Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/jz7apMfMwuc83lJSMsDxLNOrBI4.roa
File: jz7apMfMwuc83lJSMsDxLNOrBI4.roa (raw, json)
Hash identifier: 82h9SBM9UGGzxVjeSr6nW485JluqbBLPpM4zMAIFOsk=
Subject key identifier: 8F:3E:DA:A4:C7:CC:C2:E7:3C:DE:52:52:32:C0:F1:2C:D3:AB:04:8E
Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial: 018FED8CF02488B7085198F25486D780DDB9
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/jz7apMfMwuc83lJSMsDxLNOrBI4.roa
Signing time: Thu 06 Jun 2024 12:36:27 +0000
ROA not before: Thu 06 Jun 2024 12:36:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3170
IP address blocks: 83.97.16.0/22 maxlen: 24
91.240.224.0/24 maxlen: 24
185.17.196.0/22 maxlen: 24
185.175.90.0/24 maxlen: 24
188.64.34.0/23 maxlen: 24
188.64.36.0/22 maxlen: 24
193.35.56.0/22 maxlen: 24
193.105.188.0/24 maxlen: 24
194.69.165.0/24 maxlen: 24
195.74.52.0/22 maxlen: 24
195.144.8.0/24 maxlen: 24
195.191.218.0/23 maxlen: 24
2a03:ee40::/32 maxlen: 32
2a07:240::/29 maxlen: 48
2a10:4740::/29 maxlen: 48
2a11:2640::/32 maxlen: 32
2a11:2641::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ed:8c:f0:24:88:b7:08:51:98:f2:54:86:d7:80:dd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
Validity
Not Before: Jun 6 12:36:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f3edaa4c7ccc2e73cde525232c0f12cd3ab048e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:00:c3:d3:0f:a8:8e:17:43:28:9e:96:b0:b4:
63:2f:00:ca:44:0c:a9:42:30:16:09:21:00:4d:e3:
03:ad:fa:b5:a3:a1:4d:f9:16:ae:fb:58:66:f8:b0:
5d:fb:40:b6:99:be:93:34:bb:b5:43:c1:2e:86:56:
72:a9:81:25:4b:b4:06:02:e3:99:01:9a:83:b5:7c:
cc:8f:c5:50:30:a1:56:a4:74:74:14:41:77:fa:83:
b1:b4:d3:43:3b:8c:c3:c3:69:b5:b7:52:db:ab:37:
58:cb:9d:4d:a1:e7:be:f6:7c:a5:23:3b:d0:c5:b4:
af:ee:d7:6a:77:69:79:a8:1c:df:cd:10:3e:c3:a2:
0a:e4:f7:f7:45:fa:4e:80:92:38:53:83:13:ad:b2:
a4:4b:ab:8e:dc:1c:0d:a5:d2:11:9c:94:57:70:e4:
9d:1a:ef:fd:e2:e8:c7:f0:33:ec:27:bc:d6:5c:5d:
fa:46:a4:e4:ce:03:95:e6:55:4a:1b:01:90:62:e5:
31:b5:32:7c:b3:86:f3:67:bb:e4:ab:0c:1b:a4:11:
21:a5:93:db:5c:39:86:80:19:fd:0b:6c:6d:72:82:
0b:c5:8b:2a:51:9f:86:36:55:d8:89:c5:38:c5:5f:
97:2c:44:52:08:23:a5:26:39:80:29:73:4a:62:6a:
55:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3E:DA:A4:C7:CC:C2:E7:3C:DE:52:52:32:C0:F1:2C:D3:AB:04:8E
X509v3 Authority Key Identifier:
keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/jz7apMfMwuc83lJSMsDxLNOrBI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.16.0/22
91.240.224.0/24
185.17.196.0/22
185.175.90.0/24
188.64.34.0-188.64.39.255
193.35.56.0/22
193.105.188.0/24
194.69.165.0/24
195.74.52.0/22
195.144.8.0/24
195.191.218.0/23
IPv6:
2a03:ee40::/32
2a07:240::/29
2a10:4740::/29
2a11:2640::/31
Signature Algorithm: sha256WithRSAEncryption
7d:76:ac:81:0e:c6:72:22:bd:03:04:82:8f:e0:d3:45:8b:bc:
19:35:e1:6f:84:62:47:48:a0:b1:70:48:04:f8:3e:8b:d1:27:
36:5b:34:05:72:23:15:2f:74:92:10:91:fd:ee:63:5a:2a:aa:
be:46:ab:0f:e2:b8:12:f3:66:93:e6:92:ef:7d:90:9b:a4:03:
a8:2d:66:a8:ef:28:5c:62:aa:65:c6:26:e5:e7:71:36:f6:52:
e0:51:03:47:ad:e4:b6:14:a2:4e:2f:b7:cc:76:4b:20:90:13:
7d:84:2b:07:4d:f0:d4:09:dd:b4:e5:db:7a:0f:6b:5b:65:2a:
f2:63:71:71:90:9b:8f:f6:dc:35:fc:1c:31:09:1c:18:dd:70:
d5:65:ab:f7:a2:2c:1f:70:8f:42:9c:ec:b2:38:58:01:7d:a6:
84:ad:bb:ef:30:18:c6:68:51:43:2d:61:3d:50:d1:d7:6a:d4:
4c:d3:c0:a6:b2:9e:79:a1:2e:e3:d5:bb:9b:9f:b0:59:89:d7:
5f:1b:e6:ea:56:54:59:7c:d1:f2:14:f2:16:98:af:07:2b:3c:
a3:1b:7a:5b:b0:e3:8f:87:d1:34:69:f3:1f:a2:b2:07:4c:a9:
40:34:0d:40:1f:d3:e2:51:41:c1:f8:eb:3a:20:a7:8b:08:24:
9b:12:40:be
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgISAY/tjPAkiLcIUZjyVIbXgN25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5
MjFlYzMwHhcNMjQwNjA2MTIzNjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjNlZGFhNGM3Y2NjMmU3M2NkZTUyNTIzMmMwZjEyY2QzYWIwNDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQDD0w+ojhdDKJ6WsLRjLwDKRAyp
QjAWCSEATeMDrfq1o6FN+Rau+1hm+LBd+0C2mb6TNLu1Q8EuhlZyqYElS7QGAuOZ
AZqDtXzMj8VQMKFWpHR0FEF3+oOxtNNDO4zDw2m1t1LbqzdYy51Noee+9nylIzvQ
xbSv7tdqd2l5qBzfzRA+w6IK5Pf3RfpOgJI4U4MTrbKkS6uO3BwNpdIRnJRXcOSd
Gu/94ujH8DPsJ7zWXF36RqTkzgOV5lVKGwGQYuUxtTJ8s4bzZ7vkqwwbpBEhpZPb
XDmGgBn9C2xtcoILxYsqUZ+GNlXYicU4xV+XLERSCCOlJjmAKXNKYmpVDwIDAQAB
o4ICcjCCAm4wHQYDVR0OBBYEFI8+2qTHzMLnPN5SUjLA8SzTqwSOMB8GA1UdIwQY
MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt
YmJhODYwYjI2YzAyLzEvano3YXBNZk13dWM4M2xKU01zRHhMTk9yQkk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy
LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwUAQCAAEwSgMEAlNhEAME
AFvw4AMEArkRxAMEALmvWjAMAwQBvEAiAwQDvEAgAwQCwSM4AwQAwWm8AwQAwkWl
AwQCw0o0AwQAw5AIAwQBw7/aMCIEAgACMBwDBQAqA+5AAwUDKgcCQAMFAyoQR0AD
BQEqESZAMA0GCSqGSIb3DQEBCwUAA4IBAQB9dqyBDsZyIr0DBIKP4NNFi7wZNeFv
hGJHSKCxcEgE+D6L0Sc2WzQFciMVL3SSEJH97mNaKqq+RqsP4rgS82aT5pLvfZCb
pAOoLWao7yhcYqplxibl53E29lLgUQNHreS2FKJOL7fMdksgkBN9hCsHTfDUCd20
5dt6D2tbZSryY3FxkJuP9tw1/BwxCRwY3XDVZav3oiwfcI9CnOyyOFgBfaaErbvv
MBjGaFFDLWE9UNHXatRM08Cmsp55oS7j1bubn7BZiddfG+bqVlRZfNHyFPIWmK8H
KzyjG3pbsOOPh9E0afMforIHTKlANA1AH9PiUUHB+Os6IKeLCCSbEkC+
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:00:44 2024 by rpki-client on console-fra.rpki-client.org