Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/rk9wzvJwKeGoF8sLrsXJ2XjbWJo.roa
File: rk9wzvJwKeGoF8sLrsXJ2XjbWJo.roa (raw, json)
Hash identifier: ttEFGCQvNbQcAbflPYvT/MtBoq6tZfy0QGawkTaa12s=
Subject key identifier: AE:4F:70:CE:F2:70:29:E1:A8:17:CB:0B:AE:C5:C9:D9:78:DB:58:9A
Certificate issuer: /CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Certificate serial: 018CC72693662800DA04C731C8406391B1B7
Authority key identifier: 9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/rk9wzvJwKeGoF8sLrsXJ2XjbWJo.roa
Signing time: Mon 01 Jan 2024 22:30:43 +0000
ROA not before: Mon 01 Jan 2024 22:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199811
IP address blocks: 185.214.152.0/22 maxlen: 22
185.74.35.0/24 maxlen: 24
185.74.32.0/22 maxlen: 22
185.74.32.0/24 maxlen: 24
185.43.244.0/22 maxlen: 22
109.237.60.0/22 maxlen: 22
2a01:71e0::/32 maxlen: 32
2a05:4880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:93:66:28:00:da:04:c7:31:c8:40:63:91:b1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Validity
Not Before: Jan 1 22:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae4f70cef27029e1a817cb0baec5c9d978db589a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:99:3f:2c:8a:aa:f1:90:30:c1:ff:38:fa:
75:09:77:be:22:99:9c:a5:49:eb:11:e5:9f:03:cc:
d8:de:e2:ff:08:a4:ad:7d:d1:cf:20:c1:ea:bc:42:
39:c2:f3:7f:a6:5c:37:de:c4:6d:47:c9:b2:f9:51:
ee:75:70:d8:8d:bf:6a:e8:6a:78:f0:77:6f:d1:c0:
35:18:03:f2:c1:02:fd:04:9c:fc:a9:62:98:32:26:
e1:2d:94:dd:46:24:d5:da:0a:95:ed:ef:ec:01:97:
fc:e5:9c:5f:e0:03:fc:45:a9:6d:91:75:88:40:68:
59:d0:10:3c:e4:a7:0e:05:69:f7:a6:0b:27:dd:71:
92:a2:9b:1a:e7:12:4c:8a:62:74:e7:cc:48:b3:c9:
2e:ed:8f:8f:64:7c:bc:34:c5:db:49:cf:fc:d7:21:
81:8b:6e:de:2d:94:58:df:0e:d9:75:d9:6c:e0:df:
c9:a9:20:31:3d:8b:f8:64:02:5a:17:82:db:6e:f7:
f5:02:b9:9a:e3:a9:97:f0:17:37:bd:2a:4a:ed:34:
18:0d:89:0b:8d:fe:ec:d0:97:c5:96:5b:bd:c6:1e:
64:4e:a0:63:c1:29:57:fe:72:b3:78:86:a3:ad:45:
95:21:1f:02:ef:6e:f8:51:3b:66:f0:04:37:d6:e8:
14:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4F:70:CE:F2:70:29:E1:A8:17:CB:0B:AE:C5:C9:D9:78:DB:58:9A
X509v3 Authority Key Identifier:
keyid:9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/rk9wzvJwKeGoF8sLrsXJ2XjbWJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.60.0/22
185.43.244.0/22
185.74.32.0/22
185.214.152.0/22
IPv6:
2a01:71e0::/32
2a05:4880::/29
Signature Algorithm: sha256WithRSAEncryption
8b:ea:b3:8c:82:24:3a:6b:68:65:df:2a:30:62:87:17:bc:1e:
22:0c:ae:ad:21:70:e3:45:23:c4:8c:da:c7:9a:b2:9e:36:53:
31:31:26:24:f9:4c:d1:d3:cf:6d:44:a7:29:82:74:47:79:45:
1c:ac:66:8c:84:dd:7e:57:2c:b3:28:47:36:c3:3a:7f:90:82:
47:6e:30:e2:97:8a:c7:31:55:44:37:73:f3:17:70:ff:05:ba:
73:a3:3a:d0:e5:00:80:34:c6:42:0c:1f:60:93:79:d0:97:fd:
f6:19:ad:ba:0e:5c:1a:f6:ab:f9:e4:1b:be:b0:09:06:7e:22:
00:e6:1b:ad:5d:83:dd:2d:f6:cd:86:c8:ed:dc:3b:8e:84:8f:
81:e5:ee:35:62:84:41:0a:27:8a:d2:3b:61:83:b8:a5:e0:69:
3b:dd:05:29:0a:b9:e2:73:60:7b:43:5d:3c:e3:32:a6:5c:cb:
d9:c3:b5:cd:de:58:81:b8:80:d2:81:c7:d4:7f:22:24:f6:d2:
36:60:ca:2a:16:9c:e6:f1:c0:f1:9c:3e:0d:e9:dc:e6:33:85:
14:77:92:e9:9c:8b:19:e9:6c:42:bd:0b:ec:2e:c3:a1:99:15:
5c:45:1a:03:48:9e:95:1c:a0:06:a3:13:cb:23:c7:e4:67:5c:
b7:a2:93:b8
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAYzHJpNmKADaBMcxyEBjkbG3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOTNlYjhhN2QxOWZmZDc4MDQ3NjVhY2ZkY2YyMjYwYzZj
MGQ2NTkwHhcNMjQwMTAxMjIzMDQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTRmNzBjZWYyNzAyOWUxYTgxN2NiMGJhZWM1YzlkOTc4ZGI1ODlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIeZPyyKqvGQMMH/OPp1CXe+Ipmc
pUnrEeWfA8zY3uL/CKStfdHPIMHqvEI5wvN/plw33sRtR8my+VHudXDYjb9q6Gp4
8Hdv0cA1GAPywQL9BJz8qWKYMibhLZTdRiTV2gqV7e/sAZf85Zxf4AP8RaltkXWI
QGhZ0BA85KcOBWn3pgsn3XGSopsa5xJMimJ058xIs8ku7Y+PZHy8NMXbSc/81yGB
i27eLZRY3w7Zddls4N/JqSAxPYv4ZAJaF4Lbbvf1Arma46mX8Bc3vSpK7TQYDYkL
jf7s0JfFllu9xh5kTqBjwSlX/nKzeIajrUWVIR8C7274UTtm8AQ31ugUDQIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFK5PcM7ycCnhqBfLC67Fydl421iaMB8GA1UdIwQY
MBaAFJyT64p9Gf/XgEdlrP3PImDGwNZZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkpQcmluMFpfOWVBUjJXc19jOGlZTWJBMWxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jM2M0NWYtNWYxYy00N2YyLTkxMGQt
Mzk2YWQ3MDEyMzBlLzEvcms5d3p2SndLZUdvRjhzTHJzWEoyWGpiV0pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9jM2M0NWYtNWYxYy00N2YyLTkxMGQtMzk2YWQ3MDEyMzBl
LzEvbkpQcmluMFpfOWVBUjJXc19jOGlZTWJBMWxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQCbe08AwQC
uSv0AwQCuUogAwQCudaYMBQEAgACMA4DBQAqAXHgAwUDKgVIgDANBgkqhkiG9w0B
AQsFAAOCAQEAi+qzjIIkOmtoZd8qMGKHF7weIgyurSFw40UjxIzax5qynjZTMTEm
JPlM0dPPbUSnKYJ0R3lFHKxmjITdflcssyhHNsM6f5CCR24w4peKxzFVRDdz8xdw
/wW6c6M60OUAgDTGQgwfYJN50Jf99hmtug5cGvar+eQbvrAJBn4iAOYbrV2D3S32
zYbI7dw7joSPgeXuNWKEQQonitI7YYO4peBpO90FKQq54nNge0NdPOMyplzL2cO1
zd5YgbiA0oHH1H8iJPbSNmDKKhac5vHA8Zw+Denc5jOFFHeS6ZyLGelsQr0L7C7D
oZkVXEUaA0ielRygBqMTyyPH5Gdct6KTuA==
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:00:14 2024 by rpki-client on console-ams.rpki-client.org