Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/iqrfWo_SUpPXuYFxHGhZWPw6UGw.roa
File: iqrfWo_SUpPXuYFxHGhZWPw6UGw.roa (raw, json)
Hash identifier: eufpJNQBQcxsOEBGs7uNcrQGntWeYAextvO2hXo4ykU=
Subject key identifier: 8A:AA:DF:5A:8F:D2:52:93:D7:B9:81:71:1C:68:59:58:FC:3A:50:6C
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 018CC2DB365B6C0A1B2DEBBDA7CA170C8ABE
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/iqrfWo_SUpPXuYFxHGhZWPw6UGw.roa
Signing time: Mon 01 Jan 2024 02:29:55 +0000
ROA not before: Mon 01 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15962
IP address blocks: 95.105.128.0/18 maxlen: 18
95.105.128.0/17 maxlen: 17
185.50.212.0/22 maxlen: 22
178.143.128.0/17 maxlen: 17
213.151.246.0/24 maxlen: 24
213.151.248.0/24 maxlen: 24
85.237.224.0/19 maxlen: 19
109.230.0.0/18 maxlen: 18
213.151.192.0/18 maxlen: 18
92.52.0.0/18 maxlen: 18
78.141.64.0/18 maxlen: 18
178.143.0.0/17 maxlen: 17
178.143.0.0/16 maxlen: 16
5.178.48.0/20 maxlen: 20
95.105.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:36:5b:6c:0a:1b:2d:eb:bd:a7:ca:17:0c:8a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Jan 1 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8aaadf5a8fd25293d7b981711c685958fc3a506c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:a5:f0:6e:95:80:db:62:88:62:43:a8:27:
8c:35:30:73:f1:d6:ee:d5:3a:70:8e:ce:0c:c9:a6:
d6:00:43:06:af:e3:db:b3:64:5f:cf:41:1e:cd:23:
9f:7c:02:1b:28:c5:3a:b5:d6:82:27:a6:6f:3f:d2:
3c:4a:b5:7e:ac:cb:7b:2c:52:29:7f:1f:be:73:9f:
e0:58:2b:1e:45:a3:1e:15:4a:f4:b4:b9:8a:46:81:
46:5c:b3:a3:38:cb:86:83:27:d2:b9:ae:6b:08:91:
11:a3:3c:31:ea:4d:a4:30:5b:8a:1f:65:46:d9:fd:
fe:5a:fe:fd:d0:6f:70:41:22:97:5f:d4:86:65:71:
71:e8:72:52:67:2b:11:a7:9f:dd:b5:c5:c5:6c:2a:
83:e7:ce:db:96:72:10:91:14:34:14:f2:c6:ba:cc:
ff:56:c7:26:67:b4:ee:d1:dc:07:0b:7e:c8:08:e8:
ec:4e:44:c8:d5:51:0a:09:b7:95:c7:70:b7:01:47:
73:88:1a:be:85:08:8a:2f:94:b4:f0:31:1e:99:4a:
4e:4c:96:a7:4e:36:99:bf:de:0f:82:91:af:1e:eb:
ee:9b:94:fc:1a:16:6e:55:74:ba:2f:23:23:50:10:
d5:39:f8:39:eb:39:c0:77:1e:e9:f4:95:00:43:7e:
bc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AA:DF:5A:8F:D2:52:93:D7:B9:81:71:1C:68:59:58:FC:3A:50:6C
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/iqrfWo_SUpPXuYFxHGhZWPw6UGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.48.0/20
78.141.64.0/18
85.237.224.0/19
92.52.0.0/18
95.105.128.0/17
109.230.0.0/18
178.143.0.0/16
185.50.212.0/22
213.151.192.0/18
Signature Algorithm: sha256WithRSAEncryption
94:65:fb:9d:a9:f1:67:7f:16:86:56:8d:3e:eb:10:6b:13:ba:
6a:00:2e:c9:63:e0:16:2c:8d:1b:09:e8:30:9c:63:15:cc:db:
fb:92:da:ea:98:40:e8:cf:57:44:64:7c:a0:72:f5:af:97:1c:
e7:78:1b:45:b7:21:9e:3b:3f:15:ac:8e:3c:b6:ee:f6:5e:93:
4c:82:6a:fe:a6:5f:24:91:fb:3e:4b:3e:12:1f:ca:8e:fd:ce:
ea:e9:ab:2d:3b:2b:3b:9b:57:f2:e4:89:86:04:e6:36:02:e8:
43:9e:67:ae:28:ef:ef:b5:b6:cb:fb:9c:5c:58:17:8d:45:d8:
75:0e:33:b5:63:da:03:10:cf:2c:40:17:33:e9:cc:76:8a:b0:
00:d9:94:4e:44:92:6a:70:63:04:7d:2a:3d:bb:b3:bb:a4:7f:
c3:6e:9c:e3:73:b9:82:ac:65:21:95:23:8a:78:b6:d2:98:ac:
29:51:17:47:de:4c:66:ff:55:13:7e:38:9d:ee:8a:ae:9e:bb:
88:bf:65:e8:58:e6:4f:fa:18:24:1b:99:52:bb:3d:9f:84:a4:
64:a9:bf:57:5d:07:89:af:58:0d:f2:fc:6b:31:f1:6a:01:6d:
96:34:69:b0:ad:18:d5:30:44:34:0e:bb:12:79:3b:00:94:48:
42:7b:83:e5
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAYzC2zZbbAobLeu9p8oXDIq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMmU3NmU4OTk0YjY2NjEzNzQ4ZTAyMWI1ZjQwMDdmMDFi
NTRkNGYwHhcNMjQwMTAxMDIyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWFhZGY1YThmZDI1MjkzZDdiOTgxNzExYzY4NTk1OGZjM2E1MDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkKl8G6VgNtiiGJDqCeMNTBz8dbu
1Tpwjs4MyabWAEMGr+Pbs2Rfz0EezSOffAIbKMU6tdaCJ6ZvP9I8SrV+rMt7LFIp
fx++c5/gWCseRaMeFUr0tLmKRoFGXLOjOMuGgyfSua5rCJERozwx6k2kMFuKH2VG
2f3+Wv790G9wQSKXX9SGZXFx6HJSZysRp5/dtcXFbCqD587blnIQkRQ0FPLGusz/
VscmZ7Tu0dwHC37ICOjsTkTI1VEKCbeVx3C3AUdziBq+hQiKL5S08DEemUpOTJan
TjaZv94PgpGvHuvum5T8GhZuVXS6LyMjUBDVOfg56znAdx7p9JUAQ368jwIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFIqq31qP0lKT17mBcRxoWVj8OlBsMB8GA1UdIwQY
MBaAFAIuduiZS2ZhN0jgIbX0AH8BtU1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjIt
OTcxYjBjMDY1NDYwLzEvaXFyZldvX1NVcFBYdVlGeEhHaFpXUHc2VUd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjItOTcxYjBjMDY1NDYw
LzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTA7BAIAATA1AwQEBbIwAwQG
To1AAwQFVe3gAwQGXDQAAwQHX2mAAwQGbeYAAwMAso8DBAK5MtQDBAbVl8AwDQYJ
KoZIhvcNAQELBQADggEBAJRl+52p8Wd/FoZWjT7rEGsTumoALslj4BYsjRsJ6DCc
YxXM2/uS2uqYQOjPV0RkfKBy9a+XHOd4G0W3IZ47PxWsjjy27vZek0yCav6mXySR
+z5LPhIfyo79zurpqy07KzubV/LkiYYE5jYC6EOeZ64o7++1tsv7nFxYF41F2HUO
M7Vj2gMQzyxAFzPpzHaKsADZlE5EkmpwYwR9Kj27s7ukf8NunONzuYKsZSGVI4p4
ttKYrClRF0feTGb/VRN+OJ3uiq6eu4i/ZehY5k/6GCQbmVK7PZ+EpGSpv1ddB4mv
WA3y/Gsx8WoBbZY0abCtGNUwRDQOuxJ5OwCUSEJ7g+U=
-----END CERTIFICATE-----
Generated at Sat Jun 15 11:09:12 2024 by rpki-client on console-fra.rpki-client.org