Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/UOPsxsgmiQhElrqVT52kdQXNrzE.roa
File: UOPsxsgmiQhElrqVT52kdQXNrzE.roa (raw, json)
Hash identifier: 7SyXxVdQptQD//3PyGVN4xw+ZxKf8SK2bw1Kz6yj5as=
Subject key identifier: 50:E3:EC:C6:C8:26:89:08:44:96:BA:95:4F:9D:A4:75:05:CD:AF:31
Certificate issuer: /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial: 018CC56EB9B8A3C0353F91284CCD38374731
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/UOPsxsgmiQhElrqVT52kdQXNrzE.roa
Signing time: Mon 01 Jan 2024 14:30:17 +0000
ROA not before: Mon 01 Jan 2024 14:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 80.86.192.0/24 maxlen: 24
80.86.199.0/24 maxlen: 24
80.86.196.0/24 maxlen: 24
80.86.198.0/24 maxlen: 24
80.86.193.0/24 maxlen: 24
81.221.251.0/24 maxlen: 24
81.221.250.0/24 maxlen: 24
81.221.253.0/24 maxlen: 24
81.221.252.0/24 maxlen: 24
81.221.254.0/24 maxlen: 24
81.221.255.0/24 maxlen: 24
195.49.16.0/24 maxlen: 24
194.191.17.0/24 maxlen: 24
194.191.16.0/24 maxlen: 24
212.59.186.0/24 maxlen: 24
212.59.184.0/24 maxlen: 24
194.191.24.0/24 maxlen: 24
194.191.21.0/24 maxlen: 24
194.191.20.0/24 maxlen: 24
194.191.19.0/24 maxlen: 24
194.191.18.0/24 maxlen: 24
212.59.189.0/24 maxlen: 24
212.59.188.0/24 maxlen: 24
194.191.30.0/24 maxlen: 24
194.191.28.0/24 maxlen: 24
194.191.29.0/24 maxlen: 24
194.191.26.0/24 maxlen: 24
194.191.25.0/24 maxlen: 24
82.195.224.0/24 maxlen: 24
82.195.226.0/24 maxlen: 24
82.195.225.0/24 maxlen: 24
82.195.227.0/24 maxlen: 24
2a01:2a8:2001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:b9:b8:a3:c0:35:3f:91:28:4c:cd:38:37:47:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Validity
Not Before: Jan 1 14:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50e3ecc6c82689084496ba954f9da47505cdaf31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:77:97:eb:9f:96:c8:fe:24:27:58:6c:4b:51:
26:09:aa:c4:a3:fd:cb:dc:4f:ca:17:ab:9e:3b:0c:
24:5d:6e:c6:69:f7:eb:37:3a:67:0f:9a:bc:25:3f:
68:e7:d0:cc:90:c3:7b:92:46:66:9d:94:0a:bd:41:
42:73:08:50:99:b4:bb:53:71:96:87:b8:7d:39:e7:
f9:5a:f4:a1:45:40:48:a3:2b:b1:30:bd:18:e3:be:
e2:df:8d:25:22:44:e2:10:10:d8:fc:0b:c9:8c:ac:
73:17:a6:3e:04:bc:fe:44:70:ef:3f:d5:a7:64:31:
3a:ac:13:40:7f:d7:c7:9f:49:08:9e:92:b7:52:46:
f7:36:26:8f:3f:fe:54:a8:be:9e:99:67:c7:df:b1:
6c:9f:3c:03:61:58:ab:dc:90:fb:9a:4d:e1:51:83:
fb:64:62:17:6e:9e:38:18:6c:4c:72:e8:4b:f6:c4:
e7:0c:1b:f2:93:ad:52:bc:d8:2f:6b:83:43:f8:d6:
38:e4:dd:66:4a:c5:a8:34:20:c3:5a:50:b4:4d:96:
56:19:0e:85:d3:d7:24:16:86:81:bb:de:3e:e9:f4:
37:32:4d:a3:6e:37:7b:35:b9:24:fe:1b:ef:b1:d7:
ad:1f:cc:c6:79:f0:7c:4b:21:bf:bf:95:a7:73:09:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E3:EC:C6:C8:26:89:08:44:96:BA:95:4F:9D:A4:75:05:CD:AF:31
X509v3 Authority Key Identifier:
keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/UOPsxsgmiQhElrqVT52kdQXNrzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.192.0/23
80.86.196.0/24
80.86.198.0/23
81.221.250.0-81.221.255.255
82.195.224.0/22
194.191.16.0-194.191.21.255
194.191.24.0-194.191.26.255
194.191.28.0-194.191.30.255
195.49.16.0/24
212.59.184.0/24
212.59.186.0/24
212.59.188.0/23
IPv6:
2a01:2a8:2001::/48
Signature Algorithm: sha256WithRSAEncryption
8b:6d:20:d1:ad:c0:db:28:a9:67:07:88:50:66:14:49:32:ed:
bb:95:34:61:90:f8:27:b6:49:98:a9:19:02:73:1f:f6:17:e9:
f6:35:27:93:47:b8:ee:e6:fb:68:6f:72:1c:68:27:8b:27:ee:
28:9a:df:bc:b3:c6:52:9c:64:55:40:bb:bf:6a:21:31:53:a9:
09:72:a9:96:18:d2:6d:14:60:e7:c4:12:40:48:65:f0:4b:47:
97:ff:7c:93:ed:d7:75:ae:1e:b8:e9:ff:49:ce:05:4c:71:1d:
3d:02:c7:50:fb:8a:97:c7:e7:33:24:01:72:fe:d0:3d:25:8a:
6e:dc:52:e2:7d:2b:f3:5a:2d:51:fa:04:f8:bd:5c:4d:0d:e5:
3b:cc:a4:67:4d:94:c6:df:86:4d:c7:ec:20:3b:ff:66:82:e9:
a6:53:ad:d6:57:00:03:09:40:c4:11:47:a1:d4:5c:31:b5:a1:
b4:1d:5d:12:d3:40:fb:03:b4:9f:e4:44:41:00:75:0a:55:27:
69:78:20:1c:7a:83:95:c9:fd:25:38:68:59:3a:79:c2:51:ce:
f2:6e:a9:f2:c8:6d:62:00:9f:c7:dc:5d:f9:f2:06:97:f6:1f:
94:21:d0:ae:85:1b:a3:b6:1f:e5:68:3a:f3:e2:59:50:df:e6:
30:04:c1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 04:13:00 2024 by rpki-client on console-fra.rpki-client.org