Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/Y04UYrB5MeJKDFKsj2OKdmrEof4.roa
File: Y04UYrB5MeJKDFKsj2OKdmrEof4.roa (raw, json)
Hash identifier: ZJsENIGC6KjW1tXkh1q4N7OsqR/WR4NZRsjqvqxwIUI=
Subject key identifier: 63:4E:14:62:B0:79:31:E2:4A:0C:52:AC:8F:63:8A:76:6A:C4:A1:FE
Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial: 018CC6B7E7B25AD7EFE15BE4C5BED02548C8
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/Y04UYrB5MeJKDFKsj2OKdmrEof4.roa
Signing time: Mon 01 Jan 2024 20:29:50 +0000
ROA not before: Mon 01 Jan 2024 20:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48642
IP address blocks: 185.214.252.0/22 maxlen: 22
93.90.96.0/20 maxlen: 20
185.162.204.0/22 maxlen: 22
134.255.128.0/19 maxlen: 19
91.108.168.0/21 maxlen: 21
185.201.88.0/22 maxlen: 22
82.112.32.0/19 maxlen: 19
5.199.192.0/19 maxlen: 19
193.46.244.0/22 maxlen: 22
91.227.50.0/23 maxlen: 23
94.230.142.0/23 maxlen: 23
45.131.56.0/22 maxlen: 22
88.218.212.0/22 maxlen: 22
5.43.128.0/19 maxlen: 19
94.230.128.0/20 maxlen: 20
193.168.176.0/22 maxlen: 22
185.252.228.0/22 maxlen: 22
185.59.56.0/22 maxlen: 22
217.151.224.0/22 maxlen: 22
217.151.232.0/21 maxlen: 21
185.60.212.0/22 maxlen: 22
46.36.0.0/19 maxlen: 19
185.229.192.0/22 maxlen: 22
185.2.104.0/22 maxlen: 22
185.132.28.0/22 maxlen: 22
194.169.56.0/22 maxlen: 22
185.204.156.0/22 maxlen: 22
195.69.136.0/22 maxlen: 22
109.74.160.0/20 maxlen: 20
2a0a:f940::/32 maxlen: 32
2a0d:b600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:e7:b2:5a:d7:ef:e1:5b:e4:c5:be:d0:25:48:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
Validity
Not Before: Jan 1 20:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=634e1462b07931e24a0c52ac8f638a766ac4a1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:68:18:0b:7f:84:44:6f:32:dc:00:da:bc:
4b:cb:ed:cb:ca:2d:2b:b8:ee:bf:96:23:82:f4:8e:
27:f9:2c:24:52:b9:86:7a:59:d7:14:e6:b4:6c:88:
a9:28:75:07:7f:ae:d3:34:4a:0b:80:7e:90:86:72:
a3:0f:97:ec:94:90:84:5e:d8:0d:df:6b:30:7d:c0:
20:1d:e2:8c:7d:5e:b8:db:4f:35:07:ae:84:8d:77:
f7:ea:98:2f:21:6d:02:a1:8f:c7:92:90:02:af:8d:
0d:f0:33:f8:ea:b6:85:fe:c1:22:c8:d1:ad:2c:3a:
f7:9b:e3:0a:02:9e:b8:58:63:16:99:89:8d:10:14:
41:3e:57:62:b9:cb:66:86:76:48:8b:45:e5:ea:e2:
ee:69:96:77:ce:27:0a:06:10:9c:5d:c7:56:42:54:
9b:b3:f8:2d:ef:fc:62:47:d2:f7:15:67:77:0c:5b:
84:54:33:f0:2f:c8:12:0f:df:b8:3d:43:6e:6b:59:
9e:36:7c:6b:01:a2:a0:da:20:e0:e1:cb:e9:e0:c1:
93:2c:58:80:ff:5d:f2:51:d6:52:7e:a8:d9:86:bb:
62:13:9a:4b:37:3a:8d:9a:0a:fa:b1:0d:96:a0:95:
61:f1:52:b1:50:01:b0:83:9f:56:06:69:71:83:91:
22:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4E:14:62:B0:79:31:E2:4A:0C:52:AC:8F:63:8A:76:6A:C4:A1:FE
X509v3 Authority Key Identifier:
keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/Y04UYrB5MeJKDFKsj2OKdmrEof4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.43.128.0/19
5.199.192.0/19
45.131.56.0/22
46.36.0.0/19
82.112.32.0/19
88.218.212.0/22
91.108.168.0/21
91.227.50.0/23
93.90.96.0/20
94.230.128.0/20
109.74.160.0/20
134.255.128.0/19
185.2.104.0/22
185.59.56.0/22
185.60.212.0/22
185.132.28.0/22
185.162.204.0/22
185.201.88.0/22
185.204.156.0/22
185.214.252.0/22
185.229.192.0/22
185.252.228.0/22
193.46.244.0/22
193.168.176.0/22
194.169.56.0/22
195.69.136.0/22
217.151.224.0/22
217.151.232.0/21
IPv6:
2a0a:f940::/32
2a0d:b600::/29
Signature Algorithm: sha256WithRSAEncryption
ec:32:d7:36:4b:23:a3:5f:75:58:b6:e2:eb:cb:88:f3:0e:6e:
3e:9b:1d:81:de:c2:db:15:e5:96:e3:13:80:cb:23:55:11:01:
29:d2:d9:c2:dc:61:bf:7f:22:9b:0b:cf:bd:94:23:74:99:ef:
1e:7b:81:ec:be:ee:e9:82:0c:ea:bf:bc:fd:01:53:21:4b:f6:
fb:19:f1:93:12:5b:0e:b5:a0:a4:7a:61:24:f3:d3:a1:48:57:
df:a5:c6:8b:20:da:0b:2c:4e:81:28:54:b6:a4:61:8d:a5:64:
3d:d8:05:c7:b6:9a:0a:2a:6d:29:94:10:8c:38:af:26:61:1d:
8a:ab:3e:46:03:d1:49:fe:f3:b8:eb:33:4a:19:b5:c2:74:69:
54:64:ce:72:55:30:fd:25:51:45:74:74:7c:c3:5f:7d:10:d5:
bd:b5:8e:df:f0:b3:3a:87:1f:f4:06:12:33:bd:f0:c5:c5:db:
ac:97:6d:7d:47:1c:af:24:3e:01:85:0e:22:1d:23:5f:26:d2:
83:09:3a:9d:6e:72:01:8b:9a:2b:b4:7e:26:50:aa:81:8f:ad:
b6:cb:14:c8:4c:aa:35:0c:54:f9:43:e5:ec:ac:01:46:d1:b2:
f1:81:71:05:9b:90:b5:4e:ee:10:28:5c:34:2d:dd:4f:14:e9:
17:a9:20:8a
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgISAYzGt+eyWtfv4Vvkxb7QJUjIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNmM0OGNjY2NlMzIxZWMxODcwMjk1N2IzOTYzODFhMWYx
YTA0MTAwHhcNMjQwMTAxMjAyOTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzRlMTQ2MmIwNzkzMWUyNGEwYzUyYWM4ZjYzOGE3NjZhYzRhMWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnZoGAt/hERvMtwA2rxLy+3Lyi0r
uO6/liOC9I4n+SwkUrmGelnXFOa0bIipKHUHf67TNEoLgH6QhnKjD5fslJCEXtgN
32swfcAgHeKMfV642081B66EjXf36pgvIW0CoY/HkpACr40N8DP46raF/sEiyNGt
LDr3m+MKAp64WGMWmYmNEBRBPldiuctmhnZIi0Xl6uLuaZZ3zicKBhCcXcdWQlSb
s/gt7/xiR9L3FWd3DFuEVDPwL8gSD9+4PUNua1meNnxrAaKg2iDg4cvp4MGTLFiA
/13yUdZSfqjZhrtiE5pLNzqNmgr6sQ2WoJVh8VKxUAGwg59WBmlxg5EirQIDAQAB
o4ICxjCCAsIwHQYDVR0OBBYEFGNOFGKweTHiSgxSrI9jinZqxKH+MB8GA1UdIwQY
MBaAFBxsSMzM4yHsGHApV7OWOBofGgQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84ZTRlNjgtYmQyYS00ZGMyLWFhZTYt
YTA1NjBhYzgyYmE3LzEvWTA0VVlyQjVNZUpLREZLc2oyT0tkbXJFb2Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS84ZTRlNjgtYmQyYS00ZGMyLWFhZTYtYTA1NjBhYzgyYmE3
LzEvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHbBggrBgEFBQcBBwEB/wSByzCByDCBrwQCAAEwgagDBAUF
K4ADBAUFx8ADBAItgzgDBAUuJAADBAVScCADBAJY2tQDBANbbKgDBAFb4zIDBARd
WmADBARe5oADBARtSqADBAWG/4ADBAK5AmgDBAK5OzgDBAK5PNQDBAK5hBwDBAK5
oswDBAK5yVgDBAK5zJwDBAK51vwDBAK55cADBAK5/OQDBALBLvQDBALBqLADBALC
qTgDBALDRYgDBALZl+ADBAPZl+gwFAQCAAIwDgMFACoK+UADBQMqDbYAMA0GCSqG
SIb3DQEBCwUAA4IBAQDsMtc2SyOjX3VYtuLry4jzDm4+mx2B3sLbFeWW4xOAyyNV
EQEp0tnC3GG/fyKbC8+9lCN0me8ee4Hsvu7pggzqv7z9AVMhS/b7GfGTElsOtaCk
emEk89OhSFffpcaLINoLLE6BKFS2pGGNpWQ92AXHtpoKKm0plBCMOK8mYR2Kqz5G
A9FJ/vO46zNKGbXCdGlUZM5yVTD9JVFFdHR8w199ENW9tY7f8LM6hx/0BhIzvfDF
xdusl219RxyvJD4BhQ4iHSNfJtKDCTqdbnIBi5ortH4mUKqBj622yxTITKo1DFT5
Q+XsrAFG0bLxgXEFm5C1Tu4QKFw0Ld1PFOkXqSCK
-----END CERTIFICATE-----
Generated at Sat May 18 02:28:38 2024 by rpki-client on console-ams.rpki-client.org