Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/xdMomXhwqd72rUwFvmON6tXcdq0.roa
File: xdMomXhwqd72rUwFvmON6tXcdq0.roa (raw, json)
Hash identifier: fsCzbB9kcIxpPRc0hEyhTK6Q/ik25K5uYqNLTWphQUA=
Subject key identifier: C5:D3:28:99:78:70:A9:DE:F6:AD:4C:05:BE:63:8D:EA:D5:DC:76:AD
Certificate issuer: /CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Certificate serial: 018CC7258D0581DA5C663226C2287DC12A8F
Authority key identifier: 8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/xdMomXhwqd72rUwFvmON6tXcdq0.roa
Signing time: Mon 01 Jan 2024 22:29:36 +0000
ROA not before: Mon 01 Jan 2024 22:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57356
IP address blocks: 194.140.215.0/24 maxlen: 24
194.140.216.0/22 maxlen: 22
194.140.214.0/24 maxlen: 24
194.140.222.0/23 maxlen: 23
194.140.222.0/24 maxlen: 24
194.140.223.0/24 maxlen: 24
194.140.220.0/23 maxlen: 23
87.117.84.0/23 maxlen: 23
87.117.80.0/22 maxlen: 22
87.117.80.0/20 maxlen: 20
87.117.88.0/22 maxlen: 22
87.117.86.0/23 maxlen: 23
87.117.92.0/22 maxlen: 22
194.140.212.0/22 maxlen: 22
194.140.212.0/24 maxlen: 24
194.140.210.0/23 maxlen: 23
194.140.208.0/22 maxlen: 22
194.140.208.0/23 maxlen: 23
194.140.208.0/20 maxlen: 20
194.140.213.0/24 maxlen: 24
91.185.176.0/22 maxlen: 22
31.216.0.0/20 maxlen: 20
91.185.176.0/21 maxlen: 21
185.20.164.0/23 maxlen: 23
185.20.164.0/22 maxlen: 22
31.216.0.0/21 maxlen: 21
91.185.180.0/22 maxlen: 22
185.20.166.0/23 maxlen: 23
31.216.8.0/21 maxlen: 21
86.111.160.0/21 maxlen: 21
86.111.160.0/20 maxlen: 20
86.111.172.0/23 maxlen: 23
86.111.168.0/22 maxlen: 22
86.111.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:8d:05:81:da:5c:66:32:26:c2:28:7d:c1:2a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Validity
Not Before: Jan 1 22:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5d328997870a9def6ad4c05be638dead5dc76ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6d:14:4d:e2:cb:41:4f:07:a5:ba:1c:7b:19:
a0:89:3c:37:8a:0a:dd:28:5d:71:85:88:f9:c2:fa:
65:19:6f:8e:d3:66:86:02:9b:b4:82:d7:2d:68:f2:
9f:12:9c:f9:12:56:8c:df:83:fc:c2:91:1d:cf:5d:
7e:c4:78:76:2c:e4:2e:48:05:ae:61:2b:b6:18:1c:
b3:dd:97:b2:13:7a:ef:95:c8:99:f5:13:1c:92:92:
30:ec:0b:24:62:bb:07:ee:72:7e:31:e1:c3:6e:ec:
29:be:e5:40:0e:ff:40:d2:d5:3f:da:e7:e8:90:bf:
d7:99:a1:31:20:2b:db:17:35:a8:ff:32:c1:02:1b:
0f:6e:c2:fe:2c:22:d5:25:fd:33:94:14:7a:14:48:
8d:c4:ed:4d:7d:64:e4:05:54:a3:7e:08:b3:c5:55:
07:0e:29:d0:d0:39:75:44:d7:cd:a6:3c:62:43:ba:
4e:b3:85:f7:d0:f1:65:a5:a6:a4:20:14:90:ce:e9:
df:1d:70:69:d9:c7:de:57:93:8b:1d:ef:c2:8c:dc:
f5:48:83:d0:d5:e8:ed:4c:dd:26:f3:4f:93:11:d8:
0a:4c:51:f7:31:45:52:b7:87:cb:10:d5:9d:59:1a:
7a:65:87:57:8b:ac:f8:ef:f8:ff:60:2e:49:fc:56:
33:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D3:28:99:78:70:A9:DE:F6:AD:4C:05:BE:63:8D:EA:D5:DC:76:AD
X509v3 Authority Key Identifier:
keyid:8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/xdMomXhwqd72rUwFvmON6tXcdq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.0.0/20
86.111.160.0/20
87.117.80.0/20
91.185.176.0/21
185.20.164.0/22
194.140.208.0/20
Signature Algorithm: sha256WithRSAEncryption
42:b9:e6:92:6c:7b:cb:87:1e:47:42:51:33:aa:40:6c:98:2d:
f7:e3:e5:d2:5d:96:cd:56:b7:fb:b0:a2:f0:93:fd:49:9b:2a:
72:21:4f:4e:cf:c9:f2:cd:6b:8f:3f:c1:8d:7b:53:a0:78:a0:
65:af:10:56:2b:6e:54:5e:ae:42:7a:8a:42:3e:25:67:34:4e:
7d:90:e2:02:e9:50:09:b4:15:14:0f:7c:2a:e5:63:4d:23:dc:
2a:e3:f2:57:da:3a:3b:28:ad:ae:07:e5:f5:95:0a:24:5e:b6:
ca:9d:24:29:fc:1b:db:39:df:c0:bc:3b:6d:16:c9:59:79:ed:
95:20:43:00:d0:a2:91:80:a5:0f:93:96:3b:63:ed:66:9c:6e:
88:c2:79:21:9b:3c:13:9b:bf:ce:80:c0:a5:6d:c6:5e:d0:51:
f0:eb:a4:ce:50:73:d8:1a:ae:49:f3:23:c7:cd:b3:b7:01:7f:
7c:b7:86:49:62:c2:84:7a:6a:a3:09:73:5d:ae:b3:a1:ea:4a:
3c:ad:85:dd:6c:35:b7:75:e0:ea:b7:71:26:70:cd:39:7e:09:
6f:9e:f6:da:82:c5:54:eb:90:a6:1c:89:b5:63:d7:82:0a:b1:
9a:f7:39:47:3d:4c:6a:ad:32:1e:86:1c:71:1c:52:f2:53:43:
34:c1:ae:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 05:55:21 2024 by rpki-client on console-fra.rpki-client.org