Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/81Fqnq-pzbqnLvndzWd61A6G7wk.roa
File: 81Fqnq-pzbqnLvndzWd61A6G7wk.roa (raw, json)
Hash identifier: 7DkB1RNp0UTcoiC8X6gl9yUafa8srqYJroKY5LvHmpY=
Subject key identifier: F3:51:6A:9E:AF:A9:CD:BA:A7:2E:F9:DD:CD:67:7A:D4:0E:86:EF:09
Certificate issuer: /CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Certificate serial: 018D115BBADD5E7135DD948C162F689C12BF
Authority key identifier: 9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/81Fqnq-pzbqnLvndzWd61A6G7wk.roa
Signing time: Tue 16 Jan 2024 08:20:40 +0000
ROA not before: Tue 16 Jan 2024 08:20:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29170
IP address blocks: 82.114.79.0/24 maxlen: 24
82.114.80.0/24 maxlen: 24
82.114.81.0/24 maxlen: 24
82.114.82.0/24 maxlen: 24
82.114.84.0/24 maxlen: 24
82.114.85.0/24 maxlen: 24
82.114.83.0/24 maxlen: 24
82.114.86.0/24 maxlen: 24
82.114.87.0/24 maxlen: 24
82.114.88.0/24 maxlen: 24
82.114.89.0/24 maxlen: 24
82.114.90.0/24 maxlen: 24
82.114.91.0/24 maxlen: 24
82.114.95.0/24 maxlen: 24
82.114.92.0/24 maxlen: 24
82.114.93.0/24 maxlen: 24
82.114.94.0/24 maxlen: 24
46.19.224.0/21 maxlen: 24
46.19.224.0/24 maxlen: 24
46.19.225.0/24 maxlen: 24
46.19.226.0/24 maxlen: 24
46.19.227.0/24 maxlen: 24
46.19.228.0/24 maxlen: 24
46.19.229.0/24 maxlen: 24
46.19.230.0/24 maxlen: 24
82.114.64.0/19 maxlen: 19
82.114.64.0/24 maxlen: 24
82.114.68.0/24 maxlen: 24
82.114.69.0/24 maxlen: 24
82.114.70.0/24 maxlen: 24
82.114.71.0/24 maxlen: 24
82.114.65.0/24 maxlen: 24
82.114.66.0/24 maxlen: 24
82.114.67.0/24 maxlen: 24
82.114.72.0/24 maxlen: 24
82.114.73.0/24 maxlen: 24
82.114.74.0/24 maxlen: 24
82.114.75.0/24 maxlen: 24
82.114.76.0/24 maxlen: 24
82.114.77.0/24 maxlen: 24
82.114.78.0/24 maxlen: 24
185.190.133.0/24 maxlen: 24
185.190.134.0/24 maxlen: 24
185.190.135.0/24 maxlen: 24
185.190.132.0/22 maxlen: 22
185.190.132.0/24 maxlen: 24
178.132.216.0/24 maxlen: 24
178.132.217.0/24 maxlen: 24
178.132.218.0/24 maxlen: 24
178.132.219.0/24 maxlen: 24
178.132.216.0/21 maxlen: 21
178.132.220.0/24 maxlen: 24
178.132.221.0/24 maxlen: 24
178.132.222.0/24 maxlen: 24
178.132.223.0/24 maxlen: 24
185.67.176.0/24 maxlen: 24
185.67.177.0/24 maxlen: 24
185.67.178.0/24 maxlen: 24
185.67.179.0/24 maxlen: 24
185.67.176.0/22 maxlen: 22
2a04:3080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:11:5b:ba:dd:5e:71:35:dd:94:8c:16:2f:68:9c:12:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Validity
Not Before: Jan 16 08:20:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3516a9eafa9cdbaa72ef9ddcd677ad40e86ef09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:18:31:9e:96:b7:79:09:30:99:c6:a4:04:3b:
e2:86:f6:c2:1b:81:08:ae:e9:08:45:f5:6c:26:26:
a9:fe:fa:8e:91:bb:c8:dc:a1:94:3d:9f:ea:03:07:
4c:2d:2f:15:a4:83:f9:63:b1:6b:c8:ae:8d:e6:b1:
d0:ba:4e:71:98:18:98:91:f4:42:4e:c3:27:10:bd:
7b:51:44:c5:b7:bb:5a:f2:ea:fe:32:0d:e1:80:d0:
b7:c1:47:e7:25:6a:ba:58:5d:5c:7d:ad:2e:4c:25:
6c:4f:ee:17:b1:86:70:7a:23:66:6d:b9:0e:24:68:
96:6b:78:b9:43:6d:eb:0d:04:24:01:9d:3b:b4:35:
cf:c2:d3:5f:5e:51:1b:10:d5:4e:31:b6:07:d7:ca:
63:ac:23:df:42:f7:24:15:47:44:b0:91:4d:49:1d:
35:74:55:63:e7:55:3a:46:b4:8d:b9:9e:00:b1:20:
21:4d:8f:fa:7d:49:07:fa:b3:f5:8a:12:41:2e:6a:
ee:d4:53:67:17:14:74:0d:07:04:dc:6d:4d:99:4c:
b5:1f:a1:d1:db:1c:7d:5f:4b:d9:6d:96:cd:37:e0:
1d:6d:65:0c:c1:4d:c9:06:ab:fd:50:45:96:74:53:
e0:3c:bc:77:c7:47:80:f6:ab:16:70:9a:bd:37:03:
0e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:51:6A:9E:AF:A9:CD:BA:A7:2E:F9:DD:CD:67:7A:D4:0E:86:EF:09
X509v3 Authority Key Identifier:
keyid:9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/81Fqnq-pzbqnLvndzWd61A6G7wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.224.0/21
82.114.64.0/19
178.132.216.0/21
185.67.176.0/22
185.190.132.0/22
IPv6:
2a04:3080::/29
Signature Algorithm: sha256WithRSAEncryption
70:13:3f:04:15:5e:8c:4e:3f:83:19:26:34:16:fd:ad:49:73:
ed:d5:a2:95:ed:d1:e1:ce:5c:7e:e4:2b:f9:12:a7:1f:7e:b0:
22:0e:67:3a:ec:95:c6:44:37:b3:cf:23:31:3d:ab:d0:75:e9:
9a:0c:05:2a:ea:95:f5:96:49:c1:08:3a:2c:2e:db:e2:29:14:
90:ec:6d:32:f6:46:94:8f:20:46:35:88:f9:e4:6b:28:8f:40:
1a:13:7a:35:4f:d3:2b:d6:cc:f7:e0:40:6a:22:9e:08:59:c2:
19:e7:40:25:15:de:2e:f4:e3:e3:91:72:d0:b4:2a:ad:7d:b1:
e6:ad:46:45:75:5c:10:ad:e4:74:32:d5:05:b4:a7:fe:dd:47:
92:c7:15:49:c4:a4:64:80:d7:1b:c0:89:2e:59:a4:dd:52:d6:
9a:9b:d7:04:39:20:32:b9:6b:64:e9:cc:22:7d:3d:f5:5d:80:
b5:91:9c:4a:c1:e5:8e:7e:61:03:58:84:f2:29:67:50:82:0a:
89:84:ed:d4:aa:32:a0:a2:3a:3c:73:3e:ba:39:62:8e:50:53:
16:9e:d0:2c:35:31:9e:38:24:56:ed:9f:85:8b:60:2a:69:6b:
ef:9a:43:e4:b7:93:46:f4:e6:03:5d:29:90:2c:f4:cc:0a:5c:
02:dc:14:1d
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAY0RW7rdXnE13ZSMFi9onBK/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTJkMzA3MDhiOWQ0ZThjN2MyOGM5N2Y4MDM3YzgwMjcx
NDRjNDcwHhcNMjQwMTE2MDgyMDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzUxNmE5ZWFmYTljZGJhYTcyZWY5ZGRjZDY3N2FkNDBlODZlZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hgxnpa3eQkwmcakBDvihvbCG4EI
rukIRfVsJiap/vqOkbvI3KGUPZ/qAwdMLS8VpIP5Y7FryK6N5rHQuk5xmBiYkfRC
TsMnEL17UUTFt7ta8ur+Mg3hgNC3wUfnJWq6WF1cfa0uTCVsT+4XsYZweiNmbbkO
JGiWa3i5Q23rDQQkAZ07tDXPwtNfXlEbENVOMbYH18pjrCPfQvckFUdEsJFNSR01
dFVj51U6RrSNuZ4AsSAhTY/6fUkH+rP1ihJBLmru1FNnFxR0DQcE3G1NmUy1H6HR
2xx9X0vZbZbNN+AdbWUMwU3JBqv9UEWWdFPgPLx3x0eA9qsWcJq9NwMOJQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFPNRap6vqc26py753c1netQOhu8JMB8GA1UdIwQY
MBaAFJqS0wcIudTox8KMl/gDfIAnFExHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBMVEJ3aTUxT2pId295WC1BTjhnQ2NVVEVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jOTM3YmUtZjViMS00M2M2LTk1ODct
NGUwNjYyMWJkOThhLzEvODFGcW5xLXB6YnFuTHZuZHpXZDYxQTZHN3drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9jOTM3YmUtZjViMS00M2M2LTk1ODctNGUwNjYyMWJkOThh
LzEvbXBMVEJ3aTUxT2pId295WC1BTjhnQ2NVVEVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDLhPgAwQF
UnJAAwQDsoTYAwQCuUOwAwQCub6EMA0EAgACMAcDBQMqBDCAMA0GCSqGSIb3DQEB
CwUAA4IBAQBwEz8EFV6MTj+DGSY0Fv2tSXPt1aKV7dHhzlx+5Cv5EqcffrAiDmc6
7JXGRDezzyMxPavQdemaDAUq6pX1lknBCDosLtviKRSQ7G0y9kaUjyBGNYj55Gso
j0AaE3o1T9Mr1sz34EBqIp4IWcIZ50AlFd4u9OPjkXLQtCqtfbHmrUZFdVwQreR0
MtUFtKf+3UeSxxVJxKRkgNcbwIkuWaTdUtaam9cEOSAyuWtk6cwifT31XYC1kZxK
weWOfmEDWITyKWdQggqJhO3UqjKgojo8cz66OWKOUFMWntAsNTGeOCRW7Z+Fi2Aq
aWvvmkPkt5NG9OYDXSmQLPTMClwC3BQd
-----END CERTIFICATE-----
Generated at Sun Jun 2 23:34:29 2024 by rpki-client on console-ams.rpki-client.org