Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/X0Sb72QgWGT3keIC7GPcfUGABvI.roa
File: X0Sb72QgWGT3keIC7GPcfUGABvI.roa (raw, json)
Hash identifier: hfDDQX3X1tBk5dEJUKhOgdIUS+UhiY+cR3T21QgoWEI=
Subject key identifier: 5F:44:9B:EF:64:20:58:64:F7:91:E2:02:EC:63:DC:7D:41:80:06:F2
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0193055D9E2673488C58C27C20F7CA0C4DF9
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/X0Sb72QgWGT3keIC7GPcfUGABvI.roa
Signing time: Thu 07 Nov 2024 06:44:01 +0000
ROA not before: Thu 07 Nov 2024 06:44:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42548
IP address blocks: 62.183.76.0/22 maxlen: 22
83.239.112.0/20 maxlen: 20
83.239.123.0/24 maxlen: 24
85.172.176.0/20 maxlen: 20
85.172.182.0/24 maxlen: 24
85.172.184.0/21 maxlen: 21
85.173.160.0/19 maxlen: 19
85.173.160.0/22 maxlen: 22
85.173.165.0/24 maxlen: 24
85.173.166.0/24 maxlen: 24
85.173.169.0/24 maxlen: 24
85.173.170.0/23 maxlen: 23
85.173.172.0/23 maxlen: 23
85.173.174.0/24 maxlen: 24
85.173.177.0/24 maxlen: 24
85.173.180.0/22 maxlen: 22
85.173.188.0/23 maxlen: 23
178.34.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:5d:9e:26:73:48:8c:58:c2:7c:20:f7:ca:0c:4d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Nov 7 06:44:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f449bef64205864f791e202ec63dc7d418006f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:81:7a:85:bd:b5:4a:18:8a:6b:73:ea:d4:
b9:43:54:98:90:5a:cb:98:20:35:c8:ae:ee:9e:92:
4a:d9:70:a3:ce:6a:8b:19:43:ac:39:d9:0e:59:46:
0d:4a:bc:2e:06:a6:df:0e:2e:a2:93:2f:b1:94:ff:
9d:7f:79:63:be:55:27:0f:db:51:c2:7e:e1:e0:14:
14:76:ac:d4:91:d5:4a:2b:4b:61:6f:5d:12:a4:ae:
f3:bb:3e:90:ab:8c:04:f7:98:3c:d6:7b:e8:f3:06:
ad:5f:02:54:7d:12:e4:55:8f:c1:6e:6b:ce:17:0b:
30:26:77:4e:d0:a3:28:7a:25:35:02:7d:17:31:6e:
f0:5c:f4:f0:4f:19:cb:c6:fa:50:fb:92:2a:ad:a7:
42:79:e2:ef:72:01:5a:c9:cf:d3:c1:bf:e6:0d:99:
48:40:50:7e:57:3d:19:08:91:9b:c8:ad:7b:f9:18:
ad:36:4f:56:3d:d7:d0:5f:b1:04:1a:f9:5b:a3:9e:
db:e6:be:0c:4b:8b:76:15:ad:25:92:0f:9c:05:d8:
5e:23:39:23:ab:4e:0e:b2:ce:cb:1b:9e:33:1c:48:
07:bd:63:b4:97:61:9c:6f:fc:91:9b:01:0c:7e:8e:
b5:66:bb:27:f5:44:6e:52:09:3d:2b:56:c4:88:fa:
73:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:44:9B:EF:64:20:58:64:F7:91:E2:02:EC:63:DC:7D:41:80:06:F2
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/X0Sb72QgWGT3keIC7GPcfUGABvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.183.76.0/22
83.239.112.0/20
85.172.176.0/20
85.173.160.0/19
178.34.224.0/19
Signature Algorithm: sha256WithRSAEncryption
3c:68:fc:ad:55:39:df:50:aa:f7:3a:e1:4b:2d:bc:9f:c3:25:
2c:a1:24:36:9e:93:70:f3:8c:05:eb:20:33:aa:de:cc:2c:c0:
87:c9:9f:7d:38:b9:4f:bd:3d:2b:bf:a7:42:f1:73:e3:6c:61:
26:e8:53:d1:8f:c8:6b:39:c7:85:5b:20:5c:fc:6e:0b:06:90:
f2:dd:5c:63:dd:e2:29:71:a8:f3:02:f9:0e:4d:20:b1:fd:25:
e1:f5:85:26:b2:51:4b:0a:5f:58:10:0f:fc:d8:ab:53:4a:5f:
aa:d3:5e:df:2e:a0:f7:c8:9c:f7:58:65:0f:df:f7:0f:ac:53:
f7:03:50:87:5f:d3:6c:57:fe:c5:06:9d:ec:60:77:67:2d:2d:
94:97:b0:b6:9d:56:0f:51:36:38:01:c5:6e:78:29:d8:4f:3f:
e5:2f:a2:7a:3b:11:8f:99:89:0e:09:ce:70:f9:0f:dd:81:f0:
fd:0f:79:30:5b:c7:0f:cc:a2:4e:7a:88:1a:ca:f3:58:c6:6e:
63:5b:b8:b9:7a:2a:52:e8:ce:02:fd:15:3b:83:d9:89:97:ee:
9d:d5:25:6f:c8:26:d7:03:d9:4b:fe:29:90:11:f6:36:e1:40:
b0:41:be:7a:1a:c3:33:ce:5f:9d:75:31:b3:6e:f9:15:91:20:
e4:f1:6b:43
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZMFXZ4mc0iMWMJ8IPfKDE35MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjQxMTA3MDY0NDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjQ0OWJlZjY0MjA1ODY0Zjc5MWUyMDJlYzYzZGM3ZDQxODAwNmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXmBeoW9tUoYimtz6tS5Q1SYkFrL
mCA1yK7unpJK2XCjzmqLGUOsOdkOWUYNSrwuBqbfDi6iky+xlP+df3ljvlUnD9tR
wn7h4BQUdqzUkdVKK0thb10SpK7zuz6Qq4wE95g81nvo8watXwJUfRLkVY/BbmvO
FwswJndO0KMoeiU1An0XMW7wXPTwTxnLxvpQ+5IqradCeeLvcgFayc/Twb/mDZlI
QFB+Vz0ZCJGbyK17+RitNk9WPdfQX7EEGvlbo57b5r4MS4t2Fa0lkg+cBdheIzkj
q04Oss7LG54zHEgHvWO0l2Gcb/yRmwEMfo61Zrsn9URuUgk9K1bEiPpz+QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFF9Em+9kIFhk95HiAuxj3H1BgAbyMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvWDBTYjcyUWdXR1Qza2VJQzdHUGNmVUdBQnZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCPrdMAwQE
U+9wAwQEVaywAwQFVa2gAwQFsiLgMA0GCSqGSIb3DQEBCwUAA4IBAQA8aPytVTnf
UKr3OuFLLbyfwyUsoSQ2npNw84wF6yAzqt7MLMCHyZ99OLlPvT0rv6dC8XPjbGEm
6FPRj8hrOceFWyBc/G4LBpDy3Vxj3eIpcajzAvkOTSCx/SXh9YUmslFLCl9YEA/8
2KtTSl+q017fLqD3yJz3WGUP3/cPrFP3A1CHX9NsV/7FBp3sYHdnLS2Ul7C2nVYP
UTY4AcVueCnYTz/lL6J6OxGPmYkOCc5w+Q/dgfD9D3kwW8cPzKJOeogayvNYxm5j
W7i5eipS6M4C/RU7g9mJl+6d1SVvyCbXA9lL/imQEfY24UCwQb56GsMzzl+ddTGz
bvkVkSDk8WtD
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:27:56 2024 by rpki-client on console-ams.rpki-client.org