Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/K3fSjsdqIpsUwwyIUE6CE9QvWyk.roa
File: K3fSjsdqIpsUwwyIUE6CE9QvWyk.roa (raw, json)
Hash identifier: kMWki24rS6/3V+mFOoJWewxXj/0FydxuooesidUIRGs=
Subject key identifier: 2B:77:D2:8E:C7:6A:22:9B:14:C3:0C:88:50:4E:82:13:D4:2F:5B:29
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 018CC348CE4C9626BFA1FBA0EE226F59E355
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/K3fSjsdqIpsUwwyIUE6CE9QvWyk.roa
Signing time: Mon 01 Jan 2024 04:29:37 +0000
ROA not before: Mon 01 Jan 2024 04:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12632
IP address blocks: 82.137.12.0/22 maxlen: 24
188.241.252.0/23 maxlen: 23
188.241.252.0/22 maxlen: 24
82.79.114.0/23 maxlen: 23
82.79.119.0/24 maxlen: 24
188.241.254.0/23 maxlen: 23
86.123.114.0/24 maxlen: 24
188.208.136.0/23 maxlen: 23
188.208.136.0/22 maxlen: 24
188.208.138.0/23 maxlen: 23
82.137.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 23:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ce:4c:96:26:bf:a1:fb:a0:ee:22:6f:59:e3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Jan 1 04:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b77d28ec76a229b14c30c88504e8213d42f5b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cd:70:0d:b2:7d:59:75:d6:0e:3b:b5:8e:ae:
25:76:63:e5:fa:0f:27:7b:c6:67:55:82:11:c1:5b:
d5:ce:ee:8a:48:ed:27:80:49:96:13:68:89:f2:a1:
bb:4f:e2:d3:4c:9a:dc:81:80:bb:17:fc:3c:b0:61:
e9:b9:0a:4f:7e:4a:34:a3:de:12:09:55:e1:f1:36:
6b:5b:10:4c:6c:27:5b:6b:79:21:db:e7:06:55:4d:
da:58:c4:db:f9:6b:ab:d0:13:93:50:a6:0a:66:3b:
02:c1:43:f0:11:ab:46:55:63:0c:2f:9a:b1:c9:92:
3a:7c:ca:71:df:c6:ea:6a:93:f2:3d:5f:49:10:d1:
f4:4b:09:e4:ae:cc:24:41:e1:ad:9c:bb:2a:ad:fa:
10:42:63:37:0b:2d:83:f4:7f:a8:e9:5f:33:76:df:
c1:3a:b5:80:b5:19:d6:ee:39:8f:7e:5a:6f:83:44:
56:a5:dd:e6:2b:58:c6:2a:f8:bb:64:9c:cc:d2:04:
f6:6e:e0:ba:17:60:3e:c8:73:12:67:71:0e:00:00:
7f:06:e1:ef:d9:89:13:02:b8:e6:79:7a:de:b0:31:
44:c5:60:32:72:8d:9b:41:dc:84:2e:dd:f1:06:de:
c0:7a:56:0c:d7:ef:33:77:85:68:ab:d7:9d:a1:db:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:77:D2:8E:C7:6A:22:9B:14:C3:0C:88:50:4E:82:13:D4:2F:5B:29
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/K3fSjsdqIpsUwwyIUE6CE9QvWyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.79.114.0/23
82.79.119.0/24
82.137.8.0/21
86.123.114.0/24
188.208.136.0/22
188.241.252.0/22
Signature Algorithm: sha256WithRSAEncryption
17:0c:64:79:8c:ad:d1:76:bb:5e:93:7a:e6:4d:44:a4:53:a3:
f6:4e:7f:c4:6f:27:d9:89:f9:00:db:98:a9:e4:dd:8c:c1:55:
ce:d4:57:e0:a9:ec:ca:ef:16:40:d5:49:49:c0:22:82:7e:27:
b5:00:43:5f:1a:27:a2:a2:3d:25:8b:35:c0:cb:47:42:16:f9:
fd:e6:5b:8f:62:b7:91:69:6b:96:e3:fe:5a:52:00:28:90:a9:
a0:56:c4:36:df:85:d8:49:b2:3f:7f:b2:34:c2:cf:48:00:aa:
22:82:89:ac:4a:45:85:ab:4c:08:0b:42:8f:4c:83:f9:a4:14:
cd:e4:52:42:b4:5f:2e:b9:6d:05:46:fb:e1:4c:d0:68:d8:89:
10:c6:77:6c:a6:93:5d:af:16:5c:47:33:dd:01:80:ea:57:a9:
81:8c:1a:5a:32:46:76:4c:7b:c9:83:7e:c6:29:7b:0d:f7:8b:
c4:88:fa:27:d4:4f:c2:c6:94:ee:9b:64:95:9e:06:3d:d2:7d:
cd:12:92:04:50:36:66:ee:f5:e9:d5:9c:64:6e:15:d5:9a:51:
64:a4:22:ca:e3:1f:1f:db:b8:21:06:82:67:b9:ac:bc:78:ee:
3c:f9:79:7c:38:b1:46:8c:2b:9c:e4:8e:e3:a7:f2:d9:34:d3:
cd:13:b2:7d
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYzDSM5Mlia/ofug7iJvWeNVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3
OWRjMTYwHhcNMjQwMTAxMDQyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjc3ZDI4ZWM3NmEyMjliMTRjMzBjODg1MDRlODIxM2Q0MmY1YjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc1wDbJ9WXXWDju1jq4ldmPl+g8n
e8ZnVYIRwVvVzu6KSO0ngEmWE2iJ8qG7T+LTTJrcgYC7F/w8sGHpuQpPfko0o94S
CVXh8TZrWxBMbCdba3kh2+cGVU3aWMTb+Wur0BOTUKYKZjsCwUPwEatGVWMML5qx
yZI6fMpx38bqapPyPV9JENH0SwnkrswkQeGtnLsqrfoQQmM3Cy2D9H+o6V8zdt/B
OrWAtRnW7jmPflpvg0RWpd3mK1jGKvi7ZJzM0gT2buC6F2A+yHMSZ3EOAAB/BuHv
2YkTArjmeXresDFExWAyco2bQdyELt3xBt7AelYM1+8zd4Voq9edods4iQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFCt30o7HaiKbFMMMiFBOghPUL1spMB8GA1UdIwQY
MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt
ZDJiYmYzN2RhYmI0LzEvSzNmU2pzZHFJcHNVd3d5SVVFNkNFOVF2V3lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0
LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBUk9yAwQA
Uk93AwQDUokIAwQAVntyAwQCvNCIAwQCvPH8MA0GCSqGSIb3DQEBCwUAA4IBAQAX
DGR5jK3Rdrtek3rmTUSkU6P2Tn/EbyfZifkA25ip5N2MwVXO1FfgqezK7xZA1UlJ
wCKCfie1AENfGieioj0lizXAy0dCFvn95luPYreRaWuW4/5aUgAokKmgVsQ234XY
SbI/f7I0ws9IAKoigomsSkWFq0wIC0KPTIP5pBTN5FJCtF8uuW0FRvvhTNBo2IkQ
xndsppNdrxZcRzPdAYDqV6mBjBpaMkZ2THvJg37GKXsN94vEiPon1E/CxpTum2SV
ngY90n3NEpIEUDZm7vXp1ZxkbhXVmlFkpCLK4x8f27ghBoJnuay8eO48+Xl8OLFG
jCuc5I7jp/LZNNPNE7J9
-----END CERTIFICATE-----
Generated at Sat May 18 04:08:00 2024 by rpki-client on console-ams.rpki-client.org