Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/2LnANCmZTbpadddbrFSPBUyEDOE.roa
File: 2LnANCmZTbpadddbrFSPBUyEDOE.roa (raw, json)
Hash identifier: 7s8iSjYP/cr5b7IfxuKrUtUnmwPdLJbK+IywAs6fVwE=
Subject key identifier: D8:B9:C0:34:29:99:4D:BA:5A:75:D7:5B:AC:54:8F:05:4C:84:0C:E1
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 018CC6B90DBACB0877E700E1C4427B98B573
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/2LnANCmZTbpadddbrFSPBUyEDOE.roa
Signing time: Mon 01 Jan 2024 20:31:05 +0000
ROA not before: Mon 01 Jan 2024 20:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 27882
IP address blocks: 158.172.224.0/21 maxlen: 21
158.172.224.0/20 maxlen: 20
158.172.224.0/19 maxlen: 19
158.172.226.0/23 maxlen: 23
158.172.224.0/22 maxlen: 22
158.172.226.0/24 maxlen: 24
158.172.224.0/24 maxlen: 24
158.172.224.0/23 maxlen: 23
158.172.225.0/24 maxlen: 24
158.172.232.0/21 maxlen: 21
158.172.232.0/23 maxlen: 23
158.172.233.0/24 maxlen: 24
158.172.227.0/24 maxlen: 24
158.172.228.0/23 maxlen: 23
158.172.231.0/24 maxlen: 24
158.172.232.0/24 maxlen: 24
158.172.232.0/22 maxlen: 22
158.172.228.0/22 maxlen: 22
158.172.229.0/24 maxlen: 24
158.172.228.0/24 maxlen: 24
158.172.230.0/24 maxlen: 24
158.172.230.0/23 maxlen: 23
158.172.240.0/23 maxlen: 23
158.172.239.0/24 maxlen: 24
158.172.240.0/24 maxlen: 24
158.172.240.0/22 maxlen: 22
158.172.238.0/24 maxlen: 24
158.172.238.0/23 maxlen: 23
158.172.236.0/23 maxlen: 23
158.172.234.0/24 maxlen: 24
158.172.235.0/24 maxlen: 24
158.172.234.0/23 maxlen: 23
158.172.236.0/24 maxlen: 24
158.172.236.0/22 maxlen: 22
158.172.237.0/24 maxlen: 24
158.172.246.0/24 maxlen: 24
158.172.246.0/23 maxlen: 23
158.172.240.0/21 maxlen: 21
158.172.240.0/20 maxlen: 20
158.172.245.0/24 maxlen: 24
158.172.243.0/24 maxlen: 24
158.172.244.0/24 maxlen: 24
158.172.244.0/23 maxlen: 23
158.172.241.0/24 maxlen: 24
158.172.244.0/22 maxlen: 22
158.172.242.0/23 maxlen: 23
158.172.242.0/24 maxlen: 24
158.172.253.0/24 maxlen: 24
158.172.252.0/22 maxlen: 22
158.172.252.0/23 maxlen: 23
158.172.252.0/24 maxlen: 24
158.172.250.0/23 maxlen: 23
158.172.250.0/24 maxlen: 24
158.172.248.0/21 maxlen: 21
158.172.249.0/24 maxlen: 24
158.172.248.0/22 maxlen: 22
158.172.251.0/24 maxlen: 24
158.172.248.0/24 maxlen: 24
158.172.248.0/23 maxlen: 23
158.172.247.0/24 maxlen: 24
158.172.255.0/24 maxlen: 24
158.172.254.0/24 maxlen: 24
158.172.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:0d:ba:cb:08:77:e7:00:e1:c4:42:7b:98:b5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jan 1 20:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8b9c03429994dba5a75d75bac548f054c840ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:05:00:de:ed:bf:98:4f:7e:2d:6f:47:dc:38:
97:40:fb:bf:1e:2a:a4:7e:3f:cd:ea:a6:f8:93:16:
6a:98:68:09:ab:a8:ed:f8:2f:e6:0a:41:45:b3:39:
52:c8:b3:30:c0:c0:89:8b:e2:08:8e:c7:99:c0:de:
9d:6f:c1:41:f8:9d:c6:1b:90:76:b4:2d:a1:75:dc:
f6:c0:e8:00:50:46:8b:37:26:3e:fc:20:02:ea:95:
4e:11:cc:d8:3d:a1:73:3e:42:36:e6:e2:5f:87:84:
e2:0e:89:25:d5:d9:fd:54:6a:d9:e9:6a:54:e3:b4:
b5:92:b0:37:8f:ed:54:58:6e:43:40:d7:64:56:b5:
b5:e5:37:6c:2d:84:2f:23:b3:a8:fc:da:e5:cf:54:
16:b0:27:87:59:7e:68:d4:8e:e9:96:fb:f3:47:7f:
33:06:51:cb:3d:aa:da:09:6f:d1:e3:6e:2d:78:4c:
13:52:b3:40:0a:29:ed:12:60:a4:a4:4b:05:20:b3:
0b:c6:d6:fd:e5:50:53:4a:25:9c:f2:71:cb:a5:09:
7f:f3:34:55:b1:8b:a1:94:a7:1a:ab:7d:76:15:75:
be:9e:12:63:73:9e:be:d8:f9:79:d4:95:31:9b:2b:
3c:76:2a:94:ac:69:47:ec:d6:f8:8d:13:60:f6:48:
83:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B9:C0:34:29:99:4D:BA:5A:75:D7:5B:AC:54:8F:05:4C:84:0C:E1
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/2LnANCmZTbpadddbrFSPBUyEDOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.224.0/19
Signature Algorithm: sha256WithRSAEncryption
28:85:79:3c:dc:86:1e:ec:81:7b:c3:23:8c:d9:58:79:0e:df:
0e:09:7d:8b:82:eb:57:22:72:15:9b:da:30:1c:24:4d:e0:a8:
0e:c4:eb:26:20:3a:98:52:00:4a:fe:46:fb:eb:c6:8c:c6:ed:
4f:bd:46:48:07:68:7f:a4:93:98:4d:15:e2:02:fc:fb:2f:19:
4c:30:92:e4:d9:3d:5c:2f:6f:bf:b4:1f:6a:55:65:4b:49:66:
70:ee:08:1c:1d:6e:3e:d7:1a:6c:9e:55:2a:ae:68:e3:5a:a8:
4f:53:c1:be:e6:77:09:16:13:8f:0b:bd:a1:92:42:f9:56:e7:
e5:36:1a:79:56:c0:bb:81:6c:de:95:d4:35:8c:ef:db:4b:fb:
37:54:b8:f8:dd:6f:4b:ce:68:e2:65:07:57:a4:79:cb:95:b3:
d5:3d:c5:a3:82:9b:9f:88:38:a4:18:c9:1e:82:b0:6a:35:9f:
4d:54:fa:6c:30:3f:cb:ba:73:ea:c4:0f:a3:c9:f1:e4:4a:b4:
5b:6d:0c:65:ee:71:54:08:a5:cd:27:cf:66:33:12:be:2a:2b:
bf:f0:ce:94:71:5f:09:46:dd:ce:81:96:90:4b:3e:0f:c0:36:
ff:e7:02:62:ff:c4:d0:68:a5:c1:f8:ba:af:06:42:66:da:86:
8f:4c:6e:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuQ26ywh35wDhxEJ7mLVzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1
MzhkNDcwHhcNMjQwMTAxMjAzMTA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGI5YzAzNDI5OTk0ZGJhNWE3NWQ3NWJhYzU0OGYwNTRjODQwY2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogUA3u2/mE9+LW9H3DiXQPu/Hiqk
fj/N6qb4kxZqmGgJq6jt+C/mCkFFszlSyLMwwMCJi+IIjseZwN6db8FB+J3GG5B2
tC2hddz2wOgAUEaLNyY+/CAC6pVOEczYPaFzPkI25uJfh4TiDokl1dn9VGrZ6WpU
47S1krA3j+1UWG5DQNdkVrW15TdsLYQvI7Oo/Nrlz1QWsCeHWX5o1I7plvvzR38z
BlHLParaCW/R424teEwTUrNACintEmCkpEsFILMLxtb95VBTSiWc8nHLpQl/8zRV
sYuhlKcaq312FXW+nhJjc56+2Pl51JUxmys8diqUrGlH7Nb4jRNg9kiD3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNi5wDQpmU26WnXXW6xUjwVMhAzhMB8GA1UdIwQY
MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It
MWVkMTA5NTRiZDk2LzEvMkxuQU5DbVpUYnBhZGRkYnJGU1BCVXlFRE9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2
LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnqzgMA0G
CSqGSIb3DQEBCwUAA4IBAQAohXk83IYe7IF7wyOM2Vh5Dt8OCX2LgutXInIVm9ow
HCRN4KgOxOsmIDqYUgBK/kb768aMxu1PvUZIB2h/pJOYTRXiAvz7LxlMMJLk2T1c
L2+/tB9qVWVLSWZw7ggcHW4+1xpsnlUqrmjjWqhPU8G+5ncJFhOPC72hkkL5Vufl
Nhp5VsC7gWzeldQ1jO/bS/s3VLj43W9LzmjiZQdXpHnLlbPVPcWjgpufiDikGMke
grBqNZ9NVPpsMD/LunPqxA+jyfHkSrRbbQxl7nFUCKXNJ89mMxK+Kiu/8M6UcV8J
Rt3OgZaQSz4PwDb/5wJi/8TQaKXB+LqvBkJm2oaPTG4Y
-----END CERTIFICATE-----
Generated at Sun May 5 20:05:53 2024 by rpki-client on console-fra.rpki-client.org