Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/N-oGwGQ-E3x-SFFmRqfBBeLs3Jc.roa
File: N-oGwGQ-E3x-SFFmRqfBBeLs3Jc.roa (raw, json)
Hash identifier: HvnIwNnzVvTbOYMbsaZFTgN1s2z/DF2jR9qetMtJYyI=
Subject key identifier: 37:EA:06:C0:64:3E:13:7C:7E:48:51:66:46:A7:C1:05:E2:EC:DC:97
Certificate issuer: /CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Certificate serial: 018CC56EDF41651B72A3DDC2E7F2D546D069
Authority key identifier: 1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/N-oGwGQ-E3x-SFFmRqfBBeLs3Jc.roa
Signing time: Mon 01 Jan 2024 14:30:26 +0000
ROA not before: Mon 01 Jan 2024 14:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201035
IP address blocks: 46.253.240.0/23 maxlen: 23
46.253.240.0/24 maxlen: 24
46.253.240.0/20 maxlen: 24
46.253.241.0/24 maxlen: 24
46.253.245.0/24 maxlen: 24
46.253.246.0/23 maxlen: 23
46.253.246.0/24 maxlen: 24
46.253.244.0/22 maxlen: 22
46.253.244.0/23 maxlen: 23
46.253.244.0/24 maxlen: 24
46.253.249.0/24 maxlen: 24
46.253.247.0/24 maxlen: 24
46.253.248.0/24 maxlen: 24
46.253.248.0/23 maxlen: 23
46.253.254.0/24 maxlen: 24
46.253.254.0/23 maxlen: 23
46.253.255.0/24 maxlen: 24
185.209.104.0/22 maxlen: 22
185.209.104.0/23 maxlen: 23
185.209.104.0/24 maxlen: 24
185.209.105.0/24 maxlen: 24
185.209.106.0/23 maxlen: 23
185.209.106.0/24 maxlen: 24
185.209.107.0/24 maxlen: 24
2a04:1c40::/31 maxlen: 31
2a04:1c40::/30 maxlen: 30
2a04:1c40::/29 maxlen: 29
2a04:1c41::/33 maxlen: 33
2a04:1c44::/32 maxlen: 34
2a04:1c47:c000::/34 maxlen: 34
2a04:1c40:c000::/34 maxlen: 34
2a04:1c40::/32 maxlen: 32
2a04:1c40::/33 maxlen: 33
2a04:1c42::/32 maxlen: 32
2a04:1c42::/40 maxlen: 40
2a04:1c42::/34 maxlen: 34
2a04:1c42:4000::/34 maxlen: 34
2a04:1c42:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:df:41:65:1b:72:a3:dd:c2:e7:f2:d5:46:d0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Validity
Not Before: Jan 1 14:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37ea06c0643e137c7e48516646a7c105e2ecdc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:8d:3f:e4:d6:50:d5:9c:dd:ae:94:e5:ae:
9e:3b:d3:d9:bd:09:98:33:d8:09:d4:0f:7b:12:e4:
a0:cd:4b:92:b4:29:cb:3d:e6:4b:44:1b:b6:7d:cf:
7e:81:c1:e8:41:39:1c:5b:f7:2a:57:b4:73:ed:83:
9a:c9:01:cc:ce:73:4c:0e:99:b2:90:14:19:e0:15:
93:08:da:c8:6d:38:1f:89:32:f0:7b:2d:d4:a5:b8:
55:a7:f9:87:35:f0:f5:0e:30:91:c0:de:61:61:0f:
3a:45:0b:41:e9:c9:46:57:03:e1:05:bd:af:09:e1:
68:4c:db:f2:4f:c6:73:e9:94:65:10:41:84:6d:49:
81:7b:84:bb:4d:b1:3b:d9:00:92:4b:a3:f9:94:31:
84:f8:cf:16:d6:21:05:3f:89:7b:cf:8f:b4:31:b5:
77:d2:e7:ec:9c:13:d4:08:8e:fd:0f:eb:48:44:f9:
45:7a:e0:6b:36:8b:e8:67:c1:e1:f8:58:56:f9:03:
93:17:fa:d7:6e:ec:26:0e:f2:70:a6:b6:64:70:9f:
4d:65:6b:a6:39:9d:33:48:28:de:8f:24:69:0b:fa:
8e:50:9f:e6:b1:3f:2d:38:1a:be:f0:ef:5b:ab:2f:
0a:a2:21:75:9a:1d:36:a7:84:32:95:6a:e5:16:b3:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EA:06:C0:64:3E:13:7C:7E:48:51:66:46:A7:C1:05:E2:EC:DC:97
X509v3 Authority Key Identifier:
keyid:1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/N-oGwGQ-E3x-SFFmRqfBBeLs3Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.240.0/20
185.209.104.0/22
IPv6:
2a04:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
a9:1d:74:6d:96:82:7a:36:b8:58:98:c5:8e:8c:c0:1d:8b:61:
42:30:1f:e1:c7:07:79:73:7d:5e:7a:87:25:55:5a:31:ca:c0:
5b:77:99:3a:36:70:40:04:d8:75:25:d3:d2:14:bc:7e:53:99:
76:2c:a4:b2:64:b6:13:e7:70:58:9d:bc:5c:fd:02:89:d4:04:
89:50:1b:d0:0d:a1:a7:1d:7c:91:ef:19:86:ce:e6:74:b8:f5:
c2:2a:a9:39:bb:50:de:14:bd:83:1f:0a:e2:f4:0e:ea:2d:19:
bf:8b:6a:c5:78:06:89:68:e8:7e:a1:71:b9:3d:95:e2:36:7c:
5f:33:9a:0e:c9:c1:be:b8:73:a3:85:36:42:2d:98:a3:ce:a8:
c8:4b:8e:61:a2:be:69:4d:af:52:ef:cb:e2:5e:6a:ad:37:99:
e6:8a:09:ac:82:cb:41:48:66:78:15:df:f4:2f:e0:e8:1b:12:
1e:3f:9c:dc:82:7b:92:d1:9d:0d:41:04:fc:b5:7b:4c:41:fd:
03:9d:db:54:52:8f:cb:4a:05:43:27:73:ea:eb:e0:fb:99:f2:
9d:b1:89:f7:24:54:09:a1:17:91:36:bb:5e:b0:dc:f6:26:10:
b5:35:48:fa:bc:ad:29:5f:2a:82:1a:55:bc:fb:c6:59:5d:33:
6d:55:2a:85
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzFbt9BZRtyo93C5/LVRtBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkOWEwOWM1MTA3ZTdlNDRjYTc4ZGM3MmQ1MTk3MzdlZDNk
ZDMxMWEwHhcNMjQwMTAxMTQzMDI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2VhMDZjMDY0M2UxMzdjN2U0ODUxNjY0NmE3YzEwNWUyZWNkYzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZyNP+TWUNWc3a6U5a6eO9PZvQmY
M9gJ1A97EuSgzUuStCnLPeZLRBu2fc9+gcHoQTkcW/cqV7Rz7YOayQHMznNMDpmy
kBQZ4BWTCNrIbTgfiTLwey3UpbhVp/mHNfD1DjCRwN5hYQ86RQtB6clGVwPhBb2v
CeFoTNvyT8Zz6ZRlEEGEbUmBe4S7TbE72QCSS6P5lDGE+M8W1iEFP4l7z4+0MbV3
0ufsnBPUCI79D+tIRPlFeuBrNovoZ8Hh+FhW+QOTF/rXbuwmDvJwprZkcJ9NZWum
OZ0zSCjejyRpC/qOUJ/msT8tOBq+8O9bqy8KoiF1mh02p4QylWrlFrOLawIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDfqBsBkPhN8fkhRZkanwQXi7NyXMB8GA1UdIwQY
MBaAFB2aCcUQfn5EynjcctUZc37T3TEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFpvSnhSQi1ma1RLZU54eTFSbHpmdFBkTVJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xZjMyNWUtNGRlNy00NzdlLThiNTct
NjMyMGEzNTZlNDM0LzEvTi1vR3dHUS1FM3gtU0ZGbVJxZkJCZUxzM0pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8xZjMyNWUtNGRlNy00NzdlLThiNTctNjMyMGEzNTZlNDM0
LzEvSFpvSnhSQi1ma1RLZU54eTFSbHpmdFBkTVJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQELv3wAwQC
udFoMA0EAgACMAcDBQMqBBxAMA0GCSqGSIb3DQEBCwUAA4IBAQCpHXRtloJ6NrhY
mMWOjMAdi2FCMB/hxwd5c31eeoclVVoxysBbd5k6NnBABNh1JdPSFLx+U5l2LKSy
ZLYT53BYnbxc/QKJ1ASJUBvQDaGnHXyR7xmGzuZ0uPXCKqk5u1DeFL2DHwri9A7q
LRm/i2rFeAaJaOh+oXG5PZXiNnxfM5oOycG+uHOjhTZCLZijzqjIS45hor5pTa9S
78viXmqtN5nmigmsgstBSGZ4Fd/0L+DoGxIeP5zcgnuS0Z0NQQT8tXtMQf0DndtU
Uo/LSgVDJ3Pq6+D7mfKdsYn3JFQJoReRNrtesNz2JhC1NUj6vK0pXyqCGlW8+8ZZ
XTNtVSqF
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:33 2024 by rpki-client on console-fra.rpki-client.org