Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/LFGaVnKrp0ysZxXZxQTyzB7BZQQ.roa
File: LFGaVnKrp0ysZxXZxQTyzB7BZQQ.roa (raw, json)
Hash identifier: 3bcK2bw2UtTFE1cAvjcn9P9AgTHMzemI+WmcDBggyLY=
Subject key identifier: 2C:51:9A:56:72:AB:A7:4C:AC:67:15:D9:C5:04:F2:CC:1E:C1:65:04
Certificate issuer: /CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
Certificate serial: 018CC9BBF09331E8F22C3E054A55EB0D10F7
Authority key identifier: 4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/LFGaVnKrp0ysZxXZxQTyzB7BZQQ.roa
Signing time: Tue 02 Jan 2024 10:33:06 +0000
ROA not before: Tue 02 Jan 2024 10:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212531
IP address blocks: 109.235.64.0/21 maxlen: 21
176.223.128.0/20 maxlen: 20
31.14.176.0/22 maxlen: 22
79.98.24.0/21 maxlen: 21
80.208.224.0/21 maxlen: 21
195.181.240.0/21 maxlen: 21
94.176.232.0/21 maxlen: 21
62.77.152.0/21 maxlen: 21
185.5.52.0/22 maxlen: 22
185.69.52.0/22 maxlen: 22
80.209.224.0/20 maxlen: 20
212.24.96.0/20 maxlen: 20
185.81.164.0/22 maxlen: 22
212.237.232.0/22 maxlen: 22
89.40.0.0/20 maxlen: 20
89.47.160.0/21 maxlen: 21
89.47.172.0/24 maxlen: 24
89.47.173.0/24 maxlen: 24
89.47.174.0/24 maxlen: 24
89.47.175.0/24 maxlen: 24
194.135.80.0/20 maxlen: 20
2a02:7b40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f0:93:31:e8:f2:2c:3e:05:4a:55:eb:0d:10:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
Validity
Not Before: Jan 2 10:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c519a5672aba74cac6715d9c504f2cc1ec16504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:4b:79:b5:67:c0:a7:a4:1f:3c:be:e7:5a:
35:77:f5:5c:29:eb:2e:0c:fa:fd:e1:80:8c:cb:38:
1a:1a:7f:75:d4:7f:7c:43:16:5a:7a:63:03:83:e2:
9b:f4:18:21:12:a2:38:36:9a:6f:e0:eb:46:76:5b:
68:77:5e:2b:4c:97:1f:fc:e1:55:39:9a:37:81:6c:
85:c3:0e:89:55:54:23:d9:ab:6e:ce:5a:7a:70:2b:
0b:72:60:a1:87:0c:2e:58:b5:14:5b:61:cf:89:6a:
82:f4:f4:f2:22:69:b7:97:0e:73:f9:74:61:21:e9:
d3:fa:58:e2:32:34:c6:b4:37:a1:4e:e1:2c:f2:9a:
d7:c6:67:18:40:38:92:57:e5:08:41:a4:8d:a8:43:
74:6a:6d:f3:ac:9c:47:0a:01:42:4c:ea:f2:32:b2:
1e:fe:bf:75:e1:74:85:45:13:3a:cd:58:42:b2:d8:
af:7d:2e:71:60:d3:06:79:2f:73:fc:12:fb:d3:e9:
05:e8:1a:d8:97:41:58:59:9a:11:3a:6b:a9:23:2a:
7a:1b:57:c0:7b:79:e4:60:d0:87:af:81:83:95:cc:
4a:1e:2e:30:74:4f:cd:cb:15:4c:82:3e:93:c0:b6:
94:2d:df:c9:72:ba:33:42:19:4d:50:ab:d6:3c:4d:
7e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:51:9A:56:72:AB:A7:4C:AC:67:15:D9:C5:04:F2:CC:1E:C1:65:04
X509v3 Authority Key Identifier:
keyid:4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/LFGaVnKrp0ysZxXZxQTyzB7BZQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.176.0/22
62.77.152.0/21
79.98.24.0/21
80.208.224.0/21
80.209.224.0/20
89.40.0.0/20
89.47.160.0/21
89.47.172.0/22
94.176.232.0/21
109.235.64.0/21
176.223.128.0/20
185.5.52.0/22
185.69.52.0/22
185.81.164.0/22
194.135.80.0/20
195.181.240.0/21
212.24.96.0/20
212.237.232.0/22
IPv6:
2a02:7b40::/32
Signature Algorithm: sha256WithRSAEncryption
69:17:66:64:30:85:83:5a:70:34:c2:ae:ac:d4:89:e3:e9:05:
b6:b0:a2:0a:bb:b2:cf:ff:7d:17:02:bf:f8:f4:93:09:25:4d:
c7:d3:be:b8:ab:38:49:c2:0b:fe:94:f1:f2:6b:e2:d8:88:a8:
47:a8:c5:79:c5:c6:70:ad:48:42:7c:08:5f:80:fd:67:c4:69:
16:c8:cb:d1:49:aa:09:b9:84:d3:78:ea:41:e0:17:ef:1a:6e:
c3:2c:53:d1:54:7e:26:85:52:58:ca:8b:46:e3:9f:41:ee:eb:
5f:f3:bb:89:6e:03:b3:22:33:a4:58:db:c4:34:c5:41:44:82:
41:d0:98:23:5a:f5:25:0f:a8:2c:e8:51:44:e4:82:c5:88:b6:
24:eb:a8:cd:4e:78:2a:99:ea:4b:e5:96:5f:3c:09:9c:23:31:
92:01:e7:0e:23:c2:2a:bd:bd:1f:c3:1b:81:56:21:a7:1d:26:
42:f7:25:b0:28:70:f7:c5:d3:bb:0b:2a:2b:11:4f:de:85:38:
66:07:4d:67:5c:9b:03:d3:26:a7:53:9c:91:1f:49:8c:42:58:
cf:a8:26:78:34:e2:2d:f0:75:73:61:02:2b:77:0f:0b:0f:57:
7b:38:12:0e:78:0b:20:9b:c5:44:55:ad:4a:11:c9:29:f5:64:
00:e0:43:18
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgISAYzJu/CTMejyLD4FSlXrDRD3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYWU0MmEyN2U3YmMyY2MzNTA3ZWZhN2UzY2JjMjlkMzJl
ZWExMzMwHhcNMjQwMTAyMTAzMzA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzUxOWE1NjcyYWJhNzRjYWM2NzE1ZDljNTA0ZjJjYzFlYzE2NTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1pLebVnwKekHzy+51o1d/VcKesu
DPr94YCMyzgaGn911H98QxZaemMDg+Kb9BghEqI4Nppv4OtGdltod14rTJcf/OFV
OZo3gWyFww6JVVQj2atuzlp6cCsLcmChhwwuWLUUW2HPiWqC9PTyImm3lw5z+XRh
IenT+ljiMjTGtDehTuEs8prXxmcYQDiSV+UIQaSNqEN0am3zrJxHCgFCTOryMrIe
/r914XSFRRM6zVhCstivfS5xYNMGeS9z/BL70+kF6BrYl0FYWZoROmupIyp6G1fA
e3nkYNCHr4GDlcxKHi4wdE/NyxVMgj6TwLaULd/JcrozQhlNUKvWPE1+twIDAQAB
o4ICgTCCAn0wHQYDVR0OBBYEFCxRmlZyq6dMrGcV2cUE8swewWUEMB8GA1UdIwQY
MBaAFEquQqJ+e8LMNQfvp+PLwp0y7qEzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3E1Q29uNTd3c3cxQi0tbjQ4dkNuVEx1b1RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82MmYyNWYtOGIxYi00MTViLTlmYzgt
Y2M5MzVjZDczNjMyLzEvTEZHYVZuS3JwMHlzWnhYWnhRVHl6QjdCWlFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82MmYyNWYtOGIxYi00MTViLTlmYzgtY2M5MzVjZDczNjMy
LzEvU3E1Q29uNTd3c3cxQi0tbjQ4dkNuVEx1b1RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzByBAIAATBsAwQCHw6w
AwQDPk2YAwQDT2IYAwQDUNDgAwQEUNHgAwQEWSgAAwQDWS+gAwQCWS+sAwQDXrDo
AwQDbetAAwQEsN+AAwQCuQU0AwQCuUU0AwQCuVGkAwQEwodQAwQDw7XwAwQE1Bhg
AwQC1O3oMA0EAgACMAcDBQAqAntAMA0GCSqGSIb3DQEBCwUAA4IBAQBpF2ZkMIWD
WnA0wq6s1Inj6QW2sKIKu7LP/30XAr/49JMJJU3H0764qzhJwgv+lPHya+LYiKhH
qMV5xcZwrUhCfAhfgP1nxGkWyMvRSaoJuYTTeOpB4BfvGm7DLFPRVH4mhVJYyotG
459B7utf87uJbgOzIjOkWNvENMVBRIJB0JgjWvUlD6gs6FFE5ILFiLYk66jNTngq
mepL5ZZfPAmcIzGSAecOI8Iqvb0fwxuBViGnHSZC9yWwKHD3xdO7CyorEU/ehThm
B01nXJsD0yanU5yRH0mMQljPqCZ4NOIt8HVzYQIrdw8LD1d7OBIOeAsgm8VEVa1K
Eckp9WQA4EMY
-----END CERTIFICATE-----
Generated at Sat Jun 8 10:12:31 2024 by rpki-client on console-fra.rpki-client.org