Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/mE7PG5h5fV2S7d7VsRZTQN_R1MQ.roa
File: mE7PG5h5fV2S7d7VsRZTQN_R1MQ.roa (raw, json)
Hash identifier: wkfoEcnSqD3sSSOvsZ5AupoylsYnEau+TdfilUoKJkE=
Subject key identifier: 98:4E:CF:1B:98:79:7D:5D:92:ED:DE:D5:B1:16:53:40:DF:D1:D4:C4
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018CC500B0F2437232BFB78B35ABE1EE6E0A
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/mE7PG5h5fV2S7d7VsRZTQN_R1MQ.roa
Signing time: Mon 01 Jan 2024 12:30:05 +0000
ROA not before: Mon 01 Jan 2024 12:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 92.61.109.0/24 maxlen: 24
92.61.106.0/24 maxlen: 24
91.190.187.0/24 maxlen: 24
185.112.240.0/24 maxlen: 24
185.112.243.0/24 maxlen: 24
185.112.242.0/24 maxlen: 24
185.112.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:b0:f2:43:72:32:bf:b7:8b:35:ab:e1:ee:6e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 1 12:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=984ecf1b98797d5d92edded5b1165340dfd1d4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:f5:43:a8:df:fe:76:10:31:df:27:ca:ac:
06:2c:be:6b:ab:ec:00:83:6a:c9:13:2a:ac:05:32:
04:b5:17:d6:3d:57:6e:61:0b:51:54:ca:76:a7:69:
c1:0d:3a:5b:c3:42:49:04:3a:3a:df:ce:c4:cd:e7:
14:de:ea:51:a6:d6:21:ab:bc:ea:21:02:01:03:79:
ba:0c:b8:25:1b:8a:40:0a:2b:b0:fa:98:a2:c0:ad:
e0:fe:cf:ed:d4:ce:0a:66:52:37:42:46:ab:c1:24:
79:50:98:72:ea:71:55:28:02:8b:a4:77:63:e4:c6:
cf:47:a1:e3:cb:9e:78:15:1b:a1:79:73:4a:b1:71:
e5:9e:9d:64:a2:97:f7:e6:5e:22:41:f3:2e:8d:f3:
76:25:e1:d8:fe:f3:5e:13:01:86:08:f0:60:4d:c2:
5b:de:c7:79:d6:4c:37:20:47:18:a4:0c:07:76:8b:
a0:08:33:6c:3a:2e:21:f2:9f:07:dd:37:fa:82:41:
f4:b3:eb:f5:ec:c5:03:84:12:15:48:12:91:ef:d0:
99:ea:ca:f7:bc:2d:5d:0e:b1:1c:d9:dc:aa:23:da:
2e:4a:01:39:45:bd:90:1e:74:22:c2:8e:05:2d:ed:
f0:87:fb:ae:75:b0:a8:db:a4:96:df:6c:d2:ff:a4:
b5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4E:CF:1B:98:79:7D:5D:92:ED:DE:D5:B1:16:53:40:DF:D1:D4:C4
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/mE7PG5h5fV2S7d7VsRZTQN_R1MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.187.0/24
92.61.106.0/24
92.61.109.0/24
185.112.240.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:c7:a8:d6:e5:2c:aa:81:ec:ee:49:45:03:c8:f9:8a:b7:4a:
ad:e0:63:62:45:b5:70:ad:58:c4:ec:48:46:64:b2:5e:e9:b0:
52:89:39:0d:58:5b:b0:29:4e:ee:e2:4d:10:e2:d8:a3:fd:cb:
7e:66:9d:b5:9c:d5:f5:b2:96:67:30:eb:10:b0:77:4b:b8:bf:
6d:76:b2:f1:ce:e4:57:61:43:fc:4e:30:d3:6f:57:e5:f3:1e:
71:3f:1d:27:df:14:0f:53:e8:f0:54:64:31:0b:69:bc:39:bd:
0c:1c:25:0a:dc:b6:6d:10:ee:24:f1:6a:d3:b3:1f:a5:f4:ee:
2a:a0:81:36:90:c5:38:57:93:76:ba:03:f1:17:23:25:1e:66:
c4:ae:df:da:e5:9f:e9:a0:88:83:53:41:ed:e8:a1:d8:a2:2a:
d5:a4:7e:2d:cd:f5:b5:00:8e:e5:d4:58:8f:c6:8d:ff:47:6a:
26:07:27:45:87:cc:84:da:e5:da:4f:02:83:a9:38:30:db:45:
6a:35:a0:05:5a:3b:3b:a6:60:db:e3:3d:42:2f:a3:1f:fa:c0:
46:57:db:10:e0:68:69:eb:31:33:93:05:77:e7:46:d8:06:09:
d4:65:31:fd:79:d2:d8:1d:78:73:bd:66:de:d4:b6:ab:24:6d:
29:a4:55:12
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzFALDyQ3Iyv7eLNavh7m4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjQwMTAxMTIzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODRlY2YxYjk4Nzk3ZDVkOTJlZGRlZDViMTE2NTM0MGRmZDFkNGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPj1Q6jf/nYQMd8nyqwGLL5rq+wA
g2rJEyqsBTIEtRfWPVduYQtRVMp2p2nBDTpbw0JJBDo6387EzecU3upRptYhq7zq
IQIBA3m6DLglG4pACiuw+piiwK3g/s/t1M4KZlI3QkarwSR5UJhy6nFVKAKLpHdj
5MbPR6Hjy554FRuheXNKsXHlnp1kopf35l4iQfMujfN2JeHY/vNeEwGGCPBgTcJb
3sd51kw3IEcYpAwHdougCDNsOi4h8p8H3Tf6gkH0s+v17MUDhBIVSBKR79CZ6sr3
vC1dDrEc2dyqI9ouSgE5Rb2QHnQiwo4FLe3wh/uudbCo26SW32zS/6S1zwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJhOzxuYeX1dku3e1bEWU0Df0dTEMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvbUU3UEc1aDVmVjJTN2Q3VnNSWlRRTl9SMU1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW767AwQA
XD1qAwQAXD1tAwQCuXDwMA0GCSqGSIb3DQEBCwUAA4IBAQC8x6jW5SyqgezuSUUD
yPmKt0qt4GNiRbVwrVjE7EhGZLJe6bBSiTkNWFuwKU7u4k0Q4tij/ct+Zp21nNX1
spZnMOsQsHdLuL9tdrLxzuRXYUP8TjDTb1fl8x5xPx0n3xQPU+jwVGQxC2m8Ob0M
HCUK3LZtEO4k8WrTsx+l9O4qoIE2kMU4V5N2ugPxFyMlHmbErt/a5Z/poIiDU0Ht
6KHYoirVpH4tzfW1AI7l1FiPxo3/R2omBydFh8yE2uXaTwKDqTgw20VqNaAFWjs7
pmDb4z1CL6Mf+sBGV9sQ4Ghp6zEzkwV350bYBgnUZTH9edLYHXhzvWbe1LarJG0p
pFUS
-----END CERTIFICATE-----
Generated at Sat May 4 07:05:44 2024 by rpki-client on console-fra.rpki-client.org