Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/M2MgKeZ3p74tC7yzipRDxqkccmE.roa
File: M2MgKeZ3p74tC7yzipRDxqkccmE.roa (raw, json)
Hash identifier: S81fOh6Rr38eIfvSnr5Xtvw+/Ve8PWO+EVJQm5c8U2I=
Subject key identifier: 33:63:20:29:E6:77:A7:BE:2D:0B:BC:B3:8A:94:43:C6:A9:1C:72:61
Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial: 018D7AEA0CCAC2E7C3EBFE4B8BF65C8B64D5
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/M2MgKeZ3p74tC7yzipRDxqkccmE.roa
Signing time: Mon 05 Feb 2024 20:16:15 +0000
ROA not before: Mon 05 Feb 2024 20:16:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13768
IP address blocks: 5.44.16.0/21 maxlen: 21
5.44.24.0/22 maxlen: 22
5.44.28.0/22 maxlen: 22
46.20.112.0/20 maxlen: 20
62.128.128.0/19 maxlen: 19
62.128.132.0/24 maxlen: 24
62.128.133.0/24 maxlen: 24
62.128.140.0/22 maxlen: 22
83.137.128.0/21 maxlen: 21
83.137.134.0/23 maxlen: 23
83.222.246.0/24 maxlen: 24
95.130.72.0/21 maxlen: 21
95.130.73.0/24 maxlen: 24
185.29.176.0/22 maxlen: 22
185.29.176.0/23 maxlen: 23
185.33.4.0/23 maxlen: 23
185.33.6.0/23 maxlen: 23
212.53.65.0/24 maxlen: 24
212.53.66.0/24 maxlen: 24
212.53.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Feb 2024 15:27:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7a:ea:0c:ca:c2:e7:c3:eb:fe:4b:8b:f6:5c:8b:64:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Validity
Not Before: Feb 5 20:16:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33632029e677a7be2d0bbcb38a9443c6a91c7261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e4:e2:7d:22:bd:98:92:ea:0c:3c:25:24:ad:
6d:fd:b5:50:d2:09:52:1b:e2:0a:34:a9:b5:9f:f2:
97:5e:03:bd:a5:07:fe:40:5b:f2:7f:00:f2:3b:ce:
67:ef:9f:0a:97:e9:f2:e2:a1:9c:5f:5b:62:f6:ce:
84:f8:97:db:30:c6:b4:a8:78:a5:eb:8b:5b:af:9c:
d4:5a:9a:f1:1d:cc:b9:38:cf:aa:e2:da:b8:25:c6:
f0:03:51:f5:98:88:86:c4:d4:d0:60:1a:16:8b:92:
6b:87:9c:d0:93:42:35:dd:2a:3d:46:4c:e1:0b:df:
cc:c6:f4:20:28:fe:86:a1:12:57:0b:e6:ff:c7:58:
ce:66:81:77:f1:c7:4e:a0:35:31:13:b4:0a:b5:2f:
cc:42:01:b6:c0:ea:f0:23:df:40:87:ae:8a:1d:06:
78:2e:53:58:9a:39:8d:5a:06:92:9a:74:dd:ff:c4:
70:82:51:67:b1:c4:48:b5:38:6f:f1:37:e9:d1:69:
57:d8:36:85:84:f8:c8:99:95:f7:b5:35:44:b0:5d:
70:db:a7:fa:fe:87:fb:c6:48:f4:8b:f1:25:c6:e4:
88:36:80:af:fd:9b:83:09:c5:5c:98:be:f5:7b:a4:
32:3f:ca:01:81:f7:43:70:cf:d8:e0:6e:eb:40:51:
7e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:63:20:29:E6:77:A7:BE:2D:0B:BC:B3:8A:94:43:C6:A9:1C:72:61
X509v3 Authority Key Identifier:
keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/M2MgKeZ3p74tC7yzipRDxqkccmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.16.0/20
46.20.112.0/20
62.128.128.0/19
83.137.128.0/21
83.222.246.0/24
95.130.72.0/21
185.29.176.0/22
185.33.4.0/22
212.53.65.0-212.53.66.255
212.53.85.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1d:b4:6b:57:12:f4:ce:75:6a:ca:ad:43:73:48:70:0e:aa:
8c:cc:10:ac:6f:b9:1b:72:19:12:be:6c:f5:8d:dc:a7:6a:a0:
0b:12:2a:35:66:c8:3c:81:fd:c0:2e:49:31:36:87:b0:99:d3:
a2:59:70:0b:14:66:6e:e5:d9:ba:e2:f0:fa:8b:a5:72:32:ee:
62:19:47:68:e9:f0:99:0e:b5:79:2b:cc:58:fb:29:f7:df:51:
a6:da:5e:03:ac:5b:d0:64:a5:e4:54:eb:02:3c:23:db:84:f8:
cd:18:f6:28:1f:31:9a:89:5a:77:fb:95:ac:00:ce:12:c3:4c:
84:8e:ad:38:55:57:07:47:2b:3a:4f:6a:29:f0:cb:7e:6a:22:
e9:ca:e4:3a:4f:c6:cb:79:59:8b:45:ae:a7:ad:26:67:8b:eb:
5c:95:68:93:6d:ad:33:29:f5:58:ed:4c:79:d3:8e:c9:3f:f8:
1b:83:8e:3d:4b:cd:1f:95:7e:e1:88:5d:41:ae:7e:0c:a5:95:
08:71:ba:51:3c:bd:26:8d:8c:5c:0e:ba:2b:c2:22:3b:08:fe:
f5:54:cb:d2:64:46:05:c5:da:c6:3a:cc:f3:94:5b:d9:93:82:
34:f2:36:87:11:40:7d:40:bb:72:42:f7:8a:24:1a:1a:b7:a2:
77:6f:73:c6
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAY166gzKwufD6/5Li/Zci2TVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZWY1ODQ5OTMwY2M5ZGQ3NDIxMWZiMzdlMjQxMTgyNDlh
MWZjNDAwHhcNMjQwMjA1MjAxNjE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzYzMjAyOWU2NzdhN2JlMmQwYmJjYjM4YTk0NDNjNmE5MWM3MjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeTifSK9mJLqDDwlJK1t/bVQ0glS
G+IKNKm1n/KXXgO9pQf+QFvyfwDyO85n758Kl+ny4qGcX1ti9s6E+JfbMMa0qHil
64tbr5zUWprxHcy5OM+q4tq4JcbwA1H1mIiGxNTQYBoWi5Jrh5zQk0I13So9Rkzh
C9/MxvQgKP6GoRJXC+b/x1jOZoF38cdOoDUxE7QKtS/MQgG2wOrwI99Ah66KHQZ4
LlNYmjmNWgaSmnTd/8RwglFnscRItThv8Tfp0WlX2DaFhPjImZX3tTVEsF1w26f6
/of7xkj0i/ElxuSINoCv/ZuDCcVcmL71e6QyP8oBgfdDcM/Y4G7rQFF+RQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFDNjICnmd6e+LQu8s4qUQ8apHHJhMB8GA1UdIwQY
MBaAFEDvWEmTDMnddCEfs34kEYJJofxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTIt
OWIyYzZiMDhhODRhLzEvTTJNZ0tlWjNwNzR0Qzd5emlwUkR4cWtjY21FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTItOWIyYzZiMDhhODRh
LzEvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQEBSwQAwQE
LhRwAwQFPoCAAwQDU4mAAwQAU972AwQDX4JIAwQCuR2wAwQCuSEEMAwDBADUNUED
BADUNUIDBADUNVUwDQYJKoZIhvcNAQELBQADggEBAA4dtGtXEvTOdWrKrUNzSHAO
qozMEKxvuRtyGRK+bPWN3KdqoAsSKjVmyDyB/cAuSTE2h7CZ06JZcAsUZm7l2bri
8PqLpXIy7mIZR2jp8JkOtXkrzFj7KfffUabaXgOsW9BkpeRU6wI8I9uE+M0Y9igf
MZqJWnf7lawAzhLDTISOrThVVwdHKzpPainwy35qIunK5DpPxst5WYtFrqetJmeL
61yVaJNtrTMp9VjtTHnTjsk/+BuDjj1LzR+VfuGIXUGufgyllQhxulE8vSaNjFwO
uivCIjsI/vVUy9JkRgXF2sY6zPOUW9mTgjTyNocRQH1Au3JC94okGhq3ondvc8Y=
-----END CERTIFICATE-----
Generated at Mon Feb 5 21:46:53 2024 by rpki-client on console-ams.rpki-client.org