Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/d0KU00vJQxnVpiSpaNzqBJEgsmU.roa
File: d0KU00vJQxnVpiSpaNzqBJEgsmU.roa (raw, json)
Hash identifier: QkvQyGU4yp0rauOz+zq7jy9hG+Upb0m9/XCX4/i0dLQ=
Subject key identifier: 77:42:94:D3:4B:C9:43:19:D5:A6:24:A9:68:DC:EA:04:91:20:B2:65
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC5013993270AE99BDBE0AC6D62CDED3E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/d0KU00vJQxnVpiSpaNzqBJEgsmU.roa
Signing time: Mon 01 Jan 2024 12:30:40 +0000
ROA not before: Mon 01 Jan 2024 12:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.229.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.233.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.237.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.252.0/24 maxlen: 24
84.32.253.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.85.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.4.0/24 maxlen: 24
84.32.11.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.172.0/24 maxlen: 24
84.32.174.0/24 maxlen: 24
84.32.175.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.94.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.97.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.18.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.33.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 01:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:39:93:27:0a:e9:9b:db:e0:ac:6d:62:cd:ed:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=774294d34bc94319d5a624a968dcea049120b265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:33:fa:12:ce:1e:7c:07:66:84:71:11:42:
c4:88:a9:1b:fd:82:ba:cf:2f:2d:f8:68:41:13:07:
98:a4:93:f7:51:47:9b:f1:4d:22:6a:c2:eb:97:a4:
b9:0d:01:81:dc:05:f8:32:39:0b:91:7e:d2:6c:f2:
2e:31:69:b1:03:d8:1d:79:47:84:0c:b2:0d:e2:24:
89:73:5f:f4:a4:92:5b:12:25:dc:20:50:03:1f:4d:
f2:40:02:db:09:5b:86:63:6e:ce:c8:21:69:b9:2d:
aa:70:b0:bf:82:31:e9:f5:bf:46:34:7b:88:6d:60:
88:f2:4d:a2:cb:25:b1:f3:4a:46:f8:c9:6a:9e:97:
e4:3d:6c:fb:65:ed:48:5f:cb:77:df:1f:6b:cc:e7:
53:05:97:03:b4:b2:52:04:6a:f1:71:68:05:0c:b2:
6e:49:ac:84:7a:cd:5c:10:0a:cb:0e:67:f4:fa:00:
f9:71:43:21:0f:55:dc:7c:09:84:ba:77:60:5d:37:
cb:d1:5c:69:3d:c8:a1:71:6a:ea:c1:82:ad:99:65:
0c:78:7a:2e:0b:b9:04:23:4f:1c:da:cd:88:5d:ae:
72:45:02:03:d8:4e:4a:ca:28:dd:d0:80:35:0a:35:
60:d7:30:53:f5:2a:d6:53:15:e9:89:86:62:7f:e4:
ac:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:42:94:D3:4B:C9:43:19:D5:A6:24:A9:68:DC:EA:04:91:20:B2:65
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/d0KU00vJQxnVpiSpaNzqBJEgsmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.11.0/24
84.32.14.0/24
84.32.27.0-84.32.31.255
84.32.42.0/23
84.32.62.0/24
84.32.65.0/24
84.32.68.0/24
84.32.76.0/23
84.32.79.0/24
84.32.85.0/24
84.32.88.0-84.32.90.255
84.32.92.0-84.32.94.255
84.32.105.0/24
84.32.150.0/24
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.172.0/24
84.32.174.0/23
84.32.211.0-84.32.213.255
84.32.219.0/24
84.32.221.0-84.32.222.255
84.32.224.0/24
84.32.226.0/24
84.32.228.0/23
84.32.232.0/22
84.32.237.0-84.32.243.255
84.32.245.0-84.32.247.255
84.32.250.0-84.32.255.255
88.216.0.0/23
88.216.3.0/24
88.216.16.0/24
88.216.18.0/24
88.216.22.0/23
88.216.32.0/23
88.216.35.0/24
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.47.0/24
88.216.58.0/24
88.216.64.0/23
88.216.94.0/23
88.216.97.0/24
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0/24
Signature Algorithm: sha256WithRSAEncryption
93:8f:c0:a8:24:ce:83:66:27:91:1c:b8:ff:66:59:1e:e9:6b:
62:6f:11:06:1d:00:5b:a9:35:df:d7:dc:54:0e:1b:5c:84:96:
0c:43:2a:42:60:c6:50:a4:b4:55:bb:b5:ae:41:9d:11:56:40:
7d:c9:90:08:d7:e3:7c:f4:31:71:19:84:24:00:61:2e:d6:1d:
7b:ac:a5:a5:32:ac:d7:1d:1a:91:76:01:75:f5:50:34:2d:09:
59:b1:69:cc:5b:7f:ac:56:46:5c:11:8d:20:59:0e:a8:f2:54:
89:ca:b1:56:69:11:0f:30:a7:49:39:59:f1:69:8a:49:30:c9:
e5:18:9c:19:d4:29:5f:c0:88:78:d1:93:ab:0c:32:d2:8a:c9:
60:25:6e:8d:29:26:f6:da:ff:f6:00:7b:a9:51:e0:ec:d1:35:
90:55:67:1e:d5:c3:64:c1:38:b8:24:f5:09:49:7c:f2:31:fd:
16:21:22:d2:6f:d4:53:76:4c:95:95:08:34:15:e3:5e:1d:66:
fd:b7:50:da:4a:f6:c3:7b:61:ba:df:65:af:a0:88:76:59:28:
61:40:d6:0b:ce:42:9e:c5:0c:bc:04:ca:e9:ba:99:95:19:32:
a7:27:08:60:f7:ca:7a:91:cb:5a:be:57:22:02:a3:9c:70:74:
83:34:4c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 09:06:14 2024 by rpki-client on console-ams.rpki-client.org