Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/uUPmP8CnKanf95Z9kAvym3WzNFY.roa
File: uUPmP8CnKanf95Z9kAvym3WzNFY.roa (raw, json)
Hash identifier: p3qxnbHwvAhopdAYLoox3LRDm6ECxH6eIxl1wTgyQPA=
Subject key identifier: B9:43:E6:3F:C0:A7:29:A9:DF:F7:96:7D:90:0B:F2:9B:75:B3:34:56
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 0190107AFEF356FCC6C8D93D881F30EAFC71
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/uUPmP8CnKanf95Z9kAvym3WzNFY.roa
Signing time: Thu 13 Jun 2024 07:23:34 +0000
ROA not before: Thu 13 Jun 2024 07:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49544
IP address blocks: 5.180.216.0/23 maxlen: 23
5.180.218.0/23 maxlen: 23
5.200.0.0/19 maxlen: 24
31.204.128.0/19 maxlen: 24
31.204.132.0/22 maxlen: 22
31.204.136.0/23 maxlen: 23
89.104.168.0/23 maxlen: 23
89.104.170.0/23 maxlen: 23
91.195.234.0/23 maxlen: 23
91.198.152.0/24 maxlen: 24
91.216.207.0/24 maxlen: 24
104.153.84.0/22 maxlen: 22
109.200.192.0/19 maxlen: 24
109.200.194.0/23 maxlen: 23
109.200.208.0/22 maxlen: 22
138.128.136.0/22 maxlen: 22
138.128.140.0/22 maxlen: 22
146.247.76.0/22 maxlen: 22
162.244.52.0/22 maxlen: 23
162.245.204.0/22 maxlen: 22
185.41.140.0/22 maxlen: 22
185.50.104.0/22 maxlen: 22
185.52.12.0/22 maxlen: 24
185.179.200.0/23 maxlen: 24
185.179.202.0/23 maxlen: 24
185.197.24.0/22 maxlen: 23
188.122.64.0/19 maxlen: 24
193.43.218.0/23 maxlen: 23
212.19.224.0/22 maxlen: 22
213.163.64.0/19 maxlen: 24
213.179.192.0/19 maxlen: 19
213.179.192.0/22 maxlen: 22
213.179.196.0/22 maxlen: 22
213.179.200.0/22 maxlen: 22
213.179.204.0/22 maxlen: 22
213.179.209.0/24 maxlen: 24
213.179.210.0/23 maxlen: 23
213.179.212.0/22 maxlen: 22
213.179.216.0/22 maxlen: 22
213.179.220.0/22 maxlen: 22
2a00:1630::/29 maxlen: 32
2a00:1630::/32 maxlen: 48
2a00:1631::/32 maxlen: 32
2a00:1632::/32 maxlen: 32
2a00:1637::/32 maxlen: 32
2a00:1d20::/29 maxlen: 32
2a00:1d20::/34 maxlen: 34
2a00:1d26::/32 maxlen: 34
2a01:9580::/32 maxlen: 34
2a01:9580:c000::/34 maxlen: 34
2a04:c600::/29 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:10:7a:fe:f3:56:fc:c6:c8:d9:3d:88:1f:30:ea:fc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: Jun 13 07:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b943e63fc0a729a9dff7967d900bf29b75b33456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:60:03:0e:67:67:a9:bc:5f:8a:dc:87:d8:97:
85:e5:5f:f0:67:54:40:2d:3b:ce:6c:41:7e:fc:ea:
7d:56:66:7e:ab:60:e3:f2:dd:e4:9e:1a:ef:dc:14:
a4:bf:71:ca:42:a5:a1:20:03:fa:68:75:89:8a:5c:
7d:53:f8:bf:6f:a1:c8:d0:ec:e6:ed:d6:1b:b2:7f:
78:70:26:20:ef:5e:30:9b:48:71:1f:31:15:78:13:
c0:6e:db:e6:0a:dd:6e:03:da:ad:c3:8d:0e:51:58:
35:80:04:04:1f:db:18:64:4f:db:e2:87:55:23:dd:
9c:ff:4b:c5:de:07:16:8c:92:58:5b:81:10:31:9e:
4d:20:85:4c:55:6b:df:47:5c:01:13:11:14:72:5d:
ad:3c:87:5d:c9:56:28:ee:e3:e3:6e:c6:c5:d4:3e:
44:00:3c:d4:16:98:f9:cb:7f:39:7a:eb:9f:cf:5c:
ce:a9:e3:16:40:a9:50:86:e8:6c:87:53:ea:75:40:
4f:ae:a8:cf:7c:4b:58:33:90:1c:62:b5:c8:dc:ea:
60:7d:3a:d1:ee:b5:dd:2c:ff:dd:47:d0:7d:c2:42:
f1:64:19:54:d5:51:92:c4:d8:b0:92:1d:0c:34:ac:
50:b1:48:f5:b9:e2:ee:3a:3a:9c:58:66:ce:75:53:
d4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:43:E6:3F:C0:A7:29:A9:DF:F7:96:7D:90:0B:F2:9B:75:B3:34:56
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/uUPmP8CnKanf95Z9kAvym3WzNFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.216.0/22
5.200.0.0/19
31.204.128.0/19
89.104.168.0/22
91.195.234.0/23
91.198.152.0/24
91.216.207.0/24
104.153.84.0/22
109.200.192.0/19
138.128.136.0/21
146.247.76.0/22
162.244.52.0/22
162.245.204.0/22
185.41.140.0/22
185.50.104.0/22
185.52.12.0/22
185.179.200.0/22
185.197.24.0/22
188.122.64.0/19
193.43.218.0/23
212.19.224.0/22
213.163.64.0/19
213.179.192.0/19
IPv6:
2a00:1630::/29
2a00:1d20::/29
2a01:9580::/32
2a04:c600::/29
Signature Algorithm: sha256WithRSAEncryption
19:cf:5f:d8:fb:84:84:01:ae:79:2e:03:b3:81:38:6a:8c:a4:
68:8a:d5:2b:0e:93:1c:fe:f1:7e:22:04:f1:d7:b9:a7:85:aa:
83:56:f1:b5:be:54:83:a7:81:68:0c:68:f9:63:5e:02:9e:e5:
cc:05:6c:5c:c9:93:23:78:14:f3:8f:4a:3d:aa:e2:c5:21:a9:
96:40:cb:1f:a0:49:a7:1f:e0:2a:fc:ad:2a:93:9f:24:9d:35:
f1:97:6d:76:c3:1c:98:ee:23:d4:2f:a2:8c:38:55:25:ae:16:
53:86:63:2f:3c:d9:a8:12:e6:32:df:83:dd:ef:d7:19:ae:56:
ae:71:e4:75:cb:7e:d5:5d:65:9b:64:36:44:00:d2:a3:15:5e:
bf:d5:fd:90:0c:20:95:a1:e7:c8:9e:a6:4e:c2:c5:5c:b2:8c:
39:80:67:ce:e4:14:1d:85:73:c2:d9:a1:b9:6a:f3:d7:d8:51:
ea:a1:7e:6b:43:6c:2b:14:07:5f:29:da:b7:1f:dd:4a:9d:79:
1a:37:0e:14:9c:d9:a3:a3:ac:8c:c9:ba:a5:34:7f:e1:ef:06:
d3:43:48:50:02:b9:fb:23:24:5d:f2:a8:e0:a0:c0:98:c2:dc:
ff:56:14:65:b2:3a:c0:3d:97:c4:d7:31:55:69:a7:3b:03:68:
58:a8:b6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:14:55 2024 by rpki-client on console-fra.rpki-client.org