Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/Ym_npFTJNTxZ0IrEFGtgN-HsgpI.roa
File: Ym_npFTJNTxZ0IrEFGtgN-HsgpI.roa (raw, json)
Hash identifier: vpdXrWahwUZSLgY/fs3MFvabGAuQSWhEWRs0+wSpd4Q=
Subject key identifier: 62:6F:E7:A4:54:C9:35:3C:59:D0:8A:C4:14:6B:60:37:E1:EC:82:92
Certificate issuer: /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial: 018CC49360056F7E9C97C8F8296A4002FD45
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/Ym_npFTJNTxZ0IrEFGtgN-HsgpI.roa
Signing time: Mon 01 Jan 2024 10:30:41 +0000
ROA not before: Mon 01 Jan 2024 10:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34762
IP address blocks: 188.211.170.0/23 maxlen: 24
87.238.160.0/21 maxlen: 24
89.36.74.0/23 maxlen: 24
188.93.152.0/21 maxlen: 24
77.73.96.0/21 maxlen: 24
5.134.0.0/21 maxlen: 24
194.150.225.0/24 maxlen: 24
194.150.224.0/23 maxlen: 23
194.150.224.0/24 maxlen: 24
188.208.36.0/23 maxlen: 24
178.208.32.0/19 maxlen: 24
79.174.128.0/21 maxlen: 24
217.19.224.0/20 maxlen: 24
217.19.228.0/22 maxlen: 24
217.19.232.0/23 maxlen: 24
217.19.234.0/23 maxlen: 24
195.13.56.0/23 maxlen: 24
195.13.56.0/24 maxlen: 24
37.72.160.0/21 maxlen: 24
176.62.160.0/20 maxlen: 24
31.193.176.0/21 maxlen: 24
83.217.80.0/20 maxlen: 24
89.42.54.0/23 maxlen: 24
185.86.16.0/22 maxlen: 24
188.93.96.0/21 maxlen: 24
194.26.24.0/24 maxlen: 24
77.241.80.0/20 maxlen: 24
77.241.83.0/24 maxlen: 24
77.241.87.0/24 maxlen: 24
77.241.95.0/24 maxlen: 24
185.2.52.0/22 maxlen: 24
77.241.93.0/24 maxlen: 24
195.234.184.0/24 maxlen: 24
93.115.168.0/23 maxlen: 23
185.18.8.0/22 maxlen: 24
94.176.98.0/23 maxlen: 24
89.44.166.0/23 maxlen: 24
217.21.176.0/20 maxlen: 24
217.21.176.0/21 maxlen: 24
217.21.179.0/24 maxlen: 24
217.21.184.0/22 maxlen: 24
217.21.188.0/22 maxlen: 24
83.217.64.0/19 maxlen: 24
83.217.64.0/20 maxlen: 20
193.111.95.0/24 maxlen: 24
62.182.56.0/21 maxlen: 21
88.151.240.0/21 maxlen: 24
194.165.51.0/24 maxlen: 24
193.239.210.0/23 maxlen: 24
195.47.215.0/24 maxlen: 24
31.14.50.0/23 maxlen: 24
185.162.28.0/22 maxlen: 24
37.148.176.0/21 maxlen: 24
185.111.196.0/22 maxlen: 24
2a07:ca80::/29 maxlen: 64
2a00:1c98::/32 maxlen: 64
2a02:d08::/32 maxlen: 64
2a00:7000::/32 maxlen: 64
2a03:a800::/32 maxlen: 32
2a00:1c98:fff0::/44 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:60:05:6f:7e:9c:97:c8:f8:29:6a:40:02:fd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
Validity
Not Before: Jan 1 10:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=626fe7a454c9353c59d08ac4146b6037e1ec8292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c9:e3:5f:e5:78:35:54:88:7b:8d:38:b0:50:
3e:25:16:9d:04:3a:e5:07:d0:4c:a1:50:60:ff:6c:
62:66:ec:50:ae:0a:83:ea:00:03:9c:19:92:79:7f:
dc:70:0e:4c:35:88:05:69:52:e2:4c:fc:18:92:d4:
02:fe:78:f4:24:90:10:91:85:01:73:73:50:2a:43:
38:2c:09:7e:d8:fa:48:d0:90:e3:54:1e:94:ee:32:
b3:04:76:ac:ce:4e:3c:c1:02:6d:69:93:fd:a3:c8:
47:b1:b7:c3:0b:a0:ed:f1:7e:8b:a5:be:1b:31:9a:
a1:3e:a0:23:7b:1c:65:f5:0f:1f:2c:02:27:90:09:
0b:a8:d8:88:94:6f:b9:aa:92:02:09:30:8a:c4:d3:
27:38:7d:bd:4c:95:f3:35:e7:0d:e0:dc:35:4c:91:
78:3c:3c:fd:4d:39:b2:fa:86:f4:b2:c2:20:fe:a4:
7f:83:fd:cb:04:58:c5:ca:d3:be:79:0a:8b:8d:c6:
d4:97:ec:15:7a:56:c4:61:c0:1d:ab:70:de:dc:fc:
0a:67:76:5d:4e:a8:43:a3:1f:a0:23:ea:16:94:c8:
80:b8:b0:59:77:eb:fe:c7:4f:d8:49:a3:b1:ae:e8:
15:69:7b:74:48:c7:ac:dc:bc:b0:72:2e:76:70:e7:
ad:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6F:E7:A4:54:C9:35:3C:59:D0:8A:C4:14:6B:60:37:E1:EC:82:92
X509v3 Authority Key Identifier:
keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/Ym_npFTJNTxZ0IrEFGtgN-HsgpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.0.0/21
31.14.50.0/23
31.193.176.0/21
37.72.160.0/21
37.148.176.0/21
62.182.56.0/21
77.73.96.0/21
77.241.80.0/20
79.174.128.0/21
83.217.64.0/19
87.238.160.0/21
88.151.240.0/21
89.36.74.0/23
89.42.54.0/23
89.44.166.0/23
93.115.168.0/23
94.176.98.0/23
176.62.160.0/20
178.208.32.0/19
185.2.52.0/22
185.18.8.0/22
185.86.16.0/22
185.111.196.0/22
185.162.28.0/22
188.93.96.0/21
188.93.152.0/21
188.208.36.0/23
188.211.170.0/23
193.111.95.0/24
193.239.210.0/23
194.26.24.0/24
194.150.224.0/23
194.165.51.0/24
195.13.56.0/23
195.47.215.0/24
195.234.184.0/24
217.19.224.0/20
217.21.176.0/20
IPv6:
2a00:1c98::/32
2a00:7000::/32
2a02:d08::/32
2a03:a800::/32
2a07:ca80::/29
Signature Algorithm: sha256WithRSAEncryption
a3:62:a7:48:09:e0:43:eb:60:cd:a5:2c:43:0e:ef:22:0f:e3:
b5:0c:97:c1:5a:c7:f9:bd:b6:bd:1a:5a:87:b0:83:20:3b:a8:
15:87:c0:f1:67:bc:a0:ff:3d:a8:e4:34:79:c9:a2:5a:7f:8f:
7b:fe:40:4b:a4:19:fd:b7:67:5d:9c:92:2d:b2:8e:9d:e0:b3:
bc:cd:86:db:2a:f6:d1:d5:e0:7a:b2:f8:49:e9:c1:31:be:72:
51:b6:79:b3:4b:88:2a:cd:ce:b2:cb:2f:cc:c8:3f:1d:96:d3:
1d:bd:bb:d7:6e:8d:65:c6:d7:ae:92:29:e1:cc:74:6f:58:9b:
96:d1:ed:12:05:53:ea:fb:17:74:5b:31:85:2a:7d:7f:28:0f:
5e:1e:c5:f7:9d:62:c0:fb:07:65:32:5c:3a:6c:5c:ad:3a:7f:
17:37:aa:14:09:bc:ce:01:b2:e1:05:28:8b:94:db:64:24:e5:
2e:94:3c:9f:58:ea:97:32:67:f3:ce:0d:a7:79:bb:d8:fd:96:
81:7e:79:47:89:e5:42:4c:42:d4:2e:51:f0:c2:9e:a9:a4:d5:
23:d4:2b:10:26:6a:5e:f2:ed:12:22:9e:8d:09:d9:35:b4:1b:
41:a3:fd:93:31:a4:36:8f:2a:23:19:75:fb:ed:c7:6a:b1:5f:
a7:93:3c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:26:15 2024 by rpki-client on console-fra.rpki-client.org