Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/fG93kRSUxQtf0Jn_iquLVOQtEy4.roa
File: fG93kRSUxQtf0Jn_iquLVOQtEy4.roa (raw, json)
Hash identifier: ZGFLvooGHA4JyBhJqwVISzS4dRj7qKMtDzMHREiEqYY=
Subject key identifier: 7C:6F:77:91:14:94:C5:0B:5F:D0:99:FF:8A:AB:8B:54:E4:2D:13:2E
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 0192DE26DB544A3FB26B0D94EA8DFF04D568
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/fG93kRSUxQtf0Jn_iquLVOQtEy4.roa
Signing time: Wed 30 Oct 2024 15:59:01 +0000
ROA not before: Wed 30 Oct 2024 15:59:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34471
IP address blocks: 2.59.108.0/22 maxlen: 24
2.59.111.0/24 maxlen: 24
31.25.176.0/21 maxlen: 24
37.122.219.0/24 maxlen: 24
45.92.132.0/22 maxlen: 24
46.28.160.0/21 maxlen: 24
89.40.84.0/22 maxlen: 24
91.242.148.0/22 maxlen: 24
109.235.16.0/21 maxlen: 24
176.56.64.0/19 maxlen: 24
185.4.32.0/22 maxlen: 24
185.5.84.0/22 maxlen: 24
185.10.248.0/22 maxlen: 24
185.70.152.0/22 maxlen: 24
185.83.132.0/22 maxlen: 24
185.103.148.0/22 maxlen: 24
185.153.16.0/22 maxlen: 24
185.176.104.0/22 maxlen: 24
185.205.253.0/24 maxlen: 24
185.205.254.0/24 maxlen: 24
185.223.216.0/22 maxlen: 24
185.228.124.0/22 maxlen: 24
185.239.160.0/22 maxlen: 24
193.246.154.0/23 maxlen: 24
193.246.156.0/23 maxlen: 24
194.156.72.0/22 maxlen: 24
2a02:5dc0::/32 maxlen: 32
2a02:5fc0::/32 maxlen: 48
2a03:440::/32 maxlen: 32
2a05:9b00::/29 maxlen: 29
2a05:a800::/29 maxlen: 29
2a06:3c00::/29 maxlen: 29
2a09:eac0::/29 maxlen: 29
2a0a:1280::/29 maxlen: 29
2a0b:c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:de:26:db:54:4a:3f:b2:6b:0d:94:ea:8d:ff:04:d5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Oct 30 15:59:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c6f77911494c50b5fd099ff8aab8b54e42d132e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:f4:4f:a8:7b:ee:84:30:87:79:4d:cf:10:
7d:19:0f:22:5b:ee:5e:50:7e:93:ba:26:6d:e5:53:
b9:14:70:0a:6b:42:c5:f4:9d:05:d8:00:c0:7e:1a:
5a:5e:1a:3b:72:94:79:98:c9:2e:97:44:6b:f5:cd:
d4:bd:36:76:58:76:c2:3b:25:29:4e:9a:93:fe:9f:
26:aa:21:34:1e:e4:50:a6:b9:fd:36:b4:13:96:8a:
b7:53:ff:0b:33:ff:cf:69:b8:e9:51:28:8d:2d:ad:
f9:19:ef:fd:2d:d2:09:2a:a4:ab:60:e5:01:5a:df:
02:b8:73:c0:8a:2e:9c:18:7e:e2:91:94:57:c2:a8:
62:75:84:c2:1f:31:e2:d1:57:0d:6e:a3:a6:61:aa:
3a:5a:40:e0:84:c0:04:5a:66:a4:1e:45:11:49:6c:
06:aa:46:00:db:da:40:e3:5d:d7:96:bf:1d:43:93:
5a:72:a7:84:f8:25:9c:bd:79:76:ea:f8:49:f0:1a:
24:08:d9:56:3f:79:25:30:0b:09:2d:fe:69:21:17:
f5:53:68:65:3d:8d:c0:71:9d:27:12:35:e4:50:0b:
8b:95:a3:8d:55:31:97:1a:91:fd:e5:60:d4:5c:e8:
64:ae:7e:dc:2c:55:4d:a2:ba:ff:c4:02:1b:79:e4:
aa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6F:77:91:14:94:C5:0B:5F:D0:99:FF:8A:AB:8B:54:E4:2D:13:2E
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/fG93kRSUxQtf0Jn_iquLVOQtEy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.108.0/22
31.25.176.0/21
37.122.219.0/24
45.92.132.0/22
46.28.160.0/21
89.40.84.0/22
91.242.148.0/22
109.235.16.0/21
176.56.64.0/19
185.4.32.0/22
185.5.84.0/22
185.10.248.0/22
185.70.152.0/22
185.83.132.0/22
185.103.148.0/22
185.153.16.0/22
185.176.104.0/22
185.205.253.0-185.205.254.255
185.223.216.0/22
185.228.124.0/22
185.239.160.0/22
193.246.154.0-193.246.157.255
194.156.72.0/22
IPv6:
2a02:5dc0::/32
2a02:5fc0::/32
2a03:440::/32
2a05:9b00::/29
2a05:a800::/29
2a06:3c00::/29
2a09:eac0::/29
2a0a:1280::/29
2a0b:c40::/29
Signature Algorithm: sha256WithRSAEncryption
2a:e6:4e:e8:f5:b7:88:cc:35:05:0d:b4:56:56:25:60:00:5e:
0d:e3:aa:c1:76:51:1d:8e:56:27:9d:4a:6f:40:db:7a:51:76:
df:e9:74:02:d3:ef:18:4c:6c:e3:3c:5c:53:ed:5d:78:b9:1d:
ee:37:47:05:ef:f2:c4:bd:74:66:dd:58:8f:d3:b1:8d:70:c9:
03:f4:64:a2:91:b1:f7:bd:5b:a6:13:b7:cb:9d:85:d9:c6:3c:
aa:36:aa:9d:01:3b:76:b1:5d:d2:b7:4e:35:ac:de:5a:0f:c2:
12:82:06:be:83:ef:17:fb:8f:8d:21:d0:f7:0b:e8:0b:a9:08:
e9:8b:69:8e:f8:93:66:f7:40:39:7c:8b:1b:8b:a0:52:f5:e9:
c4:a7:e0:32:fd:5a:80:47:3e:86:66:52:4b:14:b0:dd:11:e4:
7f:08:c3:07:6f:18:8f:2a:0c:1c:b8:3c:c0:a8:e1:01:81:af:
2b:60:0d:a1:2f:b7:d9:50:89:9f:b6:25:73:90:6e:4e:18:aa:
23:26:e8:8d:88:2b:c4:01:ef:14:9c:0d:8b:38:77:10:8f:f9:
d3:bd:64:43:ef:61:09:38:18:88:0c:f2:76:ba:c4:3f:71:5a:
af:91:34:83:83:85:ef:19:70:72:c6:90:fb:0d:bf:9f:6a:6e:
14:67:5c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:09:02 2024 by rpki-client on console-fra.rpki-client.org