Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/VFz2cnXSJCcHU5Qf5iBO5VHCB9U.roa
File: VFz2cnXSJCcHU5Qf5iBO5VHCB9U.roa (raw, json)
Hash identifier: 2O9hLw0zcozr1s0ldUqZfVGdyOExpaTT1Ss8y8wd0Gc=
Subject key identifier: 54:5C:F6:72:75:D2:24:27:07:53:94:1F:E6:20:4E:E5:51:C2:07:D5
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018CC493818425EAC4E5B71319818E671ED9
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/VFz2cnXSJCcHU5Qf5iBO5VHCB9U.roa
Signing time: Mon 01 Jan 2024 10:30:50 +0000
ROA not before: Mon 01 Jan 2024 10:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 162.218.90.0/24 maxlen: 24
162.218.95.0/24 maxlen: 24
212.60.15.0/24 maxlen: 24
185.205.205.0/24 maxlen: 24
185.253.122.0/24 maxlen: 24
5.182.192.0/24 maxlen: 24
31.132.52.0/24 maxlen: 24
185.187.212.0/24 maxlen: 24
45.67.140.0/24 maxlen: 24
63.246.150.0/24 maxlen: 24
92.249.31.0/24 maxlen: 24
192.145.71.0/24 maxlen: 24
147.78.206.0/24 maxlen: 24
147.78.205.0/24 maxlen: 24
185.230.122.0/24 maxlen: 24
94.154.177.0/24 maxlen: 24
217.197.169.0/24 maxlen: 24
94.154.180.0/23 maxlen: 23
94.154.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 08:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:81:84:25:ea:c4:e5:b7:13:19:81:8e:67:1e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 1 10:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=545cf67275d224270753941fe6204ee551c207d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:21:16:56:af:db:0d:df:67:2c:d6:b0:1b:cd:
49:31:ba:54:24:e4:0c:51:95:63:00:b5:53:d9:3c:
61:57:55:9c:5a:0c:9f:6f:0d:a2:4e:8f:1a:d5:3e:
ea:38:c9:3f:cd:85:36:ba:90:bf:c9:30:49:2f:94:
10:1a:bc:4b:34:60:64:d9:d9:b1:f5:2c:9c:61:12:
a5:ea:c3:04:b7:c9:a4:ba:af:6e:24:03:53:26:93:
1d:e4:f8:bb:14:94:1f:ed:02:b2:3c:3d:6d:8f:b8:
54:39:85:c8:2a:d2:a8:9b:b1:66:f9:75:f8:ea:e6:
87:72:1b:fe:a9:49:dc:fb:54:d0:c4:03:c3:4c:e5:
9e:a7:01:25:9d:9b:0e:26:de:09:c0:a5:59:a8:06:
42:d9:75:05:e6:0b:26:22:14:0f:84:20:dd:1c:7c:
77:6b:10:53:46:28:08:3b:a1:f2:2e:1c:00:b0:c5:
a5:ae:8e:c6:10:59:67:05:ff:45:5a:c9:8a:ee:a5:
ac:26:e7:b4:c0:a9:c2:b1:32:f8:6f:f1:12:28:c6:
e4:01:52:53:c4:fa:b6:7f:67:a8:64:19:29:89:24:
5a:a1:c9:a5:0d:e7:f4:1c:ca:b7:58:be:69:e4:6e:
6c:d4:30:68:78:4e:93:48:76:bb:ec:5b:bc:f0:74:
27:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5C:F6:72:75:D2:24:27:07:53:94:1F:E6:20:4E:E5:51:C2:07:D5
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/VFz2cnXSJCcHU5Qf5iBO5VHCB9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.192.0/24
31.132.52.0/24
45.67.140.0/24
63.246.150.0/24
92.249.31.0/24
94.154.177.0/24
94.154.180.0-94.154.182.255
147.78.205.0-147.78.206.255
162.218.90.0/24
162.218.95.0/24
185.187.212.0/24
185.205.205.0/24
185.230.122.0/24
185.253.122.0/24
192.145.71.0/24
212.60.15.0/24
217.197.169.0/24
Signature Algorithm: sha256WithRSAEncryption
36:42:84:f2:93:3d:a2:19:93:44:95:98:1f:4e:f5:0d:bd:ce:
47:c5:b6:a5:16:94:11:f2:9a:e0:93:b0:fa:20:86:90:38:5f:
60:61:c5:1f:3a:aa:2c:c7:ba:de:d4:b9:cd:8c:e3:df:b3:a7:
b1:fc:3d:ab:f2:05:8c:01:81:8f:8f:3f:5f:ba:c1:3d:ed:72:
a7:f7:df:0d:0b:18:01:ca:0e:24:28:e7:c4:50:22:25:ac:40:
17:eb:d4:b9:d9:13:65:29:22:95:04:8d:5d:c8:0f:d5:07:5c:
aa:ce:77:b9:fd:0c:6b:ed:78:8a:ca:c2:3c:37:cc:e9:87:3d:
cb:3f:6a:3e:ef:0b:28:ab:7e:95:e7:82:c4:d1:ea:44:d8:75:
70:fc:36:05:90:a4:b5:64:20:fc:58:64:29:dd:af:ab:ff:b0:
96:99:04:d6:26:b3:b6:d2:fc:27:5a:70:6c:54:e7:21:14:13:
ba:22:d6:b2:92:c8:aa:a2:71:3b:75:bc:b1:2e:42:a6:a6:75:
ef:a0:8b:18:f9:21:93:8a:e1:e1:e8:2e:af:5d:b4:d4:07:9b:
79:74:97:32:bd:56:d6:3b:67:ab:76:5b:ed:23:3c:f0:6d:8e:
d6:1f:8f:37:31:b7:33:85:70:5c:f6:ee:a8:f0:dc:56:b3:f4:
ed:a5:ce:ea
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgISAYzEk4GEJerE5bcTGYGOZx7ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjQwMTAxMTAzMDUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDVjZjY3Mjc1ZDIyNDI3MDc1Mzk0MWZlNjIwNGVlNTUxYzIwN2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiEWVq/bDd9nLNawG81JMbpUJOQM
UZVjALVT2TxhV1WcWgyfbw2iTo8a1T7qOMk/zYU2upC/yTBJL5QQGrxLNGBk2dmx
9SycYRKl6sMEt8mkuq9uJANTJpMd5Pi7FJQf7QKyPD1tj7hUOYXIKtKom7Fm+XX4
6uaHchv+qUnc+1TQxAPDTOWepwElnZsOJt4JwKVZqAZC2XUF5gsmIhQPhCDdHHx3
axBTRigIO6HyLhwAsMWlro7GEFlnBf9FWsmK7qWsJue0wKnCsTL4b/ESKMbkAVJT
xPq2f2eoZBkpiSRaocmlDef0HMq3WL5p5G5s1DBoeE6TSHa77Fu88HQngQIDAQAB
o4ICezCCAncwHQYDVR0OBBYEFFRc9nJ10iQnB1OUH+YgTuVRwgfVMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvVkZ6MmNuWFNKQ2NIVTVRZjVpQk81VkhDQjlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYDBAAFtsAD
BAAfhDQDBAAtQ4wDBAA/9pYDBABc+R8DBABemrEwDAMEAl6atAMEAF6atjAMAwQA
k07NAwQAk07OAwQAotpaAwQAotpfAwQAubvUAwQAuc3NAwQAueZ6AwQAuf16AwQA
wJFHAwQA1DwPAwQA2cWpMA0GCSqGSIb3DQEBCwUAA4IBAQA2QoTykz2iGZNElZgf
TvUNvc5HxbalFpQR8prgk7D6IIaQOF9gYcUfOqosx7re1LnNjOPfs6ex/D2r8gWM
AYGPjz9fusE97XKn998NCxgByg4kKOfEUCIlrEAX69S52RNlKSKVBI1dyA/VB1yq
zne5/Qxr7XiKysI8N8zphz3LP2o+7wsoq36V54LE0epE2HVw/DYFkKS1ZCD8WGQp
3a+r/7CWmQTWJrO20vwnWnBsVOchFBO6ItayksiqonE7dbyxLkKmpnXvoIsY+SGT
iuHh6C6vXbTUB5t5dJcyvVbWO2erdlvtIzzwbY7WH483MbczhXBc9u6o8NxWs/Tt
pc7q
-----END CERTIFICATE-----
Generated at Thu May 9 14:11:37 2024 by rpki-client on console-ams.rpki-client.org