Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/XInv8IbknzJ-ss5SASvN_06R1uo.roa
File: XInv8IbknzJ-ss5SASvN_06R1uo.roa (raw, json)
Hash identifier: vJu2UPPyTNaPrKdqsqaOlWtZFh2nn3Bz0/EJjz6BjWE=
Subject key identifier: 5C:89:EF:F0:86:E4:9F:32:7E:B2:CE:52:01:2B:CD:FF:4E:91:D6:EA
Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial: 0190BB27C305CEF8F07F5EEA835C83F71E32
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/XInv8IbknzJ-ss5SASvN_06R1uo.roa
Signing time: Tue 16 Jul 2024 10:47:43 +0000
ROA not before: Tue 16 Jul 2024 10:47:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204601
IP address blocks: 45.81.224.0/22 maxlen: 22
45.82.68.0/22 maxlen: 22
45.82.176.0/22 maxlen: 22
45.87.0.0/22 maxlen: 22
45.136.84.0/24 maxlen: 24
45.136.85.0/24 maxlen: 24
45.136.86.0/24 maxlen: 24
45.136.87.0/24 maxlen: 24
45.137.64.0/22 maxlen: 22
46.18.107.0/24 maxlen: 24
46.21.250.0/24 maxlen: 24
77.220.214.0/24 maxlen: 24
77.220.215.0/24 maxlen: 24
81.31.197.0/24 maxlen: 24
91.201.25.0/24 maxlen: 24
91.208.127.0/24 maxlen: 24
91.209.226.0/24 maxlen: 24
91.228.56.0/24 maxlen: 24
94.124.78.0/24 maxlen: 24
178.159.38.0/24 maxlen: 24
178.159.39.0/24 maxlen: 24
178.159.42.0/24 maxlen: 24
185.23.108.0/24 maxlen: 24
185.51.121.0/24 maxlen: 24
185.51.246.0/24 maxlen: 24
185.51.247.0/24 maxlen: 24
185.107.237.0/24 maxlen: 24
185.204.109.0/24 maxlen: 24
185.232.164.0/24 maxlen: 24
185.235.129.0/24 maxlen: 24
185.235.130.0/24 maxlen: 24
185.235.131.0/24 maxlen: 24
185.241.52.0/24 maxlen: 24
185.241.53.0/24 maxlen: 24
185.241.54.0/24 maxlen: 24
185.241.55.0/24 maxlen: 24
185.244.216.0/22 maxlen: 22
185.244.216.0/24 maxlen: 24
185.244.217.0/24 maxlen: 24
185.250.204.0/24 maxlen: 24
185.250.205.0/24 maxlen: 24
185.250.206.0/24 maxlen: 24
193.22.21.0/24 maxlen: 24
193.56.8.0/24 maxlen: 24
193.163.7.0/24 maxlen: 24
193.163.113.0/24 maxlen: 24
194.29.53.0/24 maxlen: 24
212.8.244.0/24 maxlen: 24
212.8.246.0/24 maxlen: 24
212.23.221.0/24 maxlen: 24
212.86.101.0/24 maxlen: 24
212.86.102.0/24 maxlen: 24
212.86.108.0/24 maxlen: 24
212.86.109.0/24 maxlen: 24
212.162.152.0/22 maxlen: 24
213.166.68.0/24 maxlen: 24
213.166.69.0/24 maxlen: 24
213.166.70.0/24 maxlen: 24
213.166.71.0/24 maxlen: 24
2a07:5980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 19:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bb:27:c3:05:ce:f8:f0:7f:5e:ea:83:5c:83:f7:1e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Validity
Not Before: Jul 16 10:47:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c89eff086e49f327eb2ce52012bcdff4e91d6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:65:16:2f:f6:49:6f:ed:24:99:c4:28:72:2f:
4d:d1:b5:fe:56:e0:27:57:db:34:2f:55:cb:9a:1c:
63:c6:d9:99:b3:87:20:f3:6e:da:af:61:91:02:a3:
3b:c8:28:cd:f2:81:8d:37:b9:39:ea:3b:1c:59:03:
3b:be:97:39:ec:1f:ab:f0:95:de:a3:c3:fb:bb:7f:
d6:ac:b7:8e:3f:99:05:13:e0:20:a8:d2:a1:67:70:
87:b2:5e:81:53:46:45:5d:13:46:55:e8:6c:f3:8a:
77:1c:0a:6e:d0:af:73:aa:58:50:58:0a:e3:cb:0e:
03:5b:b8:9a:64:5d:8d:ae:32:57:63:e2:d7:50:4c:
95:b3:76:c3:c7:77:91:94:6d:a5:05:d3:c9:b9:05:
7e:13:11:4b:ee:34:30:7d:15:49:a2:52:f0:37:fe:
b1:cf:30:1b:09:ae:4a:d9:a7:ce:18:07:e5:6e:bd:
1b:58:5a:73:16:11:d1:e1:32:48:ff:1f:49:d6:a3:
80:14:87:d0:e1:ba:0d:a2:ef:27:29:42:25:89:6d:
55:2c:23:2c:dc:d5:d7:16:88:fb:34:1b:7e:14:ff:
9b:91:f1:b7:2b:76:28:8e:72:5b:05:a4:d1:24:ba:
2b:16:44:bf:43:e5:52:58:76:be:da:32:82:17:5d:
83:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:89:EF:F0:86:E4:9F:32:7E:B2:CE:52:01:2B:CD:FF:4E:91:D6:EA
X509v3 Authority Key Identifier:
keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/XInv8IbknzJ-ss5SASvN_06R1uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.224.0/22
45.82.68.0/22
45.82.176.0/22
45.87.0.0/22
45.136.84.0/22
45.137.64.0/22
46.18.107.0/24
46.21.250.0/24
77.220.214.0/23
81.31.197.0/24
91.201.25.0/24
91.208.127.0/24
91.209.226.0/24
91.228.56.0/24
94.124.78.0/24
178.159.38.0/23
178.159.42.0/24
185.23.108.0/24
185.51.121.0/24
185.51.246.0/23
185.107.237.0/24
185.204.109.0/24
185.232.164.0/24
185.235.129.0-185.235.131.255
185.241.52.0/22
185.244.216.0/22
185.250.204.0-185.250.206.255
193.22.21.0/24
193.56.8.0/24
193.163.7.0/24
193.163.113.0/24
194.29.53.0/24
212.8.244.0/24
212.8.246.0/24
212.23.221.0/24
212.86.101.0-212.86.102.255
212.86.108.0/23
212.162.152.0/22
213.166.68.0/22
IPv6:
2a07:5980::/29
Signature Algorithm: sha256WithRSAEncryption
0a:e4:8a:46:da:40:a8:14:2a:8e:f4:06:e1:77:49:81:f1:bf:
af:9e:3b:f3:5d:97:07:74:e5:26:ac:0c:75:2f:72:47:7a:8d:
de:5e:1c:2f:38:d6:fe:31:78:c3:f6:fd:86:d6:3b:86:6b:54:
ae:20:0b:28:a9:c3:9e:4c:0a:7d:6e:91:d6:95:99:01:d2:97:
f5:b5:b9:d5:ff:f0:16:bd:50:b4:8d:e8:d5:dd:ec:ec:d7:fa:
d5:3e:5d:3f:3a:ed:80:e6:94:84:64:32:af:b3:74:80:f1:fd:
37:b1:84:50:2e:97:da:02:c6:40:f9:10:fb:10:f4:d6:d4:d2:
25:05:69:29:24:2e:1d:d6:9e:1a:1e:89:7b:06:e3:3d:38:17:
58:f5:0e:ab:ed:79:84:18:de:90:cf:bf:e1:f9:7f:9f:62:73:
db:e7:8b:1e:91:2d:5c:30:d7:6b:67:12:fc:02:4a:7f:88:d4:
58:27:42:b5:86:b3:0b:ee:c2:66:cd:4f:c0:93:d2:8c:bd:44:
97:26:28:da:40:70:67:aa:00:d0:1f:79:56:f0:57:a4:bd:c4:
34:ac:db:12:5c:74:28:fe:78:ed:06:f9:ed:ed:99:3b:c2:86:
8b:c6:88:10:2c:3d:32:01:a9:4e:a0:8f:33:bc:61:7a:21:f8:
36:02:90:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:34:32 2024 by rpki-client on console-fra.rpki-client.org