Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/dQzvkt8X6LF9kzVF6u1YeKC4k-c.roa
File: dQzvkt8X6LF9kzVF6u1YeKC4k-c.roa (raw, json)
Hash identifier: nP0yVbUEMWJZyXLpcWNAyQa2Rk3ZuZMtp6Y5dY8qf0U=
Subject key identifier: 75:0C:EF:92:DF:17:E8:B1:7D:93:35:45:EA:ED:58:78:A0:B8:93:E7
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0191FA68F7F8D6B90BA54D1EE31106C78F6F
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/dQzvkt8X6LF9kzVF6u1YeKC4k-c.roa
Signing time: Mon 16 Sep 2024 10:37:48 +0000
ROA not before: Mon 16 Sep 2024 10:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12302
IP address blocks: 80.96.1.0/24 maxlen: 24
80.96.22.0/24 maxlen: 24
80.96.96.0/23 maxlen: 24
80.96.104.0/24 maxlen: 24
80.96.129.0/24 maxlen: 24
80.96.134.0/23 maxlen: 23
80.96.150.0/24 maxlen: 24
80.96.151.0/24 maxlen: 24
80.96.164.0/23 maxlen: 24
80.96.177.0/24 maxlen: 24
80.96.184.0/24 maxlen: 24
80.96.206.0/24 maxlen: 24
80.97.64.0/21 maxlen: 24
80.97.72.0/21 maxlen: 24
80.97.80.0/21 maxlen: 24
80.97.88.0/21 maxlen: 24
81.181.16.0/22 maxlen: 24
81.181.32.0/21 maxlen: 21
81.181.40.0/22 maxlen: 22
81.181.45.0/24 maxlen: 24
81.181.46.0/23 maxlen: 23
81.181.74.0/23 maxlen: 23
85.120.158.0/24 maxlen: 24
193.226.3.0/24 maxlen: 24
193.226.30.0/24 maxlen: 24
193.226.42.0/23 maxlen: 23
193.226.47.0/24 maxlen: 24
193.226.58.0/24 maxlen: 24
193.226.83.0/24 maxlen: 24
193.226.100.0/24 maxlen: 24
193.226.105.0/24 maxlen: 24
193.230.129.0/24 maxlen: 24
193.230.160.0/24 maxlen: 24
193.230.161.0/24 maxlen: 24
193.230.162.0/24 maxlen: 24
193.230.163.0/24 maxlen: 24
193.230.166.0/24 maxlen: 24
193.230.167.0/24 maxlen: 24
193.230.168.0/24 maxlen: 24
193.230.169.0/24 maxlen: 24
193.230.174.0/24 maxlen: 24
193.230.177.0/24 maxlen: 24
193.230.193.0/24 maxlen: 24
193.230.202.0/24 maxlen: 24
193.230.203.0/24 maxlen: 24
193.230.240.0/24 maxlen: 24
193.230.247.0/24 maxlen: 24
193.231.82.0/24 maxlen: 24
193.231.96.0/24 maxlen: 24
193.231.120.0/24 maxlen: 24
193.231.121.0/24 maxlen: 24
193.231.126.0/24 maxlen: 24
193.231.180.0/22 maxlen: 24
193.231.208.0/20 maxlen: 24
193.231.255.0/24 maxlen: 24
194.102.87.0/24 maxlen: 24
194.102.90.0/24 maxlen: 24
217.156.10.0/24 maxlen: 24
217.156.34.0/24 maxlen: 24
217.156.43.0/24 maxlen: 24
217.156.63.0/24 maxlen: 24
217.156.73.0/24 maxlen: 24
217.156.98.0/24 maxlen: 24
217.156.110.0/24 maxlen: 24
217.156.116.0/24 maxlen: 24
217.156.117.0/24 maxlen: 24
217.156.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:68:f7:f8:d6:b9:0b:a5:4d:1e:e3:11:06:c7:8f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 16 10:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=750cef92df17e8b17d933545eaed5878a0b893e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7b:02:99:e0:23:08:99:87:60:ad:54:33:4b:
99:c7:be:d4:5a:cc:c9:85:32:b8:fb:f3:34:38:df:
c5:2c:63:6e:92:10:cf:6a:4d:a7:ec:57:28:e2:b5:
11:ce:2c:f7:d5:a2:26:eb:15:f4:a6:6f:be:ac:3b:
e4:e0:20:79:dd:c6:52:2f:36:ad:84:23:12:31:6f:
b4:aa:06:e9:cc:b7:27:02:79:fe:52:20:69:7f:03:
00:d8:b3:c2:71:47:3e:e6:4e:85:7e:f5:64:d0:1a:
82:bb:1f:19:7d:4e:a6:40:b3:e3:0d:d5:8f:de:d0:
9c:a8:2c:ef:2d:b7:f0:62:9d:c4:6f:62:6b:ea:39:
7b:7f:7a:f4:7c:d1:2f:5d:0c:a1:32:af:ef:cf:db:
4a:fc:5f:88:ad:4f:fa:7d:c8:f8:b7:74:89:d7:d4:
bb:8e:7a:5f:aa:65:54:b1:37:8d:03:d4:0d:81:dc:
79:c1:69:80:8e:41:ec:1d:80:2b:cb:71:0a:79:5c:
17:58:a6:ed:fb:d8:22:31:80:b6:b4:bc:f6:f7:e6:
27:5b:fe:52:4e:14:25:27:2b:3c:3e:fa:ef:55:7a:
4d:31:de:49:78:a6:f0:bf:4d:90:9b:9b:80:92:c1:
ab:d9:2c:88:43:78:b1:c9:0c:ec:b8:83:4d:7d:6b:
f1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0C:EF:92:DF:17:E8:B1:7D:93:35:45:EA:ED:58:78:A0:B8:93:E7
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/dQzvkt8X6LF9kzVF6u1YeKC4k-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.1.0/24
80.96.22.0/24
80.96.96.0/23
80.96.104.0/24
80.96.129.0/24
80.96.134.0/23
80.96.150.0/23
80.96.164.0/23
80.96.177.0/24
80.96.184.0/24
80.96.206.0/24
80.97.64.0/19
81.181.16.0/22
81.181.32.0-81.181.43.255
81.181.45.0-81.181.47.255
81.181.74.0/23
85.120.158.0/24
193.226.3.0/24
193.226.30.0/24
193.226.42.0/23
193.226.47.0/24
193.226.58.0/24
193.226.83.0/24
193.226.100.0/24
193.226.105.0/24
193.230.129.0/24
193.230.160.0/22
193.230.166.0-193.230.169.255
193.230.174.0/24
193.230.177.0/24
193.230.193.0/24
193.230.202.0/23
193.230.240.0/24
193.230.247.0/24
193.231.82.0/24
193.231.96.0/24
193.231.120.0/23
193.231.126.0/24
193.231.180.0/22
193.231.208.0/20
193.231.255.0/24
194.102.87.0/24
194.102.90.0/24
217.156.10.0/24
217.156.34.0/24
217.156.43.0/24
217.156.63.0/24
217.156.73.0/24
217.156.98.0/24
217.156.110.0/24
217.156.116.0/23
217.156.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:93:dd:e2:18:88:2b:c6:d4:90:a7:8f:63:2c:34:fa:6a:67:
09:bd:44:35:2d:84:bd:d7:64:33:da:e1:8d:3d:31:8e:62:1b:
41:2f:8a:b3:c6:8f:65:23:6d:4e:9e:80:7e:b2:ec:35:64:fd:
4f:e5:55:b0:e4:23:d6:b1:a7:f4:01:f3:c7:4e:30:70:47:f1:
4b:31:eb:1b:17:16:5a:ae:73:00:1e:bf:de:45:6a:78:06:23:
c9:c6:81:76:bf:7e:8a:8d:3f:e2:e5:fc:35:2e:d9:9d:ec:f6:
53:8a:3c:f3:14:18:ec:13:9c:4f:1b:f8:53:88:a3:f8:5d:4d:
2a:6c:43:f3:91:42:1e:f6:fa:ba:91:d2:1d:32:3c:80:da:c3:
44:54:a9:aa:30:15:63:b3:57:1b:be:b0:82:e0:82:8c:47:1e:
1b:53:f2:a3:29:29:cf:e6:8e:eb:90:4e:29:15:a7:5a:99:13:
28:29:42:71:e8:22:ad:81:80:ca:26:e1:fa:08:e6:35:34:a6:
bc:e5:ce:93:83:13:99:aa:21:cd:bf:2c:33:8e:5f:03:cf:7c:
6c:2e:e8:76:fa:2f:76:79:94:15:27:f5:5c:e3:0e:49:ca:ae:
c9:8f:af:fe:b6:f3:91:97:1d:95:93:8d:c1:15:35:95:31:99:
13:ac:0f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:24:04 2024 by rpki-client on console-ams.rpki-client.org