Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/gb4VMaklN797EUNCxW5O933mdcE.roa
File: gb4VMaklN797EUNCxW5O933mdcE.roa (raw, json)
Hash identifier: nnVbjuP/y+n4Yoa6qj4M9/HdwxN0E7zNHEbHvcRBrzM=
Subject key identifier: 81:BE:15:31:A9:25:37:BF:7B:11:43:42:C5:6E:4E:F7:7D:E6:75:C1
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018EC7F78AE70D0CAE0DA11AD80CBDAB03E8
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/gb4VMaklN797EUNCxW5O933mdcE.roa
Signing time: Wed 10 Apr 2024 12:24:32 +0000
ROA not before: Wed 10 Apr 2024 12:24:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210906
IP address blocks: 85.254.2.0/24 maxlen: 24
85.254.4.0/24 maxlen: 24
85.254.7.0/24 maxlen: 24
85.254.29.0/24 maxlen: 24
85.254.30.0/24 maxlen: 24
85.254.40.0/24 maxlen: 24
85.254.42.0/23 maxlen: 23
85.254.51.0/24 maxlen: 24
85.254.59.0/24 maxlen: 24
85.254.64.0/23 maxlen: 23
85.254.76.0/22 maxlen: 22
85.254.84.0/23 maxlen: 23
85.254.103.0/24 maxlen: 24
85.254.112.0/22 maxlen: 22
85.254.124.0/23 maxlen: 23
85.254.126.0/24 maxlen: 24
85.254.128.0/22 maxlen: 22
85.254.134.0/24 maxlen: 24
85.254.137.0/24 maxlen: 24
85.254.138.0/23 maxlen: 23
85.254.140.0/24 maxlen: 24
85.254.174.0/23 maxlen: 23
85.254.180.0/23 maxlen: 23
159.148.26.0/24 maxlen: 24
159.148.54.0/24 maxlen: 24
159.148.62.0/24 maxlen: 24
159.148.66.0/24 maxlen: 24
159.148.109.0/24 maxlen: 24
159.148.126.0/24 maxlen: 24
159.148.128.0/24 maxlen: 24
159.148.130.0/24 maxlen: 24
159.148.157.0/24 maxlen: 24
159.148.158.0/24 maxlen: 24
159.148.163.0/24 maxlen: 24
159.148.166.0/23 maxlen: 23
159.148.179.0/24 maxlen: 24
159.148.180.0/24 maxlen: 24
159.148.204.0/24 maxlen: 24
159.148.216.0/24 maxlen: 24
159.148.218.0/24 maxlen: 24
159.148.234.0/24 maxlen: 24
159.148.236.0/24 maxlen: 24
159.148.239.0/24 maxlen: 24
159.148.241.0/24 maxlen: 24
159.148.246.0/23 maxlen: 23
159.148.248.0/24 maxlen: 24
185.27.94.0/24 maxlen: 24
217.69.121.0/24 maxlen: 24
217.69.125.0/24 maxlen: 24
217.69.126.0/24 maxlen: 24
217.69.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c7:f7:8a:e7:0d:0c:ae:0d:a1:1a:d8:0c:bd:ab:03:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Apr 10 12:24:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81be1531a92537bf7b114342c56e4ef77de675c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b4:40:1e:d6:5f:e4:2d:5b:12:30:2b:13:0e:
91:e0:05:3e:84:4f:96:f4:30:62:55:49:d7:fa:6f:
89:77:50:b5:db:18:1b:4c:b0:54:54:ca:9c:41:f8:
5a:dd:59:d6:88:58:0b:f8:50:8c:42:10:71:ce:f0:
e8:0e:91:27:e1:1d:3a:62:a3:9d:36:c8:bb:87:10:
fc:fd:e3:a8:d4:64:3c:88:c8:b3:b1:1e:cc:26:7c:
ad:44:1c:d7:92:0e:fe:b0:14:93:d9:c5:8b:69:be:
ce:9f:93:0b:2d:35:4a:dd:38:57:fc:14:8b:7e:d1:
5c:01:da:60:09:4b:2c:1b:9e:3b:3e:7a:c9:0f:0e:
48:1d:96:19:1b:2d:31:08:14:1b:1b:46:0d:92:ac:
c1:34:b8:21:fb:ce:86:bc:0e:5d:e7:39:48:20:80:
73:a2:14:ca:9b:9e:fb:35:df:04:e4:6b:1c:0b:24:
b3:ef:0a:78:1d:d6:18:6f:30:fa:78:9d:0b:09:22:
75:25:ee:df:7f:be:39:24:c0:33:99:f8:4f:6d:b3:
de:2a:a1:40:17:52:06:4b:ca:e6:2b:47:75:2a:48:
14:e2:0f:f6:ec:43:37:40:ec:a0:6b:4c:41:fd:dd:
87:fc:81:79:2b:dd:15:15:3d:b0:89:ff:ae:e6:b9:
e4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BE:15:31:A9:25:37:BF:7B:11:43:42:C5:6E:4E:F7:7D:E6:75:C1
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/gb4VMaklN797EUNCxW5O933mdcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.2.0/24
85.254.4.0/24
85.254.7.0/24
85.254.29.0-85.254.30.255
85.254.40.0/24
85.254.42.0/23
85.254.51.0/24
85.254.59.0/24
85.254.64.0/23
85.254.76.0/22
85.254.84.0/23
85.254.103.0/24
85.254.112.0/22
85.254.124.0-85.254.126.255
85.254.128.0/22
85.254.134.0/24
85.254.137.0-85.254.140.255
85.254.174.0/23
85.254.180.0/23
159.148.26.0/24
159.148.54.0/24
159.148.62.0/24
159.148.66.0/24
159.148.109.0/24
159.148.126.0/24
159.148.128.0/24
159.148.130.0/24
159.148.157.0-159.148.158.255
159.148.163.0/24
159.148.166.0/23
159.148.179.0-159.148.180.255
159.148.204.0/24
159.148.216.0/24
159.148.218.0/24
159.148.234.0/24
159.148.236.0/24
159.148.239.0/24
159.148.241.0/24
159.148.246.0-159.148.248.255
185.27.94.0/24
217.69.121.0/24
217.69.125.0-217.69.127.255
Signature Algorithm: sha256WithRSAEncryption
b2:a4:be:e0:03:bb:ee:40:b5:e5:c1:51:62:62:9f:e2:77:ea:
c5:73:c6:80:ec:49:b8:57:a0:28:fd:90:23:f2:35:25:e1:55:
f9:dd:74:8c:b1:65:78:58:e6:59:1b:97:c5:f1:dd:84:1a:a8:
3b:10:22:cc:06:e1:ec:b5:2d:33:6f:79:a7:b9:06:c8:65:9b:
ba:6c:ef:d2:f4:6d:c0:bc:c9:ca:96:d2:86:db:7d:ff:c2:1b:
09:06:ca:e8:07:46:1b:01:07:00:ac:5f:e6:0c:0c:ff:e3:dc:
e1:27:b5:88:34:eb:50:88:c6:d8:e0:c1:32:fd:15:96:a7:9d:
ac:49:a8:2e:9c:7d:67:55:34:b3:46:d7:3a:24:8a:1f:9a:eb:
bd:89:06:1c:89:24:71:f6:aa:6d:2c:19:d9:62:9b:97:8f:96:
ee:f1:2b:11:53:3c:7f:d7:56:bd:72:b0:98:79:03:2b:9e:d2:
e5:75:dc:75:57:0e:a3:fa:3c:6c:f4:77:7e:01:9f:56:9f:db:
b7:b9:d1:d7:4c:07:1c:f6:20:97:9d:80:68:59:ec:32:de:43:
19:92:20:d9:6d:9e:98:c6:fd:7b:52:39:e1:64:03:bc:78:f4:
1f:9f:d2:11:82:41:41:6a:d3:00:da:22:6b:79:5e:40:b5:4f:
d0:13:4e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 05:48:44 2024 by rpki-client on console-ams.rpki-client.org