Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/UZs7JjwS9VddEzxNIZsMg4I3YGY.roa
File: UZs7JjwS9VddEzxNIZsMg4I3YGY.roa (raw, json)
Hash identifier: mtUV1GUWjR01Jyul5DDVShYfohD2GuK2n3SbnE+lGBY=
Subject key identifier: 51:9B:3B:26:3C:12:F5:57:5D:13:3C:4D:21:9B:0C:83:82:37:60:66
Certificate issuer: /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial: 0192231E90EF6BD09B23108A55B9E5BC62CB
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/UZs7JjwS9VddEzxNIZsMg4I3YGY.roa
Signing time: Tue 24 Sep 2024 08:20:58 +0000
ROA not before: Tue 24 Sep 2024 08:20:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24940
IP address blocks: 5.9.0.0/16 maxlen: 24
5.75.128.0/17 maxlen: 24
5.161.0.0/16 maxlen: 24
23.88.0.0/17 maxlen: 24
37.27.0.0/16 maxlen: 24
46.4.0.0/16 maxlen: 24
49.12.0.0/16 maxlen: 24
49.13.0.0/16 maxlen: 24
65.21.0.0/16 maxlen: 24
65.108.0.0/16 maxlen: 24
65.109.0.0/16 maxlen: 24
78.46.0.0/15 maxlen: 24
85.10.192.0/18 maxlen: 24
88.99.0.0/16 maxlen: 24
88.198.0.0/16 maxlen: 24
91.107.128.0/17 maxlen: 24
94.130.0.0/16 maxlen: 24
95.216.0.0/16 maxlen: 24
95.217.0.0/16 maxlen: 24
116.202.0.0/16 maxlen: 24
116.203.0.0/16 maxlen: 24
128.140.0.0/17 maxlen: 24
135.181.0.0/16 maxlen: 24
138.199.128.0/17 maxlen: 24
142.132.128.0/17 maxlen: 24
157.90.0.0/16 maxlen: 24
157.180.0.0/17 maxlen: 24
159.69.0.0/16 maxlen: 24
162.55.0.0/16 maxlen: 24
167.233.0.0/16 maxlen: 24
167.235.0.0/16 maxlen: 24
168.119.0.0/16 maxlen: 24
176.9.0.0/16 maxlen: 24
178.63.0.0/16 maxlen: 24
185.12.64.0/22 maxlen: 24
188.34.128.0/17 maxlen: 24
188.40.0.0/16 maxlen: 24
188.245.0.0/16 maxlen: 24
195.201.0.0/16 maxlen: 24
213.133.96.0/19 maxlen: 24
213.239.192.0/18 maxlen: 24
2a01:4f8::/32 maxlen: 48
2a01:4f9::/32 maxlen: 48
2a01:4ff:ff01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:23:1e:90:ef:6b:d0:9b:23:10:8a:55:b9:e5:bc:62:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Validity
Not Before: Sep 24 08:20:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=519b3b263c12f5575d133c4d219b0c8382376066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:c7:32:db:85:e5:1c:34:06:2f:6e:42:a7:
5b:4e:00:f4:68:d7:b7:b0:8a:95:60:ed:c4:b5:10:
87:b8:0d:02:ae:df:e5:86:82:27:06:e9:19:6b:7c:
06:1e:1a:fa:2c:2b:c3:43:a1:b9:d5:aa:f6:0b:da:
65:53:71:ee:a6:68:c2:47:47:53:6a:c4:fa:61:76:
b0:ae:1d:e8:56:d9:90:c5:3e:a6:0a:58:75:e6:1b:
ee:32:c9:cd:9d:1e:e1:86:2f:c7:2b:dc:5a:35:83:
2d:c5:94:fa:a1:5c:01:21:c6:15:64:d6:f7:a7:99:
bb:16:46:36:89:ce:da:27:6c:92:d7:1f:b4:11:9e:
26:0a:3e:d2:69:6c:70:27:9d:55:ab:ba:c7:c2:a6:
b5:2a:53:39:72:fe:ea:ec:49:fe:d1:e9:09:92:c8:
26:59:53:61:a8:e0:58:00:3d:f9:c4:d1:4b:6f:c9:
40:83:e1:c2:ea:73:e8:be:67:3a:ed:58:c7:63:34:
0f:e6:03:f2:46:f4:42:e7:44:fa:9d:cf:82:c9:a6:
8a:df:b9:7f:da:0c:6c:e4:c8:72:ce:a8:af:d2:4a:
02:b4:1c:e5:f4:c3:ee:d4:91:1a:91:b2:1f:76:0d:
c7:06:5b:14:df:f9:28:d1:e8:4f:d7:27:dd:dc:d6:
cb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9B:3B:26:3C:12:F5:57:5D:13:3C:4D:21:9B:0C:83:82:37:60:66
X509v3 Authority Key Identifier:
keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/UZs7JjwS9VddEzxNIZsMg4I3YGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.9.0.0/16
5.75.128.0/17
5.161.0.0/16
23.88.0.0/17
37.27.0.0/16
46.4.0.0/16
49.12.0.0/15
65.21.0.0/16
65.108.0.0/15
78.46.0.0/15
85.10.192.0/18
88.99.0.0/16
88.198.0.0/16
91.107.128.0/17
94.130.0.0/16
95.216.0.0/15
116.202.0.0/15
128.140.0.0/17
135.181.0.0/16
138.199.128.0/17
142.132.128.0/17
157.90.0.0/16
157.180.0.0/17
159.69.0.0/16
162.55.0.0/16
167.233.0.0/16
167.235.0.0/16
168.119.0.0/16
176.9.0.0/16
178.63.0.0/16
185.12.64.0/22
188.34.128.0/17
188.40.0.0/16
188.245.0.0/16
195.201.0.0/16
213.133.96.0/19
213.239.192.0/18
IPv6:
2a01:4f8::/31
2a01:4ff:ff01::/48
Signature Algorithm: sha256WithRSAEncryption
cb:29:d3:ae:de:22:33:38:c1:10:64:3d:76:b1:c0:c8:97:11:
d0:6d:c8:9d:8e:14:8d:4e:de:ab:23:f7:04:1b:af:47:1b:24:
f1:1e:bd:5b:0d:51:ad:f2:19:05:2b:58:1e:50:80:74:f2:4f:
33:6d:ab:86:97:ad:ae:d5:2b:71:42:22:b8:2d:1f:a8:86:72:
0b:f9:ba:5f:f2:8d:93:bc:a5:61:0f:75:c0:98:81:a4:29:9d:
df:ae:85:48:cd:0c:6a:45:6d:e5:60:63:a6:08:0f:4a:86:1c:
63:15:76:63:67:ac:8a:bf:c4:e9:94:76:63:b0:99:b5:b8:a4:
6a:fd:d7:60:b2:af:57:6d:7a:46:66:57:03:a1:e4:9f:ce:40:
03:b0:e1:9b:41:36:b5:de:b9:fd:da:f9:f6:f6:c5:9b:f0:33:
ec:8d:9d:ea:58:de:b1:f9:ae:cd:84:db:d8:51:3d:f0:da:f3:
10:64:d3:00:80:b7:7a:9e:c8:7f:26:04:87:16:47:f2:b6:2b:
45:c2:1e:d8:d7:77:17:07:5a:bf:c4:98:80:f2:6a:1c:15:9f:
7a:cf:b5:ec:a6:54:1b:54:1a:8c:34:8c:a2:31:00:89:ab:5b:
fa:6b:57:16:8c:9d:55:30:44:10:b5:02:de:eb:f7:ca:85:19:
ae:e5:80:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:58:34 2024 by rpki-client on console-ams.rpki-client.org