Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/_ssBbbFZAbrQdoWhjxrRNt4aNcQ.roa
File: _ssBbbFZAbrQdoWhjxrRNt4aNcQ.roa (raw, json)
Hash identifier: GiSScy+jonwfvTgLcmn1qKueMX5XkNT3i8u9j3f0Oa0=
Subject key identifier: FE:CB:01:6D:B1:59:01:BA:D0:76:85:A1:8F:1A:D1:36:DE:1A:35:C4
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01931F1D8DDFD1600BF84EC20E78AE814A3A
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/_ssBbbFZAbrQdoWhjxrRNt4aNcQ.roa
Signing time: Tue 12 Nov 2024 06:44:10 +0000
ROA not before: Tue 12 Nov 2024 06:44:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
45.147.45.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440:8::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1f:1d:8d:df:d1:60:0b:f8:4e:c2:0e:78:ae:81:4a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Nov 12 06:44:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fecb016db15901bad07685a18f1ad136de1a35c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:65:aa:10:0c:1d:10:41:dd:fd:91:5b:4c:
00:9e:a7:e0:54:14:a5:bc:c3:f0:fc:c0:51:fc:d2:
4c:d8:c7:4d:2e:b2:18:ed:85:44:81:a0:f7:56:ed:
a8:f1:c8:a4:1c:0a:79:7e:d3:e7:55:40:23:dd:70:
6e:f2:91:0b:ae:53:ea:b9:34:6b:51:a0:55:59:f3:
db:2f:6c:25:24:d3:a8:04:91:c9:27:44:13:d2:a2:
fb:f9:02:59:55:ef:65:ae:5d:d5:6e:1a:dc:8d:d5:
c3:db:02:90:68:1f:df:1e:49:8b:82:57:c6:e8:36:
98:4c:14:f7:9f:96:6c:0b:2b:02:ce:e5:78:d1:03:
92:12:22:80:f4:66:89:d2:e0:40:8d:4a:e2:8c:4d:
01:fd:ba:47:d0:7d:88:04:67:d7:5a:ba:92:22:37:
2f:d4:69:fc:33:36:96:5a:e9:7c:c7:62:2d:7d:6d:
8c:bf:d1:db:2a:79:75:db:1e:51:69:3a:1a:a6:68:
aa:9c:84:14:bf:32:88:f5:6b:01:ec:8d:40:1a:1b:
d4:63:59:04:20:99:73:37:6a:c4:b7:e0:03:10:87:
06:31:5c:89:07:7f:70:06:a2:55:63:28:41:03:11:
c4:a2:6d:13:60:a4:68:79:a3:29:d7:05:d3:ab:6f:
1e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CB:01:6D:B1:59:01:BA:D0:76:85:A1:8F:1A:D1:36:DE:1A:35:C4
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/_ssBbbFZAbrQdoWhjxrRNt4aNcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/23
45.136.4.0/24
45.147.44.0/23
77.83.200.0/22
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440:8::/48
2a13:a441::/32
2a13:a445::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
6e:15:eb:90:92:aa:30:d6:a2:ea:2e:d5:ad:f6:5f:af:2f:af:
71:b9:39:2e:8d:99:28:0d:de:d0:a8:66:e5:35:7d:d7:58:46:
94:c4:38:54:77:ed:32:7c:9e:3d:2a:c6:21:f1:41:55:9a:e1:
3e:39:a0:7c:20:07:f2:04:ee:2f:af:b7:c5:9b:a9:cc:3f:c6:
2c:bd:fa:72:2d:91:6b:9c:9c:d4:2d:dd:e5:f4:1e:dc:af:17:
ae:99:af:be:a3:da:69:9e:0b:c2:89:fa:79:37:66:04:94:64:
64:00:58:60:40:67:3d:75:7f:4e:6e:ad:95:95:6f:be:aa:4d:
9e:fd:4f:61:42:1a:59:d5:6f:a6:30:a4:39:b2:d9:e7:35:f3:
48:7d:be:c3:49:33:9e:ce:2a:1a:cc:1e:f6:dc:bc:b5:ed:e3:
c9:4b:9e:ba:54:da:da:50:bc:37:d7:d9:af:fc:79:03:91:22:
5a:f0:c7:d7:4a:ff:39:46:ee:9c:73:ca:ff:c8:ff:6b:f4:bf:
e6:3b:ce:e4:53:5b:b8:73:73:89:0c:44:2b:8c:40:68:ea:95:
93:e1:fa:fb:f2:84:0a:03:29:5d:e3:60:38:ef:d2:26:a1:98:
c3:7c:03:65:05:59:cf:f6:46:ff:1a:4c:13:a8:7d:3d:86:f3:
09:57:75:72
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgISAZMfHY3f0WAL+E7CDniugUo6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjQxMTEyMDY0NDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWNiMDE2ZGIxNTkwMWJhZDA3Njg1YTE4ZjFhZDEzNmRlMWEzNWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5xlqhAMHRBB3f2RW0wAnqfgVBSl
vMPw/MBR/NJM2MdNLrIY7YVEgaD3Vu2o8cikHAp5ftPnVUAj3XBu8pELrlPquTRr
UaBVWfPbL2wlJNOoBJHJJ0QT0qL7+QJZVe9lrl3VbhrcjdXD2wKQaB/fHkmLglfG
6DaYTBT3n5ZsCysCzuV40QOSEiKA9GaJ0uBAjUrijE0B/bpH0H2IBGfXWrqSIjcv
1Gn8MzaWWul8x2ItfW2Mv9HbKnl12x5RaToapmiqnIQUvzKI9WsB7I1AGhvUY1kE
IJlzN2rEt+ADEIcGMVyJB39wBqJVYyhBAxHEom0TYKRoeaMp1wXTq28eyQIDAQAB
o4ICmjCCApYwHQYDVR0OBBYEFP7LAW2xWQG60HaFoY8a0TbeGjXEMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvX3NzQmJiRlpBYnJRZG9XaGp4clJOdDRhTmNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDBKBAIAATBEMAwDBAAF
tGkDBAIFtGgDBAEtgwADBAAtiAQDBAEtkywDBAJNU8gDBADCdOQDBAHCdOwDBADC
khoDBADCkiQDBADCki8wTgQCAAIwSAMFAyoJh4ADBQMqD7cAAwUDKg/pAAMFAyoP
6wADBQMqD+0AAwUDKg/5AAMHACoTpEAACAMFACoTpEEDBQAqE6RFAwUAKhOkRzAN
BgkqhkiG9w0BAQsFAAOCAQEAbhXrkJKqMNai6i7VrfZfry+vcbk5Lo2ZKA3e0Khm
5TV911hGlMQ4VHftMnyePSrGIfFBVZrhPjmgfCAH8gTuL6+3xZupzD/GLL36ci2R
a5yc1C3d5fQe3K8XrpmvvqPaaZ4Lwon6eTdmBJRkZABYYEBnPXV/Tm6tlZVvvqpN
nv1PYUIaWdVvpjCkObLZ5zXzSH2+w0kzns4qGswe9ty8te3jyUueulTa2lC8N9fZ
r/x5A5EiWvDH10r/OUbunHPK/8j/a/S/5jvO5FNbuHNziQxEK4xAaOqVk+H6+/KE
CgMpXeNgOO/SJqGYw3wDZQVZz/ZG/xpME6h9PYbzCVd1cg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:44:16 2024 by rpki-client on console-ams.rpki-client.org