Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/3I3VwEu_MTTBl6EZYqDWyCIwCbo.roa
File: 3I3VwEu_MTTBl6EZYqDWyCIwCbo.roa (raw, json)
Hash identifier: ZV619QK/anSt7IgVo3SAN69twU8AYmGmcOsVRXH0eGE=
Subject key identifier: DC:8D:D5:C0:4B:BF:31:34:C1:97:A1:19:62:A0:D6:C8:22:30:09:BA
Certificate issuer: /CN=c49c88442ba97345bc0106559e6fa786944adca4
Certificate serial: 018CC348FCC26BA653D5D213D35E62085D6E
Authority key identifier: C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/3I3VwEu_MTTBl6EZYqDWyCIwCbo.roa
Signing time: Mon 01 Jan 2024 04:29:49 +0000
ROA not before: Mon 01 Jan 2024 04:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8749
IP address blocks: 164.138.88.0/21 maxlen: 21
185.3.180.0/22 maxlen: 22
159.253.168.0/21 maxlen: 21
46.183.128.0/22 maxlen: 22
46.183.128.0/21 maxlen: 21
46.183.132.0/23 maxlen: 23
46.183.135.0/24 maxlen: 24
46.183.134.0/24 maxlen: 24
212.19.0.0/19 maxlen: 19
94.125.48.0/21 maxlen: 21
212.19.18.0/24 maxlen: 24
212.19.24.0/24 maxlen: 24
2a00:c040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:fc:c2:6b:a6:53:d5:d2:13:d3:5e:62:08:5d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49c88442ba97345bc0106559e6fa786944adca4
Validity
Not Before: Jan 1 04:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc8dd5c04bbf3134c197a11962a0d6c8223009ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:89:5c:97:e2:50:60:37:f8:f5:d4:53:34:
0d:e3:ee:0d:82:fd:e3:a3:d0:27:d8:76:89:9b:67:
ab:f2:4b:86:30:f8:ca:8b:5c:47:24:1b:e4:79:4d:
f6:29:df:15:db:20:de:2d:df:22:78:d9:e9:bd:45:
4c:a2:99:a9:0f:61:0b:ff:ab:37:df:ec:5b:9c:35:
23:90:02:6b:9c:e7:83:89:f4:29:86:0e:f2:e5:3b:
33:bd:89:1e:88:92:c8:31:5a:6b:fd:ef:b8:94:34:
a6:99:9b:90:1e:90:cb:a6:4b:6e:5d:47:8f:df:c6:
cc:40:18:65:e4:98:e3:21:59:15:8c:f9:0a:f3:00:
13:4b:09:1c:4c:d0:42:b5:41:f1:92:95:b7:03:cd:
20:74:7a:1d:c2:29:bd:9a:da:9b:ef:40:c2:b6:60:
3e:84:19:90:d4:5f:6b:ef:d8:e2:53:3a:61:08:64:
01:cb:73:da:7a:73:8b:f0:b0:45:b5:21:0f:1e:35:
b6:2d:8e:f1:b0:29:0f:04:0a:a7:ae:80:c0:95:ee:
94:b1:44:8b:35:1d:b6:8e:1e:61:2c:90:49:22:6b:
63:31:7b:85:3b:20:3c:7d:71:63:6b:22:3e:38:66:
9b:04:31:47:a6:4e:80:26:75:da:d6:2c:f7:b8:7d:
3e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8D:D5:C0:4B:BF:31:34:C1:97:A1:19:62:A0:D6:C8:22:30:09:BA
X509v3 Authority Key Identifier:
keyid:C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/3I3VwEu_MTTBl6EZYqDWyCIwCbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.128.0/21
94.125.48.0/21
159.253.168.0/21
164.138.88.0/21
185.3.180.0/22
212.19.0.0/19
IPv6:
2a00:c040::/32
Signature Algorithm: sha256WithRSAEncryption
01:44:d9:c4:b1:4d:c4:56:7a:5e:48:3a:c0:39:6b:f1:08:b8:
b5:ac:76:61:a5:98:db:98:01:22:82:8e:97:6e:0d:77:20:b1:
86:39:78:a3:a0:df:f7:2a:de:e2:97:1e:fb:4a:1c:58:e5:e4:
8d:15:f2:8b:35:bc:6b:d2:a5:19:91:0e:84:45:52:47:6f:90:
71:0e:3f:57:96:24:46:79:69:db:c0:cf:cb:95:a1:49:62:24:
af:b2:7e:e8:e5:74:00:cb:f1:1e:4f:3d:88:62:e4:08:46:54:
2d:df:4c:c8:c7:4f:08:58:ad:de:01:a9:30:c1:0d:c7:ca:9e:
48:4f:9e:cc:32:28:60:ce:6b:8d:b0:ee:76:77:ef:ad:da:11:
07:2e:c9:64:e3:e1:14:09:5f:f5:06:6e:64:f0:56:90:cc:fb:
99:4a:19:12:c1:2b:d7:95:f5:10:31:7a:06:d1:61:d6:56:d6:
9b:32:d4:a7:25:0b:b3:7c:41:2d:64:01:0a:f7:f9:2c:93:8a:
61:74:43:e3:6a:c6:8e:bf:ed:03:dd:1e:6f:84:ff:3e:7f:27:
74:7e:d7:3a:40:6f:cd:e6:30:71:50:0a:a3:c3:18:bf:c3:5b:
84:e2:c4:1a:d1:47:0a:c0:2d:bb:4f:85:e8:19:f2:49:38:00:
29:2e:f5:57
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAYzDSPzCa6ZT1dIT015iCF1uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OWM4ODQ0MmJhOTczNDViYzAxMDY1NTllNmZhNzg2OTQ0
YWRjYTQwHhcNMjQwMTAxMDQyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzhkZDVjMDRiYmYzMTM0YzE5N2ExMTk2MmEwZDZjODIyMzAwOWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRuJXJfiUGA3+PXUUzQN4+4Ngv3j
o9An2HaJm2er8kuGMPjKi1xHJBvkeU32Kd8V2yDeLd8ieNnpvUVMopmpD2EL/6s3
3+xbnDUjkAJrnOeDifQphg7y5TszvYkeiJLIMVpr/e+4lDSmmZuQHpDLpktuXUeP
38bMQBhl5JjjIVkVjPkK8wATSwkcTNBCtUHxkpW3A80gdHodwim9mtqb70DCtmA+
hBmQ1F9r79jiUzphCGQBy3PaenOL8LBFtSEPHjW2LY7xsCkPBAqnroDAle6UsUSL
NR22jh5hLJBJImtjMXuFOyA8fXFjayI+OGabBDFHpk6AJnXa1iz3uH0+HQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFNyN1cBLvzE0wZehGWKg1sgiMAm6MB8GA1UdIwQY
MBaAFMSciEQrqXNFvAEGVZ5vp4aUStykMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEp5SVJDdXBjMFc4QVFaVm5tLW5ocFJLM0tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80ZjYxODctYmM2Ny00YWMzLTljOGQt
YTcwZjk5MmE1NTI5LzEvM0kzVndFdV9NVFRCbDZFWllxRFd5Q0l3Q2JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80ZjYxODctYmM2Ny00YWMzLTljOGQtYTcwZjk5MmE1NTI5
LzEveEp5SVJDdXBjMFc4QVFaVm5tLW5ocFJLM0tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDLreAAwQD
Xn0wAwQDn/2oAwQDpIpYAwQCuQO0AwQF1BMAMA0EAgACMAcDBQAqAMBAMA0GCSqG
SIb3DQEBCwUAA4IBAQABRNnEsU3EVnpeSDrAOWvxCLi1rHZhpZjbmAEigo6Xbg13
ILGGOXijoN/3Kt7ilx77ShxY5eSNFfKLNbxr0qUZkQ6ERVJHb5BxDj9XliRGeWnb
wM/LlaFJYiSvsn7o5XQAy/EeTz2IYuQIRlQt30zIx08IWK3eAakwwQ3Hyp5IT57M
MihgzmuNsO52d++t2hEHLslk4+EUCV/1Bm5k8FaQzPuZShkSwSvXlfUQMXoG0WHW
VtabMtSnJQuzfEEtZAEK9/ksk4phdEPjasaOv+0D3R5vhP8+fyd0ftc6QG/N5jBx
UAqjwxi/w1uE4sQa0UcKwC27T4XoGfJJOAApLvVX
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:08:50 2024 by rpki-client on console-fra.rpki-client.org