Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/XzeVIkdyFRWV394J-hMQjZh94l0.roa
File: XzeVIkdyFRWV394J-hMQjZh94l0.roa (raw, json)
Hash identifier: kYLAX9K3pbg27Ls9WY0wh7zdYDg51WKsiYamqaX0uFU=
Subject key identifier: 5F:37:95:22:47:72:15:15:95:DF:DE:09:FA:13:10:8D:98:7D:E2:5D
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 018CC26D2EB77B30EA95987041C439085A2B
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/XzeVIkdyFRWV394J-hMQjZh94l0.roa
Signing time: Mon 01 Jan 2024 00:29:44 +0000
ROA not before: Mon 01 Jan 2024 00:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48635
IP address blocks: 195.39.204.0/23 maxlen: 24
195.39.214.0/23 maxlen: 24
185.103.240.0/22 maxlen: 24
185.103.156.0/22 maxlen: 24
93.187.220.0/22 maxlen: 24
185.56.144.0/22 maxlen: 24
109.72.80.0/20 maxlen: 24
185.159.240.0/22 maxlen: 24
2.57.57.0/24 maxlen: 24
185.66.248.0/22 maxlen: 24
92.63.168.0/21 maxlen: 24
62.221.250.0/24 maxlen: 24
62.221.248.0/21 maxlen: 24
31.186.168.0/21 maxlen: 24
185.37.68.0/22 maxlen: 24
185.182.56.0/22 maxlen: 24
185.224.88.0/22 maxlen: 24
185.109.216.0/22 maxlen: 24
93.180.64.0/21 maxlen: 24
185.107.212.0/22 maxlen: 24
185.107.224.0/23 maxlen: 24
185.187.12.0/22 maxlen: 24
31.25.96.0/21 maxlen: 24
185.87.184.0/22 maxlen: 24
79.99.128.0/21 maxlen: 24
185.175.200.0/22 maxlen: 24
185.233.28.0/22 maxlen: 24
5.157.80.0/21 maxlen: 24
185.27.172.0/22 maxlen: 24
185.95.28.0/22 maxlen: 24
195.238.74.0/23 maxlen: 24
185.223.32.0/22 maxlen: 24
109.106.160.0/19 maxlen: 24
185.94.228.0/22 maxlen: 24
185.94.228.0/24 maxlen: 24
2a05:1500:500::/40 maxlen: 40
2a01:b942::/32 maxlen: 48
2a0b:8f80::/29 maxlen: 48
2a03:3060::/29 maxlen: 48
2a0b:7280::/29 maxlen: 48
2a04:6bc0::/36 maxlen: 48
2a0b:8f80::/48 maxlen: 48
2a02:40c1::/32 maxlen: 48
2a05:1500::/29 maxlen: 48
2a01:b944::/32 maxlen: 48
2a00:f10::/29 maxlen: 48
2a0c:84c0::/29 maxlen: 48
2a01:b940::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2e:b7:7b:30:ea:95:98:70:41:c4:39:08:5a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Jan 1 00:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f3795224772151595dfde09fa13108d987de25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:db:a0:85:50:5c:99:5f:8c:5d:dd:49:34:
b5:ad:0c:75:56:23:8e:d3:ab:7f:8b:fc:16:b0:90:
b8:27:0c:6a:4f:2e:a3:ee:41:c2:5a:0a:47:92:82:
73:28:1f:c4:27:cf:52:39:27:4f:3f:a9:7b:82:95:
c5:ed:2d:bc:44:31:31:85:b9:f0:e8:45:05:94:ec:
77:fe:53:7f:c7:0f:b2:bd:f0:6e:5a:40:f4:42:3f:
a8:b7:90:ef:ec:36:81:2a:55:22:3b:f1:3d:6b:72:
b5:6d:99:98:72:34:f8:45:b8:58:77:93:c8:2c:29:
84:1c:30:1d:14:ab:bd:26:2b:d5:a3:a4:9f:27:f7:
0e:a6:7f:62:b5:66:65:77:66:71:13:df:5a:d6:47:
ae:2e:62:93:9b:f9:98:0f:a9:95:5b:b7:28:fc:14:
3b:d5:32:47:b6:6d:4d:fc:8c:e9:78:aa:0b:d2:84:
6f:04:85:ef:43:01:da:95:e8:0a:da:99:9c:0e:6d:
10:f0:fc:73:c4:04:02:3b:11:7a:53:c6:32:72:fa:
36:74:b6:ca:4c:de:61:d5:06:63:33:a2:96:cf:d1:
c7:60:6b:96:5b:0c:03:a5:5d:b0:f4:7c:3f:30:ff:
49:98:2a:b3:e5:1a:27:0c:e9:a7:0a:6d:31:09:32:
29:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:37:95:22:47:72:15:15:95:DF:DE:09:FA:13:10:8D:98:7D:E2:5D
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/XzeVIkdyFRWV394J-hMQjZh94l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.57.0/24
5.157.80.0/21
31.25.96.0/21
31.186.168.0/21
62.221.248.0/21
79.99.128.0/21
92.63.168.0/21
93.180.64.0/21
93.187.220.0/22
109.72.80.0/20
109.106.160.0/19
185.27.172.0/22
185.37.68.0/22
185.56.144.0/22
185.66.248.0/22
185.87.184.0/22
185.94.228.0/22
185.95.28.0/22
185.103.156.0/22
185.103.240.0/22
185.107.212.0/22
185.107.224.0/23
185.109.216.0/22
185.159.240.0/22
185.175.200.0/22
185.182.56.0/22
185.187.12.0/22
185.223.32.0/22
185.224.88.0/22
185.233.28.0/22
195.39.204.0/23
195.39.214.0/23
195.238.74.0/23
IPv6:
2a00:f10::/29
2a01:b940::/29
2a02:40c1::/32
2a03:3060::/29
2a04:6bc0::/36
2a05:1500::/29
2a0b:7280::/29
2a0b:8f80::/29
2a0c:84c0::/29
Signature Algorithm: sha256WithRSAEncryption
53:4c:17:9f:a6:37:f3:e7:80:b5:a9:73:12:aa:a0:1a:2e:9f:
f1:45:8f:27:72:c7:b0:cb:f9:0f:97:47:23:7e:b9:40:2c:b5:
17:10:d7:e1:1b:d0:76:e2:ff:fc:9e:a4:aa:73:1d:9e:7d:1c:
55:df:e0:1a:1d:b0:44:e0:57:24:62:ff:bf:e2:a1:d3:80:02:
86:ed:94:19:a4:03:74:7a:c7:3c:18:52:68:e2:aa:4e:bb:72:
71:05:30:35:8e:68:b9:2b:16:d8:b3:71:6b:59:ba:aa:c9:75:
0e:09:45:0e:53:2d:19:26:76:23:b0:76:60:87:bf:8e:3f:32:
7b:07:46:b5:4f:65:fe:8f:6d:a9:7d:45:72:0f:0d:29:32:81:
78:e0:d3:50:c9:ec:c0:be:32:c2:bc:7f:e6:e6:ad:85:51:91:
7f:a3:b9:eb:d1:c3:b1:1e:3b:a7:43:5f:c5:d2:0e:2e:d9:c2:
82:2d:71:23:ca:5c:9c:ab:c4:a4:07:46:bb:ee:7f:4e:75:4f:
c9:74:ad:40:27:88:a5:e2:ec:46:e2:bf:89:f4:7f:9f:71:36:
e2:6f:ac:3e:e5:fa:a9:59:23:a6:6d:5f:a1:8c:46:5c:3a:4d:
58:a1:2c:d4:b6:55:45:42:cf:51:c2:30:41:40:1d:1f:c0:eb:
b0:87:f0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:26:45 2024 by rpki-client on console-ams.rpki-client.org