Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/AiJOLEs_tNwnLAZyuBLbe8MbpE4.roa
File: AiJOLEs_tNwnLAZyuBLbe8MbpE4.roa (raw, json)
Hash identifier: B6Zvz9qTL3RPAH4bv4rQf+0dn19JLykrWJ8FTsEyO1o=
Subject key identifier: 02:22:4E:2C:4B:3F:B4:DC:27:2C:06:72:B8:12:DB:7B:C3:1B:A4:4E
Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial: 018CCA2A640BCF5856205675AD4C802E1F62
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/AiJOLEs_tNwnLAZyuBLbe8MbpE4.roa
Signing time: Tue 02 Jan 2024 12:33:44 +0000
ROA not before: Tue 02 Jan 2024 12:33:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 185.1.245.0/24 maxlen: 24
185.1.244.0/24 maxlen: 24
185.1.246.0/24 maxlen: 24
185.1.248.0/24 maxlen: 24
185.1.252.0/24 maxlen: 24
185.1.253.0/24 maxlen: 24
185.1.176.0/24 maxlen: 24
185.1.183.0/24 maxlen: 24
185.1.182.0/24 maxlen: 24
185.1.187.0/24 maxlen: 24
185.1.192.0/23 maxlen: 23
185.1.197.0/24 maxlen: 24
185.1.204.0/24 maxlen: 24
185.1.210.0/23 maxlen: 23
185.1.208.0/23 maxlen: 23
185.1.220.0/24 maxlen: 24
185.1.48.0/24 maxlen: 24
185.1.47.0/24 maxlen: 24
185.1.46.0/24 maxlen: 24
80.81.192.0/21 maxlen: 21
80.81.203.0/24 maxlen: 24
80.81.202.0/24 maxlen: 24
185.1.8.0/24 maxlen: 24
185.1.119.0/24 maxlen: 24
185.1.131.0/24 maxlen: 24
185.1.170.0/23 maxlen: 23
185.0.4.0/24 maxlen: 24
185.0.7.0/24 maxlen: 24
185.0.6.0/24 maxlen: 24
185.0.5.0/24 maxlen: 24
185.0.8.0/24 maxlen: 24
185.0.17.0/24 maxlen: 24
185.0.35.0/24 maxlen: 24
185.0.33.0/24 maxlen: 24
2001:7f8:13e::/48 maxlen: 48
2001:7f8:44::/48 maxlen: 48
2001:7f8:df::/48 maxlen: 48
2001:7f8:13a::/48 maxlen: 48
2001:7f8:d5::/48 maxlen: 48
2001:7f8:73::/48 maxlen: 48
2001:7f8:14e::/48 maxlen: 48
2001:7f8:3d::/48 maxlen: 48
2001:7f8::/48 maxlen: 48
2001:7f8:36::/48 maxlen: 48
2001:7f8:10a::/48 maxlen: 48
2001:7f8:143::/48 maxlen: 48
2001:7f8:9e::/48 maxlen: 48
2001:7f8:139::/48 maxlen: 48
2001:7f8:13c::/48 maxlen: 48
2001:7f8:32::/48 maxlen: 48
2001:7f8:106::/48 maxlen: 48
2001:7f8:3f::/48 maxlen: 48
2001:7f8:a0::/48 maxlen: 48
2001:7f8:13b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 01:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:64:0b:cf:58:56:20:56:75:ad:4c:80:2e:1f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Validity
Not Before: Jan 2 12:33:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02224e2c4b3fb4dc272c0672b812db7bc31ba44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fb:24:42:4b:7d:9c:55:dc:df:d2:0e:4b:0f:
c5:18:a9:4a:6d:29:4b:22:21:5b:1e:5b:fe:15:cf:
0a:68:3f:bf:ff:43:e6:ae:5a:c0:ff:fe:f0:ca:c8:
a5:47:49:13:2a:1c:e8:85:66:c1:8b:de:49:de:11:
4b:95:20:ac:02:70:36:7d:8a:aa:70:d0:56:c4:7f:
11:98:94:a5:8d:9e:5a:be:ef:81:0b:5f:b6:2b:b7:
1f:97:ef:59:5a:57:cf:65:b9:95:ad:fb:cc:78:b6:
e9:cc:fc:f2:aa:f0:26:e8:2a:b1:be:94:51:0b:5b:
7b:ab:ee:6e:c9:8f:32:11:ef:5e:25:c8:7b:cf:c2:
75:66:4e:18:ce:04:d9:ea:87:d2:9c:23:8d:73:aa:
d2:9f:da:d1:82:ac:5d:d5:35:62:59:df:6e:3c:65:
16:b3:33:8a:6e:72:ad:0a:05:6e:bd:ec:36:40:2d:
f7:97:9e:52:22:38:ee:ed:c4:b4:38:17:ad:92:61:
5c:53:7c:a1:3f:05:a7:ce:91:1c:81:20:8d:bc:a0:
10:e3:76:f1:f2:1e:d7:3c:b7:02:b4:44:d4:62:b5:
19:20:0f:20:9a:f5:63:28:bf:86:88:36:94:da:64:
4c:0c:62:35:08:e7:5f:3d:57:6d:61:2a:d9:f0:c9:
7e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:22:4E:2C:4B:3F:B4:DC:27:2C:06:72:B8:12:DB:7B:C3:1B:A4:4E
X509v3 Authority Key Identifier:
keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/AiJOLEs_tNwnLAZyuBLbe8MbpE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.192.0/21
80.81.202.0/23
185.0.4.0-185.0.8.255
185.0.17.0/24
185.0.33.0/24
185.0.35.0/24
185.1.8.0/24
185.1.46.0-185.1.48.255
185.1.119.0/24
185.1.131.0/24
185.1.170.0/23
185.1.176.0/24
185.1.182.0/23
185.1.187.0/24
185.1.192.0/23
185.1.197.0/24
185.1.204.0/24
185.1.208.0/22
185.1.220.0/24
185.1.244.0-185.1.246.255
185.1.248.0/24
185.1.252.0/23
IPv6:
2001:7f8::/48
2001:7f8:32::/48
2001:7f8:36::/48
2001:7f8:3d::/48
2001:7f8:3f::/48
2001:7f8:44::/48
2001:7f8:73::/48
2001:7f8:9e::/48
2001:7f8:a0::/48
2001:7f8:d5::/48
2001:7f8:df::/48
2001:7f8:106::/48
2001:7f8:10a::/48
2001:7f8:139::-2001:7f8:13c:ffff:ffff:ffff:ffff:ffff
2001:7f8:13e::/48
2001:7f8:143::/48
2001:7f8:14e::/48
Signature Algorithm: sha256WithRSAEncryption
8f:a4:e3:1c:cd:76:65:e5:3f:98:2a:99:bb:ee:64:f5:4a:02:
d9:af:c9:f7:de:cb:70:82:0e:e7:ab:4e:ae:7d:ec:a0:b1:4c:
ca:2f:3e:1b:31:3d:c5:f9:d8:01:bd:ab:cf:23:c6:85:cb:60:
2a:1e:bf:6d:80:9e:cc:a8:c5:ab:af:b1:d9:cc:45:6b:3a:64:
08:a9:77:34:d2:f6:5a:1b:7c:98:19:37:32:a3:0d:ce:79:55:
98:c6:23:0b:7f:42:d4:6d:4e:31:ae:02:5c:7a:08:16:f0:72:
c4:06:88:66:37:d7:75:55:25:92:41:bf:02:d5:6d:aa:dc:4c:
dd:1e:c3:ea:aa:e3:cc:60:9d:53:e7:cb:87:60:d7:45:fa:a5:
43:ab:e7:e1:ee:41:ac:f5:43:87:ec:d8:44:d6:b8:56:54:6a:
96:55:5b:38:09:18:d4:ff:90:9c:d9:2f:f0:97:02:ff:d5:ee:
dc:8a:f6:7b:7b:33:b9:82:9f:54:00:34:b0:9d:67:81:28:8d:
d5:a8:28:62:c9:66:f7:93:78:85:f3:a2:17:24:1b:a3:13:b0:
b0:dc:c3:81:e7:34:b8:01:86:91:ca:9b:d3:95:f3:1a:01:ff:
e1:63:ba:5c:a3:05:89:b1:f3:a8:98:5c:e4:ca:b7:74:50:a5:
91:f5:1b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:57:36 2024 by rpki-client on console-ams.rpki-client.org