Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/QZ3FkpxrDySkftNaoeTeMYc8hEk.roa
File: QZ3FkpxrDySkftNaoeTeMYc8hEk.roa (raw, json)
Hash identifier: rNLBjO4jAhNE8Tal/tLtFL5Xumjt4OE5q0zsBfvMezg=
Subject key identifier: 41:9D:C5:92:9C:6B:0F:24:A4:7E:D3:5A:A1:E4:DE:31:87:3C:84:49
Certificate issuer: /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial: 018CC56DE1ADB77DCC1096E0A39B393717E8
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/QZ3FkpxrDySkftNaoeTeMYc8hEk.roa
Signing time: Mon 01 Jan 2024 14:29:21 +0000
ROA not before: Mon 01 Jan 2024 14:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 149.255.39.0/24 maxlen: 24
45.158.38.0/24 maxlen: 24
45.158.36.0/23 maxlen: 32
45.158.39.0/24 maxlen: 24
37.72.168.0/21 maxlen: 32
37.72.172.0/23 maxlen: 23
37.72.171.0/24 maxlen: 24
37.72.170.0/23 maxlen: 23
37.72.170.0/24 maxlen: 24
37.72.174.0/23 maxlen: 23
194.126.172.0/24 maxlen: 24
194.126.172.0/22 maxlen: 24
194.126.175.0/24 maxlen: 24
194.126.173.0/24 maxlen: 24
94.100.16.0/20 maxlen: 32
94.100.16.0/24 maxlen: 24
94.100.17.0/24 maxlen: 24
94.100.23.0/24 maxlen: 24
94.100.24.0/24 maxlen: 24
94.100.21.0/24 maxlen: 24
94.100.22.0/24 maxlen: 24
94.100.19.0/24 maxlen: 24
94.100.20.0/24 maxlen: 24
94.100.18.0/24 maxlen: 24
94.100.30.0/24 maxlen: 24
94.100.31.0/24 maxlen: 24
94.100.28.0/24 maxlen: 24
94.100.29.0/24 maxlen: 24
94.100.26.0/24 maxlen: 24
94.100.27.0/24 maxlen: 24
94.100.25.0/24 maxlen: 24
217.79.240.0/24 maxlen: 24
217.79.242.0/23 maxlen: 24
217.79.240.0/20 maxlen: 24
149.255.37.0/24 maxlen: 24
149.255.38.0/24 maxlen: 24
149.255.32.0/21 maxlen: 32
149.255.35.0/24 maxlen: 24
149.255.36.0/24 maxlen: 32
178.236.176.0/21 maxlen: 24
89.233.104.0/24 maxlen: 24
89.233.104.0/21 maxlen: 24
89.233.105.0/24 maxlen: 24
89.233.106.0/24 maxlen: 24
89.233.107.0/24 maxlen: 24
46.21.144.0/24 maxlen: 24
46.21.145.0/24 maxlen: 24
46.21.144.0/20 maxlen: 32
46.21.151.0/24 maxlen: 24
46.21.152.0/24 maxlen: 24
46.21.150.0/24 maxlen: 24
46.21.148.0/24 maxlen: 24
46.21.146.0/24 maxlen: 24
46.21.147.0/24 maxlen: 24
46.21.158.0/23 maxlen: 23
46.21.156.0/24 maxlen: 24
46.21.157.0/24 maxlen: 24
46.21.153.0/24 maxlen: 24
195.242.152.0/23 maxlen: 24
195.242.153.0/24 maxlen: 24
2a02:748:f000::/36 maxlen: 36
2a02:748:c000::/35 maxlen: 35
2a02:748::/35 maxlen: 35
2a02:748:e000::/35 maxlen: 35
2a02:748::/32 maxlen: 48
2a0f:5180::/32 maxlen: 32
2a02:748:6000::/48 maxlen: 48
2a0f:5180::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e1:ad:b7:7d:cc:10:96:e0:a3:9b:39:37:17:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Validity
Not Before: Jan 1 14:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=419dc5929c6b0f24a47ed35aa1e4de31873c8449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:1a:1f:0e:96:a2:e5:fb:cc:34:10:67:4a:
39:d1:db:c8:fc:b8:23:42:84:49:67:71:3a:a4:a6:
26:03:f7:f2:d4:29:aa:a6:b0:62:0f:08:44:ea:ef:
ab:f6:02:82:1b:51:79:db:48:a9:0c:c6:49:51:c0:
f2:15:bf:61:04:f1:79:11:1d:d9:4a:9d:35:c1:e7:
66:ca:55:7a:87:88:44:6c:ec:92:bf:c1:33:08:15:
62:56:61:89:6b:3b:db:93:62:53:65:ce:05:84:37:
f0:44:d3:24:55:d3:57:21:be:fa:5b:82:31:f2:53:
ae:6a:a2:e2:86:00:a2:c4:c9:f3:63:02:40:82:00:
d3:10:6a:ab:03:a0:c4:82:d1:5e:f8:9e:08:f6:f3:
0a:23:c6:cf:5a:43:1e:fd:33:06:f3:6b:66:9d:57:
d5:fa:f6:68:b2:ca:32:84:4d:13:90:20:68:b8:0f:
49:29:f7:45:bb:4c:60:81:95:08:5d:12:bc:0c:dc:
b3:e2:03:99:7b:58:1d:fd:a7:39:5e:15:e1:54:70:
92:4b:33:36:33:f2:d6:87:18:6a:47:92:fd:e2:14:
80:07:00:4e:24:f8:12:9b:6f:60:64:cf:36:51:09:
50:24:77:6e:79:01:ac:9f:a2:55:26:d9:dc:aa:eb:
b8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9D:C5:92:9C:6B:0F:24:A4:7E:D3:5A:A1:E4:DE:31:87:3C:84:49
X509v3 Authority Key Identifier:
keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/QZ3FkpxrDySkftNaoeTeMYc8hEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.168.0/21
45.158.36.0/22
46.21.144.0/20
89.233.104.0/21
94.100.16.0/20
149.255.32.0/21
178.236.176.0/21
194.126.172.0/22
195.242.152.0/23
217.79.240.0/20
IPv6:
2a02:748::/32
2a0f:5180::/29
Signature Algorithm: sha256WithRSAEncryption
9c:f1:4b:2b:c5:c7:58:9e:ab:1b:7c:2b:ec:66:8e:43:d8:72:
17:8a:25:c8:27:b8:12:eb:1a:17:5d:9d:d9:63:2f:2a:30:c1:
3a:07:55:63:ad:1e:30:07:44:46:f4:f3:41:c0:29:3b:61:19:
20:ff:d8:61:25:5e:b0:71:73:43:c4:eb:9c:53:b2:73:97:f4:
ad:52:c3:53:63:f3:ed:a6:06:06:40:ce:b7:e0:69:2f:b9:b5:
c6:8f:c8:6b:c2:00:73:b9:b2:f7:21:d8:8e:8a:63:8a:67:73:
c1:a8:71:3e:84:51:23:e4:c8:16:5a:b6:18:12:eb:61:c5:6f:
69:e3:c7:ac:a7:4e:45:3c:a8:40:63:61:49:cf:8a:61:73:ed:
af:71:49:a3:fd:f1:a7:3f:0c:38:f4:0f:a2:a8:e4:7f:76:05:
a5:e8:44:b9:4e:5a:4f:ab:87:84:c2:08:ed:79:03:65:e7:46:
4d:b6:28:8e:29:9c:97:e7:3a:c5:39:88:da:c1:68:69:80:9d:
09:6f:8b:e5:d3:c3:20:32:b9:80:21:75:1a:bb:b7:99:c2:04:
04:23:71:6a:95:7c:f9:2d:b1:ae:9f:73:76:f5:75:66:70:58:
f7:a2:8e:cf:36:e7:83:5a:79:20:7f:7b:fc:a8:cd:5d:36:fd:
0c:3f:ea:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 07:48:39 2024 by rpki-client on console-fra.rpki-client.org