Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/fNUGByqhQLCel-xWk2YnUOHHt3I.roa
File: fNUGByqhQLCel-xWk2YnUOHHt3I.roa (raw, json)
Hash identifier: LDipJjfiEa3sKyR2TJ2auQ5PMAJuWXSBtcbiiQwaz1Q=
Subject key identifier: 7C:D5:06:07:2A:A1:40:B0:9E:97:EC:56:93:66:27:50:E1:C7:B7:72
Certificate issuer: /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial: 018F4E293E71D69F63288CFA7C8C28C55CC1
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/fNUGByqhQLCel-xWk2YnUOHHt3I.roa
Signing time: Mon 06 May 2024 13:47:56 +0000
ROA not before: Mon 06 May 2024 13:47:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13110
IP address blocks: 46.228.80.0/20 maxlen: 20
46.238.64.0/18 maxlen: 18
62.21.0.0/17 maxlen: 17
77.65.0.0/17 maxlen: 17
80.87.32.0/20 maxlen: 20
85.221.128.0/17 maxlen: 17
88.151.136.0/21 maxlen: 21
94.127.104.0/21 maxlen: 21
109.173.128.0/17 maxlen: 17
151.249.80.0/21 maxlen: 21
185.14.72.0/22 maxlen: 22
185.44.172.0/22 maxlen: 22
195.160.180.0/23 maxlen: 23
2001:4020::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4e:29:3e:71:d6:9f:63:28:8c:fa:7c:8c:28:c5:5c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Validity
Not Before: May 6 13:47:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cd506072aa140b09e97ec5693662750e1c7b772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:81:66:52:8e:ca:86:63:31:ac:a5:d0:51:
c9:cc:62:73:c4:2e:0c:3f:42:a2:0c:87:9a:a2:2d:
6c:83:62:44:cd:74:ae:c8:41:d0:5f:3e:68:d9:08:
ac:71:43:8c:d2:e7:57:24:31:e0:84:2f:cb:a9:78:
b6:73:73:ab:2d:69:5b:a9:c8:11:f6:e7:83:e6:0d:
eb:9f:a2:7a:34:bc:b5:c6:19:cb:4e:2a:f7:2c:70:
23:58:a0:ed:df:8a:06:cb:42:7b:5b:31:94:d1:ac:
58:b9:a9:4c:1b:e7:87:c1:9c:0a:0f:c2:b9:c2:1e:
ea:9d:1a:16:ed:be:cb:df:f3:2d:48:d2:bf:e1:cb:
ae:20:bc:4c:f5:99:bf:f5:7a:90:fe:f7:b6:dc:00:
79:d4:06:38:b7:00:fb:6b:7b:1a:88:d8:80:51:e4:
83:53:95:68:5d:1b:2b:8e:43:18:3e:4f:c9:b0:83:
f6:64:eb:ef:d0:d0:72:4d:58:12:8b:44:21:21:63:
33:c4:79:99:64:14:ad:3f:cc:c6:d3:be:53:a6:61:
fd:98:d5:bd:dd:39:75:e7:d4:03:b1:7f:48:af:4c:
d1:43:42:c0:4e:4d:1d:bf:ee:35:a1:1d:bb:63:14:
ed:c5:a1:cf:61:ac:5c:9e:4f:6b:7a:fe:4d:bb:bf:
4f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D5:06:07:2A:A1:40:B0:9E:97:EC:56:93:66:27:50:E1:C7:B7:72
X509v3 Authority Key Identifier:
keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/fNUGByqhQLCel-xWk2YnUOHHt3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.80.0/20
46.238.64.0/18
62.21.0.0/17
77.65.0.0/17
80.87.32.0/20
85.221.128.0/17
88.151.136.0/21
94.127.104.0/21
109.173.128.0/17
151.249.80.0/21
185.14.72.0/22
185.44.172.0/22
195.160.180.0/23
IPv6:
2001:4020::/32
Signature Algorithm: sha256WithRSAEncryption
28:2d:78:fe:d8:ea:8c:b8:29:87:82:f8:b8:46:a5:a8:d7:02:
fa:bd:0b:5d:31:b6:13:12:63:ee:54:a4:b3:0d:63:4e:fd:d7:
00:cc:57:e9:db:ff:34:67:ef:ee:43:61:d3:92:e3:80:08:85:
ea:03:2f:28:5c:80:84:89:8e:91:ad:e4:d7:31:03:3b:ec:00:
23:b3:29:1b:15:bc:94:1d:c0:20:c5:4d:0c:6b:e2:b6:1d:5e:
13:cd:54:99:ff:56:74:f1:69:0a:47:63:d8:f6:d2:a8:7d:cf:
85:fc:8e:5b:e7:5f:b4:7b:c4:99:e2:c0:69:7f:49:56:9b:ad:
f3:07:03:52:ed:2a:50:68:98:d2:c2:9f:57:31:18:d1:a4:71:
8e:e0:b3:8e:21:63:d9:3f:cc:68:60:02:7d:21:cd:83:a1:70:
c8:f9:48:1c:0e:81:83:b6:c7:ab:25:ab:89:0e:98:4b:c8:a4:
8d:0a:44:5a:32:43:6e:d2:65:51:c7:17:0d:27:58:99:b2:6d:
eb:0b:02:ae:79:75:6a:4a:f6:38:d0:38:97:2a:70:55:fa:03:
a4:e1:6e:a6:b8:7a:4a:00:47:16:bd:1a:53:86:f5:25:d1:eb:
d2:8d:e4:9e:f7:2f:cb:db:d0:90:71:0e:b0:ea:a4:ee:4c:d0:
ea:c0:1c:85
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgISAY9OKT5x1p9jKIz6fIwoxVzBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNmI3YjNlYTYwZWZiNGE1NzlhNGY1ZTIzN2VhN2E4OGQz
YmMwNzgwHhcNMjQwNTA2MTM0NzU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2Q1MDYwNzJhYTE0MGIwOWU5N2VjNTY5MzY2Mjc1MGUxYzdiNzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSqBZlKOyoZjMayl0FHJzGJzxC4M
P0KiDIeaoi1sg2JEzXSuyEHQXz5o2QiscUOM0udXJDHghC/LqXi2c3OrLWlbqcgR
9ueD5g3rn6J6NLy1xhnLTir3LHAjWKDt34oGy0J7WzGU0axYualMG+eHwZwKD8K5
wh7qnRoW7b7L3/MtSNK/4cuuILxM9Zm/9XqQ/ve23AB51AY4twD7a3saiNiAUeSD
U5VoXRsrjkMYPk/JsIP2ZOvv0NByTVgSi0QhIWMzxHmZZBStP8zG075TpmH9mNW9
3Tl159QDsX9Ir0zRQ0LATk0dv+41oR27YxTtxaHPYaxcnk9rev5Nu79PlQIDAQAB
o4ICYDCCAlwwHQYDVR0OBBYEFHzVBgcqoUCwnpfsVpNmJ1Dhx7dyMB8GA1UdIwQY
MBaAFJtrez6mDvtKV5pPXiN+p6iNO8B4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAt
ZTc0ZDhkMWQ0ZTAyLzEvZk5VR0J5cWhRTENlbC14V2syWW5VT0hIdDNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAtZTc0ZDhkMWQ0ZTAy
LzEvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOAwQELuRQAwQG
Lu5AAwQHPhUAAwQHTUEAAwQEUFcgAwQHVd2AAwQDWJeIAwQDXn9oAwQHba2AAwQD
l/lQAwQCuQ5IAwQCuSysAwQBw6C0MA0EAgACMAcDBQAgAUAgMA0GCSqGSIb3DQEB
CwUAA4IBAQAoLXj+2OqMuCmHgvi4RqWo1wL6vQtdMbYTEmPuVKSzDWNO/dcAzFfp
2/80Z+/uQ2HTkuOACIXqAy8oXICEiY6RreTXMQM77AAjsykbFbyUHcAgxU0Ma+K2
HV4TzVSZ/1Z08WkKR2PY9tKofc+F/I5b51+0e8SZ4sBpf0lWm63zBwNS7SpQaJjS
wp9XMRjRpHGO4LOOIWPZP8xoYAJ9Ic2DoXDI+UgcDoGDtserJauJDphLyKSNCkRa
MkNu0mVRxxcNJ1iZsm3rCwKueXVqSvY40DiXKnBV+gOk4W6muHpKAEcWvRpThvUl
0evSjeSe9y/L29CQcQ6w6qTuTNDqwByF
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:43:18 2024 by rpki-client on console-fra.rpki-client.org