Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/76kqvSp53LWyuqxSk7reOkpq5jw.roa
File: 76kqvSp53LWyuqxSk7reOkpq5jw.roa (raw, json)
Hash identifier: 1996tJn8cwr/0sL278y6Gsnp6bjfc0S/19QvarBiAbI=
Subject key identifier: EF:A9:2A:BD:2A:79:DC:B5:B2:BA:AC:52:93:BA:DE:3A:4A:6A:E6:3C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0192F84E1C8DDC46E653500C6C770BE5ABD2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/76kqvSp53LWyuqxSk7reOkpq5jw.roa
Signing time: Mon 04 Nov 2024 17:52:01 +0000
ROA not before: Mon 04 Nov 2024 17:52:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 62.76.231.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.34.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.117.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
194.87.121.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.180.0/24 maxlen: 24
194.87.181.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.58.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.192.0.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
212.192.210.0/24 maxlen: 24
212.192.211.0/24 maxlen: 24
212.193.10.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f8:4e:1c:8d:dc:46:e6:53:50:0c:6c:77:0b:e5:ab:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 4 17:52:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efa92abd2a79dcb5b2baac5293bade3a4a6ae63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:9c:95:e4:b6:3b:ad:df:95:b7:bf:9d:1f:
44:ce:5d:56:dc:dd:8e:90:61:3a:c9:ac:c6:60:0c:
d4:f1:89:d4:25:fd:ef:8b:c8:05:68:d2:9d:39:38:
44:71:68:e9:77:aa:89:5a:62:f8:35:8c:14:d7:00:
65:76:2f:2e:4a:44:1f:bf:c9:40:10:d1:5a:31:81:
b2:30:79:34:15:d0:14:f4:b1:9b:a6:14:d4:77:b3:
91:74:81:ca:d5:62:d5:58:9a:d1:19:39:32:a3:f3:
81:81:25:52:00:a5:da:cf:f6:b6:39:51:73:35:f0:
0b:2b:c7:96:00:0d:68:5b:3e:1c:14:e4:09:82:b6:
55:2f:ca:84:6f:95:74:8b:d5:35:ea:aa:b0:51:cf:
f0:9b:58:2b:d3:8c:7e:d7:db:4a:25:ff:24:49:12:
0b:74:f6:6e:24:06:bd:e0:0a:e0:ae:9d:bb:6f:96:
3f:83:14:39:26:5d:cf:32:4c:c1:62:2b:85:b7:1c:
0d:7c:33:60:38:50:99:85:12:b6:aa:66:8c:25:11:
c1:96:c6:70:e0:9d:92:99:70:f5:bc:b6:0a:f3:1f:
50:74:87:57:e8:be:e7:b4:dc:e2:62:c1:69:14:8e:
4d:cb:8d:57:20:e9:44:ac:c2:38:17:61:b7:34:52:
ec:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A9:2A:BD:2A:79:DC:B5:B2:BA:AC:52:93:BA:DE:3A:4A:6A:E6:3C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/76kqvSp53LWyuqxSk7reOkpq5jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
62.76.235.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/24
193.124.91.0/24
193.124.94.0/24
193.124.133.0/24
193.124.226.0/24
194.58.43.0/24
194.58.58.0/24
194.58.60.0/24
194.58.67.0/24
194.87.6.0/23
194.87.16.0/24
194.87.34.0/24
194.87.42.0/24
194.87.63.0/24
194.87.78.0/24
194.87.105.0/24
194.87.116.0/23
194.87.120.0/23
194.87.160.0/24
194.87.163.0/24
194.87.176.0/23
194.87.180.0-194.87.182.255
194.135.23.0-194.135.24.255
195.58.55.0-195.58.56.255
195.58.59.0/24
195.58.62.0/24
195.133.12.0/24
195.133.19.0/24
195.133.58.0/24
195.133.80.0/24
195.133.82.0/24
195.133.195.0/24
212.192.0.0/24
212.192.7.0/24
212.192.10.0/24
212.192.30.0/24
212.192.210.0/23
212.193.10.0/24
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
17:b6:45:a4:5d:9e:9d:04:c8:3e:3e:26:91:21:78:82:5e:38:
af:96:d4:68:06:9b:09:4b:1e:8b:3b:0c:82:17:be:77:6c:61:
18:48:f1:53:b7:e8:c3:e5:0a:b4:0a:f5:12:98:cb:cf:72:8b:
19:e4:b7:ed:75:0f:aa:92:65:f4:da:d6:0b:fb:98:0f:b2:e7:
e4:86:41:7b:8b:0e:22:6f:98:c0:ff:0b:e7:84:eb:6f:2d:ca:
01:69:c6:4f:cf:47:0a:41:e7:89:01:6c:a3:e1:2c:ef:ed:3e:
1f:d1:4c:b8:72:98:49:26:cb:75:18:8a:2d:61:62:da:79:99:
06:85:43:c9:ff:34:c0:7a:80:07:ee:8a:ec:79:5f:aa:4e:c9:
74:8e:37:2b:cd:6d:ff:d4:f4:fe:a5:9b:0a:74:68:bd:52:26:
1a:28:10:f4:9e:82:65:98:df:0a:cc:3f:6d:57:a0:3d:88:6d:
fb:3d:03:78:0d:22:ca:65:40:f0:27:58:b9:8c:a4:4d:fc:a4:
40:37:b9:fa:d9:81:5a:bd:be:50:6d:34:dc:7e:f9:0e:fb:4f:
72:04:ad:85:fd:60:c7:44:45:7a:ff:e3:f8:8d:75:f3:f1:02:
ec:67:7b:47:cf:58:bc:d7:7b:3e:7b:2f:52:f7:19:08:5b:38:
73:c4:83:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:20:47 2024 by rpki-client on console-ams.rpki-client.org