Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/l3E7h3ugtYdRxl3WOTKcZcRlxlQ.roa
File: l3E7h3ugtYdRxl3WOTKcZcRlxlQ.roa (raw, json)
Hash identifier: ZLQ7w5dUnXkuoc7bFtZk0r6qyUA+k6k5qMKbOpF0gjo=
Subject key identifier: 97:71:3B:87:7B:A0:B5:87:51:C6:5D:D6:39:32:9C:65:C4:65:C6:54
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 018DD523793AD0C741C7787B15F48CC02FDB
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/l3E7h3ugtYdRxl3WOTKcZcRlxlQ.roa
Signing time: Fri 23 Feb 2024 08:44:48 +0000
ROA not before: Fri 23 Feb 2024 08:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31034
IP address blocks: 5.249.128.0/19 maxlen: 24
31.11.32.0/21 maxlen: 24
31.14.128.0/20 maxlen: 24
46.37.0.0/19 maxlen: 24
62.149.128.0/17 maxlen: 24
66.71.128.0/18 maxlen: 24
77.81.224.0/20 maxlen: 24
80.73.224.0/21 maxlen: 24
80.211.0.0/16 maxlen: 24
82.192.128.0/19 maxlen: 24
89.36.208.0/22 maxlen: 24
89.46.64.0/20 maxlen: 24
89.46.104.0/21 maxlen: 24
89.46.192.0/21 maxlen: 24
94.177.160.0/19 maxlen: 24
94.177.192.0/18 maxlen: 24
95.110.128.0/17 maxlen: 24
176.107.144.0/21 maxlen: 24
185.56.8.0/22 maxlen: 24
185.58.116.0/22 maxlen: 24
188.213.160.0/20 maxlen: 24
194.182.110.0/23 maxlen: 24
195.231.0.0/17 maxlen: 24
195.231.64.0/20 maxlen: 24
195.231.80.0/21 maxlen: 24
195.231.88.0/21 maxlen: 24
209.227.224.0/20 maxlen: 24
209.227.240.0/20 maxlen: 24
217.61.0.0/18 maxlen: 24
217.61.56.0/21 maxlen: 24
2a00:6d40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d5:23:79:3a:d0:c7:41:c7:78:7b:15:f4:8c:c0:2f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Feb 23 08:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97713b877ba0b58751c65dd639329c65c465c654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fa:2e:80:11:49:ca:f4:03:05:f9:bb:3c:81:
ae:d4:e3:d9:3d:5a:e2:e9:52:bd:e6:70:e5:7d:eb:
21:d0:a4:04:6d:63:87:fc:03:54:1e:6a:43:f4:ad:
a7:bd:22:bd:76:18:78:4c:df:b5:cf:37:8d:11:81:
62:67:7a:76:2a:41:0f:6e:3b:e3:9e:3e:88:79:44:
24:52:5a:86:6b:ef:49:c9:41:ef:30:75:44:3a:d0:
e4:06:b6:61:46:d4:5e:74:b2:0c:34:2d:c9:67:d5:
b0:15:84:89:f3:e0:0f:26:ff:a3:c1:e1:7f:fd:23:
ee:1c:58:ce:f4:84:a3:8a:1e:6d:d9:c1:f0:d7:ca:
c5:fd:47:f4:ec:fe:10:48:0f:3c:41:78:cb:bd:68:
49:22:cb:e2:65:2b:c7:ec:84:fc:7d:f4:00:df:8a:
3b:b6:3a:d6:5b:da:bf:ad:e1:7d:6d:b3:18:77:4c:
e7:2d:ad:cb:29:99:65:92:96:41:b7:43:e3:64:78:
07:6e:68:6c:54:c5:f6:14:c0:4c:8e:df:df:50:46:
91:53:d2:ee:e4:a9:98:22:18:0a:f2:46:b7:33:f2:
c5:86:82:85:4c:89:6d:94:5c:ff:d1:1b:3b:2d:82:
95:74:e0:c3:54:6a:90:94:33:79:5e:47:70:c3:dc:
d6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:71:3B:87:7B:A0:B5:87:51:C6:5D:D6:39:32:9C:65:C4:65:C6:54
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/l3E7h3ugtYdRxl3WOTKcZcRlxlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.128.0/19
31.11.32.0/21
31.14.128.0/20
46.37.0.0/19
62.149.128.0/17
66.71.128.0/18
77.81.224.0/20
80.73.224.0/21
80.211.0.0/16
82.192.128.0/19
89.36.208.0/22
89.46.64.0/20
89.46.104.0/21
89.46.192.0/21
94.177.160.0-94.177.255.255
95.110.128.0/17
176.107.144.0/21
185.56.8.0/22
185.58.116.0/22
188.213.160.0/20
194.182.110.0/23
195.231.0.0/17
209.227.224.0/19
217.61.0.0/18
IPv6:
2a00:6d40::/29
Signature Algorithm: sha256WithRSAEncryption
84:38:df:f9:9b:04:b4:c2:09:6b:fb:17:a9:01:cb:0e:b1:a3:
76:7e:18:6c:f9:93:08:79:bd:80:2d:7a:22:91:38:e9:0f:e5:
1f:26:fe:4c:44:5d:15:01:a2:fc:36:e2:c6:2c:bc:c1:65:a3:
48:88:df:c2:47:84:00:dc:6c:be:4b:65:ec:d8:22:f4:46:b0:
a5:d9:87:5a:01:e4:54:40:b2:e6:56:50:91:e3:db:13:86:d6:
f4:fc:4c:6d:45:eb:28:43:ab:08:65:d6:a7:fe:de:66:5d:0e:
a6:70:12:fe:de:46:8e:d4:be:0f:16:dd:e8:f7:8e:6a:6f:1e:
20:23:0c:43:88:68:10:e7:5e:44:bb:1a:a4:9d:9b:22:83:fc:
f4:d2:84:ce:79:ee:6f:e3:73:81:1b:d1:92:fe:ac:59:65:e2:
dd:b5:83:45:69:d2:20:61:e1:50:61:83:00:40:75:e9:fb:90:
58:f8:00:99:d4:83:d7:e6:69:5b:df:6e:9c:4e:28:8f:fd:51:
4a:c9:b5:c1:be:44:ee:09:d1:bb:1f:db:c4:ea:1b:e0:e8:e4:
a3:71:29:34:a8:75:61:dc:dc:57:67:d4:dd:41:73:e1:80:bc:
6d:e6:35:0c:32:c8:e7:5c:29:92:db:aa:f2:9b:ff:60:a6:a8:
0a:84:81:cc
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgISAY3VI3k60MdBx3h7FfSMwC/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5
Mzg2MWMwHhcNMjQwMjIzMDg0NDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzcxM2I4NzdiYTBiNTg3NTFjNjVkZDYzOTMyOWM2NWM0NjVjNjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/ougBFJyvQDBfm7PIGu1OPZPVri
6VK95nDlfesh0KQEbWOH/ANUHmpD9K2nvSK9dhh4TN+1zzeNEYFiZ3p2KkEPbjvj
nj6IeUQkUlqGa+9JyUHvMHVEOtDkBrZhRtRedLIMNC3JZ9WwFYSJ8+APJv+jweF/
/SPuHFjO9ISjih5t2cHw18rF/Uf07P4QSA88QXjLvWhJIsviZSvH7IT8ffQA34o7
tjrWW9q/reF9bbMYd0znLa3LKZllkpZBt0PjZHgHbmhsVMX2FMBMjt/fUEaRU9Lu
5KmYIhgK8ka3M/LFhoKFTIltlFz/0Rs7LYKVdODDVGqQlDN5Xkdww9zW5QIDAQAB
o4ICrTCCAqkwHQYDVR0OBBYEFJdxO4d7oLWHUcZd1jkynGXEZcZUMB8GA1UdIwQY
MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt
ODQyNjk0MTJkNTYxLzEvbDNFN2gzdWd0WWRSeGwzV09US2NaY1JseGxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx
LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHCBggrBgEFBQcBBwEB/wSBsjCBrzCBnQQCAAEwgZYDBAUF
+YADBAMfCyADBAQfDoADBAUuJQADBAc+lYADBAZCR4ADBARNUeADBANQSeADAwBQ
0wMEBVLAgAMEAlkk0AMEBFkuQAMEA1kuaAMEA1kuwDALAwQFXrGgAwMBXrADBAdf
boADBAOwa5ADBAK5OAgDBAK5OnQDBAS81aADBAHCtm4DBAfD5wADBAXR4+ADBAbZ
PQAwDQQCAAIwBwMFAyoAbUAwDQYJKoZIhvcNAQELBQADggEBAIQ43/mbBLTCCWv7
F6kByw6xo3Z+GGz5kwh5vYAteiKROOkP5R8m/kxEXRUBovw24sYsvMFlo0iI38JH
hADcbL5LZezYIvRGsKXZh1oB5FRAsuZWUJHj2xOG1vT8TG1F6yhDqwhl1qf+3mZd
DqZwEv7eRo7Uvg8W3ej3jmpvHiAjDEOIaBDnXkS7GqSdmyKD/PTShM557m/jc4Eb
0ZL+rFll4t21g0Vp0iBh4VBhgwBAden7kFj4AJnUg9fmaVvfbpxOKI/9UUrJtcG+
RO4J0bsf28TqG+Do5KNxKTSodWHc3Fdn1N1Bc+GAvG3mNQwyyOdcKZLbqvKb/2Cm
qAqEgcw=
-----END CERTIFICATE-----
Generated at Sat May 11 14:00:34 2024 by rpki-client on console-fra.rpki-client.org