Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/nHBHszNDvOGHWIGGSnh82c3R5t8.roa
File: nHBHszNDvOGHWIGGSnh82c3R5t8.roa (raw, json)
Hash identifier: d+1zC2FpBOLss86tRts5xQ84bYUhF06jdJ2OrKM3rxE=
Subject key identifier: 9C:70:47:B3:33:43:BC:E1:87:58:81:86:4A:78:7C:D9:CD:D1:E6:DF
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019006E561BFCFA301C2086CB0D54994B61C
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/nHBHszNDvOGHWIGGSnh82c3R5t8.roa
Signing time: Tue 11 Jun 2024 10:43:34 +0000
ROA not before: Tue 11 Jun 2024 10:43:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13194
IP address blocks: 82.140.129.0/24 maxlen: 24
84.15.0.0/16 maxlen: 24
84.15.223.0/24 maxlen: 24
84.46.139.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.1.0/24 maxlen: 24
86.38.34.0/24 maxlen: 24
86.38.41.0/24 maxlen: 24
86.38.52.0/24 maxlen: 24
86.38.62.0/24 maxlen: 24
86.38.64.0/18 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.81.0/24 maxlen: 24
86.38.84.0/24 maxlen: 24
86.38.97.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.228.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.237.0/24 maxlen: 24
86.38.245.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.92.0/24 maxlen: 24
89.117.93.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.141.0/24 maxlen: 24
89.117.156.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.220.0/24 maxlen: 24
89.117.221.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.225.0/24 maxlen: 24
89.117.243.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.255.0/24 maxlen: 24
185.189.154.0/24 maxlen: 24
213.226.128.0/18 maxlen: 24
213.226.161.0/24 maxlen: 24
213.252.192.0/20 maxlen: 20
213.252.194.0/24 maxlen: 24
213.252.220.0/24 maxlen: 24
213.252.223.0/24 maxlen: 24
213.252.224.0/22 maxlen: 22
213.252.234.0/23 maxlen: 23
213.252.236.0/23 maxlen: 23
213.252.252.0/24 maxlen: 24
213.252.254.0/24 maxlen: 24
217.9.248.0/23 maxlen: 23
2a00:f500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:e5:61:bf:cf:a3:01:c2:08:6c:b0:d5:49:94:b6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jun 11 10:43:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c7047b33343bce1875881864a787cd9cdd1e6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:7b:01:59:32:4f:a2:81:cb:e1:4e:94:09:
f5:8e:14:06:9a:0f:e5:6e:07:40:17:dd:6a:ff:e2:
83:68:98:a3:e2:68:74:e3:2c:d3:f8:d0:60:4b:a3:
cf:e3:81:2e:7f:f5:36:42:e8:5a:9d:73:e2:f3:5b:
63:a9:05:7b:8c:25:42:18:d4:29:46:c3:46:29:7d:
f2:b7:94:fb:bf:cb:d5:c4:51:b2:75:7b:28:d5:16:
2b:4d:7c:36:cd:b4:61:8b:08:ca:eb:11:b2:3a:1d:
93:21:37:b7:a6:0c:cd:67:bc:b7:7b:89:33:94:d7:
13:1a:ca:aa:75:a7:28:da:01:0c:7f:2a:c0:40:9d:
73:b2:c8:73:e8:86:be:03:84:96:06:67:d3:83:2d:
8e:15:7d:64:7b:59:a2:3c:99:72:70:a2:01:e6:13:
7f:34:83:85:c4:6f:7a:c8:da:89:ad:84:5d:5a:1b:
d3:43:c5:0a:d2:e3:60:77:c4:ee:2b:6c:c4:c5:1c:
0e:7d:4a:ae:7c:00:f7:20:08:9c:1c:b9:f3:33:31:
26:7d:51:8b:65:cd:bb:e2:c3:fa:c1:41:fe:a2:8f:
a9:5f:ae:47:e2:89:7a:87:49:fe:a0:25:a7:6d:4c:
94:f6:82:bf:86:57:94:35:fc:9a:31:57:2f:1f:97:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:70:47:B3:33:43:BC:E1:87:58:81:86:4A:78:7C:D9:CD:D1:E6:DF
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/nHBHszNDvOGHWIGGSnh82c3R5t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.129.0/24
84.15.0.0/16
84.46.139.0/24
84.46.204.0/24
84.46.207.0/24
86.38.1.0/24
86.38.34.0/24
86.38.41.0/24
86.38.52.0/24
86.38.62.0/24
86.38.64.0/18
86.38.152.0/23
86.38.215.0/24
86.38.228.0/24
86.38.230.0/24
86.38.237.0/24
86.38.245.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.92.0/23
89.117.125.0/24
89.117.127.0/24
89.117.138.0/24
89.117.141.0/24
89.117.156.0/24
89.117.165.0/24
89.117.220.0/23
89.117.223.0/24
89.117.225.0/24
89.117.243.0/24
89.117.247.0/24
89.117.249.0/24
89.117.255.0/24
185.189.154.0/24
213.226.128.0/18
213.252.192.0/20
213.252.220.0/24
213.252.223.0-213.252.227.255
213.252.234.0-213.252.237.255
213.252.252.0/24
213.252.254.0/24
217.9.248.0/23
IPv6:
2a00:f500::/29
Signature Algorithm: sha256WithRSAEncryption
24:a2:a6:77:2d:81:1c:91:99:97:77:2b:f5:0f:27:cc:af:9b:
c6:3c:ea:4e:14:be:98:f5:f5:84:98:e0:e8:c8:2c:ed:99:85:
1d:b5:03:fb:34:75:21:08:55:8c:5c:48:f3:ff:f6:36:b8:d3:
41:fe:29:e8:99:98:3b:ad:ee:35:fc:70:f3:98:79:89:01:b8:
1a:69:76:70:dc:0f:ca:2e:64:86:7a:e8:64:9c:1e:73:94:4a:
b7:13:72:bb:89:ef:7b:f3:8e:44:08:f7:19:f9:20:4c:8c:14:
4f:f7:89:bd:e4:04:3d:a8:2e:38:9e:76:e0:77:f6:a2:c1:ac:
4c:91:d5:27:5d:4e:08:62:01:03:15:6a:7c:77:ac:54:a9:03:
19:c9:03:bf:d6:b2:b3:f6:99:d2:85:3f:b1:fc:fa:27:c9:1b:
e1:94:1d:b9:f5:46:ed:0d:7a:2d:5c:f0:03:98:f0:04:0b:c4:
ff:37:66:57:50:31:80:af:90:bd:47:d3:6f:ec:17:2e:e3:37:
3d:87:a9:ac:1c:53:32:91:78:cd:92:90:bb:92:04:b7:30:49:
3b:ee:61:6c:46:11:b5:63:af:fc:a7:74:67:88:36:2d:55:b8:
18:92:32:8e:dd:7b:ea:92:36:4a:76:ba:5c:b1:56:f7:c3:f4:
eb:96:f9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 13:56:02 2024 by rpki-client on console-fra.rpki-client.org