Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/cAq_R7zt81FVDSlnGJePpgQM5ok.roa
File: cAq_R7zt81FVDSlnGJePpgQM5ok.roa (raw, json)
Hash identifier: e40ildE+RUYa24E+Bb/vXerVT4gA3SHtzuhgBbS4tuU=
Subject key identifier: 70:0A:BF:47:BC:ED:F3:51:55:0D:29:67:18:97:8F:A6:04:0C:E6:89
Certificate issuer: /CN=c334a35abfa82d549e490704d68bbe658005d63c
Certificate serial: 018CC2DB669C9AF994859A49EF98BAFADBA2
Authority key identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/cAq_R7zt81FVDSlnGJePpgQM5ok.roa
Signing time: Mon 01 Jan 2024 02:30:07 +0000
ROA not before: Mon 01 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21371
IP address blocks: 80.69.0.0/19 maxlen: 19
89.187.96.0/19 maxlen: 19
185.2.164.0/22 maxlen: 22
37.46.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:66:9c:9a:f9:94:85:9a:49:ef:98:ba:fa:db:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c334a35abfa82d549e490704d68bbe658005d63c
Validity
Not Before: Jan 1 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=700abf47bcedf351550d296718978fa6040ce689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:be:8b:04:12:0d:93:da:a6:7c:03:ec:ee:96:
48:75:ad:26:e8:5b:77:03:70:5b:0f:1e:9f:4b:0e:
76:c4:ae:58:65:49:8f:05:e2:48:4f:ed:ca:6e:06:
91:d3:ac:a1:db:1f:22:9e:29:8a:aa:7e:38:8a:ee:
ac:93:58:7e:6b:a5:bd:e9:b8:77:03:56:7e:fc:20:
35:1b:0e:d5:ad:4e:09:54:50:59:9b:be:09:13:e1:
8a:bb:66:fd:1e:a8:6f:12:a5:44:8a:d0:d1:c7:c0:
99:f3:01:c0:80:5e:54:36:37:37:7e:45:a6:57:52:
cd:73:3a:e3:ca:cf:a8:ca:a1:c3:46:52:90:d6:60:
aa:d9:64:88:51:66:04:a5:d2:3d:fc:d5:cc:59:c4:
cf:01:66:48:cc:ac:6b:3d:ed:9f:02:dc:be:31:be:
d6:36:53:a0:be:64:b9:f2:1b:08:ec:94:90:64:17:
3a:ff:71:99:e0:a7:48:68:5f:cd:b6:ed:ef:d6:2b:
ee:45:23:f1:d5:0f:59:45:a5:aa:ff:ab:16:ff:ba:
94:7b:c9:32:02:54:2c:ea:71:92:88:a4:41:c9:4f:
5d:f0:9f:80:28:99:2c:1a:89:01:5f:dc:0b:61:a9:
66:a2:14:a9:0c:97:ac:7e:3a:6f:b0:db:1a:d4:2d:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0A:BF:47:BC:ED:F3:51:55:0D:29:67:18:97:8F:A6:04:0C:E6:89
X509v3 Authority Key Identifier:
keyid:C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/cAq_R7zt81FVDSlnGJePpgQM5ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.0.0/21
80.69.0.0/19
89.187.96.0/19
185.2.164.0/22
Signature Algorithm: sha256WithRSAEncryption
72:75:b9:d5:ae:f9:bb:58:0f:c2:fc:a2:11:09:07:9a:61:f7:
24:30:ed:14:ee:ef:76:12:19:19:e6:be:5e:ba:11:2e:cd:46:
d6:87:11:a5:9e:56:2e:77:98:b4:64:00:84:d1:db:1d:1a:cd:
77:86:4f:f2:25:e8:27:6a:ff:27:8b:4b:93:e4:ff:9a:a7:2e:
59:70:af:34:7d:c9:fb:8e:63:80:43:61:ee:c0:1f:d4:b3:44:
7e:10:e8:9c:bb:74:26:b7:9d:8c:1f:2c:08:da:50:72:bd:3f:
bf:d9:7b:42:16:f9:ed:5e:da:c7:71:44:43:a6:a7:2f:c7:15:
f3:dc:10:a7:70:39:10:a9:62:73:78:60:1d:de:8b:16:ac:ad:
c9:11:7a:d5:f2:c6:a6:ab:66:56:c4:7b:05:ff:1c:fa:99:be:
d8:86:19:51:04:0b:0d:a9:93:71:18:80:79:6c:78:90:88:02:
21:85:28:6d:ae:4f:76:49:f3:61:db:4b:cb:93:e1:15:66:cd:
c1:e3:bb:3c:cb:5d:8e:0f:7d:06:ed:de:4e:15:cc:74:f4:a0:
fd:77:98:86:67:a3:2b:d5:20:f4:77:e0:3b:db:e7:db:82:10:
39:3e:a5:51:cc:31:8d:48:a5:85:06:1b:7c:0e:6c:2b:35:a8:
fd:b2:18:6a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzC22acmvmUhZpJ75i6+tuiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzRhMzVhYmZhODJkNTQ5ZTQ5MDcwNGQ2OGJiZTY1ODAw
NWQ2M2MwHhcNMjQwMTAxMDIzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDBhYmY0N2JjZWRmMzUxNTUwZDI5NjcxODk3OGZhNjA0MGNlNjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj76LBBINk9qmfAPs7pZIda0m6Ft3
A3BbDx6fSw52xK5YZUmPBeJIT+3KbgaR06yh2x8inimKqn44iu6sk1h+a6W96bh3
A1Z+/CA1Gw7VrU4JVFBZm74JE+GKu2b9HqhvEqVEitDRx8CZ8wHAgF5UNjc3fkWm
V1LNczrjys+oyqHDRlKQ1mCq2WSIUWYEpdI9/NXMWcTPAWZIzKxrPe2fAty+Mb7W
NlOgvmS58hsI7JSQZBc6/3GZ4KdIaF/Ntu3v1ivuRSPx1Q9ZRaWq/6sW/7qUe8ky
AlQs6nGSiKRByU9d8J+AKJksGokBX9wLYalmohSpDJesfjpvsNsa1C2w8QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHAKv0e87fNRVQ0pZxiXj6YEDOaJMB8GA1UdIwQY
MBaAFMM0o1q/qC1UnkkHBNaLvmWABdY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pTaldyLW9MVlNlU1FjRTFvdS1aWUFGMWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zOWIwOGQtZWIwMS00M2IwLWI1NmMt
MjczODg0YjUzYzZlLzEvY0FxX1I3enQ4MUZWRFNsbkdKZVBwZ1FNNW9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8zOWIwOGQtZWIwMS00M2IwLWI1NmMtMjczODg0YjUzYzZl
LzEvd3pTaldyLW9MVlNlU1FjRTFvdS1aWUFGMWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDJS4AAwQF
UEUAAwQFWbtgAwQCuQKkMA0GCSqGSIb3DQEBCwUAA4IBAQBydbnVrvm7WA/C/KIR
CQeaYfckMO0U7u92EhkZ5r5euhEuzUbWhxGlnlYud5i0ZACE0dsdGs13hk/yJegn
av8ni0uT5P+apy5ZcK80fcn7jmOAQ2HuwB/Us0R+EOicu3Qmt52MHywI2lByvT+/
2XtCFvntXtrHcURDpqcvxxXz3BCncDkQqWJzeGAd3osWrK3JEXrV8samq2ZWxHsF
/xz6mb7YhhlRBAsNqZNxGIB5bHiQiAIhhShtrk92SfNh20vLk+EVZs3B47s8y12O
D30G7d5OFcx09KD9d5iGZ6Mr1SD0d+A72+fbghA5PqVRzDGNSKWFBht8DmwrNaj9
shhq
-----END CERTIFICATE-----
Generated at Mon Jun 10 20:03:49 2024 by rpki-client on console-ams.rpki-client.org