Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/ngNMLN1cHJEpMxk7VWISUFedbpg.roa
File: ngNMLN1cHJEpMxk7VWISUFedbpg.roa (raw, json)
Hash identifier: 31Gsm7cNM0AwryRfEUH1yivQZrbsKuJvYAse/z/ksyQ=
Subject key identifier: 9E:03:4C:2C:DD:5C:1C:91:29:33:19:3B:55:62:12:50:57:9D:6E:98
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 018DE48AA6637413D2423D6CCED91868C8BF
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/ngNMLN1cHJEpMxk7VWISUFedbpg.roa
Signing time: Mon 26 Feb 2024 08:31:48 +0000
ROA not before: Mon 26 Feb 2024 08:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42313
IP address blocks: 79.106.0.0/16 maxlen: 16
79.106.0.0/17 maxlen: 17
79.106.0.0/19 maxlen: 19
79.106.0.0/24 maxlen: 24
79.106.32.0/19 maxlen: 19
79.106.37.0/24 maxlen: 24
79.106.42.0/24 maxlen: 24
79.106.48.0/24 maxlen: 24
79.106.50.0/24 maxlen: 24
79.106.56.0/22 maxlen: 22
79.106.64.0/19 maxlen: 19
79.106.64.0/24 maxlen: 24
79.106.77.0/24 maxlen: 24
79.106.84.0/24 maxlen: 24
79.106.90.0/24 maxlen: 24
79.106.94.0/23 maxlen: 23
79.106.95.0/24 maxlen: 24
79.106.96.0/19 maxlen: 19
79.106.101.0/24 maxlen: 24
79.106.102.0/24 maxlen: 24
79.106.103.0/24 maxlen: 24
79.106.104.0/24 maxlen: 24
79.106.107.0/24 maxlen: 24
79.106.117.0/24 maxlen: 24
79.106.118.0/23 maxlen: 23
79.106.120.0/24 maxlen: 24
79.106.122.0/24 maxlen: 24
79.106.123.0/24 maxlen: 24
79.106.124.0/24 maxlen: 24
79.106.125.0/24 maxlen: 24
79.106.126.0/24 maxlen: 24
79.106.127.0/24 maxlen: 24
79.106.128.0/17 maxlen: 17
79.106.128.0/19 maxlen: 19
79.106.160.0/19 maxlen: 19
79.106.162.0/24 maxlen: 24
79.106.173.0/24 maxlen: 24
79.106.176.0/21 maxlen: 21
79.106.192.0/19 maxlen: 19
79.106.194.0/23 maxlen: 23
79.106.195.0/24 maxlen: 24
79.106.196.0/24 maxlen: 24
79.106.204.0/24 maxlen: 24
79.106.205.0/24 maxlen: 24
79.106.207.0/24 maxlen: 24
79.106.209.0/24 maxlen: 24
79.106.210.0/24 maxlen: 24
79.106.211.0/24 maxlen: 24
79.106.214.0/24 maxlen: 24
79.106.215.0/24 maxlen: 24
79.106.218.0/23 maxlen: 23
79.106.220.0/24 maxlen: 24
79.106.224.0/19 maxlen: 19
79.106.228.0/24 maxlen: 24
79.106.229.0/24 maxlen: 24
79.106.230.0/24 maxlen: 24
79.106.232.0/22 maxlen: 22
79.106.240.0/21 maxlen: 21
79.106.240.0/23 maxlen: 23
79.106.242.0/23 maxlen: 23
79.106.244.0/23 maxlen: 23
79.106.246.0/23 maxlen: 23
79.106.254.0/24 maxlen: 24
79.106.255.0/24 maxlen: 24
185.171.144.0/22 maxlen: 22
185.171.144.0/23 maxlen: 23
185.171.146.0/23 maxlen: 23
185.171.146.0/24 maxlen: 24
185.171.147.0/24 maxlen: 24
217.24.240.0/20 maxlen: 20
217.24.240.0/21 maxlen: 21
217.24.248.0/21 maxlen: 21
217.24.248.0/24 maxlen: 24
217.24.254.0/24 maxlen: 24
2a05:fdc0::/29 maxlen: 29
2a05:fdc0::/32 maxlen: 32
2a05:fdc0:1000::/48 maxlen: 48
2a05:fdc0:2100::/40 maxlen: 40
2a05:fdc0:2200::/40 maxlen: 40
2a05:fdc0:2300::/40 maxlen: 40
2a05:fdc0:3100::/40 maxlen: 40
2a05:fdc0:3200::/40 maxlen: 40
2a05:fdc1::/32 maxlen: 32
2a05:fdc2::/32 maxlen: 32
2a05:fdc2:1000::/36 maxlen: 36
2a05:fdc2:2000::/36 maxlen: 36
2a05:fdc2:3000::/36 maxlen: 36
2a05:fdc2:4000::/36 maxlen: 36
2a05:fdc2:5000::/36 maxlen: 36
2a05:fdc2:6000::/36 maxlen: 36
2a05:fdc2:7000::/36 maxlen: 36
2a05:fdc2:8000::/36 maxlen: 36
2a05:fdc2:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e4:8a:a6:63:74:13:d2:42:3d:6c:ce:d9:18:68:c8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Feb 26 08:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e034c2cdd5c1c912933193b55621250579d6e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:51:0d:07:4a:35:14:96:24:b4:94:7a:f6:2c:
2a:b7:f5:ea:93:be:a6:d8:19:bd:68:5e:9a:95:06:
72:6d:3e:f9:14:76:bf:1f:89:56:04:d7:cf:3f:66:
0c:12:3f:e2:12:f4:75:e0:dd:04:ca:51:ab:c3:80:
db:98:5a:33:47:4d:76:4e:cc:7b:10:d0:21:4b:bd:
81:4c:27:0b:35:c6:80:c5:4b:ff:d0:2a:45:c5:24:
07:d5:68:3c:c1:3f:e5:24:bd:cc:3a:7f:58:b6:75:
2e:d8:c8:21:80:4c:8f:2e:de:09:fa:b3:6f:f7:ba:
f9:c3:c2:0b:f0:07:5f:71:da:38:42:5a:34:d8:f8:
e1:b6:9b:7f:8d:dd:58:02:44:b4:14:c9:ce:9f:c1:
c5:f3:d1:57:71:2c:e6:02:ce:4e:16:94:c1:b1:d5:
37:ed:78:74:eb:0e:95:d4:f9:41:2b:d4:79:c3:5d:
ab:64:2f:f3:0e:46:72:2b:d3:31:f0:2d:9c:cb:db:
6c:10:8c:56:09:fc:ff:7f:69:36:0d:71:50:61:26:
08:27:ea:d0:99:c8:81:a4:46:0b:e5:33:b2:9e:66:
38:20:8f:9f:08:7e:f6:6f:7c:28:8f:e2:c3:3d:8a:
1e:70:38:d7:b0:92:4a:d3:4e:63:e8:3d:f6:c0:88:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:03:4C:2C:DD:5C:1C:91:29:33:19:3B:55:62:12:50:57:9D:6E:98
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/ngNMLN1cHJEpMxk7VWISUFedbpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.106.0.0/16
185.171.144.0/22
217.24.240.0/20
IPv6:
2a05:fdc0::/29
Signature Algorithm: sha256WithRSAEncryption
29:25:cd:0f:49:6c:c4:37:28:5c:c0:ee:f2:f5:0e:4d:7b:69:
45:ec:41:e9:f4:5c:f7:0b:f3:5b:b1:fd:f9:6a:5a:63:27:f7:
3b:0b:22:1f:af:5b:9f:7a:57:48:d4:1e:6f:f4:0b:fc:12:16:
8a:8e:af:90:88:f1:97:02:82:eb:27:c4:a9:95:2d:8a:a2:df:
31:27:07:1d:59:bb:c9:16:50:c7:8a:78:7c:04:af:f8:09:bc:
c8:05:f6:9a:20:d8:b9:8a:f5:7d:9f:27:8b:d4:d3:8c:d3:05:
2b:e8:85:ff:68:71:b5:a7:12:62:34:82:26:3f:14:38:01:d4:
86:1b:5a:18:f6:d8:e4:50:52:6c:02:f0:90:58:54:b8:60:1d:
53:a9:c4:7c:1f:37:a1:1b:0b:f5:f3:f8:cc:8b:d1:50:7d:b2:
43:20:c6:b4:33:3c:45:a0:38:c6:87:f1:ad:c5:ed:2c:7d:ad:
f4:f4:28:82:fe:22:31:ab:75:ec:6d:88:15:d3:0d:e9:63:ac:
50:0d:cc:41:fb:24:36:3c:27:bf:78:4e:de:53:fe:29:0c:c6:
b5:f5:cb:32:ba:68:bd:3e:48:a0:4d:bd:fa:1e:55:88:a0:48:
17:29:1c:48:78:89:c5:d3:e8:44:e4:c7:ff:da:12:b9:1a:20:
02:6d:5c:56
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAY3kiqZjdBPSQj1sztkYaMi/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTRlODFkNzJmNTljNjVhMGQxODE0NGExYjI2MDc5ODM1
MzZiNGEwHhcNMjQwMjI2MDgzMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTAzNGMyY2RkNWMxYzkxMjkzMzE5M2I1NTYyMTI1MDU3OWQ2ZTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVENB0o1FJYktJR69iwqt/Xqk76m
2Bm9aF6alQZybT75FHa/H4lWBNfPP2YMEj/iEvR14N0EylGrw4DbmFozR012Tsx7
ENAhS72BTCcLNcaAxUv/0CpFxSQH1Wg8wT/lJL3MOn9YtnUu2MghgEyPLt4J+rNv
97r5w8IL8Adfcdo4Qlo02Pjhtpt/jd1YAkS0FMnOn8HF89FXcSzmAs5OFpTBsdU3
7Xh06w6V1PlBK9R5w12rZC/zDkZyK9Mx8C2cy9tsEIxWCfz/f2k2DXFQYSYIJ+rQ
mciBpEYL5TOynmY4II+fCH72b3woj+LDPYoecDjXsJJK005j6D32wIhU/QIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFJ4DTCzdXByRKTMZO1ViElBXnW6YMB8GA1UdIwQY
MBaAFNeU6B1y9ZxloNGBRKGyYHmDU2tKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mNmExMjQtN2YwMS00ZTQwLWI3OTYt
Y2NhNTJiNjI2ZmNhLzEvbmdOTUxOMWNISkVwTXhrN1ZXSVNVRmVkYnBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mNmExMjQtN2YwMS00ZTQwLWI3OTYtY2NhNTJiNjI2ZmNh
LzEvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwMAT2oDBAK5
q5ADBATZGPAwDQQCAAIwBwMFAyoF/cAwDQYJKoZIhvcNAQELBQADggEBACklzQ9J
bMQ3KFzA7vL1Dk17aUXsQen0XPcL81ux/flqWmMn9zsLIh+vW596V0jUHm/0C/wS
FoqOr5CI8ZcCgusnxKmVLYqi3zEnBx1Zu8kWUMeKeHwEr/gJvMgF9pog2LmK9X2f
J4vU04zTBSvohf9ocbWnEmI0giY/FDgB1IYbWhj22ORQUmwC8JBYVLhgHVOpxHwf
N6EbC/Xz+MyL0VB9skMgxrQzPEWgOMaH8a3F7Sx9rfT0KIL+IjGrdextiBXTDelj
rFANzEH7JDY8J794Tt5T/ikMxrX1yzK6aL0+SKBNvfoeVYigSBcpHEh4icXT6ETk
x//aErkaIAJtXFY=
-----END CERTIFICATE-----
Generated at Fri May 17 18:22:10 2024 by rpki-client on console-ams.rpki-client.org