Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/6XS4QqNWLAtBHVYtzp11SuvSRjc.roa
File: 6XS4QqNWLAtBHVYtzp11SuvSRjc.roa (raw, json)
Hash identifier: zCjFt6RvrWArVCkb9D+eqM9UrhRl3bW8h2YmZMnOaWs=
Subject key identifier: E9:74:B8:42:A3:56:2C:0B:41:1D:56:2D:CE:9D:75:4A:EB:D2:46:37
Certificate issuer: /CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Certificate serial: 018CC64AF0C244596FC526F2E96A3F509C83
Authority key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/6XS4QqNWLAtBHVYtzp11SuvSRjc.roa
Signing time: Mon 01 Jan 2024 18:30:49 +0000
ROA not before: Mon 01 Jan 2024 18:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35205
IP address blocks: 77.78.166.0/24 maxlen: 24
77.78.160.0/20 maxlen: 20
77.78.160.0/19 maxlen: 19
77.78.176.0/20 maxlen: 20
77.78.181.0/24 maxlen: 24
77.78.184.0/22 maxlen: 22
212.37.176.0/20 maxlen: 20
185.27.152.0/22 maxlen: 22
77.78.188.0/22 maxlen: 22
46.28.80.0/21 maxlen: 21
212.37.160.0/20 maxlen: 20
212.37.164.0/22 maxlen: 22
212.37.160.0/19 maxlen: 19
212.37.168.0/21 maxlen: 21
2a03:ed00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f0:c2:44:59:6f:c5:26:f2:e9:6a:3f:50:9c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Validity
Not Before: Jan 1 18:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e974b842a3562c0b411d562dce9d754aebd24637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:53:65:08:c8:44:3e:20:60:4f:b9:13:3f:ee:
3e:12:90:ee:12:61:e5:f0:2b:20:a6:e3:10:60:3e:
1c:cb:de:72:ea:91:68:56:ee:fa:8e:2a:c6:f5:8d:
78:61:d1:83:fa:6f:63:e1:4a:50:0a:08:6e:36:87:
e0:7f:24:c0:a5:ca:40:45:9f:f5:2d:e0:9a:d5:0d:
d2:75:21:77:f2:d3:d5:c7:92:fa:62:18:bd:81:4f:
a3:87:34:98:18:dd:18:29:ec:bc:6e:d7:dc:a4:fc:
e6:de:d5:a8:3a:93:93:8b:4e:09:58:fe:de:82:37:
71:d9:1f:90:08:6a:5d:a5:b9:92:a5:68:f1:1e:22:
0e:d9:cb:1c:75:f5:b0:af:6e:ca:d3:a9:29:2f:36:
c7:a1:29:f1:e5:2c:9d:92:d1:32:ab:e9:56:79:8e:
2d:c3:c6:1b:2b:84:81:11:3c:9c:f3:6b:66:08:45:
cc:eb:11:10:50:6e:dc:99:e0:b5:f9:6b:b5:43:4e:
fb:52:ee:98:6b:b8:fb:3e:84:ca:1f:3a:7c:e5:c5:
4d:22:4b:f7:93:dc:ef:68:13:5c:79:09:b9:91:cd:
7c:ae:56:30:19:58:da:e1:4e:60:62:1e:f6:f9:62:
b0:0b:7b:e4:82:17:f2:61:61:50:c0:ea:7e:c3:a6:
31:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:74:B8:42:A3:56:2C:0B:41:1D:56:2D:CE:9D:75:4A:EB:D2:46:37
X509v3 Authority Key Identifier:
keyid:4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/6XS4QqNWLAtBHVYtzp11SuvSRjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.80.0/21
77.78.160.0/19
185.27.152.0/22
212.37.160.0/19
IPv6:
2a03:ed00::/32
Signature Algorithm: sha256WithRSAEncryption
0b:dc:02:60:ca:30:80:42:61:28:26:7f:cd:ef:bb:f0:4d:b4:
46:99:ea:ad:2d:f7:6d:6c:8f:f3:a3:7c:52:aa:5e:d2:8b:5f:
45:be:91:23:13:1d:84:7c:e9:d5:a1:30:b6:a8:af:eb:2e:a0:
97:c6:b7:74:2e:f8:3c:2d:fb:b3:ee:f3:7b:2c:50:90:35:d2:
bb:ee:2e:5d:73:a3:b3:0b:c8:eb:6b:e8:58:c0:5a:83:3f:7e:
53:03:de:75:a5:94:a2:de:29:b8:70:47:f7:7b:31:81:27:f2:
c2:13:87:7b:d6:ac:e5:88:70:b1:d0:12:72:ef:ce:e2:36:ed:
0f:66:84:d5:3c:fd:38:e1:43:c8:af:c1:42:78:c4:57:cf:81:
50:27:4f:51:69:63:f8:33:7d:d6:e0:a6:13:18:b6:b4:b3:9d:
51:e1:0a:7d:31:1c:9b:72:7b:89:b1:15:f2:09:73:eb:3e:62:
7b:a1:3e:cc:7f:39:45:28:28:55:0b:33:67:6b:8d:02:da:42:
c5:8d:fd:36:ee:f6:0e:ca:3a:4f:13:09:14:fc:a1:bf:2e:8c:
99:fb:b4:9c:d6:6d:cd:d5:d9:10:20:b8:3a:3c:26:27:85:30:
e0:bd:ca:6a:5e:71:ef:42:71:3a:67:b3:1e:4b:05:ab:54:55:
a4:5e:1e:5a
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYzGSvDCRFlvxSby6Wo/UJyDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZjJjNmZhNTRhOGNjMmRjNzFlODAyY2Y4M2Y1Yzc3NmNl
OTc0YzkwHhcNMjQwMTAxMTgzMDQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTc0Yjg0MmEzNTYyYzBiNDExZDU2MmRjZTlkNzU0YWViZDI0NjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVNlCMhEPiBgT7kTP+4+EpDuEmHl
8CsgpuMQYD4cy95y6pFoVu76jirG9Y14YdGD+m9j4UpQCghuNofgfyTApcpARZ/1
LeCa1Q3SdSF38tPVx5L6Yhi9gU+jhzSYGN0YKey8btfcpPzm3tWoOpOTi04JWP7e
gjdx2R+QCGpdpbmSpWjxHiIO2cscdfWwr27K06kpLzbHoSnx5SydktEyq+lWeY4t
w8YbK4SBETyc82tmCEXM6xEQUG7cmeC1+Wu1Q077Uu6Ya7j7PoTKHzp85cVNIkv3
k9zvaBNceQm5kc18rlYwGVja4U5gYh72+WKwC3vkghfyYWFQwOp+w6Yx7wIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFOl0uEKjViwLQR1WLc6ddUrr0kY3MB8GA1UdIwQY
MBaAFE3yxvpUqMwtxx6ALPg/XHds6XTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGZMRy1sU296QzNISG9Bcy1EOWNkMnpwZE1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81NGIwZDAtZTlmZS00OGQxLTk2OGQt
OWUyNDNjMmQ4ODIxLzEvNlhTNFFxTldMQXRCSFZZdHpwMTFTdXZTUmpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81NGIwZDAtZTlmZS00OGQxLTk2OGQtOWUyNDNjMmQ4ODIx
LzEvVGZMRy1sU296QzNISG9Bcy1EOWNkMnpwZE1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLhxQAwQF
TU6gAwQCuRuYAwQF1CWgMA0EAgACMAcDBQAqA+0AMA0GCSqGSIb3DQEBCwUAA4IB
AQAL3AJgyjCAQmEoJn/N77vwTbRGmeqtLfdtbI/zo3xSql7Si19FvpEjEx2EfOnV
oTC2qK/rLqCXxrd0Lvg8Lfuz7vN7LFCQNdK77i5dc6OzC8jra+hYwFqDP35TA951
pZSi3im4cEf3ezGBJ/LCE4d71qzliHCx0BJy787iNu0PZoTVPP044UPIr8FCeMRX
z4FQJ09RaWP4M33W4KYTGLa0s51R4Qp9MRybcnuJsRXyCXPrPmJ7oT7MfzlFKChV
CzNna40C2kLFjf027vYOyjpPEwkU/KG/LoyZ+7Sc1m3N1dkQILg6PCYnhTDgvcpq
XnHvQnE6Z7MeSwWrVFWkXh5a
-----END CERTIFICATE-----
Generated at Wed Jun 26 00:12:15 2024 by rpki-client on console-fra.rpki-client.org