Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/rGYxZvssei_0byHyJQ8S-82Tmh8.roa
File: rGYxZvssei_0byHyJQ8S-82Tmh8.roa (raw, json)
Hash identifier: tUaO3yAyBaScUEHlfF7+3Gdv5bTkQ0qvKCcMYEtQgaA=
Subject key identifier: AC:66:31:66:FB:2C:7A:2F:F4:6F:21:F2:25:0F:12:FB:CD:93:9A:1F
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01926AF9311807F79A2F473EE7C21F5925EB
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/rGYxZvssei_0byHyJQ8S-82Tmh8.roa
Signing time: Tue 08 Oct 2024 07:12:48 +0000
ROA not before: Tue 08 Oct 2024 07:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216271
IP address blocks: 185.168.28.0/22 maxlen: 22
185.201.136.0/22 maxlen: 22
2a06:b3c0::/29 maxlen: 29
2a06:b440::/29 maxlen: 29
2a06:cac0::/29 maxlen: 29
2a0a:e2c0::/29 maxlen: 29
2a0e:7780::/29 maxlen: 29
2a0f:d480::/29 maxlen: 29
2a0f:e000::/29 maxlen: 29
2a11:2f40::/29 maxlen: 29
2a11:3b40::/29 maxlen: 29
2a11:7240::/29 maxlen: 29
2a11:9600::/29 maxlen: 29
2a11:dcc0::/29 maxlen: 29
2a11:f140::/29 maxlen: 29
2a12:440::/29 maxlen: 29
2a12:ec0::/29 maxlen: 29
2a12:1900::/29 maxlen: 29
2a12:28c0::/29 maxlen: 29
2a12:6640::/29 maxlen: 29
2a12:6740::/29 maxlen: 29
2a12:6b80::/29 maxlen: 29
2a12:6f40::/29 maxlen: 29
2a12:8ec0::/29 maxlen: 29
2a12:ccc0::/29 maxlen: 29
2a12:e240::/29 maxlen: 29
2a12:f0c0::/29 maxlen: 29
2a13:ba00::/29 maxlen: 29
2a13:dac0::/29 maxlen: 29
2a14:c0::/29 maxlen: 29
2a14:140::/29 maxlen: 29
2a14:1c0::/29 maxlen: 29
2a14:800::/29 maxlen: 29
2a14:f40::/29 maxlen: 29
2a14:7e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6a:f9:31:18:07:f7:9a:2f:47:3e:e7:c2:1f:59:25:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Oct 8 07:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac663166fb2c7a2ff46f21f2250f12fbcd939a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d5:c2:91:24:c9:3a:8c:27:99:51:af:ea:64:
fe:1f:52:91:80:a4:a6:62:de:e2:8b:97:9a:92:fd:
fb:89:80:c6:2d:90:39:55:8e:26:f2:33:83:61:4c:
df:19:88:46:a9:99:34:ca:b7:1e:61:ef:0e:0b:32:
0f:15:f3:bf:06:01:6f:09:b4:76:a3:46:db:3e:3c:
1f:21:14:c2:c6:64:24:a9:21:0f:af:42:50:b7:4b:
72:0a:5a:8f:81:a6:6c:bc:a8:19:5a:01:2a:e1:e4:
29:8d:df:d5:cd:b6:4b:24:52:c3:aa:ef:80:8c:1b:
4b:53:91:d6:5f:71:d1:d7:0f:4c:26:ef:35:47:bb:
ac:cd:e4:89:24:e3:ae:0c:78:38:87:78:6a:cb:c0:
e3:b8:f8:94:9c:60:c5:43:ad:21:a9:95:77:31:fc:
0d:4d:b4:7f:5b:33:6c:f6:f6:95:e5:96:c8:c6:8f:
91:ab:e8:e8:fb:3b:21:21:70:de:21:74:05:51:35:
51:8c:94:96:2c:b6:cf:b5:28:7e:74:fa:fa:20:b1:
47:15:1a:81:16:b2:44:b0:a7:26:5b:29:79:f5:85:
a7:b0:1f:86:67:e3:c2:42:81:21:83:c4:4e:58:43:
63:5e:26:f7:9a:a3:8a:53:43:03:12:66:60:9b:f3:
cc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:66:31:66:FB:2C:7A:2F:F4:6F:21:F2:25:0F:12:FB:CD:93:9A:1F
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/rGYxZvssei_0byHyJQ8S-82Tmh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.28.0/22
185.201.136.0/22
IPv6:
2a06:b3c0::/29
2a06:b440::/29
2a06:cac0::/29
2a0a:e2c0::/29
2a0e:7780::/29
2a0f:d480::/29
2a0f:e000::/29
2a11:2f40::/29
2a11:3b40::/29
2a11:7240::/29
2a11:9600::/29
2a11:dcc0::/29
2a11:f140::/29
2a12:440::/29
2a12:ec0::/29
2a12:1900::/29
2a12:28c0::/29
2a12:6640::/29
2a12:6740::/29
2a12:6b80::/29
2a12:6f40::/29
2a12:8ec0::/29
2a12:ccc0::/29
2a12:e240::/29
2a12:f0c0::/29
2a13:ba00::/29
2a13:dac0::/29
2a14:c0::/29
2a14:140::/29
2a14:1c0::/29
2a14:800::/29
2a14:f40::/29
2a14:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
be:01:c1:ee:77:70:2a:36:8a:eb:39:3f:99:24:0b:5c:31:34:
9f:ee:99:ea:8b:ed:71:f8:c0:d8:f4:74:68:e4:2b:8d:be:af:
06:34:1b:58:f9:20:11:fb:57:de:9a:57:89:a9:2a:30:9e:cc:
c4:7d:51:5b:ae:9a:3a:1e:a0:28:c8:a4:65:4b:16:c9:e6:61:
b7:76:62:1c:04:58:5f:6c:7b:5f:ca:e1:9d:96:13:55:aa:9a:
37:e2:2c:8b:84:fe:83:33:f8:71:52:b7:f0:f8:96:3c:9f:e5:
47:28:30:2e:ef:8a:1b:68:32:85:99:c9:ef:f5:be:bf:b9:cf:
11:4c:e1:0e:ae:d6:ea:4f:5c:2b:5a:f6:b0:fc:85:4b:35:20:
f9:c4:4f:54:ce:79:bf:02:39:f2:ff:0d:f5:2e:ab:fb:78:ff:
d5:30:7a:d0:e0:6a:8f:0d:ee:b1:1d:ef:37:8d:8f:ec:9d:26:
d6:fa:90:71:b9:ba:44:2c:31:50:0f:05:4e:7d:6d:b0:0f:27:
26:4e:c9:a3:41:11:55:82:4d:25:4b:61:d3:c4:e6:f2:24:4a:
8c:33:df:4a:be:e7:0f:12:07:85:b6:58:94:34:3d:12:bb:56:
c6:2e:42:9f:3f:2e:21:66:53:da:0a:0f:57:7f:50:43:6b:1a:
e9:0d:67:22
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:12:18 2024 by rpki-client on console-fra.rpki-client.org