Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/p5BDiMtYrJOu9wOM1VuBPYsI8cE.roa
File: p5BDiMtYrJOu9wOM1VuBPYsI8cE.roa (raw, json)
Hash identifier: yNEIHu3jMD0k0ISqlt/OHoWcfB99X6uVZ5+eiOVA1vU=
Subject key identifier: A7:90:43:88:CB:58:AC:93:AE:F7:03:8C:D5:5B:81:3D:8B:08:F1:C1
Certificate issuer: /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial: 018CC649BFCBBE30C61DF82E7990B950F085
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/p5BDiMtYrJOu9wOM1VuBPYsI8cE.roa
Signing time: Mon 01 Jan 2024 18:29:31 +0000
ROA not before: Mon 01 Jan 2024 18:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207199
IP address blocks: 193.239.96.0/22 maxlen: 22
185.235.52.0/24 maxlen: 24
185.235.52.0/22 maxlen: 22
185.25.140.0/24 maxlen: 24
178.251.1.0/24 maxlen: 24
178.251.0.0/21 maxlen: 21
91.197.248.0/22 maxlen: 22
77.243.128.0/20 maxlen: 20
81.95.240.0/20 maxlen: 20
81.95.249.0/24 maxlen: 24
185.154.240.0/22 maxlen: 22
195.69.128.0/22 maxlen: 22
109.71.56.0/21 maxlen: 21
91.217.201.0/24 maxlen: 24
46.36.204.0/22 maxlen: 22
46.36.208.0/21 maxlen: 21
2a02:2339::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:bf:cb:be:30:c6:1d:f8:2e:79:90:b9:50:f0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Validity
Not Before: Jan 1 18:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7904388cb58ac93aef7038cd55b813d8b08f1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:00:ac:07:00:98:40:c5:d5:4b:4e:1f:ca:de:
f4:d4:e0:06:54:4e:13:a4:3b:fd:ac:c3:e1:b7:05:
59:50:14:4d:58:71:0a:c7:4d:d5:84:35:22:0b:df:
71:e3:9e:d3:5d:14:46:9e:f4:a3:b9:3a:8a:8b:9f:
15:91:b4:ea:61:0b:95:1c:18:c2:03:f3:48:fd:77:
76:85:19:7d:63:17:2c:b7:80:65:44:00:cd:60:c9:
0d:a0:ae:57:a4:f8:7b:77:92:8c:e3:96:af:d7:25:
a8:62:02:1c:a6:17:7c:9c:a8:3a:ba:59:4a:58:e3:
ea:1e:9e:2c:e4:49:c1:e1:a1:8f:03:7a:1f:94:d8:
8c:2a:fb:3b:72:e9:93:24:5f:54:9d:39:3f:55:b6:
86:53:35:6c:46:e0:ea:64:df:8c:81:01:2f:c9:67:
d4:23:e7:55:77:82:ae:fe:b4:b6:44:cd:54:e7:8e:
59:11:3c:d9:22:9a:05:13:b9:9f:31:48:6e:94:01:
c3:83:20:29:d0:fe:b1:c0:5d:32:1a:ed:ac:db:c4:
20:26:78:ff:f8:df:05:d8:40:0a:67:2b:e5:dd:b0:
25:c4:4a:5f:35:dc:6d:94:a5:50:53:bd:c6:9a:ab:
e5:44:68:08:ce:3a:f3:63:41:66:97:b4:f9:1f:b2:
7b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:90:43:88:CB:58:AC:93:AE:F7:03:8C:D5:5B:81:3D:8B:08:F1:C1
X509v3 Authority Key Identifier:
keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/p5BDiMtYrJOu9wOM1VuBPYsI8cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.204.0-46.36.215.255
77.243.128.0/20
81.95.240.0/20
91.197.248.0/22
91.217.201.0/24
109.71.56.0/21
178.251.0.0/21
185.25.140.0/24
185.154.240.0/22
185.235.52.0/22
193.239.96.0/22
195.69.128.0/22
IPv6:
2a02:2339::/36
Signature Algorithm: sha256WithRSAEncryption
a7:07:80:ab:10:07:23:17:33:b3:da:15:4e:3a:a1:20:24:a3:
fc:e1:05:d7:fe:44:5e:d2:58:ee:66:95:74:41:a3:c6:45:99:
a7:a3:4d:27:f6:52:53:ab:9e:88:8c:b9:18:6d:5d:aa:df:10:
7f:d5:11:8a:84:be:29:3e:b8:ab:ef:d9:71:17:a1:2a:de:73:
d9:5a:f0:08:0e:05:b4:6a:60:99:5e:b1:6b:e3:21:fb:7f:41:
75:a4:6a:ef:b9:e4:8b:e5:13:d2:65:b2:9b:da:ad:d4:c7:df:
b0:2b:b5:e8:d7:82:1d:c6:5b:e4:a4:99:27:dc:67:18:45:3a:
e6:b6:6b:c4:16:03:bc:c1:ad:b8:37:f9:80:61:ad:51:21:82:
12:00:ac:e5:a4:ae:81:3b:25:a1:7b:6e:62:45:ac:cf:e7:ac:
d7:22:82:8b:13:a1:f4:50:76:5c:89:4d:df:37:6e:3f:0d:54:
ee:86:fc:49:23:7b:be:e6:cb:09:d2:16:5a:59:04:98:3f:14:
a9:4e:f0:c8:79:0a:33:85:58:0f:b9:5b:8c:db:f2:d9:42:ca:
43:c8:10:b3:a3:d2:49:3e:b1:10:38:87:2e:83:ac:95:e7:ed:
c7:85:95:a2:e6:a6:da:5c:c5:a8:0a:f1:db:9e:2e:43:5f:18:
41:35:39:86
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAYzGSb/LvjDGHfgueZC5UPCFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZTcyMDVmNWQ0MTI1N2E2YmI5NWY5MDBlZWMwYTExMjNl
NzUxNjQwHhcNMjQwMTAxMTgyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzkwNDM4OGNiNThhYzkzYWVmNzAzOGNkNTViODEzZDhiMDhmMWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwCsBwCYQMXVS04fyt701OAGVE4T
pDv9rMPhtwVZUBRNWHEKx03VhDUiC99x457TXRRGnvSjuTqKi58VkbTqYQuVHBjC
A/NI/Xd2hRl9Yxcst4BlRADNYMkNoK5XpPh7d5KM45av1yWoYgIcphd8nKg6ullK
WOPqHp4s5EnB4aGPA3oflNiMKvs7cumTJF9UnTk/VbaGUzVsRuDqZN+MgQEvyWfU
I+dVd4Ku/rS2RM1U545ZETzZIpoFE7mfMUhulAHDgyAp0P6xwF0yGu2s28QgJnj/
+N8F2EAKZyvl3bAlxEpfNdxtlKVQU73GmqvlRGgIzjrzY0Fml7T5H7J7TwIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFKeQQ4jLWKyTrvcDjNVbgT2LCPHBMB8GA1UdIwQY
MBaAFKTnIF9dQSV6a7lfkA7sChEj51FkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDkt
M2U1OWNlNDQ1YjFjLzEvcDVCRGlNdFlySk91OXdPTTFWdUJQWXNJOGNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDktM2U1OWNlNDQ1YjFj
LzEvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBWBAIAATBQMAwDBAIuJMwD
BAMuJNADBARN84ADBARRX/ADBAJbxfgDBABb2ckDBANtRzgDBAOy+wADBAC5GYwD
BAK5mvADBAK56zQDBALB72ADBALDRYAwDgQCAAIwCAMGBCoCIzkAMA0GCSqGSIb3
DQEBCwUAA4IBAQCnB4CrEAcjFzOz2hVOOqEgJKP84QXX/kRe0ljuZpV0QaPGRZmn
o00n9lJTq56IjLkYbV2q3xB/1RGKhL4pPrir79lxF6Eq3nPZWvAIDgW0amCZXrFr
4yH7f0F1pGrvueSL5RPSZbKb2q3Ux9+wK7Xo14IdxlvkpJkn3GcYRTrmtmvEFgO8
wa24N/mAYa1RIYISAKzlpK6BOyWhe25iRazP56zXIoKLE6H0UHZciU3fN24/DVTu
hvxJI3u+5ssJ0hZaWQSYPxSpTvDIeQozhVgPuVuM2/LZQspDyBCzo9JJPrEQOIcu
g6yV5+3HhZWi5qbaXMWoCvHbni5DXxhBNTmG
-----END CERTIFICATE-----
Generated at Sat Jun 8 10:18:25 2024 by rpki-client on console-fra.rpki-client.org