Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/ARCgBL0uv5ObtnhFkNDOTrI3KVw.roa
File: ARCgBL0uv5ObtnhFkNDOTrI3KVw.roa (raw, json)
Hash identifier: cOdgSC9OKXJUyGQXob68yEF0MbvmSAP0y5to5Qsyz2w=
Subject key identifier: 01:10:A0:04:BD:2E:BF:93:9B:B6:78:45:90:D0:CE:4E:B2:37:29:5C
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 01903565FBF4920D0D73842BEDB7495B2795
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/ARCgBL0uv5ObtnhFkNDOTrI3KVw.roa
Signing time: Thu 20 Jun 2024 11:26:34 +0000
ROA not before: Thu 20 Jun 2024 11:26:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31376
IP address blocks: 80.73.192.0/20 maxlen: 20
80.79.240.0/21 maxlen: 21
80.79.248.0/22 maxlen: 22
80.79.252.0/23 maxlen: 23
80.249.176.0/20 maxlen: 28
91.190.80.0/21 maxlen: 21
91.198.130.0/24 maxlen: 24
91.215.252.0/23 maxlen: 23
91.215.254.0/24 maxlen: 24
91.219.180.0/22 maxlen: 22
93.92.192.0/21 maxlen: 28
93.190.224.0/21 maxlen: 28
94.125.8.0/21 maxlen: 21
109.71.176.0/21 maxlen: 28
185.42.60.0/22 maxlen: 28
185.155.112.0/22 maxlen: 22
188.93.240.0/21 maxlen: 28
193.26.214.0/24 maxlen: 24
193.46.2.0/24 maxlen: 24
193.110.236.0/22 maxlen: 22
193.110.237.0/24 maxlen: 24
194.153.158.128/25 maxlen: 25
195.93.206.0/23 maxlen: 23
195.191.146.0/23 maxlen: 23
213.108.32.0/21 maxlen: 21
217.119.16.0/20 maxlen: 28
2a02:16e8::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:35:65:fb:f4:92:0d:0d:73:84:2b:ed:b7:49:5b:27:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jun 20 11:26:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0110a004bd2ebf939bb6784590d0ce4eb237295c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:70:90:dc:4f:43:75:98:f4:1a:b3:0c:39:3d:
e1:a9:af:ff:f6:35:c2:3c:69:11:06:e1:55:0a:87:
47:83:87:f3:f1:ef:3c:98:63:e9:1c:86:13:7b:70:
ec:32:22:74:cd:9c:e5:44:5f:84:80:de:a5:c3:5d:
17:02:1f:7e:7b:98:2e:9c:02:5e:9e:e3:1d:ab:fb:
d3:29:f1:77:be:1f:2f:53:06:74:3d:2c:46:4a:98:
10:30:bd:f3:97:1a:4c:87:88:5c:b2:eb:ae:87:20:
23:97:b9:b6:69:6c:3a:86:b8:5f:cf:a6:32:34:e8:
d4:f1:d6:0d:be:a2:c8:60:39:ff:f5:34:d5:d8:e9:
e9:bb:fe:71:d1:b5:0d:78:0a:6d:d4:1b:3d:3c:92:
b3:8f:a8:3b:bc:c1:66:cb:41:96:9f:a9:7d:72:f2:
12:90:2b:b9:5a:19:77:69:3d:c3:34:e4:56:a9:cb:
db:43:cf:6a:ab:60:54:79:6e:d5:ee:1e:65:35:67:
a2:97:5b:b7:01:39:ac:59:38:da:dd:d1:09:b8:c1:
1c:12:8c:cc:fc:1a:ec:95:85:6a:74:c9:3d:d0:4b:
78:f1:2e:0d:6f:9f:b9:c3:8f:11:0a:bf:fe:d2:33:
d7:92:86:7d:58:db:2b:cd:65:56:38:3a:f1:73:86:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:10:A0:04:BD:2E:BF:93:9B:B6:78:45:90:D0:CE:4E:B2:37:29:5C
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/ARCgBL0uv5ObtnhFkNDOTrI3KVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.192.0/20
80.79.240.0-80.79.253.255
80.249.176.0/20
91.190.80.0/21
91.198.130.0/24
91.215.252.0-91.215.254.255
91.219.180.0/22
93.92.192.0/21
93.190.224.0/21
94.125.8.0/21
109.71.176.0/21
185.42.60.0/22
185.155.112.0/22
188.93.240.0/21
193.26.214.0/24
193.46.2.0/24
193.110.236.0/22
194.153.158.128/25
195.93.206.0/23
195.191.146.0/23
213.108.32.0/21
217.119.16.0/20
IPv6:
2a02:16e8::/32
Signature Algorithm: sha256WithRSAEncryption
45:f5:e8:ce:9d:44:34:20:1d:2d:dc:55:7d:52:e1:26:e1:39:
5a:62:44:43:ec:0f:5a:96:8a:ed:e8:8b:98:e3:6c:95:20:d3:
f7:c2:fb:cd:20:36:02:c4:8f:c7:fe:bb:11:e6:6b:7d:1d:48:
e6:d8:93:9d:34:8d:f2:77:67:2e:a1:07:54:f5:77:42:00:c1:
ca:37:35:00:87:de:a9:cd:ed:de:d0:93:18:49:c5:b6:03:76:
b3:20:5e:34:5c:10:1a:7f:65:d6:a2:91:0e:7c:99:df:ed:aa:
65:d6:e8:fb:04:5e:5e:95:43:11:64:58:19:01:61:73:06:47:
c7:c1:90:ea:ff:f2:14:17:d8:15:30:f1:96:7b:d9:11:6b:a6:
ca:b4:bf:f0:e0:84:5e:f0:ef:03:75:34:b5:d8:72:33:27:b9:
9d:4a:d6:bc:d3:bf:3d:36:d7:da:59:68:35:30:81:f6:c3:b7:
ff:33:fe:0c:47:3b:64:ec:ba:8c:b3:85:cc:80:62:b9:c5:e8:
a6:35:4f:65:92:82:ed:95:3b:9d:f1:55:50:e9:8e:3d:db:9d:
78:0d:1e:7f:f4:7b:44:d3:34:2b:cf:6d:93:ae:65:04:cf:a9:
e8:ab:12:f9:de:00:74:ed:29:97:3d:36:84:dd:d0:44:03:ef:
53:12:2a:69
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgISAZA1Zfv0kg0Nc4Qr7bdJWyeVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5
ZGY4NWQwHhcNMjQwNjIwMTEyNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTEwYTAwNGJkMmViZjkzOWJiNjc4NDU5MGQwY2U0ZWIyMzcyOTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHCQ3E9DdZj0GrMMOT3hqa//9jXC
PGkRBuFVCodHg4fz8e88mGPpHIYTe3DsMiJ0zZzlRF+EgN6lw10XAh9+e5gunAJe
nuMdq/vTKfF3vh8vUwZ0PSxGSpgQML3zlxpMh4hcsuuuhyAjl7m2aWw6hrhfz6Yy
NOjU8dYNvqLIYDn/9TTV2Onpu/5x0bUNeApt1Bs9PJKzj6g7vMFmy0GWn6l9cvIS
kCu5Whl3aT3DNORWqcvbQ89qq2BUeW7V7h5lNWeil1u3ATmsWTja3dEJuMEcEozM
/BrslYVqdMk90Et48S4Nb5+5w48RCr/+0jPXkoZ9WNsrzWVWODrxc4Yf1QIDAQAB
o4ICrDCCAqgwHQYDVR0OBBYEFAEQoAS9Lr+Tm7Z4RZDQzk6yNylcMB8GA1UdIwQY
MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt
M2Q1MjIxODFhMmM0LzEvQVJDZ0JMMHV2NU9idG5oRmtORE9UckkzS1Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0
LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHBBggrBgEFBQcBBwEB/wSBsTCBrjCBnAQCAAEwgZUDBARQ
ScAwDAMEBFBP8AMEAVBP/AMEBFD5sAMEA1u+UAMEAFvGgjAMAwQCW9f8AwQAW9f+
AwQCW9u0AwQDXVzAAwQDXb7gAwQDXn0IAwQDbUewAwQCuSo8AwQCuZtwAwQDvF3w
AwQAwRrWAwQAwS4CAwQCwW7sAwUHwpmegAMEAcNdzgMEAcO/kgMEA9VsIAMEBNl3
EDANBAIAAjAHAwUAKgIW6DANBgkqhkiG9w0BAQsFAAOCAQEARfXozp1ENCAdLdxV
fVLhJuE5WmJEQ+wPWpaK7eiLmONslSDT98L7zSA2AsSPx/67EeZrfR1I5tiTnTSN
8ndnLqEHVPV3QgDByjc1AIfeqc3t3tCTGEnFtgN2syBeNFwQGn9l1qKRDnyZ3+2q
Zdbo+wReXpVDEWRYGQFhcwZHx8GQ6v/yFBfYFTDxlnvZEWumyrS/8OCEXvDvA3U0
tdhyMye5nUrWvNO/PTbX2lloNTCB9sO3/zP+DEc7ZOy6jLOFzIBiucXopjVPZZKC
7ZU7nfFVUOmOPdudeA0ef/R7RNM0K89tk65lBM+p6KsS+d4AdO0plz02hN3QRAPv
UxIqaQ==
-----END CERTIFICATE-----
Generated at Fri Jun 28 21:45:20 2024 by rpki-client on console-ams.rpki-client.org