Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/cHvMDZxW3jkwFHjCwDWguYX-USM.roa
File: cHvMDZxW3jkwFHjCwDWguYX-USM.roa (raw, json)
Hash identifier: zgQlrfgNnCa12+fotmP5WYvLkMQBYHRfZUmqQgDE6OU=
Subject key identifier: 70:7B:CC:0D:9C:56:DE:39:30:14:78:C2:C0:35:A0:B9:85:FE:51:23
Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Certificate serial: 018CC348C30E0801EF8498A11278C41983AF
Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/cHvMDZxW3jkwFHjCwDWguYX-USM.roa
Signing time: Mon 01 Jan 2024 04:29:34 +0000
ROA not before: Mon 01 Jan 2024 04:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196883
IP address blocks: 109.196.112.0/24 maxlen: 24
109.196.113.0/24 maxlen: 24
109.196.114.0/24 maxlen: 24
109.196.115.0/24 maxlen: 24
109.196.116.0/24 maxlen: 24
109.196.117.0/24 maxlen: 24
109.196.118.0/24 maxlen: 24
109.196.112.0/21 maxlen: 24
109.196.112.0/20 maxlen: 24
109.196.120.0/23 maxlen: 23
109.196.120.0/24 maxlen: 24
109.196.120.0/21 maxlen: 24
109.196.121.0/24 maxlen: 24
109.196.122.0/23 maxlen: 23
109.196.122.0/24 maxlen: 24
109.196.119.0/24 maxlen: 24
109.196.123.0/24 maxlen: 24
109.196.124.0/22 maxlen: 23
109.196.124.0/24 maxlen: 24
109.196.125.0/24 maxlen: 24
109.196.127.0/24 maxlen: 24
109.196.126.0/24 maxlen: 24
2001:67c:11c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c3:0e:08:01:ef:84:98:a1:12:78:c4:19:83:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Validity
Not Before: Jan 1 04:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=707bcc0d9c56de39301478c2c035a0b985fe5123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b3:5a:82:8d:9a:b3:17:d5:7f:6d:f7:75:24:
e0:93:5a:d9:32:69:c5:bf:04:c5:91:5b:b7:0c:a0:
7e:f9:19:20:1c:17:42:15:07:c5:9f:4f:ec:a5:b6:
a5:7a:0a:1e:cb:8c:44:be:72:37:0b:e3:d6:ef:80:
b2:4b:ab:d7:15:10:3d:e7:2d:4a:91:0a:9b:82:20:
aa:64:e7:5d:d9:d3:eb:99:9e:8c:6f:78:45:d0:aa:
22:d2:38:c2:2c:17:3d:8c:38:93:33:56:1d:c1:7a:
56:dc:2d:ab:2e:da:7a:55:7b:a2:f9:5a:0b:1c:3d:
cc:4e:fe:8b:f0:7d:19:7f:92:3c:9e:50:4e:17:00:
7d:a1:45:23:d8:33:0e:6d:b0:fe:bf:88:d4:fe:bf:
f1:7d:a7:75:bf:7b:a7:e2:6b:e7:d1:ab:54:63:3f:
51:c2:25:d3:d3:0a:5c:f3:40:b0:41:04:fd:d4:67:
10:e5:96:0a:12:78:89:7b:7e:87:7d:a7:c5:dc:b2:
09:4a:3d:15:86:81:fb:6d:ea:d7:b7:a4:aa:b2:3e:
48:03:c1:93:a3:e2:86:fd:98:78:03:ed:30:3f:aa:
1f:3a:50:ee:99:5f:e4:07:d5:01:0f:43:f8:dd:93:
aa:9a:83:6a:e3:94:58:f7:04:27:69:32:21:9d:7c:
65:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7B:CC:0D:9C:56:DE:39:30:14:78:C2:C0:35:A0:B9:85:FE:51:23
X509v3 Authority Key Identifier:
keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/cHvMDZxW3jkwFHjCwDWguYX-USM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.196.112.0/20
IPv6:
2001:67c:11c::/48
Signature Algorithm: sha256WithRSAEncryption
53:75:a3:d0:55:f7:84:ff:01:43:bb:28:ca:da:f0:7f:3f:43:
53:6d:0d:8e:d8:8a:01:fe:f7:74:1e:a9:8a:27:25:b2:81:59:
a6:9e:41:f5:a8:38:d9:54:d6:e9:c3:0c:5b:af:2a:e6:27:5e:
08:a5:89:17:83:ac:58:b0:63:43:54:b2:ca:29:6c:e9:7a:5e:
e5:87:3c:ee:04:86:2d:0e:3d:0c:40:5f:ca:d4:9e:75:65:93:
47:9c:3e:80:28:8f:b0:ac:d4:dc:9b:0e:05:52:4d:5c:de:30:
45:4a:02:05:be:4a:b9:22:28:42:66:5b:ad:4d:db:0b:9a:d2:
a2:df:3b:32:8f:8f:39:ac:ef:39:12:3f:67:e9:38:b8:56:7b:
fd:3b:aa:66:33:eb:92:2b:86:54:51:ae:83:05:46:47:0a:1d:
76:77:9f:14:3b:81:a8:f9:98:00:d6:c8:5e:0b:0e:c7:c0:1f:
15:0b:b1:60:6b:de:ad:5d:a2:54:68:21:f0:d5:60:3a:25:0f:
fc:3e:c5:e2:07:be:ac:8d:af:e2:1e:a7:77:50:74:4c:20:9c:
0d:83:b2:0e:e7:e0:a8:14:d6:30:34:8c:fa:c2:82:aa:e0:c3:
b3:fd:ea:96:9a:e7:08:df:a7:16:ed:df:a1:5f:15:24:a4:e4:
bc:9e:57:aa
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzDSMMOCAHvhJihEnjEGYOvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYTE2YmY3ZTBlM2I5MzMwYjU0NDgzZTE5ZjYxM2IwMmI2
MjdiZWYwHhcNMjQwMTAxMDQyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDdiY2MwZDljNTZkZTM5MzAxNDc4YzJjMDM1YTBiOTg1ZmU1MTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7Nago2asxfVf233dSTgk1rZMmnF
vwTFkVu3DKB++RkgHBdCFQfFn0/spbalegoey4xEvnI3C+PW74CyS6vXFRA95y1K
kQqbgiCqZOdd2dPrmZ6Mb3hF0Koi0jjCLBc9jDiTM1YdwXpW3C2rLtp6VXui+VoL
HD3MTv6L8H0Zf5I8nlBOFwB9oUUj2DMObbD+v4jU/r/xfad1v3un4mvn0atUYz9R
wiXT0wpc80CwQQT91GcQ5ZYKEniJe36HfafF3LIJSj0VhoH7berXt6Sqsj5IA8GT
o+KG/Zh4A+0wP6ofOlDumV/kB9UBD0P43ZOqmoNq45RY9wQnaTIhnXxl3QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHB7zA2cVt45MBR4wsA1oLmF/lEjMB8GA1UdIwQY
MBaAFNCha/fg47kzC1RIPhn2E7ArYnvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jZWFmZmItYWMyNS00OTFkLWIzY2Mt
NGVmMDNjMTA4MWY4LzEvY0h2TURaeFczamt3RkhqQ3dEV2d1WVgtVVNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jZWFmZmItYWMyNS00OTFkLWIzY2MtNGVmMDNjMTA4MWY4
LzEvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEbcRwMA8E
AgACMAkDBwAgAQZ8ARwwDQYJKoZIhvcNAQELBQADggEBAFN1o9BV94T/AUO7KMra
8H8/Q1NtDY7YigH+93QeqYonJbKBWaaeQfWoONlU1unDDFuvKuYnXgiliReDrFiw
Y0NUssopbOl6XuWHPO4Ehi0OPQxAX8rUnnVlk0ecPoAoj7Cs1NybDgVSTVzeMEVK
AgW+SrkiKEJmW61N2wua0qLfOzKPjzms7zkSP2fpOLhWe/07qmYz65IrhlRRroMF
RkcKHXZ3nxQ7gaj5mADWyF4LDsfAHxULsWBr3q1dolRoIfDVYDolD/w+xeIHvqyN
r+Iep3dQdEwgnA2Dsg7n4KgU1jA0jPrCgqrgw7P96paa5wjfpxbt36FfFSSk5Lye
V6o=
-----END CERTIFICATE-----
Generated at Sun May 19 17:36:22 2024 by rpki-client on console-ams.rpki-client.org