Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/4_EDjULFMva7HOZuwXn7Xw9LweA.roa
File: 4_EDjULFMva7HOZuwXn7Xw9LweA.roa (raw, json)
Hash identifier: QolV3yoXhCz/T/Kx7nYO1Ue1cRl2WEodRxheGCE5bnc=
Subject key identifier: E3:F1:03:8D:42:C5:32:F6:BB:1C:E6:6E:C1:79:FB:5F:0F:4B:C1:E0
Certificate issuer: /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial: 0190599078BCE2FF761D8D316AA48422FA1B
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/4_EDjULFMva7HOZuwXn7Xw9LweA.roa
Signing time: Thu 27 Jun 2024 11:59:18 +0000
ROA not before: Thu 27 Jun 2024 11:59:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1836
IP address blocks: 80.86.192.0/20 maxlen: 21
80.253.80.0/21 maxlen: 22
80.254.160.0/19 maxlen: 20
81.6.0.0/19 maxlen: 20
81.6.48.0/20 maxlen: 21
81.221.0.0/16 maxlen: 17
82.195.224.0/19 maxlen: 20
146.228.0.0/16 maxlen: 17
146.228.64.0/24 maxlen: 24
193.72.0.0/18 maxlen: 19
193.72.64.0/21 maxlen: 21
193.72.72.0/22 maxlen: 22
193.72.76.0/23 maxlen: 23
193.72.78.0/24 maxlen: 24
193.72.81.0/24 maxlen: 24
193.72.82.0/23 maxlen: 24
193.72.84.0/22 maxlen: 23
193.72.88.0/21 maxlen: 22
193.72.96.0/19 maxlen: 20
193.72.128.0/20 maxlen: 21
193.72.148.0/22 maxlen: 23
193.72.152.0/21 maxlen: 22
193.72.160.0/22 maxlen: 23
193.72.164.0/23 maxlen: 24
193.72.167.0/24 maxlen: 24
193.72.168.0/21 maxlen: 22
193.72.176.0/21 maxlen: 22
193.72.184.0/23 maxlen: 24
193.72.187.0/24 maxlen: 24
193.72.188.0/22 maxlen: 23
193.72.192.0/20 maxlen: 21
193.72.208.0/21 maxlen: 22
193.72.217.0/24 maxlen: 24
193.72.218.0/23 maxlen: 24
193.72.220.0/22 maxlen: 23
193.72.224.0/19 maxlen: 20
193.73.0.0/18 maxlen: 19
193.73.64.0/19 maxlen: 20
193.73.80.0/20 maxlen: 20
193.73.96.0/21 maxlen: 21
193.73.96.0/22 maxlen: 22
193.73.100.0/22 maxlen: 22
193.73.104.0/23 maxlen: 24
193.73.108.0/22 maxlen: 23
193.73.112.0/24 maxlen: 24
193.73.115.0/24 maxlen: 24
193.73.116.0/22 maxlen: 23
193.73.120.0/23 maxlen: 24
193.73.123.0/24 maxlen: 24
193.73.124.0/24 maxlen: 24
193.73.126.0/23 maxlen: 24
193.73.128.0/18 maxlen: 19
193.73.192.0/20 maxlen: 21
193.73.209.0/24 maxlen: 24
193.73.210.0/24 maxlen: 24
193.73.212.0/22 maxlen: 23
193.73.216.0/21 maxlen: 22
193.73.224.0/21 maxlen: 22
193.73.232.0/22 maxlen: 23
193.73.236.0/23 maxlen: 24
193.73.239.0/24 maxlen: 24
193.73.240.0/23 maxlen: 24
193.73.244.0/22 maxlen: 23
193.73.248.0/23 maxlen: 24
193.73.252.0/22 maxlen: 23
193.193.128.0/19 maxlen: 20
194.191.0.0/16 maxlen: 17
195.48.0.0/16 maxlen: 17
195.49.0.0/17 maxlen: 18
195.49.6.0/24 maxlen: 24
195.49.78.0/24 maxlen: 24
195.49.79.0/24 maxlen: 24
195.130.160.0/19 maxlen: 20
212.59.128.0/18 maxlen: 19
2001:1b50::/29 maxlen: 29
2a01:2a8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:59:90:78:bc:e2:ff:76:1d:8d:31:6a:a4:84:22:fa:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Validity
Not Before: Jun 27 11:59:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3f1038d42c532f6bb1ce66ec179fb5f0f4bc1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ca:8e:5a:94:cc:ac:92:c8:f8:3a:95:b0:81:
92:e0:b3:54:b8:07:90:88:34:67:8a:75:d7:b2:fe:
06:cf:89:62:02:59:7f:10:1a:2b:19:e7:17:7f:69:
53:ad:7c:c4:ed:4b:4f:9a:47:a3:04:c7:dc:89:92:
cd:5c:72:26:d7:4d:fa:9d:9f:89:92:e2:50:33:05:
4a:84:1d:e9:4c:ed:40:77:98:36:38:e5:c0:9f:a8:
4c:21:9f:c1:fd:f0:fc:cb:fd:07:86:c8:2c:6d:48:
14:7a:0e:0a:f3:ca:58:43:51:63:d7:17:61:ef:db:
bd:82:1f:26:aa:a2:2e:30:ab:ac:43:b0:d9:bd:7c:
76:53:d0:c0:4f:b7:77:15:50:ee:51:7a:ae:73:42:
b3:34:ea:9b:76:78:01:dd:19:aa:57:d3:28:e7:0b:
4c:3e:0e:b1:40:c0:e9:01:51:a8:a0:f0:08:d6:ce:
3e:e2:a7:97:7c:54:23:f5:2a:1f:da:b8:51:4a:28:
07:b1:d8:ca:a3:a6:9f:a9:75:9f:43:26:37:36:af:
d7:2a:82:52:cd:b7:55:b8:ad:b1:b5:3c:61:6c:7d:
8a:f8:6a:90:3b:4c:b0:83:74:cb:f1:79:fa:0c:67:
4b:86:c2:b7:38:9e:d2:d3:65:b1:73:ed:78:23:9b:
30:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F1:03:8D:42:C5:32:F6:BB:1C:E6:6E:C1:79:FB:5F:0F:4B:C1:E0
X509v3 Authority Key Identifier:
keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/4_EDjULFMva7HOZuwXn7Xw9LweA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.192.0/20
80.253.80.0/21
80.254.160.0/19
81.6.0.0/19
81.6.48.0/20
81.221.0.0/16
82.195.224.0/19
146.228.0.0/16
193.72.0.0-193.72.78.255
193.72.81.0-193.72.143.255
193.72.148.0-193.72.165.255
193.72.167.0-193.72.185.255
193.72.187.0-193.72.215.255
193.72.217.0-193.73.105.255
193.73.108.0-193.73.112.255
193.73.115.0-193.73.121.255
193.73.123.0-193.73.124.255
193.73.126.0-193.73.207.255
193.73.209.0-193.73.210.255
193.73.212.0-193.73.237.255
193.73.239.0-193.73.241.255
193.73.244.0-193.73.249.255
193.73.252.0/22
193.193.128.0/19
194.191.0.0/16
195.48.0.0-195.49.127.255
195.130.160.0/19
212.59.128.0/18
IPv6:
2001:1b50::/29
2a01:2a8::/29
Signature Algorithm: sha256WithRSAEncryption
ca:1a:d8:bc:11:05:f9:86:b8:12:d9:7e:1d:52:2b:44:38:07:
3d:c2:f7:93:f4:c8:06:f0:14:d8:82:0b:2c:89:be:56:52:db:
a9:95:92:6e:4e:c6:bf:87:68:86:bf:9b:ff:2e:25:0d:5e:56:
fc:36:b3:9a:92:6d:7d:30:84:7b:dc:2d:f4:03:4f:ca:ab:04:
24:19:23:c0:c2:8d:27:03:69:83:bc:b8:84:22:7d:8a:a5:b0:
e0:9e:5e:c9:8c:a5:fc:27:40:54:16:36:21:b9:a4:02:b4:d5:
6b:cf:f9:e5:20:15:34:87:38:c3:34:41:8f:a4:80:12:d5:13:
17:47:32:5d:5c:3e:92:33:0c:a6:88:b5:07:36:3d:f8:4e:cc:
17:52:33:ac:85:41:7e:87:9d:1b:a6:6f:47:22:af:21:58:4f:
6a:4b:29:1e:9c:71:3c:54:ba:f8:83:f4:8a:ab:30:9b:db:01:
d6:f5:0c:d6:fa:73:48:1c:60:35:65:27:ba:82:3f:ca:5b:19:
09:1f:4a:ff:93:c2:c4:9b:06:29:8b:05:a2:fd:44:a4:46:d1:
ef:40:8e:80:f4:e0:c5:e9:37:59:8a:f6:17:94:48:b9:0e:8a:
9c:ee:1c:eb:3b:b6:b0:76:53:79:fb:8d:3e:54:6e:1d:02:19:
38:1b:0d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:41 2024 by rpki-client on console-ams.rpki-client.org