Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/MXn5fyBuMM3VB9ISGKIcxRl9PU8.roa
File: MXn5fyBuMM3VB9ISGKIcxRl9PU8.roa (raw, json)
Hash identifier: FVKDU5CvueQD7stqlvN9Hbbh+bzKkg/5KvmtMDLAEkU=
Subject key identifier: 31:79:F9:7F:20:6E:30:CD:D5:07:D2:12:18:A2:1C:C5:19:7D:3D:4F
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 0190CAE05AEC11EE91F91684BD45986EF21E
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/MXn5fyBuMM3VB9ISGKIcxRl9PU8.roa
Signing time: Fri 19 Jul 2024 12:03:39 +0000
ROA not before: Fri 19 Jul 2024 12:03:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202505
IP address blocks: 84.54.14.0/24 maxlen: 24
86.104.14.0/24 maxlen: 24
89.43.78.0/24 maxlen: 24
176.98.42.0/24 maxlen: 24
176.98.43.0/24 maxlen: 24
185.81.152.0/24 maxlen: 24
185.81.153.0/24 maxlen: 24
185.81.154.0/24 maxlen: 24
185.81.155.0/24 maxlen: 24
193.31.119.0/24 maxlen: 24
2a05:88c0::/32 maxlen: 32
2a05:88c1::/32 maxlen: 32
2a05:88c2::/32 maxlen: 32
2a05:88c3::/32 maxlen: 32
2a05:88c4::/32 maxlen: 32
2a05:88c5::/32 maxlen: 32
2a05:88c6::/32 maxlen: 32
2a05:88c7::/32 maxlen: 32
2a06:f7c0::/32 maxlen: 32
2a06:f7c1::/32 maxlen: 32
2a06:f7c2::/32 maxlen: 32
2a06:f7c3::/32 maxlen: 32
2a06:f7c4::/32 maxlen: 32
2a06:f7c5::/32 maxlen: 32
2a06:f7c6::/32 maxlen: 32
2a06:f7c7::/32 maxlen: 32
2a10:3300::/32 maxlen: 32
2a10:3301::/32 maxlen: 32
2a10:3302::/32 maxlen: 32
2a10:3303::/32 maxlen: 32
2a10:3304::/32 maxlen: 32
2a10:3305::/32 maxlen: 32
2a10:3306::/32 maxlen: 32
2a10:3307::/32 maxlen: 32
2a10:7f40::/32 maxlen: 32
2a10:7f41::/32 maxlen: 32
2a10:7f42::/32 maxlen: 32
2a10:7f43::/32 maxlen: 32
2a10:7f44::/32 maxlen: 32
2a10:7f45::/32 maxlen: 32
2a10:7f46::/32 maxlen: 32
2a10:7f47::/32 maxlen: 32
2a10:7fc0::/32 maxlen: 32
2a10:7fc1::/32 maxlen: 32
2a10:7fc2::/32 maxlen: 32
2a10:7fc3::/32 maxlen: 32
2a10:7fc4::/32 maxlen: 32
2a10:7fc5::/32 maxlen: 32
2a10:7fc6::/32 maxlen: 32
2a10:7fc7::/32 maxlen: 32
2a11:d100::/32 maxlen: 32
2a11:d101::/32 maxlen: 32
2a11:d102::/32 maxlen: 32
2a11:d103::/32 maxlen: 32
2a11:d104::/32 maxlen: 32
2a11:d105::/32 maxlen: 32
2a11:d106::/32 maxlen: 32
2a11:d107::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ca:e0:5a:ec:11:ee:91:f9:16:84:bd:45:98:6e:f2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jul 19 12:03:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3179f97f206e30cdd507d21218a21cc5197d3d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d4:36:d6:ab:06:91:d1:da:69:3a:86:d9:9e:
e1:9d:94:97:50:e1:4b:be:33:ed:65:cd:5d:fa:41:
3f:2c:cb:43:6b:3d:7c:a5:9b:40:40:af:13:d8:63:
c0:a1:a7:e8:a5:0e:10:f4:eb:a9:b2:cd:0a:85:3d:
39:fa:dd:c1:98:8e:dc:b4:b1:cd:3b:1e:2d:c1:34:
d7:56:83:17:86:a1:be:e7:b2:77:60:bb:bc:4a:95:
8d:6f:a5:f5:25:7b:67:cc:66:46:58:79:1a:f0:42:
c4:00:15:df:14:05:31:6a:17:c3:0e:c6:25:8a:34:
64:2f:7a:3d:0a:e1:88:0a:dc:8b:e1:c9:c0:a4:7f:
cc:1e:ac:d8:3c:d1:2d:44:4f:07:16:28:e6:85:ce:
20:1d:ef:56:71:e6:0c:84:b4:3f:17:68:84:84:05:
4c:9f:2b:da:02:8e:42:4b:e6:1e:1d:b7:fe:34:f5:
e6:e7:73:28:02:c3:f2:83:e9:64:a0:bd:02:ca:cf:
f4:c8:42:62:90:07:0d:b1:84:dd:3e:a9:eb:5d:c7:
81:ef:54:51:b7:e6:fd:ae:13:0f:20:ed:85:d9:b6:
e6:67:d4:3f:4e:78:e0:b4:bc:a5:9e:8c:f0:c0:1a:
20:54:28:2a:95:c0:84:79:d1:2c:29:a4:4a:1b:f8:
57:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:79:F9:7F:20:6E:30:CD:D5:07:D2:12:18:A2:1C:C5:19:7D:3D:4F
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/MXn5fyBuMM3VB9ISGKIcxRl9PU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.14.0/24
86.104.14.0/24
89.43.78.0/24
176.98.42.0/23
185.81.152.0/22
193.31.119.0/24
IPv6:
2a05:88c0::/29
2a06:f7c0::/29
2a10:3300::/29
2a10:7f40::/29
2a10:7fc0::/29
2a11:d100::/29
Signature Algorithm: sha256WithRSAEncryption
00:a4:63:69:b2:57:0c:66:6f:95:a1:3c:85:fa:4c:1f:42:32:
10:de:89:8c:23:a2:a9:c0:36:e8:c3:55:88:8f:7b:96:d8:3a:
5b:f6:b4:58:77:ea:3a:f2:b1:3f:65:37:6e:a3:a1:a2:fc:51:
cf:99:14:02:4d:97:34:bc:52:85:ff:28:d8:ff:d1:39:71:0a:
ab:80:93:79:6a:de:23:04:5e:60:f5:e4:45:d7:69:3b:12:c9:
77:7d:fb:95:2c:c6:e8:75:43:6f:84:71:d4:f4:da:75:39:b0:
3c:6c:a3:a2:85:e8:77:48:50:ac:3a:0a:75:d2:f5:76:87:2f:
bb:79:59:50:e0:26:62:eb:27:36:9e:e1:dc:c3:f4:97:be:f6:
c6:d6:3c:b0:84:47:24:a2:cb:04:91:15:70:e9:18:5b:ce:74:
b0:22:46:03:4d:1d:e5:fd:bf:ac:e3:8f:73:2e:18:c5:4c:07:
f1:7c:c4:21:e2:12:f1:38:94:18:cc:6b:c7:d0:f3:d0:33:dd:
60:0e:5b:56:42:fc:e9:2c:85:8b:b7:9c:5e:9c:2b:e1:15:a6:
12:c4:22:ce:4b:9b:93:7c:2b:a5:f2:7e:18:45:bc:86:3b:7a:
31:43:5c:3d:09:59:ff:b9:fe:5b:a5:84:47:49:0c:1c:f2:f0:
84:7f:1c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:51:23 2024 by rpki-client on console-fra.rpki-client.org