a:bd:60:a5:fb:c7:35:69:9f:62:90:3b:
39:6d:87:3d:ea:ba:08:13:bf:f8:45:72:69:ff:b5:7d:a8:72:
72:bb:9d:89:71:f9:67:fc:52:0b:4f:fe:a1:15:b6:32:62:97:
dc:65:f2:c1:da:32:db:4f:6b:3d:78:e3:ac:ad:52:a6:4d:b9:
3b:92:78:fd:f5:90:99:5e:dc:06:b3:43:c0:f3:82:4c:a0:9b:
b6:7c:8a:87:90:02:9c:10:9f:14:15:92:74:9b:b1:7a:89:5f:
e4:37:cb:13:e7:2c:b0:5b:b4:c9:d3:40:e8:cb:44:7a:3d:da:
14:91:9f:c5:b5:1e:e8:e3:95:4b:8e:ef:cb:f4:34:37:0d:39:
2d:c6:8c:4e:ff:69:28:a1:ec:86:cc:4f:28:0b:33:89:b3:4c:
23:bd:0d:2c:5e:22:f6:35:ef:c1:0d:e1:c2:36:1a:52:c7:9b:
ce:e5:f2:79:d9:d8:a6:8c:f0:38:c8:ad:cf:74:80:5a:54:c7:
b5:f5:04:d6:55:1d:60:40:d3:cf:f0:df:95:d3:e5:90:c4:f6:
92:77:a8:92:f8:2a:81:ce:ee:6c:55:a1:d9:98:da:9f:55:70:
66:1a:da:e7:2f:35:14:92:41:b2:08:57:d9:80:2c:1b:7b:35:
63:8f:1e:92
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYzEk0rCFBB3p8aGv53FoDkrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZWM0ZjRhMTZjYzUxYmQ1MTYyMTAxMTUzOWNlYjU3NGFj
MTVkMDIwHhcNMjQwMTAxMTAzMDM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODVkMTEwNWNjNjFlMzEyOGY4MWQ4ZTQ0M2U2ZWRiNDM4OTAwZGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTjQnnWECw9wuCaRAiOzKsEkyI8o
BTvPzfKZht0UviqjyopAw7HAPAjbIjRqC/ZOFv7Ql6p5d+8vvoFzuRcFAf0/gjSs
jfRlxr+RwQhvrcQkczuqzRPPSTKzLF+DWDhrhnx5pfcF+pKjNvSOc0ln02Pfyqap
BxHssuSYJIgYesDJx4Jc06dVlkhrnghQbY13ue2fidXGt+b8skajAlnWF4WDILG4
uq5nT5a4My3PckhWsQK7hcWvsjZkulZyuFKhSLn+3RO6lc6rjim0JAQk2u5Y3as5
BFBmsF9IatYngRg5YUVmYRFU3dcxAPls4UcEcvK/tz6vV3+YR+zZE3tbHwIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFHhdEQXMYeMSj4HY5EPm7bQ4kA3tMB8GA1UdIwQY
MBaAFK/sT0oWzFG9UWIQEVOc61dKwV0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci14UFNoYk1VYjFSWWhBUlU1enJWMHJCWFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85ZjdiNmItYjI5ZC00ODZlLTg0Nzgt
MjdlZmMxM2FmZjFlLzEvZUYwUkJjeGg0eEtQZ2Rqa1EtYnR0RGlRRGUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85ZjdiNmItYjI5ZC00ODZlLTg0NzgtMjdlZmMxM2FmZjFl
LzEvci14UFNoYk1VYjFSWWhBUlU1enJWMHJCWFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQDBQFgAwQD
JSNoAwQBWfkoAwQCuT8kAwQCuUsgMBQEAgACMA4DBQAqAObAAwUDKgMgQDANBgkq
hkiG9w0BAQsFAAOCAQEAhRBY4Og6Wr1gpfvHNWmfYpA7OW2HPeq6CBO/+EVyaf+1
fahycrudiXH5Z/xSC0/+oRW2MmKX3GXywdoy209rPXjjrK1Spk25O5J4/fWQmV7c
BrNDwPOCTKCbtnyKh5ACnBCfFBWSdJuxeolf5DfLE+cssFu0ydNA6MtEej3aFJGf
xbUe6OOVS47vy/Q0Nw05LcaMTv9pKKHshsxPKAszibNMI70NLF4i9jXvwQ3hwjYa
UsebzuXyednYpozwOMitz3SAWlTHtfUE1lUdYEDTz/DfldPlkMT2kneokvgqgc7u
bFWh2Zjan1VwZhra5y81FJJBsghX2YAsG3s1Y48ekg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:36 2024 by rpki-client on console-ams.rpki-client.org