Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/e3aakm309hKyNecr6118F-ZQmak.roa
File: e3aakm309hKyNecr6118F-ZQmak.roa (raw, json)
Hash identifier: 6rso7tyXPpiWRvWuc6OSQOtOKOsZIvsGmsGoNNXnOlI=
Subject key identifier: 7B:76:9A:92:6D:F4:F6:12:B2:35:E7:2B:EB:5D:7C:17:E6:50:99:A9
Certificate issuer: /CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Certificate serial: 018CC500505A497CBA64BA6170A53AAD99E2
Authority key identifier: 59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/e3aakm309hKyNecr6118F-ZQmak.roa
Signing time: Mon 01 Jan 2024 12:29:41 +0000
ROA not before: Mon 01 Jan 2024 12:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3223
IP address blocks: 185.242.206.0/24 maxlen: 24
185.242.205.0/24 maxlen: 24
185.242.204.0/24 maxlen: 24
185.242.207.0/24 maxlen: 24
93.115.92.0/22 maxlen: 24
93.115.80.0/22 maxlen: 24
93.115.80.0/21 maxlen: 24
93.115.88.0/22 maxlen: 22
93.114.40.0/21 maxlen: 24
93.114.41.0/24 maxlen: 24
93.114.42.0/24 maxlen: 24
93.114.46.0/24 maxlen: 24
93.114.45.0/24 maxlen: 24
5.254.0.0/24 maxlen: 24
5.254.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:50:5a:49:7c:ba:64:ba:61:70:a5:3a:ad:99:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Validity
Not Before: Jan 1 12:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b769a926df4f612b235e72beb5d7c17e65099a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:18:a6:6c:26:0b:03:0d:85:f8:c3:f8:9e:
37:a2:7b:f8:be:02:12:94:b9:d8:a8:c1:9a:2c:76:
51:e0:da:dc:69:06:b5:66:99:89:74:3d:b0:30:05:
f1:c3:1a:51:a8:2d:d0:ca:e9:37:36:a1:2a:44:13:
4b:e0:68:6b:4d:3c:36:0c:74:a4:d0:68:d7:d3:b3:
f3:a3:ce:ca:48:6c:a6:84:95:f9:92:0f:2b:99:2b:
83:e7:fc:52:2b:1c:82:9a:f6:2c:4e:c4:8a:90:4d:
8d:1e:a1:30:75:3e:5d:e5:83:e0:04:2a:ee:ab:63:
03:33:06:62:cc:e9:b1:1c:f7:f1:0c:89:d3:4a:0d:
0a:28:90:05:48:59:4c:b0:92:49:3e:6c:a5:51:6c:
cc:22:69:4a:11:fd:3a:ae:90:e7:d2:08:f9:3d:5a:
73:e8:03:9c:51:62:4d:01:09:ce:03:97:75:fe:cb:
ca:6a:56:7d:88:a7:97:31:10:04:9a:6b:7e:b3:99:
4d:48:4a:4e:50:15:11:9e:16:67:45:10:96:68:0b:
08:bb:63:3f:ee:ce:a5:7f:ea:97:1e:d3:bc:68:a1:
92:33:94:68:2f:1a:f1:41:83:69:1e:93:4c:19:84:
dc:45:a2:e1:11:f3:b9:28:36:26:37:bb:cf:72:25:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:76:9A:92:6D:F4:F6:12:B2:35:E7:2B:EB:5D:7C:17:E6:50:99:A9
X509v3 Authority Key Identifier:
keyid:59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/e3aakm309hKyNecr6118F-ZQmak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.254.0.0/17
93.114.40.0/21
93.115.80.0/20
185.242.204.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:ac:ef:ea:96:f9:f1:0a:42:c5:7c:cc:41:28:cc:10:ec:a8:
56:ae:ba:7f:72:b1:46:01:eb:fe:57:01:8e:3a:49:a0:50:1f:
09:6b:cc:ce:ed:72:87:94:b5:94:7f:64:48:89:f1:49:04:02:
ec:6e:c6:fb:98:a0:00:e7:3d:f1:c8:38:11:78:70:c5:23:7a:
c2:c6:95:58:18:c4:63:fc:61:5a:af:c7:56:97:f2:99:c6:45:
ee:d6:53:91:7a:38:cc:2f:2b:46:59:14:f3:78:cf:3d:9e:8c:
5e:68:b8:16:a1:d7:e8:c4:2f:35:a0:a2:10:d3:52:a1:67:14:
c5:22:47:8b:a8:49:5e:11:a7:4e:7b:8b:0e:72:23:9d:23:ac:
1a:d5:70:73:dd:21:f9:0c:aa:cc:a9:14:22:81:d2:7f:fc:34:
cb:c0:63:e5:8c:ed:02:79:7e:5e:2d:fb:88:14:d6:36:15:15:
92:ea:07:36:7b:44:7c:96:da:84:d2:c0:2f:ba:c8:fc:c9:c6:
14:7f:c2:df:3f:74:43:88:42:66:40:24:5b:cc:4b:85:b2:a2:
61:0a:42:7e:f9:27:bc:9d:f5:0b:5c:ac:b7:b3:d8:24:7d:6c:
86:5e:f6:e8:a1:cc:f6:6e:d4:b2:96:76:8a:4a:74:ed:2a:06:
26:bc:40:0a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzFAFBaSXy6ZLphcKU6rZniMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5N2I0NGM0YTc5MzFjNjZhNmZmOWU5MmRiYjMyY2E3MjNk
NGNjZjcwHhcNMjQwMTAxMTIyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Yjc2OWE5MjZkZjRmNjEyYjIzNWU3MmJlYjVkN2MxN2U2NTA5OWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8YYpmwmCwMNhfjD+J43onv4vgIS
lLnYqMGaLHZR4NrcaQa1ZpmJdD2wMAXxwxpRqC3Qyuk3NqEqRBNL4GhrTTw2DHSk
0GjX07Pzo87KSGymhJX5kg8rmSuD5/xSKxyCmvYsTsSKkE2NHqEwdT5d5YPgBCru
q2MDMwZizOmxHPfxDInTSg0KKJAFSFlMsJJJPmylUWzMImlKEf06rpDn0gj5PVpz
6AOcUWJNAQnOA5d1/svKalZ9iKeXMRAEmmt+s5lNSEpOUBURnhZnRRCWaAsIu2M/
7s6lf+qXHtO8aKGSM5RoLxrxQYNpHpNMGYTcRaLhEfO5KDYmN7vPciW6JQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHt2mpJt9PYSsjXnK+tdfBfmUJmpMB8GA1UdIwQY
MBaAFFl7RMSnkxxmpv+ektuzLKcj1Mz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1h0RXhLZVRIR2FtXzU2UzI3TXNweVBVelBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85NWZmOGYtNjZiYy00YjExLTk4ZjAt
MGFiMjFiMmYyNzU0LzEvZTNhYWttMzA5aEt5TmVjcjYxMThGLVpRbWFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85NWZmOGYtNjZiYy00YjExLTk4ZjAtMGFiMjFiMmYyNzU0
LzEvV1h0RXhLZVRIR2FtXzU2UzI3TXNweVBVelBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQHBf4AAwQD
XXIoAwQEXXNQAwQCufLMMA0GCSqGSIb3DQEBCwUAA4IBAQCmrO/qlvnxCkLFfMxB
KMwQ7KhWrrp/crFGAev+VwGOOkmgUB8Ja8zO7XKHlLWUf2RIifFJBALsbsb7mKAA
5z3xyDgReHDFI3rCxpVYGMRj/GFar8dWl/KZxkXu1lORejjMLytGWRTzeM89noxe
aLgWodfoxC81oKIQ01KhZxTFIkeLqEleEadOe4sOciOdI6wa1XBz3SH5DKrMqRQi
gdJ//DTLwGPljO0CeX5eLfuIFNY2FRWS6gc2e0R8ltqE0sAvusj8ycYUf8LfP3RD
iEJmQCRbzEuFsqJhCkJ++Se8nfULXKy3s9gkfWyGXvboocz2btSylnaKSnTtKgYm
vEAK
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:42:11 2024 by rpki-client on console-fra.rpki-client.org