Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/xe4g2mjE5OdhWMQ3zVUUtErcYV8.roa
File: xe4g2mjE5OdhWMQ3zVUUtErcYV8.roa (raw, json)
Hash identifier: 63HNHO9dwV04E6PbAw2CAVjAe5GcYrWB7WZ1+FpvR9k=
Subject key identifier: C5:EE:20:DA:68:C4:E4:E7:61:58:C4:37:CD:55:14:B4:4A:DC:61:5F
Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial: 01916F06CE863A627077B0D9F8AD207CF4E9
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/xe4g2mjE5OdhWMQ3zVUUtErcYV8.roa
Signing time: Tue 20 Aug 2024 09:03:22 +0000
ROA not before: Tue 20 Aug 2024 09:03:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8468
IP address blocks: 46.254.0.0/21 maxlen: 21
62.249.192.0/18 maxlen: 18
78.32.0.0/15 maxlen: 15
79.143.144.0/20 maxlen: 20
81.31.96.0/19 maxlen: 19
84.45.128.0/17 maxlen: 17
87.127.0.0/16 maxlen: 16
109.224.160.0/19 maxlen: 19
185.220.12.0/22 maxlen: 22
188.39.0.0/16 maxlen: 16
195.74.96.0/19 maxlen: 19
2001:4d48::/29 maxlen: 29
2001:4d48::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6f:06:ce:86:3a:62:70:77:b0:d9:f8:ad:20:7c:f4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Validity
Not Before: Aug 20 09:03:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5ee20da68c4e4e76158c437cd5514b44adc615f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:00:0f:15:fd:d8:47:10:4a:eb:09:e3:2b:
f0:7e:72:63:de:57:ae:cc:f3:b2:5c:6c:9c:45:84:
55:18:b3:1a:96:6b:32:68:ac:be:57:99:cb:46:04:
16:ba:25:47:af:04:53:fc:89:6b:b1:34:66:98:96:
c1:d9:dc:16:40:ed:79:dc:3d:80:4f:4d:f4:21:ba:
b5:02:2f:88:c9:c7:41:f8:5f:c1:5e:e3:f8:60:77:
b2:1a:c4:ae:29:33:53:64:88:b0:e0:00:91:24:a1:
fd:22:41:71:ff:d6:3b:3f:3d:9e:82:c9:8f:3e:81:
f1:98:a7:38:88:77:5f:6e:f5:b3:ff:09:b8:68:f7:
ff:7f:97:e9:3d:d2:53:d1:6a:e6:b2:09:f8:f4:9f:
4a:e0:8d:e4:f8:7f:5d:24:ca:4e:9e:8d:5c:c3:62:
1b:0f:03:e0:cc:a0:be:f2:db:ed:e1:ec:8c:2d:bc:
e0:4f:ed:32:ed:7f:ed:e5:dc:08:1f:28:a6:bd:c1:
c3:d3:e8:5b:63:56:56:ae:4c:28:de:8c:e9:6f:c3:
a3:87:d2:1d:b2:8b:39:2d:42:1e:f9:7e:67:4e:14:
db:6b:60:74:1b:13:04:ac:29:f4:b1:64:2e:c5:64:
e3:0f:20:91:21:56:1a:d8:f5:db:43:5b:48:78:32:
ea:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EE:20:DA:68:C4:E4:E7:61:58:C4:37:CD:55:14:B4:4A:DC:61:5F
X509v3 Authority Key Identifier:
keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/xe4g2mjE5OdhWMQ3zVUUtErcYV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.0.0/21
62.249.192.0/18
78.32.0.0/15
79.143.144.0/20
81.31.96.0/19
84.45.128.0/17
87.127.0.0/16
109.224.160.0/19
185.220.12.0/22
188.39.0.0/16
195.74.96.0/19
IPv6:
2001:4d48::/29
Signature Algorithm: sha256WithRSAEncryption
4b:6d:33:a5:61:f2:a8:16:d7:40:2a:20:60:5a:aa:e8:1f:4a:
a9:eb:b9:ba:57:be:97:92:b1:a7:52:58:69:43:f1:4b:ea:53:
3e:c5:9e:28:5d:19:f3:24:0a:ff:96:f6:91:e4:5f:9a:ba:ef:
92:49:f9:e5:78:c6:46:c7:a4:89:de:f7:49:9b:13:fa:87:dc:
04:4c:f1:28:23:f2:f8:56:95:65:c6:2a:62:97:1b:7f:34:64:
05:85:b1:ae:50:2b:71:fc:d8:2c:7a:3f:95:89:7d:b7:16:9e:
78:f2:56:ca:01:4a:fc:b4:3f:e8:7a:02:04:a2:1e:38:8d:27:
1d:98:a5:d1:20:fe:e8:a5:99:d3:fa:f1:21:f4:cb:b6:08:49:
14:78:da:7e:e0:0b:35:93:4c:88:07:d4:cf:6a:e4:5b:f6:43:
20:ab:e5:15:4b:45:ee:6c:9c:1b:c5:12:da:c6:69:a1:da:e5:
bd:20:29:0d:e4:81:b8:e2:97:a1:3e:b2:5f:f5:95:2b:cd:f4:
73:9e:4f:b6:58:3f:4d:a7:01:b3:f7:2e:df:7f:b4:4c:00:23:
95:f5:9b:6b:31:ff:17:09:bd:19:dd:ca:84:8d:0b:19:5c:7e:
56:e7:00:67:e9:fb:57:80:82:9a:09:01:d1:96:6a:53:96:9a:
1d:99:3b:1f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAZFvBs6GOmJwd7DZ+K0gfPTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNzg5NjNiM2M0ZjJkZDE4N2MyMDQzN2RmMWQ3ZDljMTY4
Y2FiODEwHhcNMjQwODIwMDkwMzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWVlMjBkYTY4YzRlNGU3NjE1OGM0MzdjZDU1MTRiNDRhZGM2MTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYYADxX92EcQSusJ4yvwfnJj3leu
zPOyXGycRYRVGLMalmsyaKy+V5nLRgQWuiVHrwRT/IlrsTRmmJbB2dwWQO153D2A
T030Ibq1Ai+IycdB+F/BXuP4YHeyGsSuKTNTZIiw4ACRJKH9IkFx/9Y7Pz2egsmP
PoHxmKc4iHdfbvWz/wm4aPf/f5fpPdJT0Wrmsgn49J9K4I3k+H9dJMpOno1cw2Ib
DwPgzKC+8tvt4eyMLbzgT+0y7X/t5dwIHyimvcHD0+hbY1ZWrkwo3ozpb8Ojh9Id
sos5LUIe+X5nThTba2B0GxMErCn0sWQuxWTjDyCRIVYa2PXbQ1tIeDLqQwIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFMXuINpoxOTnYVjEN81VFLRK3GFfMB8GA1UdIwQY
MBaAFI94ljs8Ty3Rh8IEN98dfZwWjKuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kYmZjYTEtMmI5NC00ZDBiLTlkZDgt
MWVmOWYyMzE5NTIyLzEveGU0ZzJtakU1T2RoV01RM3pWVVV0RXJjWVY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kYmZjYTEtMmI5NC00ZDBiLTlkZDgtMWVmOWYyMzE5NTIy
LzEvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBFBAIAATA/AwQDLv4AAwQG
PvnAAwMBTiADBARPj5ADBAVRH2ADBAdULYADAwBXfwMEBW3goAMEArncDAMDALwn
AwQFw0pgMA0EAgACMAcDBQMgAU1IMA0GCSqGSIb3DQEBCwUAA4IBAQBLbTOlYfKo
FtdAKiBgWqroH0qp67m6V76XkrGnUlhpQ/FL6lM+xZ4oXRnzJAr/lvaR5F+auu+S
SfnleMZGx6SJ3vdJmxP6h9wETPEoI/L4VpVlxipilxt/NGQFhbGuUCtx/Ngsej+V
iX23Fp548lbKAUr8tD/oegIEoh44jScdmKXRIP7opZnT+vEh9Mu2CEkUeNp+4As1
k0yIB9TPauRb9kMgq+UVS0XubJwbxRLaxmmh2uW9ICkN5IG44pehPrJf9ZUrzfRz
nk+2WD9NpwGz9y7ff7RMACOV9ZtrMf8XCb0Z3cqEjQsZXH5W5wBn6ftXgIKaCQHR
lmpTlpodmTsf
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:20 2024 by rpki-client on console-fra.rpki-client.org