Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/M7S8dYcZBy_-xH9XIeu5eOvZycM.roa
File: M7S8dYcZBy_-xH9XIeu5eOvZycM.roa (raw, json)
Hash identifier: 5Zrnyx7bSYIihpNOAJaWnv3qw7hTUI7+2REvwOl3Dqg=
Subject key identifier: 33:B4:BC:75:87:19:07:2F:FE:C4:7F:57:21:EB:B9:78:EB:D9:C9:C3
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 018CC8DEBDD4B91FDEDAAF655527A33668B8
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/M7S8dYcZBy_-xH9XIeu5eOvZycM.roa
Signing time: Tue 02 Jan 2024 06:31:29 +0000
ROA not before: Tue 02 Jan 2024 06:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48519
IP address blocks: 195.253.66.0/24 maxlen: 24
195.253.65.0/24 maxlen: 24
195.253.84.0/22 maxlen: 22
195.253.88.0/23 maxlen: 23
195.253.90.0/23 maxlen: 23
195.253.96.0/19 maxlen: 24
185.119.136.0/22 maxlen: 24
195.253.48.0/22 maxlen: 22
195.253.52.0/23 maxlen: 23
2a01:5b0:8::/46 maxlen: 48
2a01:5b0:10::/45 maxlen: 48
2a01:5b0:2::/48 maxlen: 48
2a01:5b0:12::/47 maxlen: 47
2a01:5b0:5::/48 maxlen: 48
2a01:5b0:20::/43 maxlen: 48
2a01:5b0:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jul 2024 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:bd:d4:b9:1f:de:da:af:65:55:27:a3:36:68:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: Jan 2 06:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33b4bc758719072ffec47f5721ebb978ebd9c9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:00:a7:e5:74:1d:e8:d3:34:95:12:4b:85:59:
75:3b:b6:35:95:1b:b8:b1:6f:e3:65:7c:d3:47:05:
7b:f9:17:b8:69:2d:6e:bd:be:2f:04:01:11:46:c9:
5c:96:48:21:10:aa:87:5e:d2:66:01:39:03:a9:e0:
e9:b3:33:b9:a2:09:63:d3:14:ae:50:d0:aa:5b:23:
13:c5:64:a3:01:20:d8:f8:3b:83:6a:f6:de:a5:de:
f0:0a:38:0f:ed:9d:12:fe:58:57:af:cf:cb:ae:ff:
a9:e7:41:ab:aa:47:6e:08:f7:6d:7d:b8:1e:59:25:
ce:5e:93:d3:f2:20:87:d0:6d:0e:02:b7:d9:5d:8b:
82:70:f8:b0:f6:bb:07:32:4a:f6:2f:c3:6e:2c:fd:
aa:0d:8a:8a:9c:b5:1d:63:fd:30:f9:d7:1e:93:12:
7e:6f:11:b2:0d:98:63:32:b1:e2:15:3b:91:17:6f:
bd:19:91:19:73:76:43:b3:6f:70:54:d4:d3:ac:44:
5f:c2:81:58:1b:3f:7b:8e:a6:00:c1:2e:2e:2e:d2:
b7:6f:22:fd:c2:82:00:5c:59:0e:58:e6:e3:b3:10:
7f:21:ad:2e:48:9a:3a:10:df:63:de:4d:1f:aa:7b:
81:b3:1d:a9:ff:37:23:a7:2b:72:4f:f5:9e:3f:7b:
a7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B4:BC:75:87:19:07:2F:FE:C4:7F:57:21:EB:B9:78:EB:D9:C9:C3
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/M7S8dYcZBy_-xH9XIeu5eOvZycM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.136.0/22
195.253.48.0-195.253.53.255
195.253.65.0-195.253.66.255
195.253.84.0-195.253.91.255
195.253.96.0/19
IPv6:
2a01:5b0:2::/48
2a01:5b0:5::-2a01:5b0:6:ffff:ffff:ffff:ffff:ffff
2a01:5b0:8::/46
2a01:5b0:10::/45
2a01:5b0:20::/43
Signature Algorithm: sha256WithRSAEncryption
22:00:2e:13:9f:13:3c:86:d9:52:48:e2:65:c3:6e:98:89:a1:
08:15:e7:f3:9b:90:ab:c7:3b:2b:35:28:1d:d7:ee:e5:ef:2e:
21:57:71:95:3b:bb:8f:f0:7b:6b:20:e4:71:95:81:56:82:57:
69:aa:88:9b:4f:73:4c:d3:ae:5e:89:ec:c9:5b:7c:6c:3f:0c:
ca:c0:cb:e3:83:68:98:ec:ed:45:0d:b5:cb:f9:3b:52:38:9d:
a5:65:34:5d:50:3f:89:e8:f4:7d:ca:c3:62:46:da:fc:8c:33:
73:5a:53:40:cf:c8:b9:30:3b:b3:fb:97:12:ef:5e:22:47:b7:
bd:06:15:86:ce:89:85:f5:10:d1:a7:e7:90:e2:5b:db:fd:43:
f5:a2:d0:66:b4:fd:54:60:f8:9a:7b:8a:56:e8:d0:ef:dc:db:
50:bf:1b:06:c2:8e:7c:5e:b6:f5:99:c6:dd:bb:a7:31:98:da:
af:1f:47:f2:60:d8:ae:46:c6:7d:4d:2a:ca:56:22:01:dd:09:
f5:f8:0d:ab:c5:a5:f8:8a:df:df:7d:01:7c:0e:89:f2:26:02:
bb:be:69:6c:ab:00:8c:ef:1d:d6:9c:8e:76:f3:ea:3c:ac:4a:
f6:d1:37:4c:24:d1:cf:5f:fc:a1:88:dd:09:0e:60:06:78:23:
86:78:7f:08
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgISAYzI3r3UuR/e2q9lVSejNmi4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYzFlNDI2ZjU4ZTQyYWUzMGU1NmNkYjdmZjRkOGY5ZGRk
ODViMzAwHhcNMjQwMTAyMDYzMTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2I0YmM3NTg3MTkwNzJmZmVjNDdmNTcyMWViYjk3OGViZDljOWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwCn5XQd6NM0lRJLhVl1O7Y1lRu4
sW/jZXzTRwV7+Re4aS1uvb4vBAERRslclkghEKqHXtJmATkDqeDpszO5oglj0xSu
UNCqWyMTxWSjASDY+DuDavbepd7wCjgP7Z0S/lhXr8/Lrv+p50GrqkduCPdtfbge
WSXOXpPT8iCH0G0OArfZXYuCcPiw9rsHMkr2L8NuLP2qDYqKnLUdY/0w+dcekxJ+
bxGyDZhjMrHiFTuRF2+9GZEZc3ZDs29wVNTTrERfwoFYGz97jqYAwS4uLtK3byL9
woIAXFkOWObjsxB/Ia0uSJo6EN9j3k0fqnuBsx2p/zcjpytyT/WeP3unCwIDAQAB
o4ICezCCAncwHQYDVR0OBBYEFDO0vHWHGQcv/sR/VyHruXjr2cnDMB8GA1UdIwQY
MBaAFFDB5Cb1jkKuMOVs23/02Pnd2FswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMt
MDYzY2U2Y2Y0NjBkLzEvTTdTOGRZY1pCeV8teEg5WElldTVlT3ZaeWNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMtMDYzY2U2Y2Y0NjBk
LzEvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MDwEAgABMDYDBAK5d4gw
DAMEBMP9MAMEAcP9NDAMAwQAw/1BAwQAw/1CMAwDBALD/VQDBALD/VgDBAXD/WAw
PgQCAAIwOAMHACoBBbAAAjASAwcAKgEFsAAFAwcAKgEFsAAGAwcCKgEFsAAIAwcD
KgEFsAAQAwcFKgEFsAAgMA0GCSqGSIb3DQEBCwUAA4IBAQAiAC4TnxM8htlSSOJl
w26YiaEIFefzm5CrxzsrNSgd1+7l7y4hV3GVO7uP8HtrIORxlYFWgldpqoibT3NM
065eiezJW3xsPwzKwMvjg2iY7O1FDbXL+TtSOJ2lZTRdUD+J6PR9ysNiRtr8jDNz
WlNAz8i5MDuz+5cS714iR7e9BhWGzomF9RDRp+eQ4lvb/UP1otBmtP1UYPiae4pW
6NDv3NtQvxsGwo58Xrb1mcbdu6cxmNqvH0fyYNiuRsZ9TSrKViIB3Qn1+A2rxaX4
it/ffQF8DonyJgK7vmlsqwCM7x3WnI528+o8rEr20TdMJNHPX/yhiN0JDmAGeCOG
eH8I
-----END CERTIFICATE-----
Generated at Sat Jul 6 15:28:40 2024 by rpki-client on console-fra.rpki-client.org