Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/e9dw-sz2v6XdRE_v8ZAuj9J6qfo.roa
File: e9dw-sz2v6XdRE_v8ZAuj9J6qfo.roa (raw, json)
Hash identifier: EcViSU5QW1R7Yp8H0EsXiSwsilbdX+VwFYSsscdCX6k=
Subject key identifier: 7B:D7:70:FA:CC:F6:BF:A5:DD:44:4F:EF:F1:90:2E:8F:D2:7A:A9:FA
Certificate issuer: /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Certificate serial: 018CC5007128198433790BEA0B214ADEFA59
Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/e9dw-sz2v6XdRE_v8ZAuj9J6qfo.roa
Signing time: Mon 01 Jan 2024 12:29:49 +0000
ROA not before: Mon 01 Jan 2024 12:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20771
IP address blocks: 88.210.192.0/18 maxlen: 18
37.233.128.0/17 maxlen: 17
80.241.244.0/22 maxlen: 22
80.241.252.0/24 maxlen: 24
185.19.96.0/22 maxlen: 22
185.19.96.0/23 maxlen: 23
185.19.98.0/23 maxlen: 23
80.241.184.0/24 maxlen: 24
212.72.130.0/24 maxlen: 24
85.117.32.0/19 maxlen: 19
85.117.32.0/20 maxlen: 20
85.117.48.0/20 maxlen: 20
134.90.0.0/17 maxlen: 17
89.232.0.0/19 maxlen: 19
78.139.128.0/18 maxlen: 18
176.73.0.0/16 maxlen: 16
2a02:23f0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:71:28:19:84:33:79:0b:ea:0b:21:4a:de:fa:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Validity
Not Before: Jan 1 12:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bd770faccf6bfa5dd444feff1902e8fd27aa9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:44:19:a6:34:7d:ea:2b:5a:1e:ec:b8:fe:6d:
2f:cf:ff:82:0a:c7:b0:e7:7c:00:c0:c2:2e:c8:a3:
da:a0:61:fd:a7:d2:5e:d4:cc:26:70:32:2f:7f:d8:
69:a5:e1:ae:0b:15:fb:4c:56:75:5f:a3:01:eb:4a:
6e:51:07:10:10:d6:57:c0:b0:5a:05:5c:7f:0a:d1:
66:c8:bf:d7:9a:75:31:7e:19:4f:f8:7e:17:34:05:
a7:79:bb:5a:0e:c9:4a:73:71:e3:52:ea:af:15:04:
c6:15:15:3b:f9:df:d7:29:77:7b:0a:ef:10:da:a4:
63:46:13:c4:56:87:43:bd:6a:a4:fb:80:b2:e6:b8:
c3:0c:46:1c:63:cf:9b:f7:71:e6:fd:fa:dc:3e:3e:
15:b1:7d:b3:94:bd:d4:4e:f7:b9:22:e1:f6:92:d7:
04:02:13:c7:42:d3:f4:0c:9c:32:39:d1:10:b1:19:
ca:c8:08:bb:51:5c:e7:9b:21:36:aa:20:47:e7:ac:
90:70:9a:2a:23:4d:cd:10:f5:b7:d8:fa:26:a0:c1:
19:27:aa:28:4b:3b:b7:45:88:6a:62:cc:ea:1b:fb:
65:75:fa:81:d8:fa:c1:72:7e:2b:e8:78:44:ee:88:
c1:34:75:10:8e:5d:2f:db:85:95:7a:27:ca:4f:dd:
56:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D7:70:FA:CC:F6:BF:A5:DD:44:4F:EF:F1:90:2E:8F:D2:7A:A9:FA
X509v3 Authority Key Identifier:
keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/e9dw-sz2v6XdRE_v8ZAuj9J6qfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.233.128.0/17
78.139.128.0/18
80.241.184.0/24
80.241.244.0/22
80.241.252.0/24
85.117.32.0/19
88.210.192.0/18
89.232.0.0/19
134.90.0.0/17
176.73.0.0/16
185.19.96.0/22
212.72.130.0/24
IPv6:
2a02:23f0::/32
Signature Algorithm: sha256WithRSAEncryption
00:9d:9f:9e:aa:40:38:68:7a:9a:d9:aa:bd:f9:bd:2b:b2:10:
22:81:e2:58:3b:f4:6c:40:c6:03:ee:d1:06:99:85:23:c3:47:
52:cc:6a:72:8a:44:ca:f1:8f:1a:4b:a1:82:ea:d7:aa:ee:d8:
05:e9:ec:21:bd:20:5b:f9:3a:21:3d:2b:f5:83:e0:16:08:5f:
95:d5:a2:35:bb:06:e6:e4:28:40:4a:e8:5f:ed:b2:42:10:33:
d5:54:21:60:49:3e:54:fb:32:bb:f2:52:9e:75:30:c5:93:32:
09:0f:36:65:a5:03:1a:ef:e5:25:eb:a4:85:0b:ac:47:eb:64:
cc:ee:07:b0:db:24:73:91:ec:b9:72:92:e6:c9:6b:41:d2:41:
68:2a:4a:0d:6d:50:55:2e:e5:57:cb:7f:37:71:54:95:cb:f7:
d0:b8:bf:91:3d:80:a7:d3:4b:17:98:35:02:97:f7:b3:92:33:
fb:81:d3:5d:62:fc:26:c5:16:b8:7b:8a:92:7c:af:4e:e1:82:
5e:13:55:df:fb:cd:e0:b2:12:c6:35:c2:79:ad:ee:ad:e4:ac:
3d:9a:93:28:fd:68:f0:5a:ef:96:a7:4a:c2:8b:8e:1a:21:65:
2f:2e:fa:e2:59:7a:1e:c7:3f:bf:1e:29:4d:a6:b5:c1:91:64:
f1:cb:1c:0c
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAYzFAHEoGYQzeQvqCyFK3vpZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NjczOGE4ZGFkYWMyZDBkM2FlZGRiOTM0ZjgyMDA2NmI5
ZjVmZWIwHhcNMjQwMTAxMTIyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmQ3NzBmYWNjZjZiZmE1ZGQ0NDRmZWZmMTkwMmU4ZmQyN2FhOWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEQZpjR96itaHuy4/m0vz/+CCsew
53wAwMIuyKPaoGH9p9Je1MwmcDIvf9hppeGuCxX7TFZ1X6MB60puUQcQENZXwLBa
BVx/CtFmyL/XmnUxfhlP+H4XNAWnebtaDslKc3HjUuqvFQTGFRU7+d/XKXd7Cu8Q
2qRjRhPEVodDvWqk+4Cy5rjDDEYcY8+b93Hm/frcPj4VsX2zlL3UTve5IuH2ktcE
AhPHQtP0DJwyOdEQsRnKyAi7UVznmyE2qiBH56yQcJoqI03NEPW32PomoMEZJ6oo
Szu3RYhqYszqG/tldfqB2PrBcn4r6HhE7ojBNHUQjl0v24WVeifKT91WYQIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFHvXcPrM9r+l3URP7/GQLo/Seqn6MB8GA1UdIwQY
MBaAFNZnOKja2sLQ067duTT4IAZrn1/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW1jNHFOcmF3dERUcnQyNU5QZ2dCbXVmWC1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNTc3MjctOTM5Ni00YmY4LWIyNWQt
NmExZTBlYzcxZGE4LzEvZTlkdy1zejJ2NlhkUkVfdjhaQXVqOUo2cWZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jNTc3MjctOTM5Ni00YmY4LWIyNWQtNmExZTBlYzcxZGE4
LzEvMW1jNHFOcmF3dERUcnQyNU5QZ2dCbXVmWC1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBNBAIAATBHAwQHJemAAwQG
TouAAwQAUPG4AwQCUPH0AwQAUPH8AwQFVXUgAwQGWNLAAwQFWegAAwQHhloAAwMA
sEkDBAK5E2ADBADUSIIwDQQCAAIwBwMFACoCI/AwDQYJKoZIhvcNAQELBQADggEB
AACdn56qQDhoeprZqr35vSuyECKB4lg79GxAxgPu0QaZhSPDR1LManKKRMrxjxpL
oYLq16ru2AXp7CG9IFv5OiE9K/WD4BYIX5XVojW7BubkKEBK6F/tskIQM9VUIWBJ
PlT7MrvyUp51MMWTMgkPNmWlAxrv5SXrpIULrEfrZMzuB7DbJHOR7LlykubJa0HS
QWgqSg1tUFUu5VfLfzdxVJXL99C4v5E9gKfTSxeYNQKX97OSM/uB011i/CbFFrh7
ipJ8r07hgl4TVd/7zeCyEsY1wnmt7q3krD2akyj9aPBa75anSsKLjhohZS8u+uJZ
eh7HP78eKU2mtcGRZPHLHAw=
-----END CERTIFICATE-----
Generated at Fri May 3 07:23:47 2024 by rpki-client on console-ams.rpki-client.org