Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/_rX0tIrxpOuGMxrlR9lDfUKogVE.roa
File: _rX0tIrxpOuGMxrlR9lDfUKogVE.roa (raw, json)
Hash identifier: oTCgBiCOrIMtosFoJWalGiE/W/HZFO72CWJ5h2cGwHM=
Subject key identifier: FE:B5:F4:B4:8A:F1:A4:EB:86:33:1A:E5:47:D9:43:7D:42:A8:81:51
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 018CC4925079B4A2ACFB1B3B9BBDF35B0C30
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/_rX0tIrxpOuGMxrlR9lDfUKogVE.roa
Signing time: Mon 01 Jan 2024 10:29:32 +0000
ROA not before: Mon 01 Jan 2024 10:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44066
IP address blocks: 212.224.64.0/18 maxlen: 32
185.26.96.0/22 maxlen: 32
84.200.205.0/24 maxlen: 32
194.143.134.0/23 maxlen: 32
185.171.204.0/22 maxlen: 32
79.133.32.0/19 maxlen: 32
159.100.0.0/19 maxlen: 32
84.201.17.0/24 maxlen: 32
84.201.18.0/24 maxlen: 32
37.114.96.0/19 maxlen: 32
194.187.164.0/22 maxlen: 32
84.200.0.0/16 maxlen: 32
82.211.0.0/18 maxlen: 32
31.172.80.0/20 maxlen: 32
82.211.17.0/24 maxlen: 32
84.200.39.0/24 maxlen: 32
84.201.0.0/18 maxlen: 32
2a01:7e0:1fc::/48 maxlen: 48
2a01:7e0::/29 maxlen: 48
2a01:7e0::/32 maxlen: 32
2001:1608::/32 maxlen: 48
2a01:7e0:2f::/48 maxlen: 48
2001:1638::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:50:79:b4:a2:ac:fb:1b:3b:9b:bd:f3:5b:0c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Jan 1 10:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=feb5f4b48af1a4eb86331ae547d9437d42a88151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:83:43:4a:06:69:c0:0e:cc:b9:20:7d:12:0a:
ee:ab:bf:4c:69:2e:87:4a:1b:70:25:b1:a9:5d:bc:
82:d4:24:1b:2d:d3:31:88:32:ec:4d:85:3c:0b:ca:
46:aa:0b:aa:e3:ae:09:24:2d:3c:75:67:bd:a6:22:
99:46:3e:a5:c0:d0:7e:c4:25:2d:a5:54:3b:27:7f:
88:64:8b:ee:d9:75:b8:7e:74:ab:5d:62:4b:7d:87:
e9:f3:d9:60:1c:ae:a1:e2:52:74:89:17:6c:ae:0f:
c5:d1:99:29:dc:c9:dc:bf:9a:30:17:0e:b5:04:05:
f3:66:e4:4e:91:68:56:7a:9a:ab:a2:6f:9b:01:5d:
7d:da:9a:07:6a:51:dc:9c:5f:82:4f:9d:d5:8c:34:
fa:03:a7:fa:51:1b:90:85:4b:47:92:8e:dd:55:6a:
89:e5:57:d4:27:42:39:da:88:05:0d:42:ae:70:60:
e0:e7:04:84:00:e7:3d:75:db:4a:9a:8c:ab:80:2f:
1e:bf:0f:56:f7:cc:18:31:9b:0c:f8:c0:39:d3:98:
06:27:82:2c:36:a7:3e:0c:ab:6d:bc:66:75:16:c7:
34:80:9d:99:23:a6:ac:0e:27:8b:16:d8:08:1a:bf:
ef:c9:a0:9e:65:3b:aa:f0:4b:b1:16:dd:a8:a0:a4:
8b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B5:F4:B4:8A:F1:A4:EB:86:33:1A:E5:47:D9:43:7D:42:A8:81:51
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/_rX0tIrxpOuGMxrlR9lDfUKogVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.80.0/20
37.114.96.0/19
79.133.32.0/19
82.211.0.0/18
84.200.0.0-84.201.63.255
159.100.0.0/19
185.26.96.0/22
185.171.204.0/22
194.143.134.0/23
194.187.164.0/22
212.224.64.0/18
IPv6:
2001:1608::/32
2001:1638::/32
2a01:7e0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:12:ed:27:30:02:c2:e9:a1:21:49:b5:b7:85:a1:ad:e6:64:
f5:12:48:6a:7e:10:ba:5a:d6:1c:50:ad:85:ab:c2:aa:78:0c:
95:57:20:69:f3:8c:f0:9b:44:af:20:c8:68:50:4e:ec:a2:a3:
ce:c8:eb:1f:17:f5:3b:ac:ed:83:ea:15:17:6d:0c:2f:3f:b1:
bb:d7:63:8e:a3:91:ff:0e:76:a1:28:90:30:e8:5c:0e:d2:45:
6d:71:89:8a:e0:4d:89:76:7a:cd:b1:7c:02:fa:b7:02:68:82:
92:ac:b0:c2:bd:db:fd:7e:96:65:de:be:22:14:a6:19:90:44:
a3:aa:b8:41:59:e2:52:18:2f:af:a7:ff:25:d2:4e:8c:0e:46:
19:e6:b9:a2:96:df:26:d5:97:2a:72:4e:2a:6c:2e:17:06:5f:
98:72:46:d8:56:86:3f:91:77:1a:52:17:21:c8:46:58:7b:33:
cb:1b:c2:7d:76:20:89:00:c4:2d:5e:ba:83:c0:a7:d1:48:77:
6d:d1:53:df:66:41:19:ec:75:c7:41:e3:58:7e:b1:f6:24:60:
4d:b0:53:3b:80:ad:81:74:c3:75:99:84:ec:de:d4:44:13:ed:
db:54:0b:3c:a6:ed:04:3e:ba:32:97:ea:99:12:77:e0:20:da:
1d:2c:37:80
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAYzEklB5tKKs+xs7m73zWwwwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWRjNTBhNGI1MjZkZjE4ZThiMGE2NTY1ZDdiOWQ1OGE3
NWQzMTUwHhcNMjQwMTAxMTAyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWI1ZjRiNDhhZjFhNGViODYzMzFhZTU0N2Q5NDM3ZDQyYTg4MTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYNDSgZpwA7MuSB9Egruq79MaS6H
ShtwJbGpXbyC1CQbLdMxiDLsTYU8C8pGqguq464JJC08dWe9piKZRj6lwNB+xCUt
pVQ7J3+IZIvu2XW4fnSrXWJLfYfp89lgHK6h4lJ0iRdsrg/F0Zkp3Mncv5owFw61
BAXzZuROkWhWepqrom+bAV192poHalHcnF+CT53VjDT6A6f6URuQhUtHko7dVWqJ
5VfUJ0I52ogFDUKucGDg5wSEAOc9ddtKmoyrgC8evw9W98wYMZsM+MA505gGJ4Is
Nqc+DKttvGZ1Fsc0gJ2ZI6asDieLFtgIGr/vyaCeZTuq8EuxFt2ooKSLFwIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFP619LSK8aTrhjMa5UfZQ31CqIFRMB8GA1UdIwQY
MBaAFKodxQpLUm3xjosKZWXXudWKddMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMt
MzNkNzI4NDMzYzExLzEvX3JYMHRJcnhwT3VHTXhybFI5bERmVUtvZ1ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMtMzNkNzI4NDMzYzEx
LzEvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBPBAIAATBJAwQEH6xQAwQF
JXJgAwQFT4UgAwQGUtMAMAsDAwNUyAMEBlTJAAMEBZ9kAAMEArkaYAMEArmrzAME
AcKPhgMEAsK7pAMEBtTgQDAbBAIAAjAVAwUAIAEWCAMFACABFjgDBQMqAQfgMA0G
CSqGSIb3DQEBCwUAA4IBAQCcEu0nMALC6aEhSbW3haGt5mT1EkhqfhC6WtYcUK2F
q8KqeAyVVyBp84zwm0SvIMhoUE7soqPOyOsfF/U7rO2D6hUXbQwvP7G712OOo5H/
DnahKJAw6FwO0kVtcYmK4E2JdnrNsXwC+rcCaIKSrLDCvdv9fpZl3r4iFKYZkESj
qrhBWeJSGC+vp/8l0k6MDkYZ5rmilt8m1Zcqck4qbC4XBl+YckbYVoY/kXcaUhch
yEZYezPLG8J9diCJAMQtXrqDwKfRSHdt0VPfZkEZ7HXHQeNYfrH2JGBNsFM7gK2B
dMN1mYTs3tREE+3bVAs8pu0EProyl+qZEnfgINodLDeA
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:42:19 2024 by rpki-client on console-fra.rpki-client.org