Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/v38-AlAv6LW6ZXOIJtZHJo3wcFo.roa
File: v38-AlAv6LW6ZXOIJtZHJo3wcFo.roa (raw, json)
Hash identifier: 2pGP+iUj7XEqsIcQvYkjDsqxMmwGCV2V7A9WxCG5IYc=
Subject key identifier: BF:7F:3E:02:50:2F:E8:B5:BA:65:73:88:26:D6:47:26:8D:F0:70:5A
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 019199DB2AF3AEA97EBAD3742D2119E405AA
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/v38-AlAv6LW6ZXOIJtZHJo3wcFo.roa
Signing time: Wed 28 Aug 2024 16:39:23 +0000
ROA not before: Wed 28 Aug 2024 16:39:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21267
IP address blocks: 5.159.208.0/21 maxlen: 24
5.181.72.0/22 maxlen: 24
31.192.96.0/21 maxlen: 24
45.8.100.0/22 maxlen: 24
45.132.108.0/22 maxlen: 24
45.137.44.0/22 maxlen: 24
80.74.240.0/21 maxlen: 24
80.74.248.0/21 maxlen: 24
83.150.252.0/22 maxlen: 24
85.95.96.0/19 maxlen: 24
92.42.120.0/21 maxlen: 24
95.129.64.0/21 maxlen: 24
176.58.0.0/21 maxlen: 24
185.79.184.0/22 maxlen: 24
185.90.0.0/22 maxlen: 24
185.94.204.0/22 maxlen: 24
185.99.76.0/22 maxlen: 24
185.145.88.0/22 maxlen: 24
185.178.216.0/22 maxlen: 24
185.182.200.0/23 maxlen: 24
185.204.212.0/22 maxlen: 24
185.229.4.0/22 maxlen: 24
185.246.132.0/22 maxlen: 24
185.247.200.0/22 maxlen: 24
185.248.252.0/24 maxlen: 24
185.248.253.0/24 maxlen: 24
185.248.254.0/24 maxlen: 24
185.248.255.0/24 maxlen: 24
188.94.16.0/21 maxlen: 24
193.24.3.0/24 maxlen: 24
193.24.6.0/24 maxlen: 24
193.24.13.0/24 maxlen: 24
193.24.31.0/24 maxlen: 24
195.26.32.0/19 maxlen: 24
195.88.8.0/23 maxlen: 24
212.11.68.0/22 maxlen: 24
212.11.72.0/22 maxlen: 24
217.145.128.0/20 maxlen: 24
2a00:f1c0::/32 maxlen: 32
2a04:e9c0::/29 maxlen: 29
2a0a:f480::/29 maxlen: 29
2a0d:7680::/29 maxlen: 29
2a0d:bf80::/29 maxlen: 29
2a0e:a1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:99:db:2a:f3:ae:a9:7e:ba:d3:74:2d:21:19:e4:05:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Aug 28 16:39:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf7f3e02502fe8b5ba65738826d647268df0705a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:42:dd:b8:55:9a:d0:23:e1:61:67:9c:43:
92:bd:82:08:ce:a1:fb:1b:4b:6f:be:6a:82:31:94:
8f:9d:37:e1:50:64:27:fc:8f:9a:af:a3:53:a6:c0:
79:19:e8:c3:72:20:37:ee:fb:a7:24:7e:c2:2b:a8:
4c:a7:0b:35:8f:20:41:a4:bd:95:39:2a:60:76:3c:
03:c6:78:01:34:ec:32:da:99:36:44:9c:a2:c8:21:
36:84:15:98:12:33:21:48:fc:43:d5:e2:0a:bb:2a:
15:d1:0f:82:67:5f:ed:ed:f9:35:17:8a:19:5a:b0:
e2:dd:cc:3c:df:05:bf:d9:63:9f:f5:97:c6:1e:86:
f6:50:50:a6:3f:8e:11:5a:3f:72:a0:7c:4e:f2:12:
07:55:1d:4d:c2:2d:4b:6f:ec:35:19:0e:e2:97:03:
39:08:d8:3a:93:10:10:be:96:38:0a:44:26:43:26:
5d:a3:4d:5c:20:d7:67:df:19:c6:91:d2:27:01:6e:
0d:bb:74:88:15:2a:d0:ed:46:de:02:c6:a2:62:b7:
48:a2:2b:1c:86:7b:28:9f:69:50:2e:d6:83:52:91:
0f:02:db:5a:68:a3:0d:43:9c:55:13:f0:7e:56:f0:
94:d2:8c:8d:91:98:83:d1:eb:11:be:a7:96:87:2d:
00:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7F:3E:02:50:2F:E8:B5:BA:65:73:88:26:D6:47:26:8D:F0:70:5A
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/v38-AlAv6LW6ZXOIJtZHJo3wcFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.208.0/21
5.181.72.0/22
31.192.96.0/21
45.8.100.0/22
45.132.108.0/22
45.137.44.0/22
80.74.240.0/20
83.150.252.0/22
85.95.96.0/19
92.42.120.0/21
95.129.64.0/21
176.58.0.0/21
185.79.184.0/22
185.90.0.0/22
185.94.204.0/22
185.99.76.0/22
185.145.88.0/22
185.178.216.0/22
185.182.200.0/23
185.204.212.0/22
185.229.4.0/22
185.246.132.0/22
185.247.200.0/22
185.248.252.0/22
188.94.16.0/21
193.24.3.0/24
193.24.6.0/24
193.24.13.0/24
193.24.31.0/24
195.26.32.0/19
195.88.8.0/23
212.11.68.0-212.11.75.255
217.145.128.0/20
IPv6:
2a00:f1c0::/32
2a04:e9c0::/29
2a0a:f480::/29
2a0d:7680::/29
2a0d:bf80::/29
2a0e:a1c0::/29
Signature Algorithm: sha256WithRSAEncryption
ab:fa:67:46:c9:b9:5b:52:9b:33:d2:29:7a:b9:28:71:72:3e:
a0:82:dc:06:84:c1:43:54:96:17:17:84:6b:86:ab:f5:f3:ab:
cb:f7:18:11:e7:84:cf:12:37:44:a6:fb:21:ce:ae:59:04:d5:
7d:bd:c5:e1:0d:2b:aa:89:64:4e:a6:3c:b5:8e:b7:a6:7a:10:
4e:9c:8b:6e:fb:79:f4:6b:07:40:ff:0a:06:9b:9c:d8:83:e4:
a9:2d:6f:5a:ba:40:42:ca:0d:b9:fd:16:d9:17:b4:c1:b2:1d:
1e:53:bc:d0:68:78:5c:b1:45:e2:cd:5e:e1:11:ad:24:32:44:
f8:19:e9:5a:33:c9:6c:4f:70:5f:3c:c9:b3:3d:5c:34:e7:54:
6e:cd:a9:c0:de:16:de:12:4b:ee:18:ed:df:29:00:ee:ae:d7:
fe:5f:ad:72:3b:e1:25:90:8b:f9:02:19:d9:19:9c:8e:f1:ef:
91:45:17:74:b4:76:be:5c:44:65:45:f8:2b:41:dd:c1:76:d4:
63:d3:e3:71:fc:67:5b:31:f2:d5:4d:9b:d1:22:75:07:0c:76:
f9:02:a0:a4:81:99:ed:a3:01:9d:ef:18:f0:ef:e8:05:58:76:
91:fa:9c:84:23:ca:25:e9:fc:86:0e:fd:43:fe:84:7f:dd:35:
3e:52:bf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:41:33 2024 by rpki-client on console-fra.rpki-client.org