Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/Ajo2ixTukR9-HIIXTMZr-RKIL1s.roa
File: Ajo2ixTukR9-HIIXTMZr-RKIL1s.roa (raw, json)
Hash identifier: VmDNDMINko7FZWPwLtreeqBXxvWN2RcjDHmgZzuFSIo=
Subject key identifier: 02:3A:36:8B:14:EE:91:1F:7E:1C:82:17:4C:C6:6B:F9:12:88:2F:5B
Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial: 0192284D03477BA35958B5F55A5AAAD7E7D2
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/Ajo2ixTukR9-HIIXTMZr-RKIL1s.roa
Signing time: Wed 25 Sep 2024 08:29:48 +0000
ROA not before: Wed 25 Sep 2024 08:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 80.81.192.0/21 maxlen: 21
80.81.202.0/24 maxlen: 24
80.81.203.0/24 maxlen: 24
185.0.4.0/24 maxlen: 24
185.0.5.0/24 maxlen: 24
185.0.6.0/24 maxlen: 24
185.0.7.0/24 maxlen: 24
185.0.8.0/24 maxlen: 24
185.0.17.0/24 maxlen: 24
185.0.33.0/24 maxlen: 24
185.0.35.0/24 maxlen: 24
185.1.8.0/24 maxlen: 24
185.1.46.0/24 maxlen: 24
185.1.47.0/24 maxlen: 24
185.1.48.0/24 maxlen: 24
185.1.119.0/24 maxlen: 24
185.1.131.0/24 maxlen: 24
185.1.170.0/23 maxlen: 23
185.1.176.0/24 maxlen: 24
185.1.182.0/24 maxlen: 24
185.1.183.0/24 maxlen: 24
185.1.187.0/24 maxlen: 24
185.1.192.0/23 maxlen: 23
185.1.197.0/24 maxlen: 24
185.1.204.0/24 maxlen: 24
185.1.208.0/23 maxlen: 23
185.1.210.0/23 maxlen: 23
185.1.220.0/24 maxlen: 24
185.1.244.0/24 maxlen: 24
185.1.245.0/24 maxlen: 24
185.1.246.0/24 maxlen: 24
185.1.248.0/24 maxlen: 24
185.1.252.0/24 maxlen: 24
185.1.253.0/24 maxlen: 24
185.176.192.0/24 maxlen: 24
2001:7f8::/48 maxlen: 48
2001:7f8:32::/48 maxlen: 48
2001:7f8:36::/48 maxlen: 48
2001:7f8:3d::/48 maxlen: 48
2001:7f8:3f::/48 maxlen: 48
2001:7f8:44::/48 maxlen: 48
2001:7f8:73::/48 maxlen: 48
2001:7f8:9e::/48 maxlen: 48
2001:7f8:a0::/48 maxlen: 48
2001:7f8:d5::/48 maxlen: 48
2001:7f8:df::/48 maxlen: 48
2001:7f8:106::/48 maxlen: 48
2001:7f8:10a::/48 maxlen: 48
2001:7f8:139::/48 maxlen: 48
2001:7f8:13a::/48 maxlen: 48
2001:7f8:13b::/48 maxlen: 48
2001:7f8:13c::/48 maxlen: 48
2001:7f8:13e::/48 maxlen: 48
2001:7f8:143::/48 maxlen: 48
2001:7f8:14e::/48 maxlen: 48
2a02:c50:4000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:28:4d:03:47:7b:a3:59:58:b5:f5:5a:5a:aa:d7:e7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Validity
Not Before: Sep 25 08:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=023a368b14ee911f7e1c82174cc66bf912882f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:20:de:bb:db:f7:22:7b:fc:14:ab:2a:ef:da:
0e:49:1b:ef:00:ed:8c:2f:5c:4e:0f:de:3b:00:ad:
32:80:5a:7b:69:5b:8f:40:e3:2e:6e:6c:e0:e2:44:
a1:0d:02:ec:ac:e9:89:b3:c5:cf:c6:05:b3:db:49:
e9:39:4f:8f:aa:e1:32:d8:c2:91:d2:d8:fd:57:73:
e8:ea:f7:d7:df:32:5a:36:ab:b4:b0:5d:6b:c7:2f:
f5:c8:cc:ab:6a:20:42:92:c7:dc:bc:12:2c:ce:82:
97:94:1f:8e:f4:6a:92:6b:34:5b:ec:71:47:53:55:
d8:ea:05:fe:03:cc:92:5c:f5:38:1b:16:58:7a:47:
36:8f:bb:e1:d1:62:dd:6b:a7:62:f8:ce:da:22:fc:
24:3a:1e:78:1f:a3:7d:21:05:03:08:bc:81:82:d1:
5b:3e:bf:ee:8e:f4:eb:d2:4c:eb:c5:27:63:33:a2:
1f:bf:4f:11:84:fe:fb:9d:7f:4e:0e:64:6b:88:14:
64:73:51:36:bd:fc:dd:e7:61:44:a4:db:d2:7a:fb:
84:04:5a:bc:a6:67:4b:1a:09:c7:17:60:08:12:73:
9c:31:6d:c2:8b:d1:68:68:b2:17:d9:0d:79:6f:01:
8a:04:f4:4a:65:68:51:31:8c:f5:c4:b0:b1:bb:89:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3A:36:8B:14:EE:91:1F:7E:1C:82:17:4C:C6:6B:F9:12:88:2F:5B
X509v3 Authority Key Identifier:
keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/Ajo2ixTukR9-HIIXTMZr-RKIL1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.192.0/21
80.81.202.0/23
185.0.4.0-185.0.8.255
185.0.17.0/24
185.0.33.0/24
185.0.35.0/24
185.1.8.0/24
185.1.46.0-185.1.48.255
185.1.119.0/24
185.1.131.0/24
185.1.170.0/23
185.1.176.0/24
185.1.182.0/23
185.1.187.0/24
185.1.192.0/23
185.1.197.0/24
185.1.204.0/24
185.1.208.0/22
185.1.220.0/24
185.1.244.0-185.1.246.255
185.1.248.0/24
185.1.252.0/23
185.176.192.0/24
IPv6:
2001:7f8::/48
2001:7f8:32::/48
2001:7f8:36::/48
2001:7f8:3d::/48
2001:7f8:3f::/48
2001:7f8:44::/48
2001:7f8:73::/48
2001:7f8:9e::/48
2001:7f8:a0::/48
2001:7f8:d5::/48
2001:7f8:df::/48
2001:7f8:106::/48
2001:7f8:10a::/48
2001:7f8:139::-2001:7f8:13c:ffff:ffff:ffff:ffff:ffff
2001:7f8:13e::/48
2001:7f8:143::/48
2001:7f8:14e::/48
2a02:c50:4000::/44
Signature Algorithm: sha256WithRSAEncryption
a7:e7:93:a2:e3:78:b0:bc:56:b2:c6:45:16:3d:d3:08:4c:3a:
f5:8b:7f:db:83:7b:31:3a:e1:88:8e:62:4a:9d:82:ec:1a:0a:
f1:13:2b:6e:9f:78:68:af:76:97:28:64:71:c3:66:ca:24:12:
64:a3:21:d0:c2:07:a8:74:4a:e3:84:60:12:fd:5f:9c:53:31:
61:6a:8f:94:7c:33:ce:36:ef:f1:03:8e:d2:69:e4:70:74:a3:
8a:5f:be:59:bf:1f:cf:0f:8b:0d:65:c1:21:7e:b1:da:08:f2:
6b:0b:4c:78:23:20:bb:6d:21:65:03:10:7d:a0:6f:87:20:7f:
96:34:01:33:90:2b:ed:8a:ee:82:38:7a:a0:2f:0d:cd:74:19:
63:48:95:5d:40:4d:58:d3:98:1d:10:8b:01:93:b5:e3:1c:39:
3a:d1:09:7d:4a:41:a8:de:3d:b3:7f:a1:ff:be:c1:02:98:20:
02:dd:a2:b7:72:61:75:62:dd:9b:01:75:be:bb:8f:0e:bc:fd:
50:4a:16:18:bb:a4:82:53:53:ec:75:b3:08:85:2f:ea:51:40:
c0:c1:fb:c4:3f:67:b1:7e:7f:53:f1:85:58:92:a6:15:ff:df:
94:b4:7f:73:d9:f1:57:96:ea:b1:5a:08:ce:e5:92:0d:b7:94:
16:bf:dc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:33:04 2024 by rpki-client on console-fra.rpki-client.org