Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/HQTg4uoJGUKQKdHNwa7Q1E68q3w.roa
File: HQTg4uoJGUKQKdHNwa7Q1E68q3w.roa (raw, json)
Hash identifier: 3ecQPCZhCC6tRdgRX4TR/P6XmU8OfHylSmvLg39phFU=
Subject key identifier: 1D:04:E0:E2:EA:09:19:42:90:29:D1:CD:C1:AE:D0:D4:4E:BC:AB:7C
Certificate issuer: /CN=0ff8f94454f6ca6a7d70be455b2d6405f98fbcce
Certificate serial: 018CC649F6D671850450FAED3E92F8DD9F21
Authority key identifier: 0F:F8:F9:44:54:F6:CA:6A:7D:70:BE:45:5B:2D:64:05:F9:8F:BC:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_j5RFT2ymp9cL5FWy1kBfmPvM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/HQTg4uoJGUKQKdHNwa7Q1E68q3w.roa
Signing time: Mon 01 Jan 2024 18:29:45 +0000
ROA not before: Mon 01 Jan 2024 18:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42807
IP address blocks: 94.199.200.0/23 maxlen: 23
94.199.200.0/22 maxlen: 22
94.199.205.0/24 maxlen: 24
94.199.204.0/24 maxlen: 24
94.199.206.0/24 maxlen: 24
94.199.207.0/24 maxlen: 24
141.98.204.0/22 maxlen: 22
88.218.129.0/24 maxlen: 24
88.218.128.0/24 maxlen: 24
88.218.131.0/24 maxlen: 24
88.218.130.0/24 maxlen: 24
5.253.140.0/22 maxlen: 22
152.89.36.0/22 maxlen: 22
37.230.104.0/21 maxlen: 21
37.230.106.0/23 maxlen: 23
37.230.110.0/23 maxlen: 23
92.119.76.0/22 maxlen: 22
178.157.8.0/21 maxlen: 21
185.99.196.0/22 maxlen: 22
185.15.40.0/22 maxlen: 22
31.207.84.0/24 maxlen: 24
31.207.83.0/24 maxlen: 24
31.207.85.0/24 maxlen: 24
31.207.80.0/24 maxlen: 24
31.207.82.0/24 maxlen: 24
31.207.81.0/24 maxlen: 24
31.207.87.0/24 maxlen: 24
31.207.86.0/24 maxlen: 24
213.159.0.0/21 maxlen: 21
213.159.28.0/22 maxlen: 22
213.159.31.0/24 maxlen: 24
171.22.184.0/22 maxlen: 22
109.232.216.0/21 maxlen: 21
109.232.216.0/23 maxlen: 23
109.232.219.0/24 maxlen: 24
109.232.218.0/24 maxlen: 24
109.232.222.0/24 maxlen: 24
109.232.221.0/24 maxlen: 24
109.232.223.0/24 maxlen: 24
2a03:adc0:1::/48 maxlen: 48
2a03:adc1::/32 maxlen: 32
2a03:adc0:2::/48 maxlen: 48
2a03:adc0::/48 maxlen: 48
2a03:adc2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_j5RFT2ymp9cL5FWy1kBfmPvM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:f6:d6:71:85:04:50:fa:ed:3e:92:f8:dd:9f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff8f94454f6ca6a7d70be455b2d6405f98fbcce
Validity
Not Before: Jan 1 18:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d04e0e2ea0919429029d1cdc1aed0d44ebcab7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1f:e3:af:df:55:83:72:34:8c:e2:60:27:60:
1b:c8:53:38:61:6d:71:8c:00:25:9e:27:56:a3:dd:
e3:c1:55:5b:a1:ce:15:c3:ba:5e:15:f3:0b:cf:aa:
4d:17:90:ff:3c:80:ef:90:06:cf:6b:47:2f:ad:5b:
6a:a1:be:80:e5:29:c0:3a:32:38:5c:29:08:fa:e5:
3b:c2:f4:d9:80:65:8b:8a:71:5a:8f:3a:4b:68:48:
61:e8:59:36:fa:96:79:1f:44:ff:16:88:04:be:18:
fd:6b:93:32:7d:78:98:57:9b:ff:e7:d8:17:92:b5:
60:bc:94:a5:e6:19:63:1e:72:46:23:5d:f2:11:2c:
73:5c:25:03:af:0a:b8:25:26:6a:ab:b7:94:90:59:
cb:ac:da:58:62:e6:93:9f:ad:db:42:50:48:ce:f6:
d8:19:7a:2d:2b:3e:48:ec:7e:58:27:5a:4a:9e:82:
8a:8c:cc:92:32:9b:71:c7:d1:17:50:b3:d7:d0:a1:
fd:7b:34:ae:11:07:62:cd:f2:45:86:2c:22:c7:b5:
91:27:68:11:48:da:7d:b1:71:c8:95:50:88:e3:5b:
a5:14:99:77:83:a2:f5:92:ee:64:79:e6:7e:a5:97:
aa:32:67:ef:ae:29:91:83:82:bf:45:0d:ce:45:1b:
9f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:04:E0:E2:EA:09:19:42:90:29:D1:CD:C1:AE:D0:D4:4E:BC:AB:7C
X509v3 Authority Key Identifier:
keyid:0F:F8:F9:44:54:F6:CA:6A:7D:70:BE:45:5B:2D:64:05:F9:8F:BC:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_j5RFT2ymp9cL5FWy1kBfmPvM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/HQTg4uoJGUKQKdHNwa7Q1E68q3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.140.0/22
31.207.80.0/21
37.230.104.0/21
88.218.128.0/22
92.119.76.0/22
94.199.200.0/21
109.232.216.0/21
141.98.204.0/22
152.89.36.0/22
171.22.184.0/22
178.157.8.0/21
185.15.40.0/22
185.99.196.0/22
213.159.0.0/21
213.159.28.0/22
IPv6:
2a03:adc0::-2a03:adc0:2:ffff:ffff:ffff:ffff:ffff
2a03:adc1::-2a03:adc2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
72:20:ab:fa:6f:ed:48:55:12:0d:0d:a3:62:e7:04:b7:9a:f6:
d3:2b:fe:6d:a3:bf:a5:fc:db:cd:18:e8:ef:dc:ea:fe:0f:55:
36:35:f5:87:f3:23:66:9b:0e:5c:c4:9c:76:f3:a1:2d:ef:ce:
31:d9:10:e1:a3:a7:1e:c1:90:c2:9e:bf:49:a1:8f:44:bf:1e:
2d:90:20:0c:f3:db:86:44:5a:99:64:a5:42:30:3d:cd:db:e1:
24:6e:e4:c4:29:24:30:1d:1c:c7:84:30:e3:69:5b:a8:19:02:
fc:20:ed:1e:4c:2e:20:fc:c9:97:04:52:55:87:d6:e6:16:ec:
0c:91:3f:94:9c:9f:54:8a:4f:c2:a1:bf:78:ef:f2:ba:b5:be:
f3:7f:2d:97:8e:64:4b:5b:f8:a0:9c:5b:9a:c9:05:37:0a:ac:
56:06:69:c2:7a:b4:e8:1c:6a:1b:30:bd:c3:eb:64:38:94:03:
2d:7f:d2:92:2b:d4:a2:98:f4:c8:92:bb:c8:74:70:70:d6:62:
36:fb:23:f8:8b:15:a7:c2:43:f2:c2:2f:af:01:35:4b:13:2a:
62:60:25:f7:56:32:fa:2e:63:35:97:a4:a4:ae:d3:d4:a0:f7:
6e:01:87:3d:c1:4d:00:2b:51:87:3e:4e:28:66:6a:78:36:e4:
8a:4f:5c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 03:17:48 2024 by rpki-client on console-ams.rpki-client.org