Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/q0aUUtN6Oz0nLjTWclEKgKyNrn4.roa
File: q0aUUtN6Oz0nLjTWclEKgKyNrn4.roa (raw, json)
Hash identifier: 28L3WFPVMDi6R1wqOc4UrLKVwldB0aBPH4SpflLc61c=
Subject key identifier: AB:46:94:52:D3:7A:3B:3D:27:2E:34:D6:72:51:0A:80:AC:8D:AE:7E
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01924BFA511A77B84FDB184210AA9CF820B3
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/q0aUUtN6Oz0nLjTWclEKgKyNrn4.roa
Signing time: Wed 02 Oct 2024 06:45:48 +0000
ROA not before: Wed 02 Oct 2024 06:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 80.81.39.0/24 maxlen: 24
80.81.40.0/24 maxlen: 24
80.81.41.0/24 maxlen: 24
80.81.47.0/24 maxlen: 24
80.81.48.0/24 maxlen: 24
80.81.49.0/24 maxlen: 24
80.81.50.0/24 maxlen: 24
80.81.52.0/24 maxlen: 24
80.81.53.0/24 maxlen: 24
80.81.56.0/24 maxlen: 24
80.81.58.0/24 maxlen: 24
80.255.224.0/20 maxlen: 20
83.223.128.0/24 maxlen: 24
83.223.129.0/24 maxlen: 24
83.223.130.0/24 maxlen: 24
83.223.131.0/24 maxlen: 24
83.223.134.0/24 maxlen: 24
83.223.135.0/24 maxlen: 24
83.223.137.0/24 maxlen: 24
83.223.138.0/24 maxlen: 24
83.223.140.0/24 maxlen: 24
83.223.142.0/24 maxlen: 24
83.223.144.0/24 maxlen: 24
83.223.148.0/24 maxlen: 24
83.223.152.0/24 maxlen: 24
83.223.153.0/24 maxlen: 24
83.223.154.0/24 maxlen: 24
83.223.156.0/24 maxlen: 24
83.223.157.0/24 maxlen: 24
83.223.158.0/24 maxlen: 24
85.254.41.0/24 maxlen: 24
85.254.45.0/24 maxlen: 24
85.254.46.0/24 maxlen: 24
85.254.52.0/24 maxlen: 24
85.254.53.0/24 maxlen: 24
85.254.54.0/24 maxlen: 24
85.254.55.0/24 maxlen: 24
85.254.66.0/24 maxlen: 24
85.254.67.0/24 maxlen: 24
85.254.70.0/24 maxlen: 24
85.254.72.0/24 maxlen: 24
85.254.133.0/24 maxlen: 24
85.254.135.0/24 maxlen: 24
85.254.136.0/24 maxlen: 24
85.254.165.0/24 maxlen: 24
85.254.166.0/24 maxlen: 24
85.254.167.0/24 maxlen: 24
85.254.171.0/24 maxlen: 24
85.254.188.0/24 maxlen: 24
85.254.189.0/24 maxlen: 24
85.254.190.0/24 maxlen: 24
85.254.191.0/24 maxlen: 24
91.190.37.0/24 maxlen: 24
91.190.38.0/24 maxlen: 24
91.190.39.0/24 maxlen: 24
91.190.40.0/24 maxlen: 24
91.190.41.0/24 maxlen: 24
91.190.43.0/24 maxlen: 24
91.190.44.0/24 maxlen: 24
91.190.46.0/24 maxlen: 24
91.190.47.0/24 maxlen: 24
91.190.61.0/24 maxlen: 24
91.190.62.0/24 maxlen: 24
94.101.226.0/24 maxlen: 24
94.101.237.0/24 maxlen: 24
159.148.143.0/24 maxlen: 24
159.148.148.0/24 maxlen: 24
159.148.149.0/24 maxlen: 24
159.148.181.0/24 maxlen: 24
159.148.240.0/24 maxlen: 24
159.148.242.0/24 maxlen: 24
185.7.237.0/24 maxlen: 24
185.7.238.0/24 maxlen: 24
185.7.239.0/24 maxlen: 24
185.176.116.0/24 maxlen: 24
185.176.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4b:fa:51:1a:77:b8:4f:db:18:42:10:aa:9c:f8:20:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Oct 2 06:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab469452d37a3b3d272e34d672510a80ac8dae7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:40:ee:2b:64:7e:fe:5d:02:b1:53:e7:be:
66:db:11:4b:0d:97:13:32:74:6a:29:e1:7a:b8:ec:
c2:4f:f9:a7:7d:6b:59:7c:5f:b5:a1:1e:4d:5c:de:
b0:53:00:42:0d:a1:12:6f:5a:9b:fa:7f:91:53:b6:
e9:4c:27:71:1a:29:fa:02:f0:e2:3c:e5:08:5d:6a:
60:04:d9:ae:94:cc:d3:7b:53:63:9a:fc:8c:8b:bd:
ee:74:8c:c9:80:28:06:03:1a:82:55:56:16:2c:5c:
66:9e:f0:e5:d4:cb:f5:06:e8:44:b4:50:2a:45:84:
fc:2a:73:47:d0:ab:96:cf:e4:b4:ce:51:49:45:d3:
fc:dd:03:69:0f:04:46:80:74:73:6a:59:d7:cd:1b:
aa:03:b1:4d:31:f9:a0:1c:8d:c5:29:4f:f5:ed:43:
3c:48:15:de:86:64:f0:18:78:96:50:2d:50:a4:fd:
2a:ee:b7:63:a4:c2:0e:d6:d9:8f:68:8e:4e:22:b1:
6a:a1:29:ee:1a:7a:9a:71:d4:4d:a9:f6:ad:f4:ea:
f5:51:74:92:cd:d4:8b:71:dc:78:a0:22:c8:fc:7c:
f9:ca:37:97:0b:e9:b8:ae:35:a0:c4:b5:c3:64:64:
74:7c:09:24:95:09:70:2d:82:62:a3:08:ae:62:5f:
34:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:46:94:52:D3:7A:3B:3D:27:2E:34:D6:72:51:0A:80:AC:8D:AE:7E
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/q0aUUtN6Oz0nLjTWclEKgKyNrn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.39.0-80.81.41.255
80.81.47.0-80.81.50.255
80.81.52.0/23
80.81.56.0/24
80.81.58.0/24
80.255.224.0/20
83.223.128.0/22
83.223.134.0/23
83.223.137.0-83.223.138.255
83.223.140.0/24
83.223.142.0/24
83.223.144.0/24
83.223.148.0/24
83.223.152.0-83.223.154.255
83.223.156.0-83.223.158.255
85.254.41.0/24
85.254.45.0-85.254.46.255
85.254.52.0/22
85.254.66.0/23
85.254.70.0/24
85.254.72.0/24
85.254.133.0/24
85.254.135.0-85.254.136.255
85.254.165.0-85.254.167.255
85.254.171.0/24
85.254.188.0/22
91.190.37.0-91.190.41.255
91.190.43.0-91.190.44.255
91.190.46.0/23
91.190.61.0-91.190.62.255
94.101.226.0/24
94.101.237.0/24
159.148.143.0/24
159.148.148.0/23
159.148.181.0/24
159.148.240.0/24
159.148.242.0/24
185.7.237.0-185.7.239.255
185.176.116.0/24
185.176.119.0/24
Signature Algorithm: sha256WithRSAEncryption
59:3d:ad:89:5d:e7:75:af:cc:3e:16:4a:f7:db:67:1f:b9:b5:
6f:19:fe:0f:bb:ba:2d:d7:44:3d:a4:08:f6:c7:fc:56:e1:2c:
32:ab:28:98:eb:2e:d7:d4:37:80:73:3b:ea:46:b0:70:82:13:
79:48:42:50:1a:1d:b3:5a:b6:a9:2c:c6:3b:90:fa:64:2b:f3:
fa:90:87:99:0a:bb:63:40:cc:3a:bf:6f:4d:97:2e:f4:0a:c6:
1b:64:e7:53:f9:ef:ca:d8:8f:46:e8:90:de:20:46:b5:93:ab:
c2:b6:ae:0b:9d:29:5e:82:cc:6e:ae:97:fe:ad:36:14:28:49:
c4:10:1a:53:ab:06:0f:1f:81:3c:6f:34:dc:46:3d:83:75:1e:
60:ed:75:56:c7:8a:b9:28:d9:78:d5:58:00:59:b1:3e:f3:aa:
47:c7:bb:80:ee:1f:3e:08:5b:2e:0f:b8:71:8b:44:71:93:b5:
58:86:d1:f0:f8:5a:da:81:52:60:ab:55:d8:06:13:41:4b:8e:
02:fa:e4:39:c2:ec:1a:6e:97:8c:90:d5:30:9d:10:5e:78:d1:
6b:de:da:af:fe:14:53:e8:2f:23:45:4c:7b:42:a1:b3:12:c0:
e0:09:fd:27:54:44:e6:5c:47:fa:bb:2a:8c:7f:70:53:a9:b7:
9e:e8:be:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:22:56 2024 by rpki-client on console-ams.rpki-client.org