Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/QRRVuGawoI9XYjkWmSE-QiZSm5U.roa
File: QRRVuGawoI9XYjkWmSE-QiZSm5U.roa (raw, json)
Hash identifier: woktcn9XBDLrK5qaTnznfCg5H4J1YwzWJqyAF8wT1Bg=
Subject key identifier: 41:14:55:B8:66:B0:A0:8F:57:62:39:16:99:21:3E:42:26:52:9B:95
Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Certificate serial: 019214F981BC713A9FCB39A0B2ED0490AFA6
Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/QRRVuGawoI9XYjkWmSE-QiZSm5U.roa
Signing time: Sat 21 Sep 2024 14:25:48 +0000
ROA not before: Sat 21 Sep 2024 14:25:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207333
IP address blocks: 31.14.27.0/24 maxlen: 24
86.107.44.0/24 maxlen: 24
86.107.45.0/24 maxlen: 24
86.107.198.0/24 maxlen: 24
86.107.199.0/24 maxlen: 24
89.33.41.0/24 maxlen: 24
89.35.124.0/24 maxlen: 24
89.35.125.0/24 maxlen: 24
89.46.33.0/24 maxlen: 24
89.46.34.0/24 maxlen: 24
92.114.7.0/24 maxlen: 24
185.98.5.0/24 maxlen: 24
185.98.6.0/24 maxlen: 24
185.98.7.0/24 maxlen: 24
185.100.64.0/24 maxlen: 24
185.100.65.0/24 maxlen: 24
185.100.67.0/24 maxlen: 24
185.111.104.0/24 maxlen: 24
185.111.105.0/24 maxlen: 24
185.111.106.0/24 maxlen: 24
185.111.107.0/24 maxlen: 24
185.113.132.0/24 maxlen: 24
185.113.134.0/24 maxlen: 24
185.113.135.0/24 maxlen: 24
185.121.80.0/24 maxlen: 24
185.121.81.0/24 maxlen: 24
185.121.82.0/24 maxlen: 24
185.121.83.0/24 maxlen: 24
185.125.89.0/24 maxlen: 24
185.129.48.0/24 maxlen: 24
185.129.49.0/24 maxlen: 24
185.129.50.0/24 maxlen: 24
185.129.51.0/24 maxlen: 24
188.241.216.0/24 maxlen: 24
188.241.217.0/24 maxlen: 24
2a06:940::/48 maxlen: 48
2a06:940:2::/48 maxlen: 48
2a06:942::/48 maxlen: 48
2a06:942:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:14:f9:81:bc:71:3a:9f:cb:39:a0:b2:ed:04:90:af:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Validity
Not Before: Sep 21 14:25:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=411455b866b0a08f5762391699213e4226529b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:03:fe:fc:83:50:42:a7:9f:05:d6:21:57:b5:
6a:bf:16:6b:0b:8c:08:8d:4a:b5:15:b2:1b:17:f9:
55:29:3a:c5:b8:1a:6a:e0:09:4d:5a:30:24:0d:ab:
dc:89:d8:57:7a:b7:02:24:cc:d3:c9:7d:66:68:f4:
ac:e1:4d:ed:6b:da:8c:80:0f:40:1e:0d:f7:15:74:
e6:ac:cb:e7:54:f2:e0:ef:a1:cc:38:dd:d6:2b:de:
c5:3b:1f:f9:81:ea:fc:56:aa:39:a7:78:12:fa:57:
0e:c7:49:ac:c2:c4:2f:92:85:04:5f:a2:fc:c1:31:
df:a6:da:d2:58:b3:5c:b5:1a:4e:f5:18:f9:3d:cc:
07:7b:c8:98:2a:ec:20:79:ab:0a:10:7b:40:b3:e2:
ed:a3:67:e8:21:8c:b6:80:ca:90:2a:0b:52:4d:d5:
06:b4:fd:e3:ca:9a:bd:22:6f:a0:06:76:53:1d:d3:
87:ca:57:11:a8:b1:2a:96:5b:0e:29:a0:b7:64:7b:
36:5c:7d:43:24:3f:b2:a6:9b:11:8f:df:c0:1a:0d:
62:f8:eb:02:1d:5f:92:8d:b4:aa:45:76:8b:11:96:
67:dc:0b:cc:94:e5:c9:0e:33:13:25:f5:1c:67:83:
cf:e2:85:b1:63:0a:27:56:9b:44:0f:58:6e:77:17:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:14:55:B8:66:B0:A0:8F:57:62:39:16:99:21:3E:42:26:52:9B:95
X509v3 Authority Key Identifier:
keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/QRRVuGawoI9XYjkWmSE-QiZSm5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.27.0/24
86.107.44.0/23
86.107.198.0/23
89.33.41.0/24
89.35.124.0/23
89.46.33.0-89.46.34.255
92.114.7.0/24
185.98.5.0-185.98.7.255
185.100.64.0/23
185.100.67.0/24
185.111.104.0/22
185.113.132.0/24
185.113.134.0/23
185.121.80.0/22
185.125.89.0/24
185.129.48.0/22
188.241.216.0/23
IPv6:
2a06:940::/48
2a06:940:2::/48
2a06:942::/48
2a06:942:2::/48
Signature Algorithm: sha256WithRSAEncryption
9c:29:0c:bb:a0:84:1a:06:25:64:e5:ff:60:e7:a8:f8:23:49:
3e:1b:d0:0e:a1:1a:0c:9f:b2:b3:07:aa:63:d1:5a:ed:77:b4:
e9:d4:08:a5:72:a8:a4:e1:f2:ea:dd:a9:10:e6:ea:14:eb:9e:
ad:46:4c:34:d7:66:4b:c4:c2:f6:5d:6c:72:c7:42:17:32:32:
c5:8c:a4:95:21:30:d4:0a:d0:1b:74:38:1e:b5:1c:68:f9:91:
2d:c6:0c:1e:70:c5:66:9f:4a:84:54:d7:8e:b9:d4:96:5d:db:
26:92:18:9d:f9:a6:4e:aa:ff:08:99:06:03:a1:29:fd:e4:93:
34:92:52:6d:6a:b6:e5:eb:6a:62:70:46:84:01:65:14:cb:52:
b1:ee:24:c0:ff:ff:5f:81:11:ed:a2:af:9a:8d:50:9e:50:29:
cc:bd:dc:39:f4:76:10:9c:2a:52:13:34:fe:89:5a:81:66:da:
64:31:44:53:f0:a5:a4:3c:c6:b7:5f:29:f0:8c:8f:f0:dc:da:
0a:24:4b:c0:18:76:99:3e:56:cf:94:88:ac:76:3b:d7:a0:c9:
76:5c:49:67:e2:54:87:56:29:12:1f:aa:10:1f:32:8b:c9:f1:
e3:7d:dd:0b:fe:8f:15:92:b8:4b:46:dd:fe:04:e7:05:5e:bb:
f1:04:4f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:54:00 2024 by rpki-client on console-ams.rpki-client.org