Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/q20-XppE8gKMi3G3rrmKJXmPZko.roa
File: q20-XppE8gKMi3G3rrmKJXmPZko.roa (raw, json)
Hash identifier: cX20xQeWh02s1kLH2zi1tPwgy6qCsrFIlDPSjHYKZ14=
Subject key identifier: AB:6D:3E:5E:9A:44:F2:02:8C:8B:71:B7:AE:B9:8A:25:79:8F:66:4A
Certificate issuer: /CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Certificate serial: 018E4BF314336222CE58342206C2C250B4F0
Authority key identifier: 17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/q20-XppE8gKMi3G3rrmKJXmPZko.roa
Signing time: Sun 17 Mar 2024 10:26:45 +0000
ROA not before: Sun 17 Mar 2024 10:26:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15685
IP address blocks: 77.78.76.0/22 maxlen: 22
77.78.76.0/23 maxlen: 23
77.78.94.0/23 maxlen: 23
77.78.96.0/20 maxlen: 20
77.78.112.0/21 maxlen: 21
77.78.118.0/23 maxlen: 23
77.78.123.0/24 maxlen: 24
77.78.124.0/22 maxlen: 22
81.0.192.0/22 maxlen: 22
81.0.199.0/24 maxlen: 24
81.0.206.0/23 maxlen: 23
81.0.208.0/23 maxlen: 23
81.0.212.0/23 maxlen: 23
81.0.214.0/24 maxlen: 24
81.0.217.0/24 maxlen: 24
81.0.225.0/24 maxlen: 24
81.0.226.0/24 maxlen: 24
81.0.228.0/24 maxlen: 24
81.0.230.0/23 maxlen: 23
81.0.232.0/21 maxlen: 21
81.0.240.0/22 maxlen: 22
81.0.250.0/24 maxlen: 24
81.0.254.0/23 maxlen: 23
82.208.4.0/22 maxlen: 22
82.208.8.0/22 maxlen: 22
82.208.12.0/24 maxlen: 24
82.208.14.0/24 maxlen: 24
82.208.16.0/23 maxlen: 23
82.208.16.0/24 maxlen: 24
82.208.17.0/24 maxlen: 24
82.208.18.0/24 maxlen: 24
82.208.26.0/23 maxlen: 23
82.208.28.0/23 maxlen: 23
82.208.32.0/22 maxlen: 22
82.208.34.0/23 maxlen: 23
82.208.39.0/24 maxlen: 24
82.208.40.0/23 maxlen: 23
82.208.44.0/24 maxlen: 24
82.208.46.0/23 maxlen: 23
82.208.48.0/23 maxlen: 23
82.208.50.0/24 maxlen: 24
82.208.56.0/24 maxlen: 24
82.208.58.0/24 maxlen: 24
85.239.227.0/24 maxlen: 24
85.239.252.0/23 maxlen: 23
109.123.192.0/21 maxlen: 24
109.123.202.0/23 maxlen: 24
109.123.205.0/24 maxlen: 24
109.123.206.0/23 maxlen: 24
109.123.208.0/22 maxlen: 24
109.123.214.0/23 maxlen: 24
109.123.216.0/21 maxlen: 24
217.11.224.0/23 maxlen: 23
217.11.227.0/24 maxlen: 24
217.11.228.0/23 maxlen: 23
217.11.230.0/24 maxlen: 24
217.11.232.0/23 maxlen: 23
217.11.235.0/24 maxlen: 24
217.11.236.0/24 maxlen: 24
217.11.242.0/23 maxlen: 23
217.11.246.0/23 maxlen: 23
217.11.248.0/23 maxlen: 23
217.11.251.0/24 maxlen: 24
217.11.254.0/24 maxlen: 24
2001:1528::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4b:f3:14:33:62:22:ce:58:34:22:06:c2:c2:50:b4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Validity
Not Before: Mar 17 10:26:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab6d3e5e9a44f2028c8b71b7aeb98a25798f664a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dc:ed:a8:f5:43:85:09:67:a9:05:0b:49:c8:
a7:ff:d0:ed:c0:ae:1b:67:a9:7e:93:b3:f6:90:5e:
8e:b5:f7:11:82:f7:2f:f3:22:69:8c:c9:4c:d8:64:
4a:f3:b5:4f:97:05:73:25:e4:19:e5:d0:59:81:38:
f0:fb:0a:7a:2e:af:9f:c4:81:2b:4c:c0:b2:09:31:
4a:0e:1e:a6:9e:8b:6e:ae:b2:a7:5d:f7:93:a8:05:
28:e4:38:8e:97:49:a1:03:ac:33:e8:3b:d2:0d:e8:
a4:af:63:6d:f8:80:e6:ac:f4:e3:a2:f1:78:e7:98:
eb:68:90:5d:f9:30:7b:aa:cc:9d:8e:83:92:0d:ad:
b1:23:fa:a2:f0:4e:cb:8e:f0:9c:1f:47:80:12:49:
32:33:82:69:11:17:12:bb:95:45:12:6e:9d:b6:cf:
d9:f4:38:20:ba:68:dc:27:f3:3b:49:1e:a5:e1:b1:
81:66:3b:9c:d6:72:2a:43:f9:12:f4:6a:c8:2a:14:
5e:63:ea:7e:17:82:b6:17:30:fa:8c:ef:73:7b:fe:
73:f8:1b:56:c8:2d:e1:ce:8a:09:c3:bd:18:6f:8d:
5e:1a:61:1e:80:79:9c:99:ef:7b:e2:6a:df:ec:7c:
72:1e:27:4e:9e:6b:23:65:2e:85:e0:50:5f:8b:48:
bc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6D:3E:5E:9A:44:F2:02:8C:8B:71:B7:AE:B9:8A:25:79:8F:66:4A
X509v3 Authority Key Identifier:
keyid:17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/q20-XppE8gKMi3G3rrmKJXmPZko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.76.0/22
77.78.94.0-77.78.119.255
77.78.123.0-77.78.127.255
81.0.192.0/22
81.0.199.0/24
81.0.206.0-81.0.209.255
81.0.212.0-81.0.214.255
81.0.217.0/24
81.0.225.0-81.0.226.255
81.0.228.0/24
81.0.230.0-81.0.243.255
81.0.250.0/24
81.0.254.0/23
82.208.4.0-82.208.12.255
82.208.14.0/24
82.208.16.0-82.208.18.255
82.208.26.0-82.208.29.255
82.208.32.0/22
82.208.39.0-82.208.41.255
82.208.44.0/24
82.208.46.0-82.208.50.255
82.208.56.0/24
82.208.58.0/24
85.239.227.0/24
85.239.252.0/23
109.123.192.0/21
109.123.202.0/23
109.123.205.0-109.123.211.255
109.123.214.0-109.123.223.255
217.11.224.0/23
217.11.227.0-217.11.230.255
217.11.232.0/23
217.11.235.0-217.11.236.255
217.11.242.0/23
217.11.246.0-217.11.249.255
217.11.251.0/24
217.11.254.0/24
IPv6:
2001:1528::/32
Signature Algorithm: sha256WithRSAEncryption
7a:2a:26:ff:2a:43:8c:d6:40:7a:e0:71:d8:34:f3:d3:0a:cf:
a3:2d:ae:a7:45:af:40:23:c8:55:30:46:f5:77:5c:60:98:26:
fb:23:4d:60:19:b8:b6:d1:f7:a0:8d:c3:cd:55:64:e9:48:e6:
ac:04:2a:5d:68:f6:67:72:32:b7:03:ea:f1:2f:02:4f:24:36:
3a:bb:4a:30:ad:a0:fa:f7:ed:18:0f:a1:72:a3:f0:26:87:c3:
15:2b:b4:6d:cc:10:76:dc:94:fc:d9:52:df:a3:53:d5:3a:72:
6f:3d:e4:d2:a8:d5:fd:fc:36:1c:4e:be:cf:69:23:07:ec:2e:
ac:a3:49:a0:f1:9a:d8:36:3d:e0:16:0d:0d:73:df:a2:04:48:
e8:b4:74:14:cb:bc:ed:b7:d5:47:9f:2e:35:8c:8c:75:4e:cc:
b8:e8:62:50:00:8e:b1:a4:75:de:87:e5:53:5d:7f:05:40:b6:
fb:88:3b:5d:1b:2c:33:f0:79:ce:d3:8b:3d:cd:91:01:8d:e6:
d5:a5:5a:8a:9c:e7:af:49:36:c2:ea:49:69:46:92:d3:cd:bf:
3d:34:d2:f9:b8:03:af:71:e0:33:cc:4c:95:60:84:f2:1f:59:
ae:4d:f7:9f:52:75:ea:ec:2a:e9:bc:25:0d:0a:a2:9c:2a:27:
1a:2f:99:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:49:56 2024 by rpki-client on console-fra.rpki-client.org