Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/RSiB_nvdKk87_Oz46IfDJnnZsqE.roa
File: RSiB_nvdKk87_Oz46IfDJnnZsqE.roa (raw, json)
Hash identifier: Uiesm9FZbLewlZ8TYeu2vSHMXAdS8DSnvAjB6dNvL8A=
Subject key identifier: 45:28:81:FE:7B:DD:2A:4F:3B:FC:EC:F8:E8:87:C3:26:79:D9:B2:A1
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 018CC42470C95E5C573E627B5FF4ED6910B1
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/RSiB_nvdKk87_Oz46IfDJnnZsqE.roa
Signing time: Mon 01 Jan 2024 08:29:31 +0000
ROA not before: Mon 01 Jan 2024 08:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200185
IP address blocks: 89.36.216.0/22 maxlen: 24
94.177.244.0/22 maxlen: 24
86.105.48.0/21 maxlen: 24
217.61.0.0/21 maxlen: 24
89.40.116.0/22 maxlen: 24
89.40.124.0/22 maxlen: 24
194.182.104.0/22 maxlen: 24
94.177.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:70:c9:5e:5c:57:3e:62:7b:5f:f4:ed:69:10:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Jan 1 08:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=452881fe7bdd2a4f3bfcecf8e887c32679d9b2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7f:c4:9d:88:36:3a:c2:e3:f6:37:78:c9:67:
99:0e:76:b1:66:0e:90:c4:be:6c:5c:01:ea:82:31:
a3:e9:29:aa:e7:fb:d5:33:c4:11:7b:82:ce:f7:60:
f4:41:71:bc:65:60:57:26:49:c8:c0:12:a8:24:fb:
e0:2e:9b:c1:c0:6b:2a:5c:64:4f:cc:c4:56:bd:39:
0b:d8:3b:28:43:b7:1c:18:ac:ba:8f:73:4b:12:5e:
fe:9a:ef:49:38:66:c0:d9:f5:21:86:e6:50:94:e1:
57:f0:74:ff:08:f9:3e:9c:d1:aa:37:ac:67:ba:a5:
23:d1:dc:8f:30:3b:90:37:ee:e8:fd:c6:88:ee:9a:
7f:0c:56:55:63:5a:7d:0b:89:ef:7f:61:50:f1:40:
98:d6:09:0c:03:f8:07:25:57:2d:08:50:93:c6:c8:
29:67:36:4b:ae:25:0e:96:33:10:7f:33:f8:80:ed:
f9:60:11:1e:23:7e:a6:b4:3a:9a:fe:49:59:da:0d:
53:0a:ae:1d:fa:15:0c:a6:97:46:e8:e6:75:52:ca:
9a:f6:fd:05:55:2a:b7:dd:d6:d7:76:48:f3:d8:5e:
38:41:ec:a9:4f:df:25:83:12:83:96:0b:24:6e:b1:
38:01:b1:e8:85:e6:64:42:bb:b8:9e:20:37:7c:dd:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:28:81:FE:7B:DD:2A:4F:3B:FC:EC:F8:E8:87:C3:26:79:D9:B2:A1
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/RSiB_nvdKk87_Oz46IfDJnnZsqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.48.0/21
89.36.216.0/22
89.40.116.0/22
89.40.124.0/22
94.177.224.0/21
94.177.244.0/22
194.182.104.0/22
217.61.0.0/21
Signature Algorithm: sha256WithRSAEncryption
31:a6:a9:67:98:e7:d8:a6:52:30:ed:f9:48:39:b3:86:5e:5a:
5e:c2:15:c4:69:4e:3b:a8:c5:87:d2:a2:41:11:c7:06:17:5f:
09:70:d7:5e:08:42:f3:a6:dc:f0:29:53:ce:d2:26:ce:0b:ed:
17:85:fa:52:f4:d4:1b:7c:09:90:cd:34:74:d9:05:7d:bf:8f:
13:63:94:8d:c7:16:31:51:dc:1f:0d:29:48:9e:90:ca:18:93:
6b:92:8f:75:c6:a9:9b:61:fd:fd:93:18:17:ed:ef:3b:6e:ac:
1f:66:75:2a:56:f3:f2:da:13:21:6c:9d:e6:92:95:a3:39:42:
fa:61:0d:10:fc:46:33:07:19:b9:4a:31:20:1e:c3:a1:80:4e:
93:94:8c:62:93:11:f1:10:76:3e:3b:ba:51:bf:0a:c0:80:6c:
b5:e1:1c:fd:bd:d5:8a:30:0b:d1:33:28:95:09:ae:f5:a1:28:
55:8a:c8:84:74:68:e5:a5:b8:11:da:56:40:1b:76:60:4c:68:
63:17:c0:f9:59:61:db:9a:0a:0c:da:5f:5d:98:77:72:35:9c:
8a:09:e6:82:49:fc:76:2c:28:c5:08:09:f5:91:4f:7e:93:21:
30:ce:16:4a:5a:4b:bc:fb:d1:fd:fb:06:31:d5:92:0e:1b:bc:
a0:94:31:10
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYzEJHDJXlxXPmJ7X/TtaRCxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5
Mzg2MWMwHhcNMjQwMTAxMDgyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTI4ODFmZTdiZGQyYTRmM2JmY2VjZjhlODg3YzMyNjc5ZDliMmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn/EnYg2OsLj9jd4yWeZDnaxZg6Q
xL5sXAHqgjGj6Smq5/vVM8QRe4LO92D0QXG8ZWBXJknIwBKoJPvgLpvBwGsqXGRP
zMRWvTkL2DsoQ7ccGKy6j3NLEl7+mu9JOGbA2fUhhuZQlOFX8HT/CPk+nNGqN6xn
uqUj0dyPMDuQN+7o/caI7pp/DFZVY1p9C4nvf2FQ8UCY1gkMA/gHJVctCFCTxsgp
ZzZLriUOljMQfzP4gO35YBEeI36mtDqa/klZ2g1TCq4d+hUMppdG6OZ1Usqa9v0F
VSq33dbXdkjz2F44QeypT98lgxKDlgskbrE4AbHoheZkQru4niA3fN0piwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFEUogf573SpPO/zs+OiHwyZ52bKhMB8GA1UdIwQY
MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt
ODQyNjk0MTJkNTYxLzEvUlNpQl9udmRLazg3X096NDZJZkRKbm5ac3FFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx
LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQDVmkwAwQC
WSTYAwQCWSh0AwQCWSh8AwQDXrHgAwQCXrH0AwQCwrZoAwQD2T0AMA0GCSqGSIb3
DQEBCwUAA4IBAQAxpqlnmOfYplIw7flIObOGXlpewhXEaU47qMWH0qJBEccGF18J
cNdeCELzptzwKVPO0ibOC+0XhfpS9NQbfAmQzTR02QV9v48TY5SNxxYxUdwfDSlI
npDKGJNrko91xqmbYf39kxgX7e87bqwfZnUqVvPy2hMhbJ3mkpWjOUL6YQ0Q/EYz
Bxm5SjEgHsOhgE6TlIxikxHxEHY+O7pRvwrAgGy14Rz9vdWKMAvRMyiVCa71oShV
isiEdGjlpbgR2lZAG3ZgTGhjF8D5WWHbmgoM2l9dmHdyNZyKCeaCSfx2LCjFCAn1
kU9+kyEwzhZKWku8+9H9+wYx1ZIOG7yglDEQ
-----END CERTIFICATE-----
Generated at Sat May 11 16:52:00 2024 by rpki-client on console-fra.rpki-client.org