Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/nzk7HhhXRPWU9sIy8SzFGn-aGEM.roa
File: nzk7HhhXRPWU9sIy8SzFGn-aGEM.roa (raw, json)
Hash identifier: 7F0wxpm+jCLhYsHtcI6P3XrN6jw+s+w2To6BautELDc=
Subject key identifier: 9F:39:3B:1E:18:57:44:F5:94:F6:C2:32:F1:2C:C5:1A:7F:9A:18:43
Certificate issuer: /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial: 018CC793FC6378A8A5C305C1432E62106ACD
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/nzk7HhhXRPWU9sIy8SzFGn-aGEM.roa
Signing time: Tue 02 Jan 2024 00:30:13 +0000
ROA not before: Tue 02 Jan 2024 00:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24940
IP address blocks: 142.132.128.0/17 maxlen: 24
168.119.0.0/16 maxlen: 24
162.55.0.0/16 maxlen: 24
49.13.0.0/16 maxlen: 24
65.109.0.0/16 maxlen: 24
167.235.0.0/16 maxlen: 24
116.203.0.0/16 maxlen: 24
88.198.0.0/16 maxlen: 24
5.161.0.0/16 maxlen: 24
116.202.0.0/16 maxlen: 24
159.69.0.0/16 maxlen: 24
188.40.0.0/16 maxlen: 24
88.99.0.0/16 maxlen: 24
5.75.128.0/17 maxlen: 24
91.107.128.0/17 maxlen: 24
95.217.0.0/16 maxlen: 24
128.140.0.0/17 maxlen: 24
49.12.0.0/16 maxlen: 24
65.108.0.0/16 maxlen: 24
213.133.96.0/19 maxlen: 24
94.130.0.0/16 maxlen: 24
37.27.0.0/16 maxlen: 24
85.10.192.0/18 maxlen: 24
46.4.0.0/16 maxlen: 24
178.63.0.0/16 maxlen: 24
157.90.0.0/16 maxlen: 24
135.181.0.0/16 maxlen: 24
188.245.0.0/16 maxlen: 24
188.34.128.0/17 maxlen: 24
65.21.0.0/16 maxlen: 24
23.88.0.0/17 maxlen: 24
185.12.64.0/22 maxlen: 24
95.216.0.0/16 maxlen: 24
78.46.0.0/15 maxlen: 24
167.233.0.0/16 maxlen: 24
213.239.192.0/18 maxlen: 24
195.201.0.0/16 maxlen: 24
5.9.0.0/16 maxlen: 24
176.9.0.0/16 maxlen: 24
2a01:4f8::/32 maxlen: 48
2a01:4ff:ff01::/48 maxlen: 48
2a01:4f9::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:fc:63:78:a8:a5:c3:05:c1:43:2e:62:10:6a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Validity
Not Before: Jan 2 00:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f393b1e185744f594f6c232f12cc51a7f9a1843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f4:40:18:9a:23:7e:a0:ee:d7:48:79:47:e0:
bb:b7:80:de:0b:1c:48:bb:47:62:b1:aa:c1:bb:7b:
ef:08:9b:93:86:d2:1c:36:92:a1:74:a9:72:d0:13:
ac:4f:89:f7:24:8a:20:95:0b:18:0d:cc:ce:53:49:
52:2b:0e:41:42:c2:38:4b:43:13:12:0f:0d:35:36:
d3:08:c7:f0:f9:13:66:53:25:61:ed:9d:2d:6a:a4:
c6:fa:12:b6:6d:52:39:af:42:4f:bb:46:00:08:16:
e9:3f:cb:2b:dc:7f:13:90:0d:ae:34:3e:e0:b6:d8:
47:69:70:09:28:48:3b:96:76:65:23:ac:2d:3e:76:
2e:04:93:a7:89:a3:16:57:62:9b:24:f6:78:d3:4f:
17:d5:9c:2c:1c:18:a2:b9:df:a9:b3:b8:0c:87:dc:
5a:cb:4e:3c:38:1f:35:1a:c2:6c:dd:bd:40:dc:dc:
a5:eb:ba:96:ef:45:ed:13:49:f2:fb:41:4a:6b:c4:
92:9b:cb:d0:aa:f6:58:95:00:be:99:5f:13:94:ca:
c1:64:90:da:fc:0c:4d:06:c6:48:47:60:c8:26:d5:
70:7d:12:d4:00:4f:d7:e8:65:ff:1b:40:f7:2d:fe:
8b:c1:42:99:c5:02:1a:2e:bd:36:92:3c:de:5d:d8:
83:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:39:3B:1E:18:57:44:F5:94:F6:C2:32:F1:2C:C5:1A:7F:9A:18:43
X509v3 Authority Key Identifier:
keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/nzk7HhhXRPWU9sIy8SzFGn-aGEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.9.0.0/16
5.75.128.0/17
5.161.0.0/16
23.88.0.0/17
37.27.0.0/16
46.4.0.0/16
49.12.0.0/15
65.21.0.0/16
65.108.0.0/15
78.46.0.0/15
85.10.192.0/18
88.99.0.0/16
88.198.0.0/16
91.107.128.0/17
94.130.0.0/16
95.216.0.0/15
116.202.0.0/15
128.140.0.0/17
135.181.0.0/16
142.132.128.0/17
157.90.0.0/16
159.69.0.0/16
162.55.0.0/16
167.233.0.0/16
167.235.0.0/16
168.119.0.0/16
176.9.0.0/16
178.63.0.0/16
185.12.64.0/22
188.34.128.0/17
188.40.0.0/16
188.245.0.0/16
195.201.0.0/16
213.133.96.0/19
213.239.192.0/18
IPv6:
2a01:4f8::/31
2a01:4ff:ff01::/48
Signature Algorithm: sha256WithRSAEncryption
18:7f:7f:93:4a:1d:69:fe:16:c4:a1:9b:5d:c5:c0:24:48:eb:
8d:1d:14:1a:cd:17:a6:ab:0d:10:b1:cb:14:b7:d1:97:92:1c:
94:8e:f7:a2:46:02:a6:3d:8f:09:a9:2f:6b:66:87:ff:0e:98:
b6:74:0c:f6:98:8b:17:a3:72:72:ea:91:27:94:fb:f2:2c:48:
da:da:ec:e8:25:d6:46:4b:93:4c:04:f1:57:55:2d:3d:b1:15:
f2:8d:b7:43:87:2b:40:44:7d:45:03:69:d4:fe:31:dc:05:81:
00:da:42:cd:bc:19:ee:18:5d:71:20:0e:fa:2d:c1:78:07:3a:
42:39:9a:0e:59:64:a3:6c:0b:2d:79:61:ea:cc:52:2c:7f:21:
f9:06:56:7c:e7:3d:ca:a1:7a:aa:92:04:92:8a:cd:36:31:54:
ff:5f:f5:b7:8d:eb:7a:68:c7:30:59:70:e8:30:0e:90:d7:9f:
c1:37:c7:b9:03:ed:99:5f:94:db:35:93:40:67:24:36:59:04:
64:37:00:e3:26:b1:f9:b8:17:8f:03:c7:d6:94:fb:b6:8a:29:
05:65:4a:9e:3e:64:6d:83:9c:6f:da:d3:b5:3f:b2:fb:eb:b1:
f5:2b:47:42:4a:be:e0:9f:3e:b4:49:6d:b1:ae:b2:4c:7c:1b:
5a:55:01:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:29:02 2024 by rpki-client on console-ams.rpki-client.org