Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/Hg3rb_R0LC08SE1F9_IAB8sKgGw.roa
File: Hg3rb_R0LC08SE1F9_IAB8sKgGw.roa (raw, json)
Hash identifier: YYOW51psv9z2duIB0YIOvR80+uurU5WQmBABlXVDV2c=
Subject key identifier: 1E:0D:EB:6F:F4:74:2C:2D:3C:48:4D:45:F7:F2:00:07:CB:0A:80:6C
Certificate issuer: /CN=adf0df77114741e13a17d7213e6956bf9627b558
Certificate serial: 018CC9BC7C3402FB2EB1E707F17646B98910
Authority key identifier: AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/Hg3rb_R0LC08SE1F9_IAB8sKgGw.roa
Signing time: Tue 02 Jan 2024 10:33:42 +0000
ROA not before: Tue 02 Jan 2024 10:33:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62319
IP address blocks: 91.142.136.0/24 maxlen: 24
178.209.175.0/24 maxlen: 24
178.209.174.0/24 maxlen: 24
178.209.173.0/24 maxlen: 24
178.209.178.0/23 maxlen: 23
178.209.176.0/23 maxlen: 23
91.216.118.0/24 maxlen: 24
178.209.184.0/22 maxlen: 22
193.169.74.0/23 maxlen: 23
178.209.180.0/22 maxlen: 22
178.209.188.0/23 maxlen: 23
185.203.0.0/22 maxlen: 22
178.209.191.0/24 maxlen: 24
178.209.190.0/24 maxlen: 24
185.66.184.0/22 maxlen: 22
185.4.219.0/24 maxlen: 24
185.4.218.0/24 maxlen: 24
185.4.216.0/23 maxlen: 23
185.40.44.0/22 maxlen: 22
193.106.120.0/22 maxlen: 22
185.150.72.0/22 maxlen: 22
178.209.160.0/22 maxlen: 22
178.209.166.0/24 maxlen: 24
178.209.165.0/24 maxlen: 24
178.209.172.0/24 maxlen: 24
178.209.171.0/24 maxlen: 24
178.209.170.0/24 maxlen: 24
178.209.169.0/24 maxlen: 24
178.209.168.0/24 maxlen: 24
178.209.167.0/24 maxlen: 24
194.126.192.0/24 maxlen: 24
91.194.36.0/23 maxlen: 23
194.116.178.0/23 maxlen: 23
2a02:c900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:7c:34:02:fb:2e:b1:e7:07:f1:76:46:b9:89:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf0df77114741e13a17d7213e6956bf9627b558
Validity
Not Before: Jan 2 10:33:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e0deb6ff4742c2d3c484d45f7f20007cb0a806c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:60:5f:af:75:84:2b:89:0f:7d:8d:5b:47:1e:
0b:9a:96:6c:ab:c0:31:0f:6d:9b:e1:81:86:48:35:
79:50:1f:59:4f:f3:ea:05:59:67:c8:92:69:d8:55:
32:7e:4f:93:ca:09:39:9a:0d:e4:32:84:22:99:3a:
64:73:87:ea:35:37:e3:b4:be:4a:47:f5:ed:29:c5:
b7:36:a2:2e:38:c6:da:b0:43:bc:82:72:6c:a3:64:
2d:a9:57:5a:8d:93:1e:cf:c4:37:3e:a5:91:33:e4:
7d:88:d0:ca:6d:e7:58:bd:b4:f0:cd:e7:df:7e:87:
62:e5:f5:fe:f0:7e:7e:74:56:39:6a:7b:0b:90:bc:
28:5b:36:96:31:b1:fd:bf:9f:ae:5f:e6:09:69:04:
7e:c0:5b:7c:d1:58:0a:89:e3:0b:af:e6:54:55:74:
1d:c7:79:55:30:56:39:5d:ef:a1:f5:28:f3:58:e7:
a1:4c:bd:f3:dc:c8:ae:8b:9f:da:5a:4b:e1:d1:31:
ae:cd:e7:ad:9f:a3:5e:82:33:a1:7b:b1:3f:a5:62:
97:34:a2:d8:f6:00:27:75:60:09:95:8b:f2:9a:0d:
05:cc:fa:b8:73:bf:5b:56:0f:0f:85:0e:20:bc:17:
e6:c0:79:6e:f3:20:d2:c4:0e:c4:70:1d:32:24:c8:
25:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0D:EB:6F:F4:74:2C:2D:3C:48:4D:45:F7:F2:00:07:CB:0A:80:6C
X509v3 Authority Key Identifier:
keyid:AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/Hg3rb_R0LC08SE1F9_IAB8sKgGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.136.0/24
91.194.36.0/23
91.216.118.0/24
178.209.160.0/22
178.209.165.0-178.209.191.255
185.4.216.0/22
185.40.44.0/22
185.66.184.0/22
185.150.72.0/22
185.203.0.0/22
193.106.120.0/22
193.169.74.0/23
194.116.178.0/23
194.126.192.0/24
IPv6:
2a02:c900::/29
Signature Algorithm: sha256WithRSAEncryption
4c:26:9c:aa:f6:1c:9c:a6:6d:c3:4e:d0:4c:14:7c:f8:f6:ca:
dc:a3:34:b7:77:d8:ae:f2:14:6e:b6:ee:9e:ae:6e:6b:82:19:
16:a0:c3:34:18:1c:b0:29:6f:7a:16:6a:dd:51:fd:4e:79:53:
89:1a:ff:e2:e4:9e:27:ef:98:d7:6d:4e:54:0c:73:8b:a8:30:
7c:55:1f:3b:fb:86:8a:90:46:13:cf:b7:6d:b5:68:d5:78:2d:
46:84:58:93:60:cb:43:d6:0e:bc:de:45:e2:06:7d:ae:71:e5:
13:25:6f:87:c2:cc:4d:a0:94:0f:f3:8a:bc:73:f9:e9:67:60:
75:e1:70:98:e6:e4:c4:ff:4c:75:c8:22:b8:e8:e9:92:88:1d:
80:fc:cd:a8:b4:30:9d:a1:50:4d:52:56:59:b2:d0:de:5e:a9:
1e:f9:ad:84:27:23:b2:18:d7:30:da:14:f9:4a:d8:46:19:64:
2d:a0:93:4a:57:89:88:32:5b:9e:e1:ca:63:cb:01:a6:4b:41:
5c:d7:89:68:38:ca:00:5e:bc:d2:45:73:79:85:10:7b:00:e5:
b1:f0:7a:6a:35:66:09:3d:86:98:7c:e9:b9:d7:33:71:fc:e1:
b0:ee:d2:43:de:fe:0e:a8:35:1c:4f:d3:27:71:aa:12:4b:d8:
38:d8:e0:a1
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgISAYzJvHw0AvsusecH8XZGuYkQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjBkZjc3MTE0NzQxZTEzYTE3ZDcyMTNlNjk1NmJmOTYy
N2I1NTgwHhcNMjQwMTAyMTAzMzQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTBkZWI2ZmY0NzQyYzJkM2M0ODRkNDVmN2YyMDAwN2NiMGE4MDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWBfr3WEK4kPfY1bRx4LmpZsq8Ax
D22b4YGGSDV5UB9ZT/PqBVlnyJJp2FUyfk+Tygk5mg3kMoQimTpkc4fqNTfjtL5K
R/XtKcW3NqIuOMbasEO8gnJso2QtqVdajZMez8Q3PqWRM+R9iNDKbedYvbTwzeff
fodi5fX+8H5+dFY5ansLkLwoWzaWMbH9v5+uX+YJaQR+wFt80VgKieMLr+ZUVXQd
x3lVMFY5Xe+h9SjzWOehTL3z3Miui5/aWkvh0TGuzeetn6NegjOhe7E/pWKXNKLY
9gAndWAJlYvymg0FzPq4c79bVg8PhQ4gvBfmwHlu8yDSxA7EcB0yJMgluQIDAQAB
o4ICbzCCAmswHQYDVR0OBBYEFB4N62/0dCwtPEhNRffyAAfLCoBsMB8GA1UdIwQY
MBaAFK3w33cRR0HhOhfXIT5pVr+WJ7VYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZEZmR4RkhRZUU2RjljaFBtbFd2NVludFZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hMzBiZWEtOWU5My00MDkxLWI2ZTEt
ZTFlZjI3NzcyZWFmLzEvSGczcmJfUjBMQzA4U0UxRjlfSUFCOHNLZ0d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9hMzBiZWEtOWU5My00MDkxLWI2ZTEtZTFlZjI3NzcyZWFm
LzEvcmZEZmR4RkhRZUU2RjljaFBtbFd2NVludFZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwYgQCAAEwXAMEAFuOiAME
AVvCJAMEAFvYdgMEArLRoDAMAwQAstGlAwQGstGAAwQCuQTYAwQCuSgsAwQCuUK4
AwQCuZZIAwQCucsAAwQCwWp4AwQBwalKAwQBwnSyAwQAwn7AMA0EAgACMAcDBQMq
AskAMA0GCSqGSIb3DQEBCwUAA4IBAQBMJpyq9hycpm3DTtBMFHz49srcozS3d9iu
8hRutu6erm5rghkWoMM0GBywKW96FmrdUf1OeVOJGv/i5J4n75jXbU5UDHOLqDB8
VR87+4aKkEYTz7dttWjVeC1GhFiTYMtD1g683kXiBn2uceUTJW+HwsxNoJQP84q8
c/npZ2B14XCY5uTE/0x1yCK46OmSiB2A/M2otDCdoVBNUlZZstDeXqke+a2EJyOy
GNcw2hT5SthGGWQtoJNKV4mIMlue4cpjywGmS0Fc14loOMoAXrzSRXN5hRB7AOWx
8HpqNWYJPYaYfOm51zNx/OGw7tJD3v4OqDUcT9MncaoSS9g42OCh
-----END CERTIFICATE-----
Generated at Sun Jun 16 06:40:22 2024 by rpki-client on console-ams.rpki-client.org