Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/C3ez_uT3mg7_L2Do5GbNbhX_zDE.roa
File: C3ez_uT3mg7_L2Do5GbNbhX_zDE.roa (raw, json)
Hash identifier: mqMcgfdbVZjP60SVIlFgw7vuEu6yuczVGaQcdx3gw10=
Subject key identifier: 0B:77:B3:FE:E4:F7:9A:0E:FF:2F:60:E8:E4:66:CD:6E:15:FF:CC:31
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 01900BAE5BE3FAFBB1D20B585274399B26CD
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/C3ez_uT3mg7_L2Do5GbNbhX_zDE.roa
Signing time: Wed 12 Jun 2024 09:01:34 +0000
ROA not before: Wed 12 Jun 2024 09:01:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8648
IP address blocks: 5.11.48.0/21 maxlen: 24
5.44.96.0/20 maxlen: 24
31.47.240.0/20 maxlen: 24
37.218.248.0/21 maxlen: 24
37.228.152.0/21 maxlen: 24
45.87.136.0/22 maxlen: 24
46.243.88.0/21 maxlen: 24
77.75.248.0/21 maxlen: 24
81.88.16.0/20 maxlen: 24
81.88.32.0/20 maxlen: 24
82.141.0.0/18 maxlen: 24
84.254.120.0/24 maxlen: 24
85.158.176.0/21 maxlen: 24
89.22.96.0/19 maxlen: 24
91.151.16.0/21 maxlen: 24
91.203.108.0/22 maxlen: 24
91.203.212.0/22 maxlen: 24
91.206.142.0/23 maxlen: 24
91.220.49.0/24 maxlen: 24
91.226.88.0/22 maxlen: 24
93.90.176.0/20 maxlen: 24
93.190.64.0/21 maxlen: 24
94.154.148.0/22 maxlen: 24
95.130.248.0/21 maxlen: 24
109.75.176.0/20 maxlen: 24
109.237.128.0/20 maxlen: 24
128.127.64.0/21 maxlen: 24
141.101.32.0/21 maxlen: 24
178.20.96.0/21 maxlen: 24
178.250.8.0/21 maxlen: 24
178.250.168.0/21 maxlen: 24
185.3.232.0/22 maxlen: 24
185.32.116.0/22 maxlen: 24
185.39.220.0/22 maxlen: 24
185.51.8.0/22 maxlen: 24
185.61.40.0/22 maxlen: 24
185.65.88.0/22 maxlen: 24
185.80.92.0/22 maxlen: 24
185.84.80.0/22 maxlen: 24
185.84.82.0/24 maxlen: 24
185.117.248.0/22 maxlen: 24
185.137.168.0/22 maxlen: 24
185.143.164.0/22 maxlen: 24
185.158.212.0/22 maxlen: 24
185.207.228.0/22 maxlen: 24
185.211.60.0/22 maxlen: 24
188.64.40.0/21 maxlen: 24
192.162.84.0/22 maxlen: 24
193.22.255.0/24 maxlen: 24
193.25.114.0/23 maxlen: 24
193.38.156.0/22 maxlen: 24
194.116.186.0/23 maxlen: 24
194.145.226.0/24 maxlen: 24
195.5.120.0/23 maxlen: 24
195.34.82.0/23 maxlen: 24
195.42.120.0/23 maxlen: 24
195.62.96.0/19 maxlen: 24
195.82.152.0/23 maxlen: 24
195.110.42.0/23 maxlen: 24
195.225.133.0/24 maxlen: 24
212.110.96.0/19 maxlen: 24
213.146.96.0/19 maxlen: 24
2001:880::/32 maxlen: 32
2a00:12c0::/29 maxlen: 48
2a00:5300::/32 maxlen: 48
2a00:fa40::/32 maxlen: 48
2a01:64c0::/32 maxlen: 48
2a01:aee0::/32 maxlen: 48
2a02:248::/32 maxlen: 48
2a02:a60::/32 maxlen: 48
2a02:2b80::/32 maxlen: 48
2a04:4cc0::/29 maxlen: 48
2a04:ff40::/29 maxlen: 48
2a0b:2a40::/29 maxlen: 48
2a0b:6340::/29 maxlen: 48
2a0d:6940::/29 maxlen: 48
2a0e:fe80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0b:ae:5b:e3:fa:fb:b1:d2:0b:58:52:74:39:9b:26:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Jun 12 09:01:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b77b3fee4f79a0eff2f60e8e466cd6e15ffcc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3f:9d:77:76:d8:6c:23:7d:c1:86:5a:5a:a1:
98:72:ee:55:be:1d:0a:fe:07:c4:7b:d2:f4:35:a4:
93:90:b2:35:f2:b2:f4:04:0f:6a:84:ff:b3:16:24:
d4:ac:92:67:c1:e4:6c:7c:96:ae:3d:85:14:6f:47:
a3:bc:b6:6e:07:e2:4b:30:92:0c:54:6b:e1:13:e8:
04:4a:40:e0:19:03:2e:e9:ce:72:98:bb:44:e2:67:
44:aa:09:41:57:73:7e:61:96:d7:dc:88:56:43:4c:
14:53:2a:19:aa:f5:be:39:1a:47:fc:17:93:c9:e4:
94:17:9c:ba:83:77:ac:cf:07:b9:1f:6e:56:89:5d:
07:05:f0:23:8b:4e:54:36:20:6f:d9:fe:65:a1:0c:
bb:60:57:44:0f:04:4a:40:7f:5f:a4:50:eb:87:5d:
a9:97:c4:26:54:05:f9:9b:af:8a:b6:2f:e5:c4:59:
50:d6:cf:a8:3b:99:eb:f1:44:08:20:07:91:93:a7:
17:e0:e2:fc:82:4a:e8:12:08:27:cb:b5:eb:fc:80:
05:97:43:54:2d:e8:c5:97:3a:0c:28:77:c2:b1:fc:
28:63:cc:7a:64:36:30:df:a4:31:16:08:a8:63:4b:
85:4b:8f:22:f9:29:9b:a3:14:23:cf:fa:5c:74:6b:
71:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:77:B3:FE:E4:F7:9A:0E:FF:2F:60:E8:E4:66:CD:6E:15:FF:CC:31
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/C3ez_uT3mg7_L2Do5GbNbhX_zDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.48.0/21
5.44.96.0/20
31.47.240.0/20
37.218.248.0/21
37.228.152.0/21
45.87.136.0/22
46.243.88.0/21
77.75.248.0/21
81.88.16.0-81.88.47.255
82.141.0.0/18
84.254.120.0/24
85.158.176.0/21
89.22.96.0/19
91.151.16.0/21
91.203.108.0/22
91.203.212.0/22
91.206.142.0/23
91.220.49.0/24
91.226.88.0/22
93.90.176.0/20
93.190.64.0/21
94.154.148.0/22
95.130.248.0/21
109.75.176.0/20
109.237.128.0/20
128.127.64.0/21
141.101.32.0/21
178.20.96.0/21
178.250.8.0/21
178.250.168.0/21
185.3.232.0/22
185.32.116.0/22
185.39.220.0/22
185.51.8.0/22
185.61.40.0/22
185.65.88.0/22
185.80.92.0/22
185.84.80.0/22
185.117.248.0/22
185.137.168.0/22
185.143.164.0/22
185.158.212.0/22
185.207.228.0/22
185.211.60.0/22
188.64.40.0/21
192.162.84.0/22
193.22.255.0/24
193.25.114.0/23
193.38.156.0/22
194.116.186.0/23
194.145.226.0/24
195.5.120.0/23
195.34.82.0/23
195.42.120.0/23
195.62.96.0/19
195.82.152.0/23
195.110.42.0/23
195.225.133.0/24
212.110.96.0/19
213.146.96.0/19
IPv6:
2001:880::/32
2a00:12c0::/29
2a00:5300::/32
2a00:fa40::/32
2a01:64c0::/32
2a01:aee0::/32
2a02:248::/32
2a02:a60::/32
2a02:2b80::/32
2a04:4cc0::/29
2a04:ff40::/29
2a0b:2a40::/29
2a0b:6340::/29
2a0d:6940::/29
2a0e:fe80::/29
Signature Algorithm: sha256WithRSAEncryption
2d:3a:5c:61:3e:c4:ae:fe:72:8d:c3:d1:bb:99:45:0d:ac:21:
bc:f1:9d:e0:1c:95:74:2e:87:cb:d1:0a:f4:4c:33:a0:5d:99:
51:e9:4e:b5:38:af:53:1c:d4:e5:64:d5:78:55:f2:8c:3b:10:
f3:39:34:25:d1:68:24:4f:53:e8:8e:39:12:b2:a6:48:d5:9a:
2b:b8:f9:e4:5a:30:82:f1:09:a6:bd:ce:ce:f2:13:2d:9a:f2:
ef:c3:bb:fd:8e:34:fa:1c:47:6d:63:95:d6:40:62:59:fc:e3:
96:67:9c:5d:4e:c2:8c:79:bc:a2:1a:49:af:81:a6:88:10:8b:
71:92:ce:58:5c:2c:93:19:ba:0e:3a:fe:26:4d:18:16:fc:29:
cb:f2:72:07:e3:9d:1c:28:8c:84:c0:18:f4:39:23:55:af:36:
a6:6e:9b:00:0e:6d:d9:3f:ce:1c:d5:42:62:88:69:08:41:0f:
a1:19:35:f9:8d:cf:e8:8e:66:ab:d1:89:0b:ca:1a:b3:9a:1f:
6d:71:f2:1d:b7:6e:13:21:c6:dc:03:00:ef:60:be:d0:0e:4c:
51:25:cb:06:a9:e1:98:a0:fa:e5:2d:f2:23:c7:5c:4d:02:7b:
51:d8:af:9f:02:9d:48:f2:1a:b2:dd:7c:94:9d:25:f5:a0:0d:
71:3b:73:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:22:33 2024 by rpki-client on console-ams.rpki-client.org