Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/xcIgnX71Hpq2h1AwWUjtx8Ka1jM.roa
File: xcIgnX71Hpq2h1AwWUjtx8Ka1jM.roa (raw, json)
Hash identifier: eNvg6hz5kb2zoF4ZbDg56AH7WgMSmDlIaRqL903h+4c=
Subject key identifier: C5:C2:20:9D:7E:F5:1E:9A:B6:87:50:30:59:48:ED:C7:C2:9A:D6:33
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 0191DFF4D0D25F03FF7F9C87FCF873EF6078
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/xcIgnX71Hpq2h1AwWUjtx8Ka1jM.roa
Signing time: Wed 11 Sep 2024 07:20:48 +0000
ROA not before: Wed 11 Sep 2024 07:20:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34304
IP address blocks: 86.107.57.0/24 maxlen: 24
86.107.60.0/23 maxlen: 23
86.107.63.0/24 maxlen: 24
89.35.224.0/24 maxlen: 24
89.35.229.0/24 maxlen: 24
89.35.232.0/24 maxlen: 24
89.35.235.0/24 maxlen: 24
89.35.236.0/24 maxlen: 24
89.35.238.0/24 maxlen: 24
89.47.0.0/24 maxlen: 24
89.47.12.0/24 maxlen: 24
89.47.14.0/24 maxlen: 24
93.190.122.0/24 maxlen: 24
188.211.164.0/23 maxlen: 23
193.138.192.0/23 maxlen: 23
193.138.194.0/24 maxlen: 24
2a05:8880::/30 maxlen: 30
2a05:8884::/30 maxlen: 30
2a0f:55c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:df:f4:d0:d2:5f:03:ff:7f:9c:87:fc:f8:73:ef:60:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Sep 11 07:20:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5c2209d7ef51e9ab68750305948edc7c29ad633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:c1:c4:07:d8:37:90:ac:19:0f:e5:ac:3a:
7c:d7:c3:67:2a:6c:8e:a2:75:be:12:64:9b:82:ea:
ff:cd:3e:6c:89:d1:7a:b2:11:98:0e:b2:92:76:76:
ab:22:9f:67:22:47:e9:ea:1f:d2:7d:8e:c9:a5:35:
af:dc:78:d3:a5:47:54:7f:f3:28:8c:53:f2:44:12:
3d:6a:82:6c:44:2a:86:67:a2:33:aa:e1:51:b8:ac:
19:99:df:7d:f0:88:cf:60:2d:10:81:6e:47:71:16:
bf:6c:05:39:97:ec:78:22:59:41:95:e7:ab:c1:6b:
ac:a9:17:2c:eb:62:b9:20:d8:9c:95:d2:84:06:c8:
76:d2:03:e0:5c:1a:c1:aa:12:88:9b:e1:5d:0f:b0:
cc:d1:3d:38:b5:49:e5:8f:a8:28:63:86:a0:47:30:
8b:9c:d4:75:45:93:75:40:3f:b4:05:d5:7f:9b:89:
0e:7a:3c:bd:a8:8f:47:51:a8:54:18:4d:c4:ef:df:
18:76:9c:f8:7a:2f:7e:3c:67:a5:89:40:ad:58:4e:
92:89:b6:69:f6:99:1a:56:1e:59:76:b4:62:a5:a8:
8f:f5:44:ab:c4:53:bd:f0:d4:c1:a4:39:66:26:8b:
cb:ef:c3:90:a7:82:90:41:83:b7:ad:f5:e9:0e:8c:
eb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C2:20:9D:7E:F5:1E:9A:B6:87:50:30:59:48:ED:C7:C2:9A:D6:33
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/xcIgnX71Hpq2h1AwWUjtx8Ka1jM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.57.0/24
86.107.60.0/23
86.107.63.0/24
89.35.224.0/24
89.35.229.0/24
89.35.232.0/24
89.35.235.0-89.35.236.255
89.35.238.0/24
89.47.0.0/24
89.47.12.0/24
89.47.14.0/24
93.190.122.0/24
188.211.164.0/23
193.138.192.0-193.138.194.255
IPv6:
2a05:8880::/29
2a0f:55c0::/29
Signature Algorithm: sha256WithRSAEncryption
71:d3:2a:38:f2:81:52:43:38:aa:5b:8b:18:77:16:01:05:5e:
36:2f:03:af:c4:d7:24:af:fa:9b:72:fe:fa:0e:04:eb:3e:a4:
43:e7:5d:3a:15:92:d2:a9:e9:bb:ea:b9:db:c1:f7:e3:6e:38:
3a:60:64:50:e7:ad:d8:84:f8:a9:b4:6c:90:ac:f7:97:a7:e3:
b8:53:12:35:67:80:62:17:da:ca:5a:c2:b9:c6:57:e4:c0:52:
27:f7:c4:2b:c0:a0:9b:61:a9:bf:b3:f2:b6:3a:b0:f8:10:e2:
58:c8:f7:eb:58:cf:a8:26:7e:19:43:82:16:e3:d7:16:57:1c:
bd:79:e5:46:7b:33:38:6a:47:38:6b:e1:08:ce:98:1a:5a:39:
86:5a:5f:d2:b9:cf:ae:09:8d:47:d4:72:ad:5b:3a:61:ba:50:
00:5a:75:cd:06:28:a2:c2:ab:f5:41:7f:d1:ad:2b:b3:25:c3:
e2:3d:85:0e:7c:fd:cd:89:fe:ee:a8:7b:0b:33:d6:db:1c:02:
00:c1:5a:cc:ef:e1:3e:9a:ef:cc:19:3e:b2:b4:54:bb:1e:d4:
f0:2e:5c:70:e6:10:32:69:20:23:40:f6:f0:1e:7f:75:71:0d:
fe:3e:d3:6c:49:32:74:c4:40:d5:46:8d:01:ab:dc:c8:37:62:
dd:67:c0:43
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgISAZHf9NDSXwP/f5yH/Phz72B4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4
NWZmOGMwHhcNMjQwOTExMDcyMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWMyMjA5ZDdlZjUxZTlhYjY4NzUwMzA1OTQ4ZWRjN2MyOWFkNjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVHBxAfYN5CsGQ/lrDp818NnKmyO
onW+EmSbgur/zT5sidF6shGYDrKSdnarIp9nIkfp6h/SfY7JpTWv3HjTpUdUf/Mo
jFPyRBI9aoJsRCqGZ6IzquFRuKwZmd998IjPYC0QgW5HcRa/bAU5l+x4IllBleer
wWusqRcs62K5INicldKEBsh20gPgXBrBqhKIm+FdD7DM0T04tUnlj6goY4agRzCL
nNR1RZN1QD+0BdV/m4kOejy9qI9HUahUGE3E798Ydpz4ei9+PGeliUCtWE6SibZp
9pkaVh5ZdrRipaiP9USrxFO98NTBpDlmJovL78OQp4KQQYO3rfXpDozrXwIDAQAB
o4ICgDCCAnwwHQYDVR0OBBYEFMXCIJ1+9R6atodQMFlI7cfCmtYzMB8GA1UdIwQY
MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt
MjVkYmY0MzgwNGM1LzEveGNJZ25YNzFIcHEyaDFBd1dVanR4OEthMWpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1
LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGVBggrBgEFBQcBBwEB/wSBhTCBgjBqBAIAATBkAwQAVms5
AwQBVms8AwQAVms/AwQAWSPgAwQAWSPlAwQAWSPoMAwDBABZI+sDBABZI+wDBABZ
I+4DBABZLwADBABZLwwDBABZLw4DBABdvnoDBAG806QwDAMEBsGKwAMEAMGKwjAU
BAIAAjAOAwUDKgWIgAMFAyoPVcAwDQYJKoZIhvcNAQELBQADggEBAHHTKjjygVJD
OKpbixh3FgEFXjYvA6/E1ySv+pty/voOBOs+pEPnXToVktKp6bvqudvB9+NuODpg
ZFDnrdiE+Km0bJCs95en47hTEjVngGIX2spawrnGV+TAUif3xCvAoJthqb+z8rY6
sPgQ4ljI9+tYz6gmfhlDghbj1xZXHL155UZ7MzhqRzhr4QjOmBpaOYZaX9K5z64J
jUfUcq1bOmG6UABadc0GKKLCq/VBf9GtK7Mlw+I9hQ58/c2J/u6oewsz1tscAgDB
Wszv4T6a78wZPrK0VLse1PAuXHDmEDJpICNA9vAef3VxDf4+02xJMnTEQNVGjQGr
3Mg3Yt1nwEM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:50 2024 by rpki-client on console-fra.rpki-client.org