Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/KFIpV08GkG2N3DuahmV3gexQmh8.roa
File: KFIpV08GkG2N3DuahmV3gexQmh8.roa (raw, json)
Hash identifier: cfQEvhVtq/YwwXNW4hoUia7pCf8ryl9sVC9DGwYC/QQ=
Subject key identifier: 28:52:29:57:4F:06:90:6D:8D:DC:3B:9A:86:65:77:81:EC:50:9A:1F
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 018E38E43BABB28440A1FFF743E72A4C2CE9
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/KFIpV08GkG2N3DuahmV3gexQmh8.roa
Signing time: Wed 13 Mar 2024 17:37:45 +0000
ROA not before: Wed 13 Mar 2024 17:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202940
IP address blocks: 89.208.0.0/21 maxlen: 21
89.208.4.0/22 maxlen: 24
89.208.56.0/21 maxlen: 21
89.208.128.0/21 maxlen: 21
89.208.134.0/23 maxlen: 24
141.226.120.0/22 maxlen: 24
147.234.23.0/24 maxlen: 24
147.236.104.0/21 maxlen: 23
147.236.116.0/23 maxlen: 24
147.236.120.0/21 maxlen: 21
147.236.125.0/24 maxlen: 24
147.236.144.0/20 maxlen: 24
147.236.176.0/20 maxlen: 20
147.236.183.0/24 maxlen: 24
185.108.80.0/22 maxlen: 24
185.149.252.0/22 maxlen: 24
185.167.108.0/22 maxlen: 24
185.175.32.0/22 maxlen: 23
185.180.100.0/22 maxlen: 24
185.180.100.0/24 maxlen: 24
185.180.102.0/24 maxlen: 24
185.180.103.0/24 maxlen: 24
185.182.76.0/22 maxlen: 24
185.184.244.0/22 maxlen: 23
188.191.224.0/21 maxlen: 21
188.191.224.0/22 maxlen: 22
188.191.224.0/24 maxlen: 24
188.191.228.0/22 maxlen: 22
217.175.80.0/20 maxlen: 20
217.175.84.0/22 maxlen: 22
217.175.88.0/21 maxlen: 21
2a00:7c40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:e4:3b:ab:b2:84:40:a1:ff:f7:43:e7:2a:4c:2c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Mar 13 17:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=285229574f06906d8ddc3b9a86657781ec509a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:00:ce:84:bd:e7:6f:d6:2e:c0:0d:7b:2d:37:
35:7a:3e:02:e9:72:53:40:92:ee:c1:19:37:4d:80:
12:4c:34:51:e1:9f:01:ad:5a:56:67:68:0a:e4:0b:
94:78:95:7d:9f:44:b3:47:1e:52:25:8e:a3:ef:f2:
ea:ac:41:89:57:72:5e:68:cc:b7:51:dd:3f:00:9f:
2a:42:d2:de:a9:4d:3c:2b:49:19:c8:40:20:bb:d6:
9c:b5:0b:a0:20:62:2a:43:0e:b8:fe:ff:23:de:70:
a6:96:08:20:09:90:c8:12:d4:67:97:c8:27:ca:dc:
a1:c0:c2:86:65:69:4b:6c:c3:88:82:9a:cb:b7:bc:
b0:87:e2:62:f7:9f:af:77:4e:45:06:85:70:5b:33:
a5:de:54:77:33:26:30:ed:2d:a4:6c:33:fe:00:e8:
6d:77:a4:72:08:ba:1c:55:6c:bf:5b:5d:fa:bf:0b:
d7:e8:bf:ae:38:ef:d5:47:2a:12:78:13:ae:1d:f0:
e8:7a:6e:d2:d8:65:22:35:76:b2:4d:6a:49:04:cc:
e5:99:ae:f2:e9:0d:bb:38:1a:ea:d2:64:b5:27:47:
74:65:51:e5:93:fc:2f:ac:7b:e3:01:8a:da:47:69:
be:e9:eb:91:4f:23:8b:7b:fc:f1:a4:9c:3a:ab:27:
b1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:52:29:57:4F:06:90:6D:8D:DC:3B:9A:86:65:77:81:EC:50:9A:1F
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/KFIpV08GkG2N3DuahmV3gexQmh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.208.0.0/21
89.208.56.0/21
89.208.128.0/21
141.226.120.0/22
147.234.23.0/24
147.236.104.0/21
147.236.116.0/23
147.236.120.0/21
147.236.144.0/20
147.236.176.0/20
185.108.80.0/22
185.149.252.0/22
185.167.108.0/22
185.175.32.0/22
185.180.100.0/22
185.182.76.0/22
185.184.244.0/22
188.191.224.0/21
217.175.80.0/20
IPv6:
2a00:7c40::/32
Signature Algorithm: sha256WithRSAEncryption
40:a7:5b:b8:7b:86:c0:f4:bf:19:8f:ab:02:5d:fc:18:90:47:
89:a8:14:0a:1d:a0:34:d4:8b:3f:3d:8a:02:7e:f7:48:e2:c6:
06:a7:1c:03:32:d0:4d:b6:4a:b0:b6:23:95:be:ad:73:cf:e0:
ce:10:27:3d:d6:0f:b9:91:57:e4:50:b1:2a:b1:da:e3:0e:1f:
0e:97:9f:6d:53:0e:a2:0d:28:d9:59:c4:1b:aa:18:7c:9b:c0:
06:0a:46:2d:4a:1d:f4:e4:f0:1c:4f:51:07:8d:0a:df:bd:b5:
19:2b:d8:78:e6:8d:49:4b:61:c2:49:59:a3:6a:88:ac:b0:7e:
a7:a3:63:cf:da:4b:57:c6:75:9f:f4:c6:e9:7b:b6:58:f9:75:
8d:95:da:c1:26:2c:20:fb:c4:2c:ce:a5:7e:36:73:7e:06:39:
09:ca:6c:71:5f:71:f6:42:2f:e5:14:d8:e2:af:28:2f:4d:c0:
6d:9a:4b:8f:e7:6f:e6:d6:20:fb:a1:9b:09:8f:6b:24:c3:dd:
55:bd:a1:ee:f5:57:5c:5c:a9:7f:d8:81:5c:da:87:73:b5:2a:
87:38:0c:45:d8:38:c6:09:01:93:58:1b:85:f3:55:00:a0:3e:
28:bf:65:cf:4b:97:31:54:5b:8d:23:73:6c:77:39:d4:81:0e:
1f:9d:45:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:39:26 2024 by rpki-client on console-ams.rpki-client.org