Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/RzAcMaRY5sfPMu-sQBQSG8LjpGY.roa
File: RzAcMaRY5sfPMu-sQBQSG8LjpGY.roa (raw, json)
Hash identifier: DdoyPb64pPMytUNAxhSJWdM1SksLxo/qh1U6fWj68T0=
Subject key identifier: 47:30:1C:31:A4:58:E6:C7:CF:32:EF:AC:40:14:12:1B:C2:E3:A4:66
Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Certificate serial: 018CC50152BD2B81C4BACF8A29104236A309
Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/RzAcMaRY5sfPMu-sQBQSG8LjpGY.roa
Signing time: Mon 01 Jan 2024 12:30:47 +0000
ROA not before: Mon 01 Jan 2024 12:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39912
IP address blocks: 92.63.208.0/22 maxlen: 24
195.137.238.0/23 maxlen: 23
195.137.238.0/24 maxlen: 24
92.63.212.0/24 maxlen: 24
92.63.218.0/24 maxlen: 24
92.63.217.0/24 maxlen: 24
92.63.214.0/23 maxlen: 23
92.63.216.0/21 maxlen: 21
81.94.48.0/22 maxlen: 22
81.94.56.0/24 maxlen: 24
81.94.56.0/21 maxlen: 21
81.94.52.0/23 maxlen: 24
81.94.54.0/24 maxlen: 24
95.143.80.0/20 maxlen: 20
213.139.252.0/22 maxlen: 22
195.140.136.0/22 maxlen: 22
78.142.96.0/20 maxlen: 24
78.142.112.0/22 maxlen: 22
78.142.116.0/23 maxlen: 23
78.142.122.0/23 maxlen: 23
78.142.124.0/22 maxlen: 22
77.220.112.0/22 maxlen: 22
77.220.111.0/24 maxlen: 24
77.220.120.0/21 maxlen: 21
92.42.16.0/22 maxlen: 22
91.206.224.0/23 maxlen: 23
77.220.96.0/20 maxlen: 20
77.220.105.0/24 maxlen: 24
93.185.128.0/20 maxlen: 24
195.16.224.0/21 maxlen: 21
195.16.232.0/22 maxlen: 24
195.16.236.0/23 maxlen: 23
195.16.238.0/24 maxlen: 24
195.16.246.0/23 maxlen: 23
195.16.245.0/24 maxlen: 24
195.16.242.0/23 maxlen: 23
195.16.241.0/24 maxlen: 24
195.16.251.0/24 maxlen: 24
195.16.253.0/24 maxlen: 24
195.16.254.0/23 maxlen: 23
37.186.4.0/24 maxlen: 24
37.186.0.0/22 maxlen: 22
78.142.64.0/23 maxlen: 23
37.186.6.0/23 maxlen: 23
37.186.8.0/21 maxlen: 21
78.142.68.0/22 maxlen: 22
37.186.16.0/21 maxlen: 21
78.142.72.0/21 maxlen: 21
2a00:eb0::/32 maxlen: 32
2a01:100::/32 maxlen: 48
2a01:f8::/32 maxlen: 32
2a00:e98::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:52:bd:2b:81:c4:ba:cf:8a:29:10:42:36:a3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Validity
Not Before: Jan 1 12:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47301c31a458e6c7cf32efac4014121bc2e3a466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:00:af:31:48:91:88:78:68:f8:68:48:9d:
4e:63:40:d4:16:5e:dc:ea:e2:9e:60:bd:e9:1a:ea:
cd:9d:42:ed:ea:1d:28:d2:76:81:17:4d:90:83:e9:
6e:18:8b:b6:8b:e3:fe:87:61:0d:15:b8:2d:e4:c3:
fc:e5:f7:98:70:89:12:4d:d1:21:62:ad:5a:a4:a1:
96:bb:5c:d2:33:8a:24:20:dc:0a:7c:f4:29:5f:6b:
58:ea:6c:cf:ad:84:03:0f:5d:be:c5:5e:ff:1f:14:
b5:ea:f6:57:71:14:e7:1f:a3:ac:2e:20:cc:17:6a:
71:62:58:14:ef:97:32:0b:8a:50:77:b8:e6:d9:c0:
b8:8e:ce:51:bd:5b:46:39:07:93:65:79:71:29:d0:
d3:43:98:dc:d8:a2:38:e2:87:3c:68:ce:1f:41:10:
6c:fa:2d:7c:96:8f:33:85:43:d9:5c:8f:31:ab:3d:
10:5f:fb:74:e4:50:ee:1e:72:b9:d7:b0:72:23:6f:
6a:87:a5:38:bd:d4:27:e7:57:76:6d:26:c9:09:3a:
88:38:7c:bd:54:5e:83:12:dc:73:62:7c:f2:66:f7:
8c:e1:a8:b6:3c:7c:51:19:3e:82:09:0e:78:6c:3a:
fc:52:3b:fd:71:7c:0c:4b:df:8a:9a:11:28:bd:d2:
1b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:30:1C:31:A4:58:E6:C7:CF:32:EF:AC:40:14:12:1B:C2:E3:A4:66
X509v3 Authority Key Identifier:
keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/RzAcMaRY5sfPMu-sQBQSG8LjpGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.186.0.0-37.186.4.255
37.186.6.0-37.186.23.255
77.220.96.0-77.220.115.255
77.220.120.0/21
78.142.64.0/23
78.142.68.0-78.142.79.255
78.142.96.0-78.142.117.255
78.142.122.0-78.142.127.255
81.94.48.0-81.94.54.255
81.94.56.0/21
91.206.224.0/23
92.42.16.0/22
92.63.208.0-92.63.212.255
92.63.214.0-92.63.223.255
93.185.128.0/20
95.143.80.0/20
195.16.224.0-195.16.238.255
195.16.241.0-195.16.243.255
195.16.245.0-195.16.247.255
195.16.251.0/24
195.16.253.0-195.16.255.255
195.137.238.0/23
195.140.136.0/22
213.139.252.0/22
IPv6:
2a00:e98::/32
2a00:eb0::/32
2a01:f8::/32
2a01:100::/32
Signature Algorithm: sha256WithRSAEncryption
7c:00:57:15:eb:91:80:11:de:eb:b8:1e:cd:1c:d5:0b:be:47:
7a:54:cd:c2:08:a8:32:72:4b:5e:eb:c5:f6:58:9a:7a:e8:37:
40:52:6e:3c:57:5a:88:2d:b0:ec:c5:9e:9c:5b:a8:74:cd:f4:
78:2c:f2:07:d6:4d:96:e7:59:47:de:d7:7b:71:3d:1c:88:7c:
4a:33:b7:e7:76:c2:c6:b1:4f:79:46:d7:23:aa:fd:f9:34:33:
12:eb:a4:52:e1:08:37:22:be:78:e6:35:16:a0:a1:4c:75:0b:
f0:3a:81:65:fc:a8:eb:1e:61:b5:24:71:ea:26:46:7b:70:a8:
3a:8c:c5:43:4a:d0:a3:3d:d3:20:84:a1:55:e9:44:60:f1:0b:
62:e0:1d:2d:e3:c5:8b:14:3a:3f:1e:42:21:bf:3f:dc:fc:fe:
44:68:3b:0a:fd:cf:d3:a9:10:6d:8f:0e:16:88:fa:2b:54:c6:
a8:c8:be:76:51:73:4d:e2:bd:ae:b4:70:23:cb:a1:98:a0:e8:
a4:ce:cd:c0:a2:c9:67:38:e2:88:f3:04:56:b7:a2:17:0a:70:
db:76:ab:c6:e3:0f:75:f3:3b:8c:b2:94:cf:4d:8f:b4:f4:03:
19:0d:7a:bd:e7:8f:e2:5a:52:d2:0b:6a:16:84:7e:aa:c5:5d:
e4:2b:39:f0
-----BEGIN CERTIFICATE-----
MIIGGTCCBQGgAwIBAgISAYzFAVK9K4HEus+KKRBCNqMJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NDE3MzhiYWFiOTg4YjFkNjg2OTNiYjA1ZTI5YmZiYjRm
MGY2NzEwHhcNMjQwMTAxMTIzMDQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzMwMWMzMWE0NThlNmM3Y2YzMmVmYWM0MDE0MTIxYmMyZTNhNDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbEArzFIkYh4aPhoSJ1OY0DUFl7c
6uKeYL3pGurNnULt6h0o0naBF02Qg+luGIu2i+P+h2ENFbgt5MP85feYcIkSTdEh
Yq1apKGWu1zSM4okINwKfPQpX2tY6mzPrYQDD12+xV7/HxS16vZXcRTnH6OsLiDM
F2pxYlgU75cyC4pQd7jm2cC4js5RvVtGOQeTZXlxKdDTQ5jc2KI44oc8aM4fQRBs
+i18lo8zhUPZXI8xqz0QX/t05FDuHnK517ByI29qh6U4vdQn51d2bSbJCTqIOHy9
VF6DEtxzYnzyZveM4ai2PHxRGT6CCQ54bDr8Ujv9cXwMS9+KmhEovdIbhQIDAQAB
o4IDJTCCAyEwHQYDVR0OBBYEFEcwHDGkWObHzzLvrEAUEhvC46RmMB8GA1UdIwQY
MBaAFMRBc4uquYix1oaTuwXim/u08PZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUt
NGM5OGQ5YTUxNDA1LzEvUnpBY01hUlk1c2ZQTXUtc1FCUVNHOExqcEdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUtNGM5OGQ5YTUxNDA1
LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBOQYIKwYBBQUHAQcBAf8EggEoMIIBJDCB/QQCAAEwgfYw
CwMDASW6AwQAJboEMAwDBAElugYDBAMluhAwDAMEBU3cYAMEAk3ccAMEA03ceAME
AU6OQDAMAwQCTo5EAwQETo5AMAwDBAVOjmADBAFOjnQwDAMEAU6OegMEB06OADAM
AwQEUV4wAwQAUV42AwQDUV44AwQBW87gAwQCXCoQMAwDBARcP9ADBABcP9QwDAME
AVw/1gMEBVw/wAMEBF25gAMEBF+PUDAMAwQFwxDgAwQAwxDuMAwDBADDEPEDBALD
EPAwDAMEAMMQ9QMEA8MQ8AMEAMMQ+zALAwQAwxD9AwMAwxADBAHDie4DBALDjIgD
BALVi/wwIgQCAAIwHAMFACoADpgDBQAqAA6wAwUAKgEA+AMFACoBAQAwDQYJKoZI
hvcNAQELBQADggEBAHwAVxXrkYAR3uu4Hs0c1Qu+R3pUzcIIqDJyS17rxfZYmnro
N0BSbjxXWogtsOzFnpxbqHTN9Hgs8gfWTZbnWUfe13txPRyIfEozt+d2wsaxT3lG
1yOq/fk0MxLrpFLhCDcivnjmNRagoUx1C/A6gWX8qOseYbUkceomRntwqDqMxUNK
0KM90yCEoVXpRGDxC2LgHS3jxYsUOj8eQiG/P9z8/kRoOwr9z9OpEG2PDhaI+itU
xqjIvnZRc03iva60cCPLoZig6KTOzcCiyWc44ojzBFa3ohcKcNt2q8bjD3XzO4yy
lM9Nj7T0AxkNer3nj+JaUtILahaEfqrFXeQrOfA=
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:06:46 2024 by rpki-client on console-fra.rpki-client.org