Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Fvi2go5BtKoqDAgxR3Db_N_-O7E.roa
File: Fvi2go5BtKoqDAgxR3Db_N_-O7E.roa (raw, json)
Hash identifier: iMXqiaJcDxvJ6b8IVjZ6gLvmzauWZLsfHBFMWe6DRtM=
Subject key identifier: 16:F8:B6:82:8E:41:B4:AA:2A:0C:08:31:47:70:DB:FC:DF:FE:3B:B1
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0192F09DBA91C86041C65AAB3DCFDF576142
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Fvi2go5BtKoqDAgxR3Db_N_-O7E.roa
Signing time: Sun 03 Nov 2024 06:02:01 +0000
ROA not before: Sun 03 Nov 2024 06:02:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 5.182.186.0/24 maxlen: 24
5.182.187.0/24 maxlen: 24
5.182.193.0/24 maxlen: 24
5.182.194.0/24 maxlen: 24
5.182.195.0/24 maxlen: 24
5.182.198.0/24 maxlen: 24
31.132.54.0/23 maxlen: 23
45.248.54.0/24 maxlen: 24
63.246.129.0/24 maxlen: 24
63.246.130.0/24 maxlen: 24
63.246.131.0/24 maxlen: 24
63.246.132.0/24 maxlen: 24
63.246.133.0/24 maxlen: 24
63.246.137.0/24 maxlen: 24
63.246.144.0/24 maxlen: 24
63.246.148.0/24 maxlen: 24
63.246.150.0/24 maxlen: 24
63.246.151.0/24 maxlen: 24
63.246.152.0/24 maxlen: 24
63.246.158.0/24 maxlen: 24
63.246.159.0/24 maxlen: 24
78.31.204.0/24 maxlen: 24
78.31.206.0/24 maxlen: 24
94.154.170.0/24 maxlen: 24
103.216.197.0/24 maxlen: 24
149.126.13.0/24 maxlen: 24
162.218.88.0/24 maxlen: 24
162.218.89.0/24 maxlen: 24
185.52.137.0/24 maxlen: 24
185.201.40.0/24 maxlen: 24
185.201.41.0/24 maxlen: 24
185.201.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f0:9d:ba:91:c8:60:41:c6:5a:ab:3d:cf:df:57:61:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Nov 3 06:02:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16f8b6828e41b4aa2a0c08314770dbfcdffe3bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:f8:89:d4:ae:f6:2a:e8:18:98:82:f6:90:
af:b3:be:4f:62:0f:93:ab:80:0e:01:ea:a8:11:bb:
cd:20:b7:36:3c:9a:43:a6:6f:80:4c:53:32:a8:f8:
fa:d5:5d:59:a0:4b:2f:13:8b:8e:e8:ce:a7:ca:da:
b7:88:7b:4e:30:aa:96:a3:66:5e:f9:a8:b3:05:81:
05:9e:a0:c8:90:9b:1d:c6:97:fa:0c:e5:ec:4d:09:
f5:31:8b:e0:27:85:26:0b:bd:c0:94:5a:78:c6:39:
fc:6c:2d:95:d1:fd:d0:97:99:01:1a:09:0a:33:f8:
74:23:45:25:9a:db:98:40:b7:70:86:fa:ae:eb:1c:
0d:be:43:c7:3f:33:dd:14:64:64:59:0a:79:17:35:
21:8f:aa:56:95:8b:d5:90:85:f1:e2:27:c1:c4:c7:
52:e3:75:f2:1f:5e:b4:74:bf:87:b5:95:ff:31:71:
d5:18:ee:2e:3a:4b:82:a1:c3:3e:83:a8:ee:fa:45:
84:4b:e0:f9:22:f4:92:7b:0b:94:95:9b:6d:94:99:
36:f0:96:cd:01:28:26:5b:eb:36:c6:3f:a0:60:df:
11:45:ed:44:61:74:07:5a:22:98:04:0d:e7:e8:50:
57:f0:a4:3d:40:06:4f:1f:7a:89:36:a4:59:74:b2:
20:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F8:B6:82:8E:41:B4:AA:2A:0C:08:31:47:70:DB:FC:DF:FE:3B:B1
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Fvi2go5BtKoqDAgxR3Db_N_-O7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.186.0/23
5.182.193.0-5.182.195.255
5.182.198.0/24
31.132.54.0/23
45.248.54.0/24
63.246.129.0-63.246.133.255
63.246.137.0/24
63.246.144.0/24
63.246.148.0/24
63.246.150.0-63.246.152.255
63.246.158.0/23
78.31.204.0/24
78.31.206.0/24
94.154.170.0/24
103.216.197.0/24
149.126.13.0/24
162.218.88.0/23
185.52.137.0/24
185.201.40.0/23
185.201.43.0/24
Signature Algorithm: sha256WithRSAEncryption
84:0d:ed:b7:c8:0f:57:22:bf:99:1a:d4:a8:d4:67:3e:8a:20:
51:b3:ed:bb:50:58:f5:98:2e:4c:4b:2b:d6:b7:4d:7a:2b:f1:
04:52:a9:69:c3:36:08:63:11:0c:d8:63:3d:89:95:44:7c:0e:
dd:b4:ed:e8:6c:d0:8f:6f:f7:6b:81:00:04:ca:7a:fe:b6:aa:
cc:35:06:f5:7c:53:cc:5b:07:9c:0f:c6:72:86:06:2b:93:f8:
4a:ab:37:b5:f2:52:7c:67:c7:0b:5a:a7:a8:c6:49:21:e2:32:
b0:d1:c9:e5:1e:3e:2f:fa:0b:fd:9a:3d:45:da:c3:51:a0:ad:
68:54:2b:23:99:de:5d:ce:6f:0e:78:d5:8e:c4:45:51:cb:9f:
58:e2:89:46:b2:71:ef:90:78:67:44:dd:79:ba:8f:8b:d0:18:
5a:05:75:8b:15:e2:27:2f:b4:01:ac:15:b4:a4:b8:96:47:0e:
25:bb:b9:ff:c5:4b:f8:b4:eb:3b:10:ae:46:19:37:94:f3:5b:
9b:26:93:19:1f:bd:53:87:1c:79:30:9e:d7:3e:e3:a9:09:1c:
d7:6c:0b:b7:5d:0a:b0:20:9b:9c:e9:aa:e1:65:88:66:4c:90:
30:d5:0e:ac:aa:11:e8:f9:6f:88:18:6b:41:86:f4:a4:80:9b:
80:37:7a:31
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgISAZLwnbqRyGBBxlqrPc/fV2FCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjQxMTAzMDYwMjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmY4YjY4MjhlNDFiNGFhMmEwYzA4MzE0NzcwZGJmY2RmZmUzYmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/34idSu9iroGJiC9pCvs75PYg+T
q4AOAeqoEbvNILc2PJpDpm+ATFMyqPj61V1ZoEsvE4uO6M6nytq3iHtOMKqWo2Ze
+aizBYEFnqDIkJsdxpf6DOXsTQn1MYvgJ4UmC73AlFp4xjn8bC2V0f3Ql5kBGgkK
M/h0I0UlmtuYQLdwhvqu6xwNvkPHPzPdFGRkWQp5FzUhj6pWlYvVkIXx4ifBxMdS
43XyH160dL+HtZX/MXHVGO4uOkuCocM+g6ju+kWES+D5IvSSewuUlZttlJk28JbN
ASgmW+s2xj+gYN8RRe1EYXQHWiKYBA3n6FBX8KQ9QAZPH3qJNqRZdLIgpQIDAQAB
o4ICmDCCApQwHQYDVR0OBBYEFBb4toKOQbSqKgwIMUdw2/zf/juxMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvRnZpMmdvNUJ0S29xREFneFIzRGJfTl8tTzdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBAEF
trowDAMEAAW2wQMEAgW2wAMEAAW2xgMEAR+ENgMEAC34NjAMAwQAP/aBAwQBP/aE
AwQAP/aJAwQAP/aQAwQAP/aUMAwDBAE/9pYDBAA/9pgDBAE/9p4DBABOH8wDBABO
H84DBABemqoDBABn2MUDBACVfg0DBAGi2lgDBAC5NIkDBAG5ySgDBAC5ySswDQYJ
KoZIhvcNAQELBQADggEBAIQN7bfID1civ5ka1KjUZz6KIFGz7btQWPWYLkxLK9a3
TXor8QRSqWnDNghjEQzYYz2JlUR8Dt207ehs0I9v92uBAATKev62qsw1BvV8U8xb
B5wPxnKGBiuT+EqrN7XyUnxnxwtap6jGSSHiMrDRyeUePi/6C/2aPUXaw1GgrWhU
KyOZ3l3Obw541Y7ERVHLn1jiiUayce+QeGdE3Xm6j4vQGFoFdYsV4icvtAGsFbSk
uJZHDiW7uf/FS/i06zsQrkYZN5TzW5smkxkfvVOHHHkwntc+46kJHNdsC7ddCrAg
m5zpquFliGZMkDDVDqyqEej5b4gYa0GG9KSAm4A3ejE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:49:41 2024 by rpki-client on console-fra.rpki-client.org