Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/pAoyzRVKv0bTper9Tjbldyqd5rQ.roa
File: pAoyzRVKv0bTper9Tjbldyqd5rQ.roa (raw, json)
Hash identifier: B2tTnNjhgMjwMvZTTPr7aKk/CHwejhqiF95kAitSa7I=
Subject key identifier: A4:0A:32:CD:15:4A:BF:46:D3:A5:EA:FD:4E:36:E5:77:2A:9D:E6:B4
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802FE8556E8D4D63BFA7D2180777375
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/pAoyzRVKv0bTper9Tjbldyqd5rQ.roa
Signing time: Tue 02 Jan 2024 02:31:28 +0000
ROA not before: Tue 02 Jan 2024 02:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200606
IP address blocks: 194.14.135.0/24 maxlen: 24
193.235.51.0/24 maxlen: 24
192.36.31.0/24 maxlen: 24
194.71.245.0/24 maxlen: 24
194.103.43.0/24 maxlen: 24
192.165.131.0/24 maxlen: 24
193.182.110.0/24 maxlen: 24
193.234.77.0/24 maxlen: 24
192.121.226.0/24 maxlen: 24
193.234.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:fe:85:56:e8:d4:d6:3b:fa:7d:21:80:77:73:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a40a32cd154abf46d3a5eafd4e36e5772a9de6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:fa:69:22:59:71:93:6e:b8:09:89:2b:1c:
2e:88:26:2a:34:ac:65:8c:8c:4d:d2:83:cb:81:69:
b2:bc:44:21:08:fa:f6:cb:2e:07:30:90:7c:2b:52:
68:e4:ce:97:f2:ef:10:3b:fb:bd:c8:c2:9e:47:ea:
42:76:0f:ab:3a:b8:c9:62:a9:ce:d9:4f:08:57:86:
d9:6e:3d:4c:2a:ce:67:a7:a5:67:e6:0e:0a:60:ef:
97:5c:fd:ef:2b:5e:92:e8:76:4b:f6:3d:ea:f6:ab:
fb:a9:99:4a:bf:80:95:c8:11:40:bd:81:78:61:b2:
c3:ed:d1:cc:65:f6:3f:4c:9a:52:45:a2:4c:39:9d:
c9:d1:f8:91:d1:e2:cd:e5:e5:5c:d1:52:39:1f:2d:
b0:61:22:c6:15:1e:de:a3:da:20:3c:cf:57:29:cf:
fa:d1:0a:5c:63:56:e1:c1:85:79:a2:a9:2f:cf:8c:
4c:0c:5d:5d:17:11:3b:c7:d0:50:e5:ef:62:5f:ab:
84:e4:df:d2:ba:05:44:7c:8b:b5:8b:ab:c0:38:3f:
1f:f4:5a:91:1d:0b:05:48:b0:64:ed:25:e1:66:99:
46:76:8d:1b:f0:5b:b8:63:5d:31:ec:ce:5a:0f:6b:
bc:6b:0d:de:ce:85:9f:f4:3a:71:f7:07:46:40:ab:
ba:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0A:32:CD:15:4A:BF:46:D3:A5:EA:FD:4E:36:E5:77:2A:9D:E6:B4
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/pAoyzRVKv0bTper9Tjbldyqd5rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.31.0/24
192.121.226.0/24
192.165.131.0/24
193.182.110.0/24
193.234.76.0/23
193.235.51.0/24
194.14.135.0/24
194.71.245.0/24
194.103.43.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f2:80:c1:ef:f5:6b:2b:70:1b:cd:83:f9:e6:c5:77:05:5f:
f8:4f:11:a9:8e:1e:de:52:04:77:4e:24:d7:a4:ab:07:1a:e2:
23:21:28:a1:a8:8b:22:ec:77:a9:68:78:4c:d4:26:df:08:bb:
ce:37:9b:48:49:61:e9:0b:40:2b:81:28:bc:08:37:74:44:c4:
1e:56:79:d9:b5:34:7c:14:6c:ab:db:a7:08:68:6d:97:ef:b3:
96:c3:e0:67:e2:f6:e6:10:3e:01:0f:75:e3:07:80:ac:a5:aa:
23:1c:f2:13:f7:83:e1:52:cb:36:7a:c0:d6:e9:5c:5d:3a:f7:
e4:6f:30:b6:87:e9:5f:dc:63:de:e3:ed:a7:ec:50:af:c2:82:
87:36:b5:1d:89:84:fe:64:02:bd:06:5a:30:2a:d8:ca:a0:8d:
e9:27:93:ce:a3:4b:a4:e8:d5:73:03:b9:cb:23:b5:e6:04:ee:
12:af:98:90:b6:22:06:c5:b1:c5:53:78:6e:c3:b8:2f:53:32:
67:f4:c9:3d:d0:70:07:b6:7b:68:ba:9a:f5:41:1d:50:18:a2:
72:ba:9a:c5:02:c6:0d:96:1d:7d:6f:0a:2b:7a:e1:4d:0c:4c:
c7:55:39:91:c7:23:5b:dc:20:2c:c0:27:14:eb:42:dd:35:58:
53:ed:bb:53
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYzIAv6FVujU1jv6fSGAd3N1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwMTAyMDIzMTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDBhMzJjZDE1NGFiZjQ2ZDNhNWVhZmQ0ZTM2ZTU3NzJhOWRlNmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdf6aSJZcZNuuAmJKxwuiCYqNKxl
jIxN0oPLgWmyvEQhCPr2yy4HMJB8K1Jo5M6X8u8QO/u9yMKeR+pCdg+rOrjJYqnO
2U8IV4bZbj1MKs5np6Vn5g4KYO+XXP3vK16S6HZL9j3q9qv7qZlKv4CVyBFAvYF4
YbLD7dHMZfY/TJpSRaJMOZ3J0fiR0eLN5eVc0VI5Hy2wYSLGFR7eo9ogPM9XKc/6
0QpcY1bhwYV5oqkvz4xMDF1dFxE7x9BQ5e9iX6uE5N/SugVEfIu1i6vAOD8f9FqR
HQsFSLBk7SXhZplGdo0b8Fu4Y10x7M5aD2u8aw3ezoWf9Dpx9wdGQKu6HwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFKQKMs0VSr9G06Xq/U425Xcqnea0MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvcEFveXpSVkt2MGJUcGVyOVRqYmxkeXFkNXJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAwCQfAwQA
wHniAwQAwKWDAwQAwbZuAwQBwepMAwQAweszAwQAwg6HAwQAwkf1AwQAwmcrMA0G
CSqGSIb3DQEBCwUAA4IBAQAd8oDB7/VrK3AbzYP55sV3BV/4TxGpjh7eUgR3TiTX
pKsHGuIjISihqIsi7HepaHhM1CbfCLvON5tISWHpC0ArgSi8CDd0RMQeVnnZtTR8
FGyr26cIaG2X77OWw+Bn4vbmED4BD3XjB4CspaojHPIT94PhUss2esDW6VxdOvfk
bzC2h+lf3GPe4+2n7FCvwoKHNrUdiYT+ZAK9BlowKtjKoI3pJ5POo0uk6NVzA7nL
I7XmBO4Sr5iQtiIGxbHFU3huw7gvUzJn9Mk90HAHtntoupr1QR1QGKJyuprFAsYN
lh19bworeuFNDEzHVTmRxyNb3CAswCcU60LdNVhT7btT
-----END CERTIFICATE-----
Generated at Sat May 25 17:30:50 2024 by rpki-client on console-fra.rpki-client.org