Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/b2DQLOmx3GYMm1mPeVMPP2p4Rwk.roa
File: b2DQLOmx3GYMm1mPeVMPP2p4Rwk.roa (raw, json)
Hash identifier: 192JAg20Gr9WmqcmXBx82LHcLuTX8Qq+ablT1kzjs94=
Subject key identifier: 6F:60:D0:2C:E9:B1:DC:66:0C:9B:59:8F:79:53:0F:3F:6A:78:47:09
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 018E421FA6975ADBF9F8859BE2415E641730
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/b2DQLOmx3GYMm1mPeVMPP2p4Rwk.roa
Signing time: Fri 15 Mar 2024 12:39:14 +0000
ROA not before: Fri 15 Mar 2024 12:39:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200845
IP address blocks: 5.187.38.0/24 maxlen: 24
5.187.39.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
95.156.206.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
185.104.60.0/24 maxlen: 24
185.104.61.0/24 maxlen: 24
185.104.153.0/24 maxlen: 24
185.104.154.0/24 maxlen: 24
185.104.155.0/24 maxlen: 24
185.122.186.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
185.157.212.0/24 maxlen: 24
185.157.214.0/24 maxlen: 24
185.157.215.0/24 maxlen: 24
185.161.184.0/24 maxlen: 24
185.188.17.0/24 maxlen: 24
195.181.252.0/24 maxlen: 24
195.181.253.0/24 maxlen: 24
217.61.242.0/24 maxlen: 24
217.61.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:42:1f:a6:97:5a:db:f9:f8:85:9b:e2:41:5e:64:17:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Mar 15 12:39:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f60d02ce9b1dc660c9b598f79530f3f6a784709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:a9:48:bf:07:b9:09:78:21:cc:d6:b8:68:
22:3a:48:81:cd:d7:66:86:7c:8d:51:49:31:b5:df:
88:cc:2b:5b:94:23:35:da:08:04:da:d7:2b:7e:af:
d1:c5:dc:e4:86:4f:f4:9b:d2:2e:d4:22:99:5b:48:
44:f9:55:1f:e6:6b:15:0c:61:e7:62:fb:b4:cc:75:
f8:1a:55:08:1a:9a:17:33:58:a4:31:f5:44:bb:06:
40:f3:11:c0:5b:3d:39:7f:b7:67:16:58:0c:27:66:
90:5e:55:16:23:e0:7b:b9:b2:2e:de:96:fb:c3:bc:
f1:2f:10:aa:5e:0d:cd:d4:66:19:2d:47:29:a0:39:
43:38:ec:7c:a7:be:9e:75:18:a0:c9:18:3a:14:ae:
93:da:b3:db:67:f4:7e:66:09:3c:81:55:0d:f1:8b:
5b:84:80:65:da:ca:78:80:32:71:c4:ec:d4:91:ec:
0f:1b:31:b0:d2:8e:77:83:b7:9b:1b:8f:ef:dd:38:
9d:44:26:ca:b1:e1:87:8d:13:e4:57:1d:bb:10:a8:
99:41:11:c2:f4:5b:70:1c:bf:c3:41:1d:ad:35:a1:
c6:6c:a3:3b:dc:d6:b7:af:e0:83:55:f9:85:79:45:
ee:e2:61:bc:77:68:50:a1:5b:ba:63:5f:00:55:57:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:60:D0:2C:E9:B1:DC:66:0C:9B:59:8F:79:53:0F:3F:6A:78:47:09
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/b2DQLOmx3GYMm1mPeVMPP2p4Rwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.38.0/23
95.156.204.0/22
185.104.60.0/23
185.104.153.0-185.104.155.255
185.122.186.0/23
185.157.212.0/24
185.157.214.0/23
185.161.184.0/24
185.188.17.0/24
195.181.252.0/23
217.61.242.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:fa:f0:51:c7:65:71:87:a3:8f:d6:b9:ff:4b:70:7e:8e:93:
d2:b1:23:de:7d:34:70:05:fb:91:3b:2a:17:88:4b:94:ef:b7:
4b:12:78:eb:1d:7f:65:42:da:36:19:28:b1:9e:d7:bf:33:9d:
36:a5:f8:ff:eb:64:7d:29:de:2b:c4:93:4f:c6:b1:b5:d8:a8:
1c:42:b6:4a:d7:9f:7f:73:09:12:8e:7e:10:ed:16:a9:1f:cd:
0c:a7:d7:a2:de:ae:2c:2e:bb:57:b4:24:53:ef:94:7b:5b:21:
52:0e:db:6d:f9:6c:b0:aa:79:8b:7d:94:5a:69:25:2e:8a:32:
82:d5:b5:c1:89:b7:a9:e3:c4:c7:8a:b4:c8:48:cd:e6:ae:c6:
ef:ae:e2:c6:a6:c8:06:d8:d9:06:c8:dd:20:15:fc:43:3e:90:
d9:ff:16:40:ea:af:25:10:a2:a1:86:1a:aa:3c:ee:79:b1:ff:
d3:f8:e8:94:55:3d:78:72:75:0a:05:b3:29:c2:16:07:9f:f4:
f0:7e:aa:fb:2f:bb:ac:04:63:2d:c2:34:8b:2c:a5:fb:2a:18:
10:19:f1:d3:7c:2f:77:f8:1a:47:37:05:62:26:26:1c:4c:7e:
09:ae:36:f1:84:e6:a0:eb:4c:0d:d3:cf:d0:52:87:4e:ca:3e:
06:1b:89:e4
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAY5CH6aXWtv5+IWb4kFeZBcwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw
ZWY5MDMwHhcNMjQwMzE1MTIzOTE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjYwZDAyY2U5YjFkYzY2MGM5YjU5OGY3OTUzMGYzZjZhNzg0NzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcWpSL8HuQl4IczWuGgiOkiBzddm
hnyNUUkxtd+IzCtblCM12ggE2tcrfq/Rxdzkhk/0m9Iu1CKZW0hE+VUf5msVDGHn
Yvu0zHX4GlUIGpoXM1ikMfVEuwZA8xHAWz05f7dnFlgMJ2aQXlUWI+B7ubIu3pb7
w7zxLxCqXg3N1GYZLUcpoDlDOOx8p76edRigyRg6FK6T2rPbZ/R+Zgk8gVUN8Ytb
hIBl2sp4gDJxxOzUkewPGzGw0o53g7ebG4/v3TidRCbKseGHjRPkVx27EKiZQRHC
9FtwHL/DQR2tNaHGbKM73Na3r+CDVfmFeUXu4mG8d2hQoVu6Y18AVVdLvQIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFG9g0CzpsdxmDJtZj3lTDz9qeEcJMB8GA1UdIwQY
MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt
ZmRmNjYzOGQyYzA0LzEvYjJEUUxPbXgzR1lNbTFtUGVWTVBQMnA0UndrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0
LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQBBbsmAwQC
X5zMAwQBuWg8MAwDBAC5aJkDBAK5aJgDBAG5eroDBAC5ndQDBAG5ndYDBAC5obgD
BAC5vBEDBAHDtfwDBAHZPfIwDQYJKoZIhvcNAQELBQADggEBAE368FHHZXGHo4/W
uf9LcH6Ok9KxI959NHAF+5E7KheIS5Tvt0sSeOsdf2VC2jYZKLGe178znTal+P/r
ZH0p3ivEk0/GsbXYqBxCtkrXn39zCRKOfhDtFqkfzQyn16Leriwuu1e0JFPvlHtb
IVIO2235bLCqeYt9lFppJS6KMoLVtcGJt6njxMeKtMhIzeauxu+u4samyAbY2QbI
3SAV/EM+kNn/FkDqryUQoqGGGqo87nmx/9P46JRVPXhydQoFsynCFgef9PB+qvsv
u6wEYy3CNIsspfsqGBAZ8dN8L3f4Gkc3BWImJhxMfgmuNvGE5qDrTA3Tz9BSh07K
PgYbieQ=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:13 2024 by rpki-client on console-ams.rpki-client.org