Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/e9FiSR-si3ZZIIh7m3ucedBhmmU.roa
File: e9FiSR-si3ZZIIh7m3ucedBhmmU.roa (raw, json)
Hash identifier: FAPlBpcRcLl1kbfthVbKlhuFOhWyKbXM9jmK9JQeeh8=
Subject key identifier: 7B:D1:62:49:1F:AC:8B:76:59:20:88:7B:9B:7B:9C:79:D0:61:9A:65
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 018CC79535E328F8D78F4D6F3684758FD106
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/e9FiSR-si3ZZIIh7m3ucedBhmmU.roa
Signing time: Tue 02 Jan 2024 00:31:33 +0000
ROA not before: Tue 02 Jan 2024 00:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 109.166.38.0/24 maxlen: 24
109.166.37.0/24 maxlen: 24
109.166.36.0/24 maxlen: 24
151.248.68.0/24 maxlen: 24
151.248.69.0/24 maxlen: 24
91.232.185.0/24 maxlen: 24
91.233.192.0/24 maxlen: 24
91.219.17.0/24 maxlen: 24
91.219.18.0/23 maxlen: 23
178.212.205.0/24 maxlen: 24
178.212.204.0/24 maxlen: 24
178.212.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:35:e3:28:f8:d7:8f:4d:6f:36:84:75:8f:d1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 2 00:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bd162491fac8b765920887b9b7b9c79d0619a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:ea:2c:b8:11:06:9f:9b:10:d3:3b:6a:37:
f5:56:ca:22:bd:80:70:87:9b:58:14:60:56:4c:53:
98:2a:1c:84:c7:10:d5:74:6b:34:91:e8:ed:ad:e7:
d6:17:43:eb:ba:e6:a3:f7:06:e7:fa:4f:57:80:2f:
e1:24:04:9f:d6:e8:55:14:9e:d0:65:b6:9c:c9:ab:
17:b6:a8:7e:34:08:ab:6a:47:93:d7:d9:f1:a0:8a:
49:0e:eb:1b:f5:da:1e:11:0a:f8:08:2b:71:f6:8d:
f3:0e:75:37:d8:86:e4:bf:c3:15:d0:dd:8b:e0:11:
12:a4:fe:bf:ac:25:61:80:5a:fb:11:70:73:b5:de:
19:c3:68:b6:64:4a:5a:bd:90:fb:be:e7:32:19:c4:
aa:8c:b6:9f:d8:6c:e7:fe:a6:1b:55:24:ee:f5:9f:
48:37:fa:ff:ad:5d:d8:ec:3f:cd:e7:79:1c:90:fd:
49:c1:37:2a:ce:4d:5c:ff:f8:8a:b1:b7:68:a5:6b:
d6:02:d8:a3:cf:6e:c8:9d:70:99:f7:3e:17:68:1b:
4a:93:c0:ca:01:11:a7:b4:98:61:76:cc:ea:a5:c6:
9d:85:cd:da:87:63:14:64:58:7e:7a:b7:cf:d8:0e:
2b:3a:fd:ed:15:30:ca:ba:71:94:99:06:50:a3:35:
83:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D1:62:49:1F:AC:8B:76:59:20:88:7B:9B:7B:9C:79:D0:61:9A:65
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/e9FiSR-si3ZZIIh7m3ucedBhmmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.17.0-91.219.19.255
91.232.185.0/24
91.233.192.0/24
109.166.36.0-109.166.38.255
151.248.68.0/23
178.212.203.0-178.212.205.255
Signature Algorithm: sha256WithRSAEncryption
8c:83:fa:ef:b7:a0:a2:de:60:db:0e:7b:1b:e6:23:8c:53:d3:
0d:c9:45:e7:77:25:b4:4d:ad:78:b3:7f:69:e8:b8:0a:c4:9b:
3f:3f:61:dd:c2:85:c1:f6:c7:d4:de:07:08:60:5b:71:c9:82:
ee:d4:26:b4:4e:c1:17:e2:15:2a:d9:51:56:69:b6:c2:5b:0d:
92:ec:85:ca:b2:fe:a0:b9:fc:fc:16:54:ba:b5:61:e8:ff:2c:
b1:a2:81:89:9b:f1:a4:1c:be:25:36:28:fc:70:1c:d3:01:4f:
9e:09:b2:b7:bb:6c:0b:1e:ff:b7:d8:cd:ad:90:2b:c5:8a:71:
66:b2:ca:21:fb:62:a9:16:e6:c0:35:97:ca:51:72:7b:d6:52:
da:60:a4:8d:5b:15:8a:bc:31:7f:69:5d:31:48:74:c1:36:e8:
cd:b4:a6:b1:61:f8:88:d0:87:e0:24:f8:a0:d7:a6:c7:98:ae:
20:1a:29:db:20:a3:99:e7:b5:c3:14:f4:e9:7a:ca:19:76:09:
b6:dd:78:46:cc:0c:8e:7b:da:03:16:eb:c9:71:63:bb:a1:b3:
af:60:cf:0e:e3:b7:e7:4a:d3:25:75:2f:80:d4:ee:7e:10:fe:
43:7e:10:f7:59:57:9f:9e:69:d4:70:8d:75:c6:42:4a:7f:5b:
7f:7f:b3:9d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYzHlTXjKPjXj01vNoR1j9EGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi
MmNjYjIwHhcNMjQwMTAyMDAzMTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmQxNjI0OTFmYWM4Yjc2NTkyMDg4N2I5YjdiOWM3OWQwNjE5YTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDLqLLgRBp+bENM7ajf1VsoivYBw
h5tYFGBWTFOYKhyExxDVdGs0kejtrefWF0Pruuaj9wbn+k9XgC/hJASf1uhVFJ7Q
ZbacyasXtqh+NAirakeT19nxoIpJDusb9doeEQr4CCtx9o3zDnU32Ibkv8MV0N2L
4BESpP6/rCVhgFr7EXBztd4Zw2i2ZEpavZD7vucyGcSqjLaf2Gzn/qYbVSTu9Z9I
N/r/rV3Y7D/N53kckP1JwTcqzk1c//iKsbdopWvWAtijz27InXCZ9z4XaBtKk8DK
ARGntJhhdszqpcadhc3ah2MUZFh+erfP2A4rOv3tFTDKunGUmQZQozWDMwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFHvRYkkfrIt2WSCIe5t7nHnQYZplMB8GA1UdIwQY
MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt
MDJkZWY2ZTg0YzkxLzEvZTlGaVNSLXNpM1paSUloN20zdWNlZEJobW1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx
LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8MAwDBABb2xED
BAJb2xADBABb6LkDBABb6cAwDAMEAm2mJAMEAG2mJgMEAZf4RDAMAwQAstTLAwQB
stTMMA0GCSqGSIb3DQEBCwUAA4IBAQCMg/rvt6Ci3mDbDnsb5iOMU9MNyUXndyW0
Ta14s39p6LgKxJs/P2HdwoXB9sfU3gcIYFtxyYLu1Ca0TsEX4hUq2VFWabbCWw2S
7IXKsv6gufz8FlS6tWHo/yyxooGJm/GkHL4lNij8cBzTAU+eCbK3u2wLHv+32M2t
kCvFinFmssoh+2KpFubANZfKUXJ71lLaYKSNWxWKvDF/aV0xSHTBNujNtKaxYfiI
0IfgJPig16bHmK4gGinbIKOZ57XDFPTpesoZdgm23XhGzAyOe9oDFuvJcWO7obOv
YM8O47fnStMldS+A1O5+EP5DfhD3WVefnmnUcI11xkJKf1t/f7Od
-----END CERTIFICATE-----
Generated at Sun Apr 28 05:43:03 2024 by rpki-client on console-ams.rpki-client.org