Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/zM1S6u5wasgMbQwdAiooRAPS_W0.roa
File: zM1S6u5wasgMbQwdAiooRAPS_W0.roa (raw, json)
Hash identifier: TH8zFkHagxx5pnDMlF6u3q857czru9SA+L/cMFANzd0=
Subject key identifier: CC:CD:52:EA:EE:70:6A:C8:0C:6D:0C:1D:02:2A:28:44:03:D2:FD:6D
Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial: 018CC3488EFE5A26E9A6696CD12E4D2567FF
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/zM1S6u5wasgMbQwdAiooRAPS_W0.roa
Signing time: Mon 01 Jan 2024 04:29:21 +0000
ROA not before: Mon 01 Jan 2024 04:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31655
IP address blocks: 88.215.0.0/18 maxlen: 29
89.213.16.0/20 maxlen: 24
89.213.32.0/21 maxlen: 24
213.218.192.0/20 maxlen: 24
5.2.96.0/19 maxlen: 24
195.162.96.0/19 maxlen: 24
185.21.208.0/22 maxlen: 24
89.213.8.0/21 maxlen: 24
80.252.64.0/20 maxlen: 24
185.4.196.0/22 maxlen: 24
188.66.64.0/18 maxlen: 24
5.144.156.0/22 maxlen: 24
2a02:c1c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8e:fe:5a:26:e9:a6:69:6c:d1:2e:4d:25:67:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Validity
Not Before: Jan 1 04:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cccd52eaee706ac80c6d0c1d022a284403d2fd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:13:17:a8:c4:27:23:a2:80:62:f1:33:1a:
aa:8b:bc:26:fa:c5:49:94:c8:e7:ef:c8:57:a7:66:
6c:df:81:2e:71:4c:68:52:97:6b:94:3f:f4:98:23:
61:77:d9:66:3a:65:8b:af:d1:00:6c:fc:c8:cc:ad:
ea:d5:4d:c3:59:5c:6a:d1:5c:9b:c2:ac:6e:0f:e8:
90:c2:8d:a6:46:85:d8:b3:e9:5d:3c:c1:68:51:ab:
f1:7f:ae:52:b7:34:1b:c0:d2:9b:2d:d9:c7:c4:fd:
c1:52:66:ea:05:a4:8d:58:df:ec:2e:45:9a:58:b6:
e8:a6:7c:26:b7:e7:75:15:20:8e:c2:cb:5f:55:2c:
38:ae:62:7a:77:c6:89:e3:fb:2e:ec:52:4a:88:3d:
df:10:a6:f8:ef:57:f2:a7:6e:d1:6b:c2:70:ff:ff:
8d:58:20:dc:e9:60:17:e4:ab:83:f2:50:58:d7:c2:
a6:30:19:55:ad:cc:e7:06:7a:a5:b3:ff:fc:4e:b0:
f2:35:7a:19:51:7b:dc:8e:b4:0a:7c:20:59:bd:3f:
2c:45:65:f6:00:7f:ca:9f:26:68:33:ae:10:ad:1d:
f3:00:c8:ac:c0:2b:e3:28:ed:c1:fa:10:dc:6b:2e:
96:ba:3e:3a:fe:ed:a7:fb:7e:b1:e8:00:ce:68:72:
11:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CD:52:EA:EE:70:6A:C8:0C:6D:0C:1D:02:2A:28:44:03:D2:FD:6D
X509v3 Authority Key Identifier:
keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/zM1S6u5wasgMbQwdAiooRAPS_W0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.96.0/19
5.144.156.0/22
80.252.64.0/20
88.215.0.0/18
89.213.8.0-89.213.39.255
185.4.196.0/22
185.21.208.0/22
188.66.64.0/18
195.162.96.0/19
213.218.192.0/20
IPv6:
2a02:c1c0::/29
Signature Algorithm: sha256WithRSAEncryption
5d:10:6d:c0:2a:8d:24:bc:63:43:d6:80:f1:70:85:70:7c:c9:
9d:d1:48:ce:90:75:72:28:f9:43:eb:32:7e:8b:9d:da:02:07:
6d:01:02:77:40:84:2d:59:e1:2b:1a:85:c5:6d:3d:76:e5:b8:
c9:dd:c8:93:a0:3a:6a:6b:b1:26:99:e9:35:cc:3e:7c:1c:27:
5c:cf:ca:ea:80:f5:99:69:04:56:d6:9c:3b:39:de:fa:3d:94:
47:16:4a:d9:b5:14:1b:2f:f0:de:e3:a4:18:71:68:d9:f4:5f:
2c:f4:cf:aa:ef:eb:a1:69:64:48:75:f1:d6:65:ec:ef:47:40:
67:6f:dd:82:61:79:0d:a1:26:b9:e8:4f:6e:c1:48:7e:17:e9:
2b:48:ca:69:c3:9f:f0:6f:c4:51:13:ee:eb:bd:da:03:44:f6:
c0:21:5b:2d:c0:c6:7a:f3:e1:5e:be:6f:2a:6d:4c:0d:b3:3e:
8b:25:2b:47:3e:07:4e:91:f8:8e:bb:e3:22:b2:74:b8:a2:0e:
08:41:65:02:bd:9a:b9:7e:81:b1:1b:20:80:0b:f6:b0:48:22:
aa:88:00:bd:4f:f9:c9:09:82:bb:6a:10:fb:83:0c:b7:02:fb:
df:63:cf:50:53:42:35:f2:d1:ec:3b:5b:5b:fd:59:52:67:9d:
17:26:7d:95
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgISAYzDSI7+Wibppmls0S5NJWf/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZGZjZTNhNTM1NWY4NjFmZGM0OGMzMjAxMmM3OGM5ZGFm
OWE1YTQwHhcNMjQwMTAxMDQyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2NkNTJlYWVlNzA2YWM4MGM2ZDBjMWQwMjJhMjg0NDAzZDJmZDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupcTF6jEJyOigGLxMxqqi7wm+sVJ
lMjn78hXp2Zs34EucUxoUpdrlD/0mCNhd9lmOmWLr9EAbPzIzK3q1U3DWVxq0Vyb
wqxuD+iQwo2mRoXYs+ldPMFoUavxf65StzQbwNKbLdnHxP3BUmbqBaSNWN/sLkWa
WLbopnwmt+d1FSCOwstfVSw4rmJ6d8aJ4/su7FJKiD3fEKb471fyp27Ra8Jw//+N
WCDc6WAX5KuD8lBY18KmMBlVrcznBnqls//8TrDyNXoZUXvcjrQKfCBZvT8sRWX2
AH/KnyZoM64QrR3zAMiswCvjKO3B+hDcay6Wuj46/u2n+36x6ADOaHIRJQIDAQAB
o4ICVjCCAlIwHQYDVR0OBBYEFMzNUurucGrIDG0MHQIqKEQD0v1tMB8GA1UdIwQY
MBaAFMvfzjpTVfhh/cSMMgEseMna+aWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQt
YjQ5ZDg5ZTMwZGRkLzEvek0xUzZ1NXdhc2dNYlF3ZEFpb29SQVBTX1cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQtYjQ5ZDg5ZTMwZGRk
LzEveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBKBAIAATBEAwQFBQJgAwQC
BZCcAwQEUPxAAwQGWNcAMAwDBANZ1QgDBANZ1SADBAK5BMQDBAK5FdADBAa8QkAD
BAXDomADBATV2sAwDQQCAAIwBwMFAyoCwcAwDQYJKoZIhvcNAQELBQADggEBAF0Q
bcAqjSS8Y0PWgPFwhXB8yZ3RSM6QdXIo+UPrMn6LndoCB20BAndAhC1Z4SsahcVt
PXbluMndyJOgOmprsSaZ6TXMPnwcJ1zPyuqA9ZlpBFbWnDs53vo9lEcWStm1FBsv
8N7jpBhxaNn0Xyz0z6rv66FpZEh18dZl7O9HQGdv3YJheQ2hJrnoT27BSH4X6StI
ymnDn/BvxFET7uu92gNE9sAhWy3Axnrz4V6+byptTA2zPoslK0c+B06R+I674yKy
dLiiDghBZQK9mrl+gbEbIIAL9rBIIqqIAL1P+ckJgrtqEPuDDLcC+99jz1BTQjXy
0ew7W1v9WVJnnRcmfZU=
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:41:51 2024 by rpki-client on console-fra.rpki-client.org