Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/1Y4cXqzBq-syaCh4ZmGgHysqBgk.roa
File: 1Y4cXqzBq-syaCh4ZmGgHysqBgk.roa (raw, json)
Hash identifier: jKpSxvx0w0M/5Gj2mh2ylQULQliIpPnQJyzOwSgT+Pw=
Subject key identifier: D5:8E:1C:5E:AC:C1:AB:EB:32:68:28:78:66:61:A0:1F:2B:2A:06:09
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 018CC94D98EF06D05C4EA6288940314FBA97
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/1Y4cXqzBq-syaCh4ZmGgHysqBgk.roa
Signing time: Tue 02 Jan 2024 08:32:34 +0000
ROA not before: Tue 02 Jan 2024 08:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33915
IP address blocks: 213.124.0.0/18 maxlen: 18
213.124.0.0/17 maxlen: 17
217.100.128.0/17 maxlen: 17
185.130.174.0/23 maxlen: 23
212.178.96.0/19 maxlen: 19
213.124.128.0/19 maxlen: 19
213.124.128.0/20 maxlen: 20
213.124.144.0/20 maxlen: 20
212.178.128.0/20 maxlen: 20
80.114.128.0/18 maxlen: 18
80.114.128.0/19 maxlen: 19
212.178.128.0/19 maxlen: 19
213.124.64.0/18 maxlen: 18
212.178.64.0/19 maxlen: 19
212.178.64.0/18 maxlen: 18
195.35.192.0/18 maxlen: 18
195.35.128.0/18 maxlen: 18
195.35.128.0/17 maxlen: 17
217.102.224.0/21 maxlen: 21
217.102.224.0/22 maxlen: 22
217.102.228.0/22 maxlen: 22
217.100.0.0/17 maxlen: 17
217.100.0.0/16 maxlen: 16
91.221.96.0/23 maxlen: 23
213.125.128.0/17 maxlen: 17
212.203.0.0/20 maxlen: 20
212.203.0.0/19 maxlen: 19
213.34.160.0/19 maxlen: 19
213.34.160.0/20 maxlen: 20
212.203.16.0/20 maxlen: 20
213.34.176.0/20 maxlen: 20
80.112.160.0/19 maxlen: 19
213.126.64.0/18 maxlen: 18
213.132.160.0/20 maxlen: 20
213.132.160.0/19 maxlen: 19
195.85.128.0/19 maxlen: 19
195.85.128.0/18 maxlen: 18
213.132.176.0/20 maxlen: 20
217.105.192.0/20 maxlen: 20
217.105.192.0/19 maxlen: 19
80.112.128.0/19 maxlen: 19
80.115.224.0/19 maxlen: 19
80.112.128.0/18 maxlen: 18
80.115.224.0/20 maxlen: 20
213.126.0.0/18 maxlen: 18
213.126.0.0/17 maxlen: 17
217.105.208.0/20 maxlen: 20
80.115.240.0/20 maxlen: 20
195.85.160.0/19 maxlen: 19
212.178.192.0/20 maxlen: 20
212.178.192.0/19 maxlen: 19
212.178.208.0/20 maxlen: 20
80.242.224.0/19 maxlen: 19
80.242.224.0/20 maxlen: 20
213.125.0.0/17 maxlen: 17
213.125.0.0/16 maxlen: 16
212.178.144.0/20 maxlen: 20
80.114.160.0/19 maxlen: 19
213.34.80.0/20 maxlen: 20
80.242.240.0/20 maxlen: 20
213.34.64.0/19 maxlen: 19
213.34.64.0/20 maxlen: 20
2001:41f0::/32 maxlen: 32
2001:41f0:8000::/33 maxlen: 33
2001:41f0::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:98:ef:06:d0:5c:4e:a6:28:89:40:31:4f:ba:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Jan 2 08:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d58e1c5eacc1abeb326828786661a01f2b2a0609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:44:09:56:f9:b9:0e:53:67:d9:4c:bb:4d:89:
b1:46:aa:0d:6c:31:10:60:5a:cb:27:4c:a2:e1:2d:
06:8b:1c:4f:18:75:97:8b:fe:9b:3f:47:26:70:d6:
26:4c:1f:a0:1e:bd:4d:4f:73:98:aa:13:57:46:aa:
da:7e:d1:e9:5a:e4:f1:58:10:92:33:1c:99:51:9f:
35:bd:35:ff:75:03:e1:24:b0:79:d0:b1:b4:1e:b6:
eb:83:11:19:76:3f:a8:9e:75:6c:4d:2b:e4:6c:fe:
11:1d:10:87:26:b2:5b:2a:02:60:89:25:ae:63:70:
81:ce:00:0d:64:ff:4b:a9:c4:fe:76:d9:b1:02:c0:
f2:01:94:b9:94:ff:87:41:b6:1e:04:e1:5f:0a:c4:
4d:54:8c:a2:0f:9e:09:9e:3b:5c:8d:23:2c:47:15:
26:c8:c7:6c:44:9b:87:95:df:01:c9:0c:4e:7e:f6:
99:a2:10:1c:59:ee:bf:37:9f:43:57:0b:8e:94:a8:
ce:d9:8d:ff:fc:e0:b1:5e:b1:51:de:35:61:06:db:
19:c4:30:7d:89:75:a7:b4:95:77:20:36:41:c7:42:
ac:05:53:a3:d2:74:dc:8c:4e:0d:78:96:d7:d2:cd:
d5:64:93:c2:69:6d:13:d4:23:1a:af:36:5d:db:17:
a5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8E:1C:5E:AC:C1:AB:EB:32:68:28:78:66:61:A0:1F:2B:2A:06:09
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/1Y4cXqzBq-syaCh4ZmGgHysqBgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.112.128.0/18
80.114.128.0/18
80.115.224.0/19
80.242.224.0/19
91.221.96.0/23
185.130.174.0/23
195.35.128.0/17
195.85.128.0/18
212.178.64.0-212.178.159.255
212.178.192.0/19
212.203.0.0/19
213.34.64.0/19
213.34.160.0/19
213.124.0.0-213.124.159.255
213.125.0.0-213.126.127.255
213.132.160.0/19
217.100.0.0/16
217.102.224.0/21
217.105.192.0/19
IPv6:
2001:41f0::/32
Signature Algorithm: sha256WithRSAEncryption
31:58:08:68:fa:48:f3:c6:13:70:16:df:ab:03:ff:1b:d1:fc:
d6:e9:c7:28:2c:88:e6:f4:50:07:8b:6a:eb:c9:a1:e7:92:95:
ab:b4:e4:46:97:e8:dd:66:a4:c2:a1:74:ef:d3:cf:ca:44:57:
73:f0:7a:d7:f8:8a:be:3a:13:0f:da:2e:6f:4e:81:56:b4:b2:
bd:43:c1:dc:45:90:44:36:1c:ab:9d:90:06:54:70:35:6b:b9:
61:12:2d:66:85:ab:1a:c0:57:85:32:92:96:ab:0b:86:9a:23:
23:1f:09:9f:45:1b:2c:60:a8:f8:d2:ea:87:33:78:c7:b0:52:
d8:38:6e:38:b1:fb:65:6f:0c:cc:fc:3d:e2:49:3c:a4:5d:76:
6a:61:98:f1:39:49:3a:29:a6:75:c3:05:f7:64:cc:39:7b:3c:
17:28:49:13:4a:2c:13:57:05:c0:4c:63:e1:9f:5a:66:bf:82:
dd:cc:0e:16:39:30:e3:92:ef:f4:22:79:6f:46:bc:9c:68:c3:
76:9e:f0:ea:74:35:e8:cf:d3:fd:d1:4b:10:3c:0a:2a:09:e8:
58:d5:7e:9f:47:3c:06:6d:5c:3a:e6:9b:3a:ae:61:ef:1d:1e:
30:eb:91:ff:3e:f8:21:fc:9c:01:e1:4d:aa:cf:67:0e:5b:83:
02:cc:33:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:53:11 2024 by rpki-client on console-ams.rpki-client.org