Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/n4dx5joWOhPNoLCC2XnQTsIcFys.roa
File: n4dx5joWOhPNoLCC2XnQTsIcFys.roa (raw, json)
Hash identifier: pBNqBw/rUaiNps8wbgvRZMlSUcWMCPHfMPoFgyrOB3Y=
Subject key identifier: 9F:87:71:E6:3A:16:3A:13:CD:A0:B0:82:D9:79:D0:4E:C2:1C:17:2B
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 018EFB0196E45AF3C76A0547168D35B886C6
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/n4dx5joWOhPNoLCC2XnQTsIcFys.roa
Signing time: Sat 20 Apr 2024 10:16:09 +0000
ROA not before: Sat 20 Apr 2024 10:16:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48716
IP address blocks: 77.240.38.0/23 maxlen: 24
77.243.80.0/23 maxlen: 24
78.40.108.0/23 maxlen: 24
85.202.193.0/24 maxlen: 24
85.202.194.0/23 maxlen: 24
89.219.32.0/22 maxlen: 24
91.147.92.0/22 maxlen: 22
91.147.92.0/24 maxlen: 24
91.147.93.0/24 maxlen: 24
91.147.94.0/24 maxlen: 24
91.147.95.0/24 maxlen: 24
91.147.104.0/22 maxlen: 24
91.201.214.0/23 maxlen: 24
91.215.136.0/22 maxlen: 24
91.215.136.0/24 maxlen: 24
91.215.137.0/24 maxlen: 32
91.215.139.0/24 maxlen: 32
94.247.128.0/21 maxlen: 24
109.233.108.0/22 maxlen: 32
185.4.180.0/22 maxlen: 24
185.22.64.0/22 maxlen: 24
185.35.222.0/23 maxlen: 24
185.102.72.0/22 maxlen: 24
185.146.0.0/22 maxlen: 24
194.39.64.0/22 maxlen: 24
194.39.64.0/23 maxlen: 24
194.39.66.0/24 maxlen: 24
194.39.67.0/24 maxlen: 24
194.110.54.0/23 maxlen: 24
195.49.209.0/24 maxlen: 24
195.49.210.0/23 maxlen: 23
195.49.210.0/24 maxlen: 24
195.49.211.0/24 maxlen: 24
195.49.212.0/22 maxlen: 22
195.49.212.0/24 maxlen: 24
195.49.213.0/24 maxlen: 24
195.49.214.0/24 maxlen: 24
195.49.215.0/24 maxlen: 24
195.93.152.0/23 maxlen: 24
195.210.46.0/23 maxlen: 24
2a00:5da0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fb:01:96:e4:5a:f3:c7:6a:05:47:16:8d:35:b8:86:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Apr 20 10:16:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f8771e63a163a13cda0b082d979d04ec21c172b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:0d:bf:ba:dc:26:93:81:a6:3a:ff:7b:b6:
48:8c:60:00:51:99:f6:b2:99:c5:54:98:30:08:b3:
ed:0d:64:7c:00:b9:59:de:33:53:b9:1b:83:44:a5:
a4:62:c9:02:37:87:8b:f3:67:55:29:8c:e6:13:3c:
38:5d:3c:5a:6c:6d:d7:5c:a5:90:77:15:68:64:78:
6c:a7:53:27:85:14:28:c3:8d:00:fa:e0:f1:16:6c:
43:ac:af:5d:ef:65:f0:c6:fe:65:15:48:b6:4d:40:
10:3a:51:ac:ed:da:0a:28:ff:5f:0f:88:2c:05:d4:
fc:31:ce:3f:34:58:ad:a4:d2:4a:9c:02:d9:06:94:
71:d2:83:7b:58:0b:ef:cc:0a:1a:4d:c0:3b:5a:1c:
bb:4c:81:58:db:97:72:96:d9:6c:e7:68:45:1d:4a:
d3:8b:dc:0b:a7:1a:f7:54:df:d1:29:c1:16:79:a3:
79:f9:29:fa:21:07:f6:f4:3b:13:52:dc:53:36:35:
8b:be:74:e4:09:cc:af:c0:71:01:6f:b7:d0:bc:8b:
42:8b:66:db:e6:d0:bd:73:08:5a:2d:b1:35:b8:f5:
c5:d6:fe:b5:4f:1c:1c:ae:64:7e:86:ea:51:e6:a8:
70:89:aa:7c:24:97:cf:77:b4:42:89:74:d8:9a:85:
a3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:87:71:E6:3A:16:3A:13:CD:A0:B0:82:D9:79:D0:4E:C2:1C:17:2B
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/n4dx5joWOhPNoLCC2XnQTsIcFys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.38.0/23
77.243.80.0/23
78.40.108.0/23
85.202.193.0-85.202.195.255
89.219.32.0/22
91.147.92.0/22
91.147.104.0/22
91.201.214.0/23
91.215.136.0/22
94.247.128.0/21
109.233.108.0/22
185.4.180.0/22
185.22.64.0/22
185.35.222.0/23
185.102.72.0/22
185.146.0.0/22
194.39.64.0/22
194.110.54.0/23
195.49.209.0-195.49.215.255
195.93.152.0/23
195.210.46.0/23
IPv6:
2a00:5da0::/32
Signature Algorithm: sha256WithRSAEncryption
a3:d1:0c:d7:3f:e3:10:46:fe:ec:a1:88:4d:f0:27:0d:19:68:
fd:3b:d5:80:ea:49:55:df:1f:59:f9:3e:c7:c9:b5:03:da:48:
4f:32:f6:50:05:10:84:bd:eb:66:49:a1:99:e2:35:17:a8:be:
50:57:95:a0:6d:56:c8:ca:c0:d1:c1:21:b2:14:43:1b:9c:cd:
51:5d:c5:2f:77:b1:5f:0b:78:b3:17:91:d4:1e:f0:3a:97:9f:
c0:73:eb:4d:68:ec:a3:44:f2:84:cc:f9:e1:77:da:bf:a8:8d:
a7:49:bb:0e:b7:00:3c:f5:ee:94:bb:ce:1e:dc:da:46:0b:4d:
70:5d:f0:01:f9:4e:bf:35:34:c6:69:28:1b:fc:d5:ee:23:87:
5e:29:23:a1:99:52:e0:aa:8b:46:27:28:8e:cb:f5:a9:76:cb:
53:88:dd:fc:c8:a5:c6:59:71:74:cf:77:62:6f:e8:10:a9:b2:
4d:f4:2b:8f:4f:cf:55:b8:95:d4:35:a4:2f:b5:de:b7:29:3d:
f4:12:70:28:ed:a9:2c:aa:ff:43:b2:c6:be:9d:b5:b1:b5:43:
71:f8:52:10:60:34:0e:72:7d:03:90:e0:74:a6:f2:dc:4d:17:
4c:d2:39:41:30:de:b3:87:84:d6:ad:80:aa:d5:d1:02:37:50:
df:86:14:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 17:58:30 2024 by rpki-client on console-ams.rpki-client.org