Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/jANJYMePGjsDhM9yooPOIpBVQSs.roa
File: jANJYMePGjsDhM9yooPOIpBVQSs.roa (raw, json)
Hash identifier: Uf5YCzwPOUwECTcxNuOKa+B20SK96zVJFnqrPFiyEmc=
Subject key identifier: 8C:03:49:60:C7:8F:1A:3B:03:84:CF:72:A2:83:CE:22:90:55:41:2B
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 01932A1BDF1F57C671D21C2BADA0684C8C65
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/jANJYMePGjsDhM9yooPOIpBVQSs.roa
Signing time: Thu 14 Nov 2024 09:58:09 +0000
ROA not before: Thu 14 Nov 2024 09:58:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 86.105.104.0/22 maxlen: 24
89.36.236.0/22 maxlen: 24
89.37.128.0/24 maxlen: 24
89.37.188.0/22 maxlen: 24
89.40.43.0/24 maxlen: 24
89.184.208.0/20 maxlen: 32
91.232.136.0/22 maxlen: 24
93.114.169.0/24 maxlen: 24
93.115.155.0/24 maxlen: 24
94.177.65.0/24 maxlen: 24
94.190.248.0/22 maxlen: 24
176.223.190.0/24 maxlen: 24
185.64.100.0/22 maxlen: 24
185.172.20.0/22 maxlen: 24
188.211.252.0/22 maxlen: 24
188.212.104.0/22 maxlen: 24
188.240.83.0/24 maxlen: 24
193.46.204.0/24 maxlen: 24
193.46.211.0/24 maxlen: 24
194.213.10.0/24 maxlen: 24
194.242.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:1b:df:1f:57:c6:71:d2:1c:2b:ad:a0:68:4c:8c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Nov 14 09:58:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c034960c78f1a3b0384cf72a283ce229055412b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:b5:39:fd:d9:1e:db:6e:1e:44:3d:f8:86:
37:7e:61:0d:02:31:ce:9c:91:74:42:95:40:10:d4:
e6:0f:6e:7e:af:72:30:05:b8:cc:94:6a:ca:83:49:
24:24:0e:86:60:73:80:e8:cb:05:52:44:b0:0c:52:
3e:04:25:1c:d9:e4:86:80:71:a5:6e:5a:04:3c:f6:
e0:2e:53:4a:80:3b:39:5b:2a:b5:41:b8:f7:39:b4:
8d:a4:28:76:d2:47:61:3e:6f:08:0d:8e:f1:9c:d4:
81:b1:3a:b8:c8:f0:da:96:24:ad:67:f1:e9:58:f0:
d8:a6:50:7d:8a:0d:95:c0:b5:09:d5:80:17:d8:05:
2f:f1:75:fc:25:d1:d1:52:93:9e:e0:ba:ec:b6:f3:
5c:ef:58:d5:3e:1e:7f:10:40:f3:a4:c2:42:fc:5c:
9c:37:8d:95:9e:dc:0f:5c:c3:3d:cc:2d:d0:86:ab:
41:5a:49:45:e2:fd:f6:ff:b0:96:88:ff:56:29:6b:
c8:6b:71:02:96:3d:20:19:a3:2c:70:92:df:ea:c7:
4f:21:12:4f:ff:1b:c0:45:df:fd:db:cd:24:2b:ad:
31:1e:79:60:44:a4:3e:07:23:ff:ea:d1:30:36:88:
01:8d:62:ba:c1:79:53:33:19:a0:b6:25:83:d7:43:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:03:49:60:C7:8F:1A:3B:03:84:CF:72:A2:83:CE:22:90:55:41:2B
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/jANJYMePGjsDhM9yooPOIpBVQSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.104.0/22
89.36.236.0/22
89.37.128.0/24
89.37.188.0/22
89.40.43.0/24
89.184.208.0/20
91.232.136.0/22
93.114.169.0/24
93.115.155.0/24
94.177.65.0/24
94.190.248.0/22
176.223.190.0/24
185.64.100.0/22
185.172.20.0/22
188.211.252.0/22
188.212.104.0/22
188.240.83.0/24
193.46.204.0/24
193.46.211.0/24
194.213.10.0/24
194.242.28.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:72:30:24:79:1e:de:5f:5d:fc:83:e1:2b:2d:18:fd:3f:94:
99:7f:26:fc:d2:a6:95:69:e6:c5:c0:99:8d:0e:0e:a3:f2:02:
a1:20:1e:06:bd:8e:7e:13:26:d5:06:3d:68:68:9b:e3:13:d7:
7a:78:bd:9e:b0:75:7d:6f:fd:5d:31:5e:a5:c7:ef:20:92:38:
93:c1:87:87:bf:9d:10:26:ae:10:74:ea:d1:28:d9:d4:e1:ef:
6a:04:43:9b:f9:9a:fa:56:38:01:e2:da:f1:22:95:3e:be:7e:
f3:1d:9c:a4:09:0a:a8:4e:60:6e:e5:66:02:fd:c1:e2:65:52:
51:38:c4:e3:57:21:64:49:b9:f7:bd:79:95:17:1f:8e:ee:a1:
25:9c:4c:42:ca:33:8c:f8:a4:2b:e7:d3:5c:88:75:b6:0d:5e:
75:fe:32:14:8f:47:aa:bf:1f:4d:1e:34:26:6b:79:c8:9a:7b:
ec:64:d3:d1:72:5a:87:a2:c0:46:df:42:40:b8:19:5a:5c:ce:
13:22:95:07:5a:3d:20:18:7c:12:5c:ff:c4:f1:c9:e0:75:b5:
65:3b:63:0c:9c:67:e3:c5:1b:59:f1:38:64:a0:7c:ff:ff:77:
77:c8:11:53:ca:ea:24:a6:2e:f5:8c:93:a6:df:41:c3:e7:35:
27:33:95:f8
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZMqG98fV8Zx0hwrraBoTIxlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMGI0MTlmMGMxN2I0YzhiZTIxN2Y2NDM4OGQyNjhkMTRk
YzI2MWUwHhcNMjQxMTE0MDk1ODA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzAzNDk2MGM3OGYxYTNiMDM4NGNmNzJhMjgzY2UyMjkwNTU0MTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLm1Of3ZHttuHkQ9+IY3fmENAjHO
nJF0QpVAENTmD25+r3IwBbjMlGrKg0kkJA6GYHOA6MsFUkSwDFI+BCUc2eSGgHGl
bloEPPbgLlNKgDs5Wyq1Qbj3ObSNpCh20kdhPm8IDY7xnNSBsTq4yPDaliStZ/Hp
WPDYplB9ig2VwLUJ1YAX2AUv8XX8JdHRUpOe4LrstvNc71jVPh5/EEDzpMJC/Fyc
N42VntwPXMM9zC3QhqtBWklF4v32/7CWiP9WKWvIa3EClj0gGaMscJLf6sdPIRJP
/xvARd/9280kK60xHnlgRKQ+ByP/6tEwNogBjWK6wXlTMxmgtiWD10PY/QIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFIwDSWDHjxo7A4TPcqKDziKQVUErMB8GA1UdIwQY
MBaAFFELQZ8MF7TIviF/ZDiNJo0U3CYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYt
MTRhMDk5OTNkNjcxLzEvakFOSllNZVBHanNEaE05eW9vUE9JcEJWUVNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYtMTRhMDk5OTNkNjcx
LzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAlZp
aAMEAlkk7AMEAFklgAMEAlklvAMEAFkoKwMEBFm40AMEAlvoiAMEAF1yqQMEAF1z
mwMEAF6xQQMEAl6++AMEALDfvgMEArlAZAMEArmsFAMEArzT/AMEArzUaAMEALzw
UwMEAMEuzAMEAMEu0wMEAMLVCgMEAcLyHDANBgkqhkiG9w0BAQsFAAOCAQEALXIw
JHke3l9d/IPhKy0Y/T+UmX8m/NKmlWnmxcCZjQ4Oo/ICoSAeBr2OfhMm1QY9aGib
4xPXeni9nrB1fW/9XTFepcfvIJI4k8GHh7+dECauEHTq0SjZ1OHvagRDm/ma+lY4
AeLa8SKVPr5+8x2cpAkKqE5gbuVmAv3B4mVSUTjE41chZEm59715lRcfju6hJZxM
QsozjPikK+fTXIh1tg1edf4yFI9Hqr8fTR40Jmt5yJp77GTT0XJah6LARt9CQLgZ
WlzOEyKVB1o9IBh8Elz/xPHJ4HW1ZTtjDJxn48UbWfE4ZKB8//93d8gRU8rqJKYu
9YyTpt9Bw+c1JzOV+A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:34:41 2024 by rpki-client on console-fra.rpki-client.org