Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/yj6RrKD5Qd7gOljsbKdchzgP-6w.roa
File: yj6RrKD5Qd7gOljsbKdchzgP-6w.roa (raw, json)
Hash identifier: Z7dMkpXCVe0RR/JZnqUZ7EbXGVoZVM2V6RibNXmLOU4=
Subject key identifier: CA:3E:91:AC:A0:F9:41:DE:E0:3A:58:EC:6C:A7:5C:87:38:0F:FB:AC
Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial: 018CC3B715D15201A8E40DDED8D283BA7596
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/yj6RrKD5Qd7gOljsbKdchzgP-6w.roa
Signing time: Mon 01 Jan 2024 06:30:04 +0000
ROA not before: Mon 01 Jan 2024 06:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57172
IP address blocks: 213.152.160.0/19 maxlen: 19
109.202.96.0/24 maxlen: 24
109.202.96.0/21 maxlen: 21
109.202.97.0/24 maxlen: 24
213.152.182.0/24 maxlen: 24
188.95.48.0/21 maxlen: 21
188.95.50.0/24 maxlen: 24
37.123.208.0/24 maxlen: 24
37.123.208.0/23 maxlen: 23
188.95.54.0/24 maxlen: 24
188.95.55.0/24 maxlen: 24
109.232.224.0/21 maxlen: 21
109.232.226.0/24 maxlen: 24
2a00:1678::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:15:d1:52:01:a8:e4:0d:de:d8:d2:83:ba:75:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
Validity
Not Before: Jan 1 06:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca3e91aca0f941dee03a58ec6ca75c87380ffbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:0e:29:d8:59:92:5f:db:4c:50:7a:2b:c5:
8f:32:33:f2:8a:62:37:66:24:aa:9d:00:3f:bd:27:
ee:b4:a5:e5:80:c3:06:4e:84:9e:e7:08:91:2c:05:
b5:e6:b9:47:e1:89:04:18:e1:00:7a:18:ec:5d:41:
00:a0:8e:73:4b:ee:58:fb:80:1d:39:8c:08:c1:af:
be:1c:19:bf:f5:18:b2:ed:ee:44:0c:c9:1c:11:dc:
13:a2:0e:32:c4:ca:a0:89:19:37:3a:80:96:50:32:
3c:17:fd:87:fa:43:fe:3c:66:b6:8c:61:e9:8a:45:
5b:a4:8e:d6:0f:ce:c0:22:2f:ae:26:a7:69:3c:35:
de:33:e7:ad:a6:3d:32:86:2d:7b:e6:fb:5c:f4:f3:
6e:6e:00:c0:7d:69:7b:5f:f1:1d:76:df:b4:ec:64:
dd:0f:c8:20:ff:1c:f6:97:66:6f:bd:01:f9:b3:44:
98:90:f3:05:44:f8:80:c3:47:e1:7e:b3:46:d2:32:
3d:f2:32:77:69:65:ae:cb:ee:41:9b:a2:87:52:b4:
04:51:57:74:16:5a:8b:e4:a5:90:67:98:05:15:fb:
c1:98:ca:7e:70:a6:84:fc:ae:65:c2:75:84:da:de:
60:fa:a4:a9:fa:08:50:22:84:57:b5:43:e3:f4:85:
74:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3E:91:AC:A0:F9:41:DE:E0:3A:58:EC:6C:A7:5C:87:38:0F:FB:AC
X509v3 Authority Key Identifier:
keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/yj6RrKD5Qd7gOljsbKdchzgP-6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.208.0/23
109.202.96.0/21
109.232.224.0/21
188.95.48.0/21
213.152.160.0/19
IPv6:
2a00:1678::/32
Signature Algorithm: sha256WithRSAEncryption
12:61:84:1e:78:61:9a:62:0a:8f:1c:88:55:b2:f3:86:46:2f:
c9:c9:db:ca:e1:69:55:24:c8:bb:f9:70:1b:f2:35:23:4a:6c:
f1:20:26:d2:b2:ca:40:42:20:c4:30:16:4d:9a:26:84:ef:31:
b3:ce:98:20:8b:9d:e3:c9:c1:37:67:db:d7:bb:bc:4e:d1:93:
f5:db:b9:2b:05:d5:e5:a8:2b:56:88:ce:10:fc:ad:c5:20:49:
3a:9b:2b:ad:4c:de:eb:5b:a7:c4:04:52:39:ac:6e:43:cc:95:
5f:c2:f0:e6:7d:9c:a7:99:b5:24:8a:4c:b2:01:8c:28:a2:e1:
00:b1:8a:ee:96:bb:37:95:ed:1e:6c:5d:03:48:74:63:e3:23:
7c:6a:27:05:3d:b5:c0:33:43:af:0f:e4:a2:32:3a:25:d7:9d:
94:67:e4:f0:00:b7:5a:55:d4:ca:58:27:39:c8:a4:72:55:78:
05:da:0f:bf:20:47:7b:fe:b0:3d:53:e0:b9:33:07:03:a6:d9:
c8:73:81:9d:f5:e9:e8:2b:55:58:84:4a:9f:81:10:41:7b:62:
13:b8:86:7b:5c:ea:8e:c9:4a:1c:e6:66:e3:b6:cc:b7:48:bc:
65:60:6a:60:73:1d:33:60:7b:30:22:85:1f:6f:e3:6d:e9:aa:
85:65:5f:db
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYzDtxXRUgGo5A3e2NKDunWWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MjZiMDNjNzE3MTg0YzM2ODA4MTdlNTVlMjQ1NWY4NWQ3
M2E0MTMwHhcNMjQwMTAxMDYzMDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTNlOTFhY2EwZjk0MWRlZTAzYTU4ZWM2Y2E3NWM4NzM4MGZmYmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSIOKdhZkl/bTFB6K8WPMjPyimI3
ZiSqnQA/vSfutKXlgMMGToSe5wiRLAW15rlH4YkEGOEAehjsXUEAoI5zS+5Y+4Ad
OYwIwa++HBm/9Riy7e5EDMkcEdwTog4yxMqgiRk3OoCWUDI8F/2H+kP+PGa2jGHp
ikVbpI7WD87AIi+uJqdpPDXeM+etpj0yhi175vtc9PNubgDAfWl7X/Eddt+07GTd
D8gg/xz2l2ZvvQH5s0SYkPMFRPiAw0fhfrNG0jI98jJ3aWWuy+5Bm6KHUrQEUVd0
FlqL5KWQZ5gFFfvBmMp+cKaE/K5lwnWE2t5g+qSp+ghQIoRXtUPj9IV0hwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFMo+kayg+UHe4DpY7GynXIc4D/usMB8GA1UdIwQY
MBaAFAUmsDxxcYTDaAgX5V4kVfhdc6QTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMt
M2JmMDRhMmE5M2Q4LzEveWo2UnJLRDVRZDdnT2xqc2JLZGNoemdQLTZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMtM2JmMDRhMmE5M2Q4
LzEvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQBJXvQAwQD
bcpgAwQDbejgAwQDvF8wAwQF1ZigMA0EAgACMAcDBQAqABZ4MA0GCSqGSIb3DQEB
CwUAA4IBAQASYYQeeGGaYgqPHIhVsvOGRi/JydvK4WlVJMi7+XAb8jUjSmzxICbS
sspAQiDEMBZNmiaE7zGzzpggi53jycE3Z9vXu7xO0ZP127krBdXlqCtWiM4Q/K3F
IEk6myutTN7rW6fEBFI5rG5DzJVfwvDmfZynmbUkikyyAYwoouEAsYrulrs3le0e
bF0DSHRj4yN8aicFPbXAM0OvD+SiMjol152UZ+TwALdaVdTKWCc5yKRyVXgF2g+/
IEd7/rA9U+C5MwcDptnIc4Gd9enoK1VYhEqfgRBBe2ITuIZ7XOqOyUoc5mbjtsy3
SLxlYGpgcx0zYHswIoUfb+Nt6aqFZV/b
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:22 2024 by rpki-client on console-fra.rpki-client.org