Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/mN_FT1ZEOzu7DfmJvb5cZe-vXCI.roa
File: mN_FT1ZEOzu7DfmJvb5cZe-vXCI.roa (raw, json)
Hash identifier: h6wnxId2zgaoOINWEIRnIijmmurgl4bqxjZ1docnjDY=
Subject key identifier: 98:DF:C5:4F:56:44:3B:3B:BB:0D:F9:89:BD:BE:5C:65:EF:AF:5C:22
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 018CC8713B0FC2C21A62CF319D2B69A8C39F
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/mN_FT1ZEOzu7DfmJvb5cZe-vXCI.roa
Signing time: Tue 02 Jan 2024 04:31:53 +0000
ROA not before: Tue 02 Jan 2024 04:31:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60095
IP address blocks: 185.44.8.0/22 maxlen: 22
185.44.11.0/24 maxlen: 24
185.44.8.0/23 maxlen: 23
185.44.8.0/24 maxlen: 24
185.44.10.0/23 maxlen: 23
185.44.10.0/24 maxlen: 24
185.44.9.0/24 maxlen: 24
93.157.253.0/24 maxlen: 24
93.157.252.0/24 maxlen: 24
93.157.252.0/22 maxlen: 22
93.157.252.0/23 maxlen: 23
93.157.254.0/24 maxlen: 24
93.157.254.0/23 maxlen: 23
93.157.255.0/24 maxlen: 24
136.169.212.0/22 maxlen: 22
136.169.212.0/23 maxlen: 23
136.169.212.0/24 maxlen: 24
136.169.213.0/24 maxlen: 24
136.169.215.0/24 maxlen: 24
136.169.214.0/23 maxlen: 23
136.169.214.0/24 maxlen: 24
2a02:1c8:a::/48 maxlen: 48
2a02:1c8:40::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:3b:0f:c2:c2:1a:62:cf:31:9d:2b:69:a8:c3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jan 2 04:31:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98dfc54f56443b3bbb0df989bdbe5c65efaf5c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:4c:ad:f7:59:18:0a:39:c7:19:f3:f4:c6:
5e:18:7f:03:48:65:35:bb:33:14:7e:17:9a:ac:cf:
1f:8f:92:4c:e1:b6:77:15:98:d1:e6:05:ba:d3:39:
39:a4:7e:9d:29:12:46:13:8f:57:88:e1:9a:9c:48:
f8:a6:9a:4e:6c:d8:d0:db:36:58:a7:f7:09:af:0a:
36:fd:b6:0d:a3:56:e2:42:4d:55:5c:d9:5e:06:eb:
a5:f2:db:16:55:27:a5:c0:62:c2:94:e6:aa:f5:c6:
75:f0:fe:9e:8f:51:ea:fe:d7:06:3b:63:00:60:87:
f3:e5:71:f7:d0:2d:a1:48:c6:5d:74:d7:31:76:ae:
df:ad:96:a9:4e:cd:fc:21:9c:bd:9d:64:71:f7:e3:
3e:3c:1f:99:b6:19:cd:22:64:86:a9:9a:ce:dc:cc:
e4:4a:20:02:b4:8e:b9:b8:74:36:a9:86:2f:10:b4:
3f:c9:d6:ed:7d:75:03:85:d9:54:6e:76:0b:8e:dd:
9d:7c:58:04:f6:e5:f2:68:3a:dd:61:2d:35:81:d9:
25:e7:a4:3c:b7:5a:16:9b:b8:19:c5:c6:79:23:09:
31:2d:35:96:40:4a:05:00:6a:57:b1:34:49:a0:b0:
50:30:a4:3a:8a:73:23:5f:4a:d1:23:3d:ec:a4:ba:
e6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DF:C5:4F:56:44:3B:3B:BB:0D:F9:89:BD:BE:5C:65:EF:AF:5C:22
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/mN_FT1ZEOzu7DfmJvb5cZe-vXCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.252.0/22
136.169.212.0/22
185.44.8.0/22
IPv6:
2a02:1c8:a::/48
2a02:1c8:40::/44
Signature Algorithm: sha256WithRSAEncryption
19:db:c6:d7:f2:e0:7d:f8:a9:65:37:f3:f5:c5:73:86:36:61:
27:ce:9a:98:62:b6:81:16:b1:c7:09:f7:34:cc:31:c9:3e:ba:
d0:b7:06:0d:54:46:9e:c4:31:e4:03:10:bb:af:38:22:0b:cc:
82:60:46:64:5e:a8:cc:da:3a:75:4a:99:29:9b:4b:58:ab:0b:
da:78:f1:02:1e:b7:5a:3b:f9:14:61:0d:13:5e:bd:a2:d6:2f:
0f:37:bd:1d:db:6a:9c:78:61:b2:a7:ce:83:19:1c:93:35:14:
d1:7f:4c:05:f4:2f:c4:7f:83:2a:ba:c6:59:ab:a1:60:57:fa:
f4:a8:a0:63:5d:59:35:66:04:f5:8b:d2:a4:74:ee:76:4e:a9:
39:33:22:74:f7:82:79:d5:43:56:4e:a8:7b:df:bb:0d:e5:40:
14:c7:a7:83:f6:20:44:16:14:ec:a3:96:17:3a:ab:1f:7f:1b:
e0:64:7a:25:1f:ea:3a:69:25:7b:e8:71:a0:28:76:8b:b1:af:
63:de:17:0c:f0:3d:a7:87:54:f5:93:50:15:a9:77:e1:94:c5:
25:cd:7a:ba:9f:92:59:31:4a:b8:f1:52:26:c6:2c:6e:8c:f8:
94:21:58:3e:14:ce:30:10:e2:a9:67:61:dd:8c:9d:4e:5e:0b:
b9:25:a5:b9
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYzIcTsPwsIaYs8xnStpqMOfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi
Zjk0ODUwHhcNMjQwMTAyMDQzMTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGRmYzU0ZjU2NDQzYjNiYmIwZGY5ODliZGJlNWM2NWVmYWY1YzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+9MrfdZGAo5xxnz9MZeGH8DSGU1
uzMUfhearM8fj5JM4bZ3FZjR5gW60zk5pH6dKRJGE49XiOGanEj4pppObNjQ2zZY
p/cJrwo2/bYNo1biQk1VXNleBuul8tsWVSelwGLClOaq9cZ18P6ej1Hq/tcGO2MA
YIfz5XH30C2hSMZddNcxdq7frZapTs38IZy9nWRx9+M+PB+ZthnNImSGqZrO3Mzk
SiACtI65uHQ2qYYvELQ/ydbtfXUDhdlUbnYLjt2dfFgE9uXyaDrdYS01gdkl56Q8
t1oWm7gZxcZ5IwkxLTWWQEoFAGpXsTRJoLBQMKQ6inMjX0rRIz3spLrmrwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFJjfxU9WRDs7uw35ib2+XGXvr1wiMB8GA1UdIwQY
MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt
Y2JiOTUxODNiMjdhLzEvbU5fRlQxWkVPenU3RGZtSnZiNWNaZS12WENJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh
LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQCXZ38AwQC
iKnUAwQCuSwIMBgEAgACMBIDBwAqAgHIAAoDBwQqAgHIAEAwDQYJKoZIhvcNAQEL
BQADggEBABnbxtfy4H34qWU38/XFc4Y2YSfOmphitoEWsccJ9zTMMck+utC3Bg1U
Rp7EMeQDELuvOCILzIJgRmReqMzaOnVKmSmbS1irC9p48QIet1o7+RRhDRNevaLW
Lw83vR3bapx4YbKnzoMZHJM1FNF/TAX0L8R/gyq6xlmroWBX+vSooGNdWTVmBPWL
0qR07nZOqTkzInT3gnnVQ1ZOqHvfuw3lQBTHp4P2IEQWFOyjlhc6qx9/G+BkeiUf
6jppJXvocaAodouxr2PeFwzwPaeHVPWTUBWpd+GUxSXNerqfklkxSrjxUibGLG6M
+JQhWD4UzjAQ4qlnYd2MnU5eC7klpbk=
-----END CERTIFICATE-----
Generated at Sat Jun 8 03:57:00 2024 by rpki-client on console-fra.rpki-client.org