Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/HqfyOfRQJT8VOxbtTAFecKhK7RE.roa
File: HqfyOfRQJT8VOxbtTAFecKhK7RE.roa (raw, json)
Hash identifier: fFOLN3u/Qrzn8t9L9c0uZWZ5OjIjTE40Z0MkVkWB/dE=
Subject key identifier: 1E:A7:F2:39:F4:50:25:3F:15:3B:16:ED:4C:01:5E:70:A8:4A:ED:11
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 01917910B1C89BD6C4152775ADB189703B2A
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/HqfyOfRQJT8VOxbtTAFecKhK7RE.roa
Signing time: Thu 22 Aug 2024 07:50:22 +0000
ROA not before: Thu 22 Aug 2024 07:50:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34358
IP address blocks: 37.251.128.0/19 maxlen: 19
37.251.160.0/20 maxlen: 20
37.251.248.0/21 maxlen: 24
37.251.255.0/24 maxlen: 24
77.81.164.0/23 maxlen: 23
86.105.192.0/24 maxlen: 24
89.32.44.0/22 maxlen: 22
89.32.44.0/24 maxlen: 24
89.35.173.0/24 maxlen: 24
89.36.128.0/23 maxlen: 23
89.36.128.0/24 maxlen: 24
89.36.129.0/24 maxlen: 24
89.36.130.0/24 maxlen: 24
89.36.132.0/23 maxlen: 24
89.36.134.0/24 maxlen: 24
89.36.135.0/24 maxlen: 24
89.38.248.0/24 maxlen: 24
89.38.249.0/24 maxlen: 24
89.38.250.0/23 maxlen: 23
89.38.252.0/22 maxlen: 22
89.42.11.0/24 maxlen: 24
89.45.192.0/21 maxlen: 21
89.45.192.0/23 maxlen: 23
91.200.120.0/22 maxlen: 22
91.200.120.0/23 maxlen: 23
91.200.122.0/23 maxlen: 23
91.208.142.0/24 maxlen: 24
93.119.227.0/24 maxlen: 24
94.24.29.0/24 maxlen: 24
94.24.48.0/21 maxlen: 21
94.24.72.0/22 maxlen: 22
94.24.76.0/23 maxlen: 23
94.24.78.0/24 maxlen: 24
109.95.8.0/21 maxlen: 21
128.0.46.0/23 maxlen: 23
185.171.184.0/24 maxlen: 24
185.171.185.0/24 maxlen: 24
185.171.187.0/24 maxlen: 24
188.214.142.0/24 maxlen: 24
188.215.48.0/21 maxlen: 21
193.239.130.0/23 maxlen: 23
193.242.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:79:10:b1:c8:9b:d6:c4:15:27:75:ad:b1:89:70:3b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Aug 22 07:50:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ea7f239f450253f153b16ed4c015e70a84aed11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:28:6d:ef:75:35:e5:cd:80:db:ae:30:b6:
2d:80:76:77:80:d6:f5:50:19:cc:2f:3b:94:5e:bd:
92:83:31:40:ba:da:11:ff:45:f2:3b:c4:c2:92:13:
83:5d:71:8b:55:f7:9d:d5:8c:4f:b2:67:d4:a9:0a:
7e:ad:2c:70:45:4a:aa:d5:cf:75:1d:64:71:85:8f:
e5:ef:fb:d7:eb:97:35:a8:55:9c:44:91:64:b1:98:
42:9a:6c:94:44:2a:cf:20:bb:15:a0:22:c6:54:78:
5d:33:39:b9:6c:86:af:15:ac:b0:c2:e0:cc:fd:db:
55:f5:a9:73:4a:7b:d9:0e:43:80:df:bd:5d:c0:db:
d1:d3:f1:0d:78:04:79:06:9f:cd:cc:1d:f7:df:ee:
45:a5:81:bb:11:44:b2:eb:d3:db:0f:c0:c6:55:f6:
a6:cd:7a:ce:04:bc:5c:c9:77:5b:79:93:61:e3:6a:
86:bc:7f:13:c7:8a:ca:56:e6:89:28:b1:08:81:85:
fe:24:63:06:bc:75:52:93:10:06:6f:52:5f:fb:29:
8d:1d:dd:ee:d7:33:bb:9d:9f:3e:f5:b0:e6:30:c3:
26:f3:e6:bd:a2:61:80:64:b2:10:2c:99:56:0b:d2:
dd:4e:1f:ed:0c:97:88:65:b3:b7:f7:8a:73:09:d7:
f3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A7:F2:39:F4:50:25:3F:15:3B:16:ED:4C:01:5E:70:A8:4A:ED:11
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/HqfyOfRQJT8VOxbtTAFecKhK7RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.128.0-37.251.175.255
37.251.248.0/21
77.81.164.0/23
86.105.192.0/24
89.32.44.0/22
89.35.173.0/24
89.36.128.0-89.36.130.255
89.36.132.0/22
89.38.248.0/21
89.42.11.0/24
89.45.192.0/21
91.200.120.0/22
91.208.142.0/24
93.119.227.0/24
94.24.29.0/24
94.24.48.0/21
94.24.72.0-94.24.78.255
109.95.8.0/21
128.0.46.0/23
185.171.184.0/23
185.171.187.0/24
188.214.142.0/24
188.215.48.0/21
193.239.130.0/23
193.242.120.0/24
Signature Algorithm: sha256WithRSAEncryption
12:34:76:61:ec:86:a1:a8:71:4d:3d:e6:ad:62:ba:20:ee:3d:
bc:3e:43:f2:73:bb:af:a0:d5:6a:ae:af:01:9e:2c:e6:66:e8:
d1:5c:2d:e1:ad:be:fd:1c:76:8d:d9:b5:ea:55:7f:89:48:75:
e2:8d:c3:c6:fc:87:2b:3d:28:d0:52:aa:f6:47:e7:45:16:99:
ef:3c:bd:bf:ab:ee:56:70:99:89:3a:13:ac:6b:ba:b6:51:f8:
10:10:4b:71:34:54:7b:2b:a7:6e:65:9b:a3:18:46:dd:f3:78:
d7:f0:19:86:b2:1d:66:18:c2:e2:b9:2c:d3:46:93:10:a5:1f:
06:ec:ca:6f:0e:20:38:d9:79:69:d7:ca:10:48:2c:06:a3:28:
6e:3f:bb:69:8c:39:43:2c:50:41:72:b6:43:fb:ba:4f:39:63:
f0:87:76:3d:e8:3c:c6:39:0e:79:06:cd:07:74:7d:86:f2:6f:
ee:b0:89:68:2e:a6:25:34:d4:b1:24:09:f3:d6:2c:e4:3e:d7:
94:ec:86:c1:80:3e:80:d0:42:ab:be:b1:d3:e1:a4:15:e2:22:
7b:47:cc:6f:c9:94:76:4c:a3:0e:6c:94:8c:69:c9:e5:56:fe:
b8:7a:cc:4a:5a:1b:a7:ef:48:d5:7f:b7:7a:69:c0:8a:a8:fc:
00:f9:f1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:21 2024 by rpki-client on console-ams.rpki-client.org