Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/90ulOIc6_N3fvotbnJhYR1la2zI.roa
File: 90ulOIc6_N3fvotbnJhYR1la2zI.roa (raw, json)
Hash identifier: pwNm51MS/l8CaswFUStvhrXdmgyfK1AZNPrCdtNzVvs=
Subject key identifier: F7:4B:A5:38:87:3A:FC:DD:DF:BE:8B:5B:9C:98:58:47:59:5A:DB:32
Certificate issuer: /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial: 018EA99BF5B70193999B25CE6180FE350E7E
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/90ulOIc6_N3fvotbnJhYR1la2zI.roa
Signing time: Thu 04 Apr 2024 14:55:54 +0000
ROA not before: Thu 04 Apr 2024 14:55:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16030
IP address blocks: 77.75.176.0/21 maxlen: 24
77.75.176.0/24 maxlen: 24
77.75.177.0/24 maxlen: 24
77.75.178.0/24 maxlen: 24
77.75.179.0/24 maxlen: 24
77.75.181.0/24 maxlen: 24
77.75.182.0/24 maxlen: 24
77.75.183.0/24 maxlen: 24
185.184.148.0/22 maxlen: 24
185.184.149.0/24 maxlen: 24
185.184.150.0/24 maxlen: 24
185.184.151.0/24 maxlen: 24
212.121.224.0/19 maxlen: 24
212.121.225.0/24 maxlen: 24
212.121.226.0/24 maxlen: 24
212.121.227.0/24 maxlen: 24
212.121.228.0/24 maxlen: 24
212.121.229.0/24 maxlen: 24
212.121.230.0/24 maxlen: 24
212.121.231.0/24 maxlen: 24
212.121.232.0/24 maxlen: 24
212.121.233.0/24 maxlen: 24
212.121.234.0/24 maxlen: 24
212.121.235.0/24 maxlen: 24
212.121.236.0/24 maxlen: 24
212.121.237.0/24 maxlen: 24
212.121.238.0/24 maxlen: 24
212.121.239.0/24 maxlen: 24
212.121.240.0/24 maxlen: 24
212.121.241.0/24 maxlen: 24
212.121.242.0/24 maxlen: 24
212.121.243.0/24 maxlen: 24
212.121.244.0/24 maxlen: 24
212.121.245.0/24 maxlen: 24
212.121.246.0/24 maxlen: 24
212.121.247.0/24 maxlen: 24
212.121.248.0/24 maxlen: 24
212.121.249.0/24 maxlen: 24
212.121.250.0/24 maxlen: 24
212.121.251.0/24 maxlen: 24
212.121.252.0/24 maxlen: 24
212.121.253.0/24 maxlen: 24
212.121.254.0/24 maxlen: 24
212.121.255.0/24 maxlen: 24
213.148.192.0/19 maxlen: 24
213.148.192.0/24 maxlen: 24
213.148.193.0/24 maxlen: 24
213.148.194.0/24 maxlen: 24
213.148.195.0/24 maxlen: 24
213.148.196.0/24 maxlen: 24
213.148.197.0/24 maxlen: 24
213.148.198.0/24 maxlen: 24
213.148.199.0/24 maxlen: 24
213.148.200.0/24 maxlen: 24
213.148.201.0/24 maxlen: 24
213.148.202.0/24 maxlen: 24
213.148.203.0/24 maxlen: 24
213.148.204.0/24 maxlen: 24
213.148.205.0/24 maxlen: 24
213.148.206.0/24 maxlen: 24
213.148.207.0/24 maxlen: 24
213.148.208.0/24 maxlen: 24
213.148.209.0/24 maxlen: 24
213.148.210.0/24 maxlen: 24
213.148.211.0/24 maxlen: 24
213.148.212.0/24 maxlen: 24
213.148.213.0/24 maxlen: 24
213.148.214.0/24 maxlen: 24
213.148.215.0/24 maxlen: 24
213.148.216.0/24 maxlen: 24
213.148.217.0/24 maxlen: 24
213.148.218.0/24 maxlen: 24
213.148.219.0/24 maxlen: 24
213.148.220.0/24 maxlen: 24
213.148.221.0/24 maxlen: 24
213.148.222.0/24 maxlen: 24
213.148.223.0/24 maxlen: 24
2001:4d10::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a9:9b:f5:b7:01:93:99:9b:25:ce:61:80:fe:35:0e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Validity
Not Before: Apr 4 14:55:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f74ba538873afcdddfbe8b5b9c985847595adb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:65:02:a4:a1:1c:8f:8c:4e:4e:e4:7d:10:20:
84:a1:e3:8c:9a:c1:51:97:64:63:86:04:d2:2b:38:
56:7a:55:91:5d:89:b9:1a:21:94:96:af:8f:f4:cb:
11:5e:e4:2f:07:bf:a4:fc:72:d1:f6:36:81:c6:8b:
c9:8d:2e:02:4a:5c:01:64:68:3e:3d:68:16:2f:97:
81:79:38:e6:ab:02:4d:67:80:0b:1e:57:3e:e4:59:
63:46:7e:b3:a9:26:7b:e2:b2:f4:28:23:2e:5c:4f:
a4:c4:a9:c6:e2:d1:d9:a6:ad:45:8b:7d:75:d9:71:
75:d7:30:8e:35:40:32:47:76:ff:32:3d:03:d6:51:
4a:2c:0e:21:ca:15:93:e1:90:c9:46:ed:eb:2b:70:
eb:ad:bb:75:fa:18:65:18:3c:40:83:f6:04:15:3b:
c1:c0:83:3e:3b:d0:9d:f8:e4:4e:b6:f2:b6:64:76:
af:3f:c0:d6:ab:cd:0e:7c:b0:65:50:de:a3:78:ff:
ba:6a:01:71:e6:c2:3e:c0:80:19:ab:23:ac:69:69:
84:14:6d:7a:bd:81:b6:9a:94:9f:5b:ca:8a:84:5d:
c7:30:02:9b:67:7a:9e:a2:d7:bb:1a:9f:28:cc:35:
df:e7:6c:82:40:aa:82:1d:76:56:12:71:15:c9:49:
e2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4B:A5:38:87:3A:FC:DD:DF:BE:8B:5B:9C:98:58:47:59:5A:DB:32
X509v3 Authority Key Identifier:
keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/90ulOIc6_N3fvotbnJhYR1la2zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.176.0/21
185.184.148.0/22
212.121.224.0/19
213.148.192.0/19
IPv6:
2001:4d10::/32
Signature Algorithm: sha256WithRSAEncryption
9c:8e:6d:54:28:2f:74:37:e0:26:a4:e4:65:a2:5a:de:a0:c2:
e6:74:15:44:19:fb:2e:4b:59:15:4a:af:33:47:5f:51:11:f0:
44:60:6a:8c:7d:44:04:b5:16:e4:bb:1a:a3:be:60:7e:d5:6c:
ee:19:e2:0f:e8:f4:27:ad:9c:6e:57:2d:cf:0f:3b:3d:ec:70:
c2:c5:d9:e4:79:b4:01:3f:35:35:e4:61:5f:84:f5:20:3f:9a:
1a:9f:5e:70:c7:10:c3:0b:98:21:9e:62:f4:04:b0:3d:d5:91:
8a:56:80:9e:a5:b8:89:1d:c8:cf:ff:cb:97:24:2f:8f:24:2b:
35:61:ee:c4:9d:68:3d:e8:7a:5e:3d:6e:df:b2:78:e6:c1:00:
f4:4b:35:ab:8c:e8:56:3d:51:76:ba:85:71:65:8c:c8:bf:8f:
3a:d2:75:d5:fd:88:ba:60:4a:d7:d9:7a:06:b4:48:3c:29:98:
e2:4b:5d:55:78:a8:9e:2c:b4:96:bc:92:b3:17:4f:d2:0c:8d:
0f:a8:93:58:b6:f3:33:20:97:d7:93:91:b5:26:20:67:ad:10:
de:50:7b:2f:f0:79:60:da:f2:d2:ab:9a:87:fc:35:b0:0e:25:
ea:07:bc:95:bc:8b:05:11:65:88:6e:d6:30:02:1c:c4:1f:8a:
e9:4d:9c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:29:07 2024 by rpki-client on console-fra.rpki-client.org