Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/0ZLfi9VR51-tjoFl5GMOXrX_aIg.roa
File: 0ZLfi9VR51-tjoFl5GMOXrX_aIg.roa (raw, json)
Hash identifier: Pe4StWvcw7VKQKGAva+YurzArSzNe169s57NGunrJZI=
Subject key identifier: D1:92:DF:8B:D5:51:E7:5F:AD:8E:81:65:E4:63:0E:5E:B5:FF:68:88
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 018CC348A673E332A22675E25B6A2BAC731F
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/0ZLfi9VR51-tjoFl5GMOXrX_aIg.roa
Signing time: Mon 01 Jan 2024 04:29:27 +0000
ROA not before: Mon 01 Jan 2024 04:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6908
IP address blocks: 217.61.176.0/20 maxlen: 20
217.61.180.0/22 maxlen: 24
217.61.184.0/22 maxlen: 24
91.135.224.0/20 maxlen: 20
78.41.152.0/21 maxlen: 21
62.149.32.0/19 maxlen: 19
62.149.48.0/20 maxlen: 20
185.120.152.0/22 maxlen: 22
94.247.96.0/21 maxlen: 21
217.20.16.0/20 maxlen: 20
185.109.92.0/22 maxlen: 22
185.122.232.0/22 maxlen: 22
5.102.184.0/21 maxlen: 21
46.252.64.0/20 maxlen: 20
185.119.68.0/22 maxlen: 22
158.58.160.0/21 maxlen: 21
91.151.208.0/20 maxlen: 20
80.79.128.0/20 maxlen: 20
80.79.128.0/21 maxlen: 21
91.199.24.0/24 maxlen: 24
80.79.136.0/21 maxlen: 21
217.10.128.0/19 maxlen: 19
195.72.128.0/22 maxlen: 22
85.92.192.0/19 maxlen: 19
77.75.232.0/23 maxlen: 23
109.239.80.0/20 maxlen: 20
185.64.160.0/22 maxlen: 22
217.169.32.0/19 maxlen: 19
185.121.248.0/22 maxlen: 22
109.71.120.0/21 maxlen: 21
213.133.128.0/19 maxlen: 19
82.147.0.0/19 maxlen: 19
95.131.216.0/21 maxlen: 21
2001:1b90::/32 maxlen: 32
2a03:14e0::/32 maxlen: 32
2a01:450::/32 maxlen: 32
2a02:2458::/32 maxlen: 32
2a03:6a00::/29 maxlen: 29
2a02:298::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a6:73:e3:32:a2:26:75:e2:5b:6a:2b:ac:73:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Jan 1 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d192df8bd551e75fad8e8165e4630e5eb5ff6888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6f:83:a7:0b:4b:5f:43:97:c1:21:7b:35:2b:
e1:43:b4:81:0d:a8:6a:9a:1b:b1:53:46:c8:aa:85:
93:36:d8:09:9f:b1:6f:60:54:d0:39:3a:da:7a:f9:
b6:b6:30:37:6e:bc:6f:e1:bb:34:02:7c:43:3b:1e:
32:eb:b5:e2:8a:e0:60:9a:4c:9d:e6:83:c6:3b:96:
c2:c0:8b:f7:55:8e:13:23:8e:dd:84:70:4a:75:e3:
36:9c:f0:50:6c:b1:02:23:1b:36:a6:0e:85:a1:ec:
8f:aa:ba:0d:46:29:c4:c0:58:45:02:7e:cf:89:9d:
2e:64:85:21:31:a4:92:20:c1:c2:72:31:11:cf:55:
93:e8:a3:2c:71:68:f7:aa:35:c4:78:11:af:78:71:
55:8b:bf:86:fb:7d:4b:67:00:f5:11:aa:51:1f:6a:
c6:e4:72:82:af:dd:74:6d:a7:53:61:03:99:d5:4a:
45:ab:2b:15:02:b5:2c:6e:a7:7a:70:1a:cc:8c:cf:
39:ef:91:fa:13:c1:78:58:d8:1c:a9:df:3c:6c:18:
63:3c:a8:28:b7:4b:24:2e:9a:e3:87:d9:8c:be:c8:
f9:43:6e:e1:04:d5:80:7b:52:6f:9a:90:e0:c4:19:
f0:a2:e8:b7:d1:93:f5:54:ad:d9:00:e0:ab:3a:f4:
d0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:92:DF:8B:D5:51:E7:5F:AD:8E:81:65:E4:63:0E:5E:B5:FF:68:88
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/0ZLfi9VR51-tjoFl5GMOXrX_aIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.184.0/21
46.252.64.0/20
62.149.32.0/19
77.75.232.0/23
78.41.152.0/21
80.79.128.0/20
82.147.0.0/19
85.92.192.0/19
91.135.224.0/20
91.151.208.0/20
91.199.24.0/24
94.247.96.0/21
95.131.216.0/21
109.71.120.0/21
109.239.80.0/20
158.58.160.0/21
185.64.160.0/22
185.109.92.0/22
185.119.68.0/22
185.120.152.0/22
185.121.248.0/22
185.122.232.0/22
195.72.128.0/22
213.133.128.0/19
217.10.128.0/19
217.20.16.0/20
217.61.176.0/20
217.169.32.0/19
IPv6:
2001:1b90::/32
2a01:450::/32
2a02:298::/32
2a02:2458::/32
2a03:14e0::/32
2a03:6a00::/29
Signature Algorithm: sha256WithRSAEncryption
bc:c1:8a:06:6e:a8:db:01:e0:2a:71:ae:ec:5a:a9:d1:32:7c:
22:f0:e3:e8:64:1f:2b:95:4d:37:a2:4c:4f:be:4b:0b:e0:b7:
84:a5:4a:f9:7f:2e:de:61:50:32:30:64:2c:cb:a3:c3:2b:ea:
a0:8b:a9:f1:ea:61:1c:4b:40:a0:62:b6:eb:8e:4a:07:0d:9c:
30:50:19:6b:97:ba:26:e9:94:58:71:24:08:2c:18:31:3e:4f:
ad:20:e2:4d:8d:6c:e7:4b:77:4d:ad:be:60:9c:0c:8d:77:8d:
50:9b:dc:f2:7f:b0:67:69:c0:bd:9d:9e:20:c7:1e:a5:30:66:
43:29:19:53:18:d4:2c:fc:ef:25:76:e8:12:c1:11:0b:70:65:
cd:d7:0f:07:9b:d2:46:ef:4e:90:27:a6:05:f7:85:fc:b3:ce:
70:ca:1f:e4:46:a5:c9:dd:a3:b8:49:b8:74:d6:90:ee:f8:08:
a2:41:2a:c8:a6:ed:33:66:c9:62:3d:0b:93:cc:dd:f8:67:2d:
85:f1:d0:ff:96:1c:55:13:c3:b5:0a:1e:e2:f0:fb:2e:50:0f:
be:d3:8b:7a:3a:6d:91:b1:50:83:9a:cc:11:8b:65:77:82:94:
db:8c:cf:a4:ec:9b:dc:f1:fb:fb:36:d3:b9:89:26:b9:a2:64:
24:07:bf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:21:34 2024 by rpki-client on console-ams.rpki-client.org