Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/vD4sO_9ehaddiRvZX3Q1lLbnoBo.roa
File: vD4sO_9ehaddiRvZX3Q1lLbnoBo.roa (raw, json)
Hash identifier: nfiMT1DTRqLOkI27r6wcxN66iQyX6XOXprm75NBFFJ8=
Subject key identifier: BC:3E:2C:3B:FF:5E:85:A7:5D:89:1B:D9:5F:74:35:94:B6:E7:A0:1A
Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial: 018CC26D627D711741C45A316A78E463C08F
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/vD4sO_9ehaddiRvZX3Q1lLbnoBo.roa
Signing time: Mon 01 Jan 2024 00:29:57 +0000
ROA not before: Mon 01 Jan 2024 00:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28929
IP address blocks: 94.73.127.0/24 maxlen: 24
188.228.128.0/17 maxlen: 17
78.26.111.0/24 maxlen: 24
37.77.208.0/20 maxlen: 20
185.29.104.0/22 maxlen: 22
94.73.64.0/18 maxlen: 18
193.25.178.0/23 maxlen: 23
78.26.64.0/18 maxlen: 18
195.47.199.0/24 maxlen: 24
2a02:f8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:62:7d:71:17:41:c4:5a:31:6a:78:e4:63:c0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
Validity
Not Before: Jan 1 00:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc3e2c3bff5e85a75d891bd95f743594b6e7a01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:fe:b3:1c:99:97:46:da:3c:7f:22:e4:4d:
35:75:d6:8e:d4:0f:04:e5:91:f6:63:1b:9d:e3:b7:
18:88:4d:3d:18:bd:e9:37:ae:3c:06:04:5f:c2:e4:
72:de:9c:dc:fd:e4:cd:a7:16:cb:58:e3:c4:86:d0:
f4:1d:c2:a4:10:a8:5e:77:9d:1b:4d:c6:75:a3:23:
d0:3a:ad:14:c4:82:25:c2:29:67:ae:1e:3b:28:e8:
0e:78:e3:61:a2:40:16:4c:9a:44:39:7f:28:5a:45:
d5:a1:b8:eb:58:c1:fb:42:b1:56:90:94:6e:f2:86:
72:ca:28:fc:3a:73:1a:e3:87:98:22:f4:0d:e6:d1:
fe:ba:da:83:78:f2:d9:4d:26:8b:b9:76:18:8d:63:
7c:c8:96:8d:49:92:5b:10:bc:1a:b9:53:4b:4a:09:
37:f7:fd:cb:c6:8c:23:be:76:72:8c:8d:18:1e:d8:
94:f0:b4:ff:cd:73:fd:47:44:ea:e8:1c:d4:11:bd:
ce:a7:5e:00:48:b5:3f:45:29:42:d2:40:4d:30:48:
71:49:d5:38:22:dc:d7:52:53:4b:8e:d5:21:d9:77:
85:e4:7f:30:6b:c6:30:74:a2:b4:ac:9b:47:59:8e:
0f:71:5b:91:ed:49:56:ef:34:22:ef:78:80:19:56:
31:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3E:2C:3B:FF:5E:85:A7:5D:89:1B:D9:5F:74:35:94:B6:E7:A0:1A
X509v3 Authority Key Identifier:
keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/vD4sO_9ehaddiRvZX3Q1lLbnoBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.208.0/20
78.26.64.0/18
94.73.64.0/18
185.29.104.0/22
188.228.128.0/17
193.25.178.0/23
195.47.199.0/24
IPv6:
2a02:f8::/32
Signature Algorithm: sha256WithRSAEncryption
32:cb:87:66:1f:e2:79:b5:26:d5:ea:05:a7:2d:07:80:9c:a9:
b7:40:44:48:dd:b4:94:4d:de:c4:f4:10:cf:9b:28:3a:2e:05:
4a:b8:de:91:b6:31:a5:bd:93:be:1f:a2:94:d2:2e:9b:38:5b:
77:86:45:a2:2b:cd:9c:05:11:c8:2d:7f:82:d3:f3:d3:3e:d5:
20:3f:0c:d5:53:0d:66:f4:b4:eb:69:8c:13:94:8f:22:4e:f8:
26:04:e5:7b:8c:02:0e:7c:53:9e:80:4a:74:81:2f:97:82:12:
c3:25:2e:6c:e1:ed:10:00:1c:30:62:df:d9:ba:09:b8:d9:00:
32:67:95:36:1c:ce:ce:ac:39:ee:a6:94:bd:21:12:6d:75:d3:
58:82:e6:e1:2c:12:20:5f:34:04:15:48:d2:b1:fa:45:88:73:
48:1a:df:1e:17:b9:16:22:a1:7b:dc:0a:ed:2b:ba:6f:b2:06:
a6:78:0c:61:75:27:85:b5:e1:e6:db:c5:e3:c9:05:18:db:a3:
73:28:c5:8c:ce:6a:93:dd:f6:f2:9c:64:f2:ed:7e:58:ae:9e:
8e:5c:ed:40:65:7e:97:47:b6:9e:98:a0:8b:ae:c5:57:d8:52:
ed:e3:7d:bc:d6:7f:ad:1c:b3:79:12:5c:f3:cf:aa:8b:0a:06:
07:05:84:3d
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAYzCbWJ9cRdBxFoxanjkY8CPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYzk0ZmY0Nzk3Nzg2NTFhNjA1MTIxZjFmZmU2NzgxOTYz
MjhmMzUwHhcNMjQwMTAxMDAyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzNlMmMzYmZmNWU4NWE3NWQ4OTFiZDk1Zjc0MzU5NGI2ZTdhMDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQD+sxyZl0baPH8i5E01ddaO1A8E
5ZH2Yxud47cYiE09GL3pN648BgRfwuRy3pzc/eTNpxbLWOPEhtD0HcKkEKhed50b
TcZ1oyPQOq0UxIIlwilnrh47KOgOeONhokAWTJpEOX8oWkXVobjrWMH7QrFWkJRu
8oZyyij8OnMa44eYIvQN5tH+utqDePLZTSaLuXYYjWN8yJaNSZJbELwauVNLSgk3
9/3LxowjvnZyjI0YHtiU8LT/zXP9R0Tq6BzUEb3Op14ASLU/RSlC0kBNMEhxSdU4
ItzXUlNLjtUh2XeF5H8wa8YwdKK0rJtHWY4PcVuR7UlW7zQi73iAGVYxtQIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFLw+LDv/XoWnXYkb2V90NZS256AaMB8GA1UdIwQY
MBaAFDzJT/R5d4ZRpgUSHx/+Z4GWMo81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE1sUDlIbDNobEdtQlJJZkhfNW5nWll5anpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xZTYzYjYtMzk1Ni00ZDEyLWIxOWYt
NWJlZjY0MjBhMDI4LzEvdkQ0c09fOWVoYWRkaVJ2WlgzUTFsTGJub0JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xZTYzYjYtMzk1Ni00ZDEyLWIxOWYtNWJlZjY0MjBhMDI4
LzEvUE1sUDlIbDNobEdtQlJJZkhfNW5nWll5anpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQEJU3QAwQG
ThpAAwQGXklAAwQCuR1oAwQHvOSAAwQBwRmyAwQAwy/HMA0EAgACMAcDBQAqAgD4
MA0GCSqGSIb3DQEBCwUAA4IBAQAyy4dmH+J5tSbV6gWnLQeAnKm3QERI3bSUTd7E
9BDPmyg6LgVKuN6RtjGlvZO+H6KU0i6bOFt3hkWiK82cBRHILX+C0/PTPtUgPwzV
Uw1m9LTraYwTlI8iTvgmBOV7jAIOfFOegEp0gS+XghLDJS5s4e0QABwwYt/Zugm4
2QAyZ5U2HM7OrDnuppS9IRJtddNYgubhLBIgXzQEFUjSsfpFiHNIGt8eF7kWIqF7
3ArtK7pvsgameAxhdSeFteHm28XjyQUY26NzKMWMzmqT3fbynGTy7X5Yrp6OXO1A
ZX6XR7aemKCLrsVX2FLt43281n+tHLN5Elzzz6qLCgYHBYQ9
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:06:29 2024 by rpki-client on console-ams.rpki-client.org