Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/xJjO5kcTDHaoLrXVlJiQJEapjp8.roa
File: xJjO5kcTDHaoLrXVlJiQJEapjp8.roa (raw, json)
Hash identifier: 3xq/hsOW7yEK6OripsAmkEXoKX9LDwG3rj/54Q1EMrU=
Subject key identifier: C4:98:CE:E6:47:13:0C:76:A8:2E:B5:D5:94:98:90:24:46:A9:8E:9F
Certificate issuer: /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Certificate serial: 018CC5011DE39C5509AD288A9CDF909EF313
Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/xJjO5kcTDHaoLrXVlJiQJEapjp8.roa
Signing time: Mon 01 Jan 2024 12:30:33 +0000
ROA not before: Mon 01 Jan 2024 12:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62167
IP address blocks: 185.44.163.0/24 maxlen: 24
185.44.160.0/24 maxlen: 24
185.44.160.0/22 maxlen: 22
185.44.162.0/24 maxlen: 24
185.44.161.0/24 maxlen: 24
89.107.29.0/24 maxlen: 24
89.107.28.0/24 maxlen: 24
89.107.28.0/22 maxlen: 22
185.163.83.0/24 maxlen: 24
185.163.82.0/23 maxlen: 23
185.163.81.0/24 maxlen: 24
185.163.80.0/22 maxlen: 22
185.163.80.0/24 maxlen: 24
2a01:7520:5::/48 maxlen: 48
2a01:7520::/32 maxlen: 32
2a01:7520::/48 maxlen: 48
2a01:7520:4::/48 maxlen: 48
2a01:7520:2::/48 maxlen: 48
2a01:7520:8::/48 maxlen: 48
2a01:7520:3::/48 maxlen: 48
2a01:7520:6::/48 maxlen: 48
2a01:7520:1::/48 maxlen: 48
2a01:7520:7::/48 maxlen: 48
2a0b:5800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:1d:e3:9c:55:09:ad:28:8a:9c:df:90:9e:f3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Validity
Not Before: Jan 1 12:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c498cee647130c76a82eb5d59498902446a98e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:09:39:a7:5a:df:72:35:ee:43:f0:5d:fc:1f:
1c:fb:a1:95:c6:fa:1d:ce:63:3f:1b:f6:a7:ee:a6:
79:3f:90:ea:be:20:97:50:a3:89:af:af:6b:b8:3c:
bc:73:5b:09:11:a0:d8:26:ad:b4:9a:ff:b6:72:4a:
9f:9c:9a:2f:5d:9c:33:b1:4d:38:48:99:7a:a6:6c:
66:2e:17:1e:54:f1:f2:95:d5:f1:a0:2a:35:b7:0e:
ee:60:c6:57:3b:14:15:fa:ce:1d:f7:bb:d3:fe:e9:
bc:76:ab:6d:cd:26:f0:c8:91:b0:e6:b3:84:00:be:
41:69:35:25:41:04:13:77:a3:58:36:b1:82:99:da:
8f:ff:c4:ba:8b:0a:34:75:f5:60:6f:0c:af:7d:b4:
71:49:d7:a1:0c:38:ee:5d:cf:59:3b:df:d9:49:b8:
60:4a:e0:9f:a6:fd:09:6e:40:95:57:d1:70:76:db:
94:75:96:3c:11:ba:1c:1d:c0:5f:22:1c:76:88:b6:
9d:ad:76:90:18:37:1f:b3:e5:3d:7a:54:b6:9e:47:
db:a0:86:f2:b2:b1:b8:3a:85:18:9a:18:55:9f:74:
cb:4e:99:4b:53:0f:40:19:a6:6a:c5:aa:db:26:d4:
9e:a1:26:32:58:f1:fd:55:80:43:05:c6:89:c1:46:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:98:CE:E6:47:13:0C:76:A8:2E:B5:D5:94:98:90:24:46:A9:8E:9F
X509v3 Authority Key Identifier:
keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/xJjO5kcTDHaoLrXVlJiQJEapjp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.28.0/22
185.44.160.0/22
185.163.80.0/22
IPv6:
2a01:7520::/32
2a0b:5800::/32
Signature Algorithm: sha256WithRSAEncryption
91:3a:5b:de:dc:69:0b:80:08:9b:e3:9b:1f:c1:a1:92:3d:49:
35:64:e2:ef:2c:1a:44:7a:4b:b0:35:61:b1:c8:f0:64:20:45:
68:bc:df:80:60:2a:aa:a0:ac:5f:2e:1c:25:4c:ad:93:3f:0b:
39:d5:33:20:61:05:53:66:a2:c9:d1:41:c1:01:5e:b7:90:81:
fe:61:b5:c9:87:d9:c2:40:1c:f9:6a:8b:29:25:72:8d:4a:27:
05:0a:44:35:d3:3e:47:90:22:cf:29:61:4f:84:c9:4c:9f:f6:
78:84:8b:5f:a3:c6:ed:bd:f6:b8:77:e5:e5:5c:a6:59:ec:20:
6d:c5:81:55:77:7a:b2:b5:df:a5:4d:0a:e0:0d:3e:05:f3:b6:
33:65:27:09:5c:fb:3c:1f:39:91:a0:a0:aa:01:d5:3e:88:82:
13:05:9c:ac:10:aa:36:71:d8:0f:4b:ed:70:ff:80:c0:6e:20:
57:ea:27:21:2d:1a:70:b8:23:94:4d:e4:c1:23:d1:eb:1d:f5:
b1:59:ce:a0:f1:83:c6:65:6f:58:e7:aa:2d:13:d8:be:1c:fc:
9d:86:49:06:bc:0b:fd:a2:a3:a0:ad:e0:14:41:11:60:8c:fd:
63:e4:31:15:5a:3f:ca:ca:50:ef:0f:21:80:68:6d:b2:bf:55:
c6:5b:31:e7
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYzFAR3jnFUJrSiKnN+QnvMTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMWRjMDBmZDJjMWUzZWFhZmNlY2NjMWI0YmExZjhmZDBh
NGE5OGMwHhcNMjQwMTAxMTIzMDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDk4Y2VlNjQ3MTMwYzc2YTgyZWI1ZDU5NDk4OTAyNDQ2YTk4ZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQk5p1rfcjXuQ/Bd/B8c+6GVxvod
zmM/G/an7qZ5P5DqviCXUKOJr69ruDy8c1sJEaDYJq20mv+2ckqfnJovXZwzsU04
SJl6pmxmLhceVPHyldXxoCo1tw7uYMZXOxQV+s4d97vT/um8dqttzSbwyJGw5rOE
AL5BaTUlQQQTd6NYNrGCmdqP/8S6iwo0dfVgbwyvfbRxSdehDDjuXc9ZO9/ZSbhg
SuCfpv0JbkCVV9FwdtuUdZY8EbocHcBfIhx2iLadrXaQGDcfs+U9elS2nkfboIby
srG4OoUYmhhVn3TLTplLUw9AGaZqxarbJtSeoSYyWPH9VYBDBcaJwUb47wIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFMSYzuZHEwx2qC611ZSYkCRGqY6fMB8GA1UdIwQY
MBaAFOsdwA/SwePqr87MwbS6H4/QpKmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81YWI1ODUtYjI5Yi00ZTcxLTgwMzgt
OTBlMjFkZjAxZTkxLzEveEpqTzVrY1RESGFvTHJYVmxKaVFKRWFwanA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS81YWI1ODUtYjI5Yi00ZTcxLTgwMzgtOTBlMjFkZjAxZTkx
LzEvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCWWscAwQC
uSygAwQCuaNQMBQEAgACMA4DBQAqAXUgAwUAKgtYADANBgkqhkiG9w0BAQsFAAOC
AQEAkTpb3txpC4AIm+ObH8Ghkj1JNWTi7ywaRHpLsDVhscjwZCBFaLzfgGAqqqCs
Xy4cJUytkz8LOdUzIGEFU2aiydFBwQFet5CB/mG1yYfZwkAc+WqLKSVyjUonBQpE
NdM+R5AizylhT4TJTJ/2eISLX6PG7b32uHfl5VymWewgbcWBVXd6srXfpU0K4A0+
BfO2M2UnCVz7PB85kaCgqgHVPoiCEwWcrBCqNnHYD0vtcP+AwG4gV+onIS0acLgj
lE3kwSPR6x31sVnOoPGDxmVvWOeqLRPYvhz8nYZJBrwL/aKjoK3gFEERYIz9Y+Qx
FVo/yspQ7w8hgGhtsr9Vxlsx5w==
-----END CERTIFICATE-----
Generated at Tue May 28 14:26:21 2024 by rpki-client on console-fra.rpki-client.org