Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/y8tfOUwZZaU_rM2LhDa0qa_dEZY.roa
File: y8tfOUwZZaU_rM2LhDa0qa_dEZY.roa (raw, json)
Hash identifier: aZHGUKYGqog9q7Ei/pH1aWnRF5gMbtpORb1YG6mYNEE=
Subject key identifier: CB:CB:5F:39:4C:19:65:A5:3F:AC:CD:8B:84:36:B4:A9:AF:DD:11:96
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 018CC3B6715CAA9219CF6DBCB7CA58834A0D
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/y8tfOUwZZaU_rM2LhDa0qa_dEZY.roa
Signing time: Mon 01 Jan 2024 06:29:22 +0000
ROA not before: Mon 01 Jan 2024 06:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56484
IP address blocks: 93.187.39.0/24 maxlen: 24
185.52.116.0/22 maxlen: 22
185.52.118.0/24 maxlen: 24
185.52.119.0/24 maxlen: 24
93.187.37.0/24 maxlen: 24
93.187.38.0/24 maxlen: 24
93.187.34.0/24 maxlen: 24
93.187.35.0/24 maxlen: 24
93.187.36.0/24 maxlen: 24
93.187.32.0/21 maxlen: 21
93.187.32.0/24 maxlen: 24
93.187.33.0/24 maxlen: 24
2a00:dd00:6::/48 maxlen: 48
2a00:dd00::/32 maxlen: 32
2a00:dd00:4::/48 maxlen: 48
2a00:dd00:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:71:5c:aa:92:19:cf:6d:bc:b7:ca:58:83:4a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Jan 1 06:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbcb5f394c1965a53faccd8b8436b4a9afdd1196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:4e:0e:f5:57:4b:bd:36:01:f9:6e:71:6f:
dd:78:b6:de:db:be:02:25:be:a2:df:a2:ad:51:65:
7e:8e:1c:26:a5:7f:2d:ea:ca:c2:46:f2:60:4a:69:
cb:ea:de:8f:a4:1c:67:bc:44:bb:c0:62:83:9a:2b:
8c:48:b9:a8:78:ca:e3:44:b8:a0:98:b5:0d:a2:72:
90:8d:be:d9:7f:47:f8:aa:9e:98:5b:35:9d:41:f7:
b9:44:e1:c6:c0:38:f1:03:d5:52:18:1d:ba:d3:db:
48:39:95:54:cc:d5:5b:e6:cd:66:43:63:c8:37:f4:
1f:48:24:00:87:f1:b3:d7:4e:f8:df:d3:39:41:43:
44:04:97:07:d5:c3:f5:90:92:2e:d0:64:37:36:79:
1a:32:35:3c:25:78:b6:71:47:eb:9b:d0:43:62:29:
66:d1:bf:e5:38:be:74:75:fe:33:3b:f6:af:00:15:
b4:5b:e7:8d:42:7c:e1:58:98:de:88:13:6b:7e:15:
88:ee:58:b7:74:9a:4f:e8:44:57:ac:42:54:2d:fa:
b0:4a:e0:10:19:de:d4:a9:ca:59:4d:dd:68:3e:12:
5e:34:94:d5:89:d3:3a:bd:5c:6c:08:85:5c:90:14:
c3:9d:ea:b3:89:0c:cd:96:46:52:92:f2:93:62:1d:
1d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CB:5F:39:4C:19:65:A5:3F:AC:CD:8B:84:36:B4:A9:AF:DD:11:96
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/y8tfOUwZZaU_rM2LhDa0qa_dEZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.32.0/21
185.52.116.0/22
IPv6:
2a00:dd00::/32
Signature Algorithm: sha256WithRSAEncryption
4c:40:3d:5a:d1:5e:52:03:a2:d4:1d:43:dc:3f:12:d5:c7:b0:
76:ea:3a:eb:37:e0:9f:b1:7d:73:73:40:c1:b3:3f:6f:2f:50:
1a:06:c0:f2:f8:8a:a0:00:af:7a:ca:f6:85:e2:02:4b:6f:5d:
74:98:9d:2b:54:8c:67:25:2d:08:14:24:96:24:be:08:c1:f4:
cb:35:a7:3c:f0:a9:bd:a6:de:d2:f6:9a:19:ff:0d:60:b6:83:
fe:d6:49:49:f6:57:95:10:0f:6e:5f:86:06:ac:15:5f:25:93:
c4:a2:46:5b:21:51:94:99:bf:ba:36:8c:9c:91:01:c6:df:36:
e2:59:df:b5:01:4b:f6:af:35:c7:fd:38:03:ac:e0:16:2d:0f:
94:79:95:e5:a2:da:42:c0:b5:c9:91:fb:25:59:8d:e2:59:72:
6c:4a:96:20:81:63:95:ac:71:f9:6f:a2:15:a9:7f:13:89:d4:
56:27:33:8c:0f:47:0b:14:0f:33:4d:86:98:81:53:13:6a:21:
cc:58:3f:d5:92:32:57:98:f6:f2:3b:87:40:56:ed:11:f3:c8:
d9:84:92:24:63:4b:e3:78:15:1d:8d:ed:b1:94:d2:a9:9c:6a:
ec:fd:67:76:9e:98:55:8e:d1:7a:59:49:18:f9:13:0c:73:c9:
d9:15:8e:95
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzDtnFcqpIZz228t8pYg0oNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDJiMThmNTg4YTUwYjkyNzRmZTM0NjlmZjhiZDRhMTY0
OWQ3NGQwHhcNMjQwMTAxMDYyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmNiNWYzOTRjMTk2NWE1M2ZhY2NkOGI4NDM2YjRhOWFmZGQxMTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnhODvVXS702AflucW/deLbe274C
Jb6i36KtUWV+jhwmpX8t6srCRvJgSmnL6t6PpBxnvES7wGKDmiuMSLmoeMrjRLig
mLUNonKQjb7Zf0f4qp6YWzWdQfe5ROHGwDjxA9VSGB2609tIOZVUzNVb5s1mQ2PI
N/QfSCQAh/Gz107439M5QUNEBJcH1cP1kJIu0GQ3NnkaMjU8JXi2cUfrm9BDYilm
0b/lOL50df4zO/avABW0W+eNQnzhWJjeiBNrfhWI7li3dJpP6ERXrEJULfqwSuAQ
Gd7UqcpZTd1oPhJeNJTVidM6vVxsCIVckBTDneqziQzNlkZSkvKTYh0ddwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFMvLXzlMGWWlP6zNi4Q2tKmv3RGWMB8GA1UdIwQY
MBaAFNwCsY9YilC5J0/jRp/4vUoWSddNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQt
NjY0ZjA0ZDJhNjhkLzEveTh0Zk9Vd1paYVVfck0yTGhEYTBxYV9kRVpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQtNjY0ZjA0ZDJhNjhk
LzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXbsgAwQC
uTR0MA0EAgACMAcDBQAqAN0AMA0GCSqGSIb3DQEBCwUAA4IBAQBMQD1a0V5SA6LU
HUPcPxLVx7B26jrrN+CfsX1zc0DBsz9vL1AaBsDy+IqgAK96yvaF4gJLb110mJ0r
VIxnJS0IFCSWJL4IwfTLNac88Km9pt7S9poZ/w1gtoP+1klJ9leVEA9uX4YGrBVf
JZPEokZbIVGUmb+6NoyckQHG3zbiWd+1AUv2rzXH/TgDrOAWLQ+UeZXlotpCwLXJ
kfslWY3iWXJsSpYggWOVrHH5b6IVqX8TidRWJzOMD0cLFA8zTYaYgVMTaiHMWD/V
kjJXmPbyO4dAVu0R88jZhJIkY0vjeBUdje2xlNKpnGrs/Wd2nphVjtF6WUkY+RMM
c8nZFY6V
-----END CERTIFICATE-----
Generated at Fri Jun 28 23:11:47 2024 by rpki-client on console-fra.rpki-client.org