Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/v-6tflXDAC289pyY_6zlqVfhDcQ.roa
File: v-6tflXDAC289pyY_6zlqVfhDcQ.roa (raw, json)
Hash identifier: TOtYrK545Gx7mm0NNB+lvZQpImMAoyXjb8WPXOFen38=
Subject key identifier: BF:EE:AD:7E:55:C3:00:2D:BC:F6:9C:98:FF:AC:E5:A9:57:E1:0D:C4
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 01930B1A1E92CCC2D22ECF0C6F211D08FF43
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/v-6tflXDAC289pyY_6zlqVfhDcQ.roa
Signing time: Fri 08 Nov 2024 09:28:01 +0000
ROA not before: Fri 08 Nov 2024 09:28:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24961
IP address blocks: 5.104.104.0/21 maxlen: 24
5.199.128.0/20 maxlen: 24
37.157.248.0/21 maxlen: 24
46.20.32.0/20 maxlen: 24
46.228.192.0/20 maxlen: 24
62.141.32.0/20 maxlen: 24
78.31.64.0/21 maxlen: 24
80.82.208.0/20 maxlen: 24
81.30.144.0/20 maxlen: 24
83.136.80.0/21 maxlen: 24
85.14.192.0/18 maxlen: 24
85.114.128.0/19 maxlen: 24
89.163.128.0/17 maxlen: 24
91.194.84.0/24 maxlen: 24
91.212.153.0/24 maxlen: 24
91.212.159.0/24 maxlen: 24
91.212.163.0/24 maxlen: 24
91.212.193.0/24 maxlen: 24
93.186.192.0/20 maxlen: 24
146.0.32.0/20 maxlen: 24
146.19.166.0/24 maxlen: 24
152.89.92.0/22 maxlen: 24
185.15.244.0/22 maxlen: 24
185.45.248.0/22 maxlen: 24
185.219.208.0/22 maxlen: 24
193.111.198.0/23 maxlen: 24
194.107.129.0/24 maxlen: 24
194.126.198.0/24 maxlen: 24
195.93.242.0/23 maxlen: 24
213.202.192.0/18 maxlen: 24
217.79.176.0/20 maxlen: 24
2001:4ba0::/32 maxlen: 32
2001:4ba1::/32 maxlen: 32
2001:4ba3::/32 maxlen: 32
2001:4ba4::/32 maxlen: 32
2a01:480::/32 maxlen: 32
2a0a:db80:1000::/36 maxlen: 36
2a0a:db80:2000::/36 maxlen: 36
2a0a:db80:3000::/36 maxlen: 36
2a0a:db80:4000::/36 maxlen: 36
2a0a:db80:5000::/36 maxlen: 36
2a0a:db80:8000::/36 maxlen: 36
2a0c:6b00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0b:1a:1e:92:cc:c2:d2:2e:cf:0c:6f:21:1d:08:ff:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Nov 8 09:28:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfeead7e55c3002dbcf69c98fface5a957e10dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cd:6a:7f:3f:8d:b1:41:cd:c2:d8:92:0b:6d:
7d:85:da:ef:9f:fa:b6:a6:ce:a8:3e:51:bd:bc:5c:
19:19:b4:44:5c:c1:72:0a:e7:2d:b7:8a:78:4d:16:
c6:57:0b:fa:36:e5:88:b4:c9:40:4f:4b:c8:4e:49:
d5:0f:72:0b:4c:a5:19:53:32:0a:f3:44:74:83:32:
f4:b5:79:23:45:16:64:9b:46:17:6d:e2:14:c7:f7:
e5:4f:72:ec:6f:75:25:e5:40:f6:63:78:35:d3:be:
81:74:f1:8b:e3:9c:75:a7:8b:67:63:78:ba:69:ac:
b8:1f:04:ae:ba:b8:fc:ab:fa:2e:33:29:6b:61:ec:
af:28:17:8e:93:ec:8e:57:87:67:86:de:1d:a5:c6:
72:6f:b9:24:7f:7d:9f:45:ee:5c:af:94:bb:28:db:
f1:70:0b:55:b7:7c:0e:12:c0:b8:dd:85:5d:49:e3:
bb:90:f0:92:09:05:55:30:52:a9:7b:dd:e1:af:c9:
41:0a:cc:c7:c7:9d:68:fb:ff:c2:81:be:93:76:89:
c4:d2:a7:e4:b8:ba:da:1c:e9:29:86:71:08:b3:33:
a6:af:22:87:a4:ee:64:e7:45:19:42:b1:5d:83:fa:
2d:5a:a0:9b:3d:84:fe:06:a0:50:ca:d3:e8:39:9c:
51:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EE:AD:7E:55:C3:00:2D:BC:F6:9C:98:FF:AC:E5:A9:57:E1:0D:C4
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/v-6tflXDAC289pyY_6zlqVfhDcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.104.0/21
5.199.128.0/20
37.157.248.0/21
46.20.32.0/20
46.228.192.0/20
62.141.32.0/20
78.31.64.0/21
80.82.208.0/20
81.30.144.0/20
83.136.80.0/21
85.14.192.0/18
85.114.128.0/19
89.163.128.0/17
91.194.84.0/24
91.212.153.0/24
91.212.159.0/24
91.212.163.0/24
91.212.193.0/24
93.186.192.0/20
146.0.32.0/20
146.19.166.0/24
152.89.92.0/22
185.15.244.0/22
185.45.248.0/22
185.219.208.0/22
193.111.198.0/23
194.107.129.0/24
194.126.198.0/24
195.93.242.0/23
213.202.192.0/18
217.79.176.0/20
IPv6:
2001:4ba0::/31
2001:4ba3::-2001:4ba4:ffff:ffff:ffff:ffff:ffff:ffff
2a01:480::/32
2a0a:db80:1000::-2a0a:db80:5fff:ffff:ffff:ffff:ffff:ffff
2a0a:db80:8000::/36
2a0c:6b00::/32
Signature Algorithm: sha256WithRSAEncryption
15:1e:89:de:8e:b9:a5:fa:6d:fe:9e:0e:08:27:e9:6d:c9:68:
ac:a2:a7:49:84:ee:f4:c3:68:92:5e:a5:36:bf:35:d8:68:05:
86:ee:87:75:dd:71:70:ee:48:e2:7d:95:48:a8:00:4b:91:60:
55:5c:88:81:81:03:0c:f2:0d:d7:cc:ce:d8:65:5c:6e:74:5c:
5b:e1:37:56:69:eb:fa:51:ec:35:ad:68:74:1f:ce:3f:71:cc:
6f:c5:4b:fc:0a:21:51:5c:98:bd:05:d7:a6:9f:19:ce:eb:d9:
b2:7e:cb:66:3d:9a:42:d6:e6:14:62:4f:72:71:ac:c4:f0:fe:
d2:37:09:00:e9:c2:93:31:10:52:91:8e:25:c1:da:fb:92:6f:
0c:c1:d1:85:db:5a:9f:7a:db:da:50:88:bb:e4:3b:e9:28:3f:
0b:16:e9:c9:19:f9:e0:8a:a3:b6:6a:c3:82:e3:c5:2c:7b:12:
20:43:9f:9e:6a:11:5e:9b:2b:ad:78:00:54:cd:1f:d1:ab:ea:
ed:1e:de:27:e5:68:fe:75:2a:48:fc:e1:ed:b5:98:85:0e:3d:
f8:8f:0b:53:1d:39:81:30:7e:fc:ea:ce:e0:f5:56:a3:4c:0b:
b6:5e:2f:31:d3:f0:11:52:c7:ec:b1:8e:dd:19:93:c4:97:0e:
7a:18:31:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:09:18 2024 by rpki-client on console-ams.rpki-client.org