Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/vlQNbicgh1SwKxRokVUCGXXsanQ.roa
File: vlQNbicgh1SwKxRokVUCGXXsanQ.roa (raw, json)
Hash identifier: 6viFqQM/QqRK8SDP0Tdez2OlVDa+KdZOawXlhr4dzmU=
Subject key identifier: BE:54:0D:6E:27:20:87:54:B0:2B:14:68:91:55:02:19:75:EC:6A:74
Certificate issuer: /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial: 018E1DF86275FE7D1559108A85B3F7955D60
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/vlQNbicgh1SwKxRokVUCGXXsanQ.roa
Signing time: Fri 08 Mar 2024 12:10:01 +0000
ROA not before: Fri 08 Mar 2024 12:10:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8751
IP address blocks: 37.156.71.0/24 maxlen: 32
85.204.224.0/21 maxlen: 32
85.204.232.0/24 maxlen: 32
85.204.234.0/23 maxlen: 32
85.204.236.0/22 maxlen: 32
85.204.236.0/24 maxlen: 32
86.105.164.0/22 maxlen: 32
86.105.164.0/23 maxlen: 32
86.105.166.0/23 maxlen: 32
86.107.224.0/20 maxlen: 32
86.107.246.0/23 maxlen: 32
93.113.0.0/20 maxlen: 32
93.113.11.0/24 maxlen: 32
93.113.13.0/24 maxlen: 32
185.85.200.0/22 maxlen: 32
188.215.112.0/21 maxlen: 32
188.215.112.0/23 maxlen: 32
188.215.112.0/24 maxlen: 32
188.215.114.0/24 maxlen: 32
188.215.118.0/24 maxlen: 32
2001:67c:2580::/48 maxlen: 48
2a03:7420::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1d:f8:62:75:fe:7d:15:59:10:8a:85:b3:f7:95:5d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Validity
Not Before: Mar 8 12:10:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be540d6e27208754b02b14689155021975ec6a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:cb:ca:d8:0e:34:36:15:6c:03:1e:8e:a0:
41:11:47:d9:73:8a:39:00:0d:53:bc:dc:15:c8:24:
41:68:92:6d:c7:ec:e7:c0:db:7d:33:8d:41:36:2f:
9e:16:8f:c9:46:91:35:77:de:1f:33:b0:44:cb:07:
f4:80:72:60:56:1d:ec:b6:ae:86:69:2d:38:52:c4:
31:e5:7f:b6:94:c6:9a:6c:ea:22:04:c6:c3:ee:a9:
3c:1a:bd:a2:db:7a:5a:a6:39:f1:5a:e9:b7:19:8e:
b0:93:6e:f4:cb:82:91:fb:1c:e5:75:24:35:ac:ac:
5e:ce:49:3d:f5:8f:c2:75:fd:dc:fc:03:01:37:57:
6f:5a:60:71:f6:b2:bb:71:7a:de:2b:a9:b4:c7:54:
34:96:4d:ca:17:a8:99:fc:ed:fa:f7:af:ee:d2:ff:
fb:40:21:f3:b2:79:56:5c:7d:9d:c0:9f:0f:47:be:
8f:1c:56:57:24:3b:12:ab:18:68:5a:87:5c:ed:df:
e3:db:60:c1:6b:b3:7e:8c:47:e6:17:98:93:ce:19:
de:80:31:6b:fd:cf:54:59:1a:b0:11:63:9d:96:d0:
99:3a:c5:22:2b:b1:6d:ae:7f:d9:51:ce:a6:f0:9c:
47:d2:11:52:e4:3a:37:94:02:fe:d8:24:25:f9:92:
29:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:54:0D:6E:27:20:87:54:B0:2B:14:68:91:55:02:19:75:EC:6A:74
X509v3 Authority Key Identifier:
keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/vlQNbicgh1SwKxRokVUCGXXsanQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.71.0/24
85.204.224.0-85.204.232.255
85.204.234.0-85.204.239.255
86.105.164.0/22
86.107.224.0/20
86.107.246.0/23
93.113.0.0/20
185.85.200.0/22
188.215.112.0/21
IPv6:
2001:67c:2580::/48
2a03:7420::/48
Signature Algorithm: sha256WithRSAEncryption
43:1b:e3:89:f9:81:11:00:40:aa:c2:d5:64:a3:34:c9:6e:ff:
11:7a:1b:71:70:d4:ef:61:56:a8:fe:9b:d3:a7:2c:33:1c:d6:
95:8b:95:92:7b:80:e0:7a:c0:8e:64:26:79:59:87:76:22:8d:
b8:57:0f:e6:86:30:5a:46:ea:41:e5:a0:69:03:26:ca:f0:9a:
d5:84:2c:fc:f9:f4:b2:b0:35:33:43:69:e2:f1:d5:63:7a:5f:
55:f8:3f:b6:cb:02:8f:91:43:a2:22:e4:51:65:dc:9b:0d:84:
64:dd:a6:c3:24:9c:48:e7:2b:ce:66:a0:7b:5a:3b:77:18:9a:
80:63:dc:40:fe:e7:95:98:59:14:a9:ed:7d:2b:be:96:5a:06:
cd:fd:9b:42:15:e4:dd:1c:ca:a4:d7:ca:9d:01:31:1e:98:53:
a1:9d:a6:d9:55:cf:ec:14:9b:0a:7e:2a:36:38:53:a0:e7:fe:
e5:69:77:2d:39:42:5d:fd:ff:ef:d5:19:92:aa:f6:cd:c8:5f:
ff:d0:0e:5e:cf:9e:48:a2:82:16:aa:62:c0:22:a1:fd:c1:80:
1a:f0:2b:0e:9b:0c:07:9d:22:e3:9a:bb:d1:d7:cf:7b:39:49:
18:8f:10:c4:7d:5a:fb:98:8e:49:f7:49:d7:0e:ef:98:08:7b:
e1:2f:e5:3a
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAY4d+GJ1/n0VWRCKhbP3lV1gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNzBhZjFhOTk4ODZjOTEwMWQxMzVmNTRiZDJiZGVmMzU4
YjI2NmUwHhcNMjQwMzA4MTIxMDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTU0MGQ2ZTI3MjA4NzU0YjAyYjE0Njg5MTU1MDIxOTc1ZWM2YTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7zLytgONDYVbAMejqBBEUfZc4o5
AA1TvNwVyCRBaJJtx+znwNt9M41BNi+eFo/JRpE1d94fM7BEywf0gHJgVh3stq6G
aS04UsQx5X+2lMaabOoiBMbD7qk8Gr2i23papjnxWum3GY6wk270y4KR+xzldSQ1
rKxezkk99Y/Cdf3c/AMBN1dvWmBx9rK7cXreK6m0x1Q0lk3KF6iZ/O3696/u0v/7
QCHzsnlWXH2dwJ8PR76PHFZXJDsSqxhoWodc7d/j22DBa7N+jEfmF5iTzhnegDFr
/c9UWRqwEWOdltCZOsUiK7Ftrn/ZUc6m8JxH0hFS5Do3lAL+2CQl+ZIp0wIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFL5UDW4nIIdUsCsUaJFVAhl17Gp0MB8GA1UdIwQY
MBaAFE1wrxqZiGyRAdE19UvSve81iyZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hOThmYzctNzkzNS00ZWFlLTk2MmEt
NDYxYWIwZWNlZTAxLzEvdmxRTmJpY2doMVN3S3hSb2tWVUNHWFhzYW5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hOThmYzctNzkzNS00ZWFlLTk2MmEtNDYxYWIwZWNlZTAx
LzEvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBMBAIAATBGAwQAJZxHMAwD
BAVVzOADBABVzOgwDAMEAVXM6gMEBFXM4AMEAlZppAMEBFZr4AMEAVZr9gMEBF1x
AAMEArlVyAMEA7zXcDAYBAIAAjASAwcAIAEGfCWAAwcAKgN0IAAAMA0GCSqGSIb3
DQEBCwUAA4IBAQBDG+OJ+YERAECqwtVkozTJbv8RehtxcNTvYVao/pvTpywzHNaV
i5WSe4DgesCOZCZ5WYd2Io24Vw/mhjBaRupB5aBpAybK8JrVhCz8+fSysDUzQ2ni
8dVjel9V+D+2ywKPkUOiIuRRZdybDYRk3abDJJxI5yvOZqB7Wjt3GJqAY9xA/ueV
mFkUqe19K76WWgbN/ZtCFeTdHMqk18qdATEemFOhnabZVc/sFJsKfio2OFOg5/7l
aXctOUJd/f/v1RmSqvbNyF//0A5ez55IooIWqmLAIqH9wYAa8CsOmwwHnSLjmrvR
1897OUkYjxDEfVr7mI5J90nXDu+YCHvhL+U6
-----END CERTIFICATE-----
Generated at Fri Jun 7 18:50:46 2024 by rpki-client on console-fra.rpki-client.org