Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/px3PjFNPHLF-dhIhz7pL0-jfhcg.roa
File: px3PjFNPHLF-dhIhz7pL0-jfhcg.roa (raw, json)
Hash identifier: DQblIiwVT19YbFeBi3I1Szfj85ZisoSZFU3Gbosx590=
Subject key identifier: A7:1D:CF:8C:53:4F:1C:B1:7E:76:12:21:CF:BA:4B:D3:E8:DF:85:C8
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018F2DEC29386024A72F2F4743A33F0D4786
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/px3PjFNPHLF-dhIhz7pL0-jfhcg.roa
Signing time: Tue 30 Apr 2024 07:33:22 +0000
ROA not before: Tue 30 Apr 2024 07:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212496
IP address blocks: 77.83.245.0/24 maxlen: 24
185.24.109.0/24 maxlen: 24
185.58.114.0/24 maxlen: 24
185.73.183.0/24 maxlen: 24
185.75.135.0/24 maxlen: 24
185.76.240.0/24 maxlen: 24
185.76.241.0/24 maxlen: 24
185.76.242.0/24 maxlen: 24
185.76.243.0/24 maxlen: 24
185.95.230.0/24 maxlen: 24
185.97.79.0/24 maxlen: 24
185.100.159.0/24 maxlen: 24
185.104.148.0/24 maxlen: 24
185.105.47.0/24 maxlen: 24
185.111.25.0/24 maxlen: 24
185.112.59.0/24 maxlen: 24
185.168.208.0/24 maxlen: 24
185.177.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2d:ec:29:38:60:24:a7:2f:2f:47:43:a3:3f:0d:47:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Apr 30 07:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a71dcf8c534f1cb17e761221cfba4bd3e8df85c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:2e:99:d4:0b:98:b2:58:d2:91:8a:f3:00:
a1:ec:b1:86:d5:5c:d5:5a:a5:4d:89:ab:f1:48:dc:
ec:09:4f:59:8d:33:5b:70:92:4e:91:af:8a:3b:ea:
df:15:0f:2f:4c:8c:f9:79:72:18:4e:e2:45:56:db:
2c:aa:78:70:f7:98:4b:4f:6e:46:93:1c:ae:96:9f:
3a:6d:be:27:24:5f:cf:2c:65:b4:f9:0b:6c:6d:10:
34:d1:78:75:ba:90:0a:33:8e:ba:b3:49:fd:a0:1e:
29:a6:12:b8:63:5d:45:e0:8d:91:cf:c8:58:a4:8e:
f2:30:39:cc:a8:1f:bb:72:5b:87:b8:2b:e9:f3:4a:
be:3b:09:81:cb:b5:2b:ca:c9:7e:af:22:3f:02:d2:
79:82:a0:cc:36:2f:e5:e8:cc:fa:0a:2e:5a:41:d5:
dd:55:14:e3:52:12:21:1a:db:01:d6:4e:bc:ea:b5:
48:89:ce:40:85:4c:51:84:9f:c1:0b:9a:8b:c7:66:
48:11:59:7d:63:6e:6e:9b:a8:18:01:0f:fa:1f:7b:
db:6d:41:24:54:92:01:6d:8b:d9:ce:bf:29:b0:d5:
b0:bd:7d:e9:2a:8f:67:bf:e2:b9:e3:83:70:52:bc:
a3:9c:5b:c8:f1:69:1c:45:a7:c1:ac:bb:68:3c:0d:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1D:CF:8C:53:4F:1C:B1:7E:76:12:21:CF:BA:4B:D3:E8:DF:85:C8
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/px3PjFNPHLF-dhIhz7pL0-jfhcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.245.0/24
185.24.109.0/24
185.58.114.0/24
185.73.183.0/24
185.75.135.0/24
185.76.240.0/22
185.95.230.0/24
185.97.79.0/24
185.100.159.0/24
185.104.148.0/24
185.105.47.0/24
185.111.25.0/24
185.112.59.0/24
185.168.208.0/24
185.177.238.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ba:65:64:87:44:d8:20:49:9a:f2:b3:81:81:03:ea:77:16:
42:4b:60:60:d3:c6:c7:46:b3:24:9a:9f:54:cb:0d:f1:2a:4e:
e2:51:d2:a9:59:d0:aa:c3:80:22:bf:c0:0e:17:3a:88:75:38:
22:a2:81:a7:00:16:9a:0f:7a:95:34:0b:1b:5c:02:a6:4d:39:
79:ac:0f:63:b9:4f:dc:66:96:a1:4d:c4:28:6c:40:5c:67:2b:
71:1c:ae:da:72:09:08:c1:4c:23:1d:33:a6:3e:4e:6b:0b:57:
99:ea:27:54:a0:01:22:1f:97:2c:a2:a4:83:4e:7c:c1:4f:df:
10:4e:0b:ac:99:36:d5:c5:78:0f:54:50:09:10:03:11:b1:c7:
bb:14:c3:a9:ab:98:f0:f2:ff:70:b1:49:88:25:ca:c9:0f:18:
a0:85:09:95:5b:8a:6c:47:c9:0c:11:7f:10:96:03:7b:0a:e1:
eb:bf:ad:ef:c1:b3:e1:61:0f:47:2f:5f:e2:e8:2f:a4:d4:b4:
a5:52:57:4d:83:0d:58:5e:8a:c5:71:17:65:e6:f2:00:8b:51:
ab:76:74:69:ba:48:03:ea:9f:07:ec:39:50:30:ed:a1:13:56:
3a:96:5a:07:77:b2:7a:fa:68:4a:96:30:a2:72:60:b4:c4:21:
5f:ec:e0:a3
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAY8t7Ck4YCSnLy9HQ6M/DUeGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjQwNDMwMDczMzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzFkY2Y4YzUzNGYxY2IxN2U3NjEyMjFjZmJhNGJkM2U4ZGY4NWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoEumdQLmLJY0pGK8wCh7LGG1VzV
WqVNiavxSNzsCU9ZjTNbcJJOka+KO+rfFQ8vTIz5eXIYTuJFVtssqnhw95hLT25G
kxyulp86bb4nJF/PLGW0+QtsbRA00Xh1upAKM466s0n9oB4pphK4Y11F4I2Rz8hY
pI7yMDnMqB+7cluHuCvp80q+OwmBy7Urysl+ryI/AtJ5gqDMNi/l6Mz6Ci5aQdXd
VRTjUhIhGtsB1k686rVIic5AhUxRhJ/BC5qLx2ZIEVl9Y25um6gYAQ/6H3vbbUEk
VJIBbYvZzr8psNWwvX3pKo9nv+K544NwUryjnFvI8WkcRafBrLtoPA1PDwIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFKcdz4xTTxyxfnYSIc+6S9Po34XIMB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvcHgzUGpGTlBITEYtZGhJaHo3cEwwLWpmaGNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQATVP1AwQA
uRhtAwQAuTpyAwQAuUm3AwQAuUuHAwQCuUzwAwQAuV/mAwQAuWFPAwQAuWSfAwQA
uWiUAwQAuWkvAwQAuW8ZAwQAuXA7AwQAuajQAwQAubHuMA0GCSqGSIb3DQEBCwUA
A4IBAQByumVkh0TYIEma8rOBgQPqdxZCS2Bg08bHRrMkmp9Uyw3xKk7iUdKpWdCq
w4Aiv8AOFzqIdTgiooGnABaaD3qVNAsbXAKmTTl5rA9juU/cZpahTcQobEBcZytx
HK7acgkIwUwjHTOmPk5rC1eZ6idUoAEiH5csoqSDTnzBT98QTgusmTbVxXgPVFAJ
EAMRsce7FMOpq5jw8v9wsUmIJcrJDxighQmVW4psR8kMEX8QlgN7CuHrv63vwbPh
YQ9HL1/i6C+k1LSlUldNgw1YXorFcRdl5vIAi1GrdnRpukgD6p8H7DlQMO2hE1Y6
lloHd7J6+mhKljCicmC0xCFf7OCj
-----END CERTIFICATE-----
Generated at Mon May 20 15:48:19 2024 by rpki-client on console-fra.rpki-client.org