Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/2T_ukkJMxz36J-ubeKaqimE6r0s.roa
File: 2T_ukkJMxz36J-ubeKaqimE6r0s.roa (raw, json)
Hash identifier: j+nEKC4PqVtQZgpFswM55dbEG+o1445CXGAsw0hEwc4=
Subject key identifier: D9:3F:EE:92:42:4C:C7:3D:FA:27:EB:9B:78:A6:AA:8A:61:3A:AF:4B
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 018CCA2BB0BBC24F3FD201B315BA27501DC9
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/2T_ukkJMxz36J-ubeKaqimE6r0s.roa
Signing time: Tue 02 Jan 2024 12:35:10 +0000
ROA not before: Tue 02 Jan 2024 12:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5578
IP address blocks: 84.245.64.0/18 maxlen: 18
84.245.97.0/24 maxlen: 24
84.245.94.0/24 maxlen: 24
185.130.220.0/22 maxlen: 22
193.110.186.0/23 maxlen: 23
62.168.64.0/18 maxlen: 18
94.124.144.0/21 maxlen: 21
92.60.56.0/21 maxlen: 21
84.245.126.0/24 maxlen: 24
195.168.0.0/16 maxlen: 16
85.248.234.0/24 maxlen: 24
85.248.235.0/24 maxlen: 24
217.67.16.0/20 maxlen: 20
212.26.160.0/19 maxlen: 19
213.215.64.0/18 maxlen: 18
213.215.72.0/22 maxlen: 22
212.26.176.0/20 maxlen: 20
194.1.230.0/24 maxlen: 24
194.1.231.0/24 maxlen: 24
194.1.228.0/24 maxlen: 24
194.1.229.0/24 maxlen: 24
194.1.227.0/24 maxlen: 24
82.119.224.0/20 maxlen: 20
80.250.240.0/20 maxlen: 20
194.1.224.0/24 maxlen: 24
194.1.225.0/24 maxlen: 24
194.1.226.0/24 maxlen: 24
62.197.192.0/18 maxlen: 18
195.12.128.0/19 maxlen: 19
195.46.64.0/19 maxlen: 19
62.197.222.0/24 maxlen: 24
85.248.0.0/16 maxlen: 16
217.75.64.0/19 maxlen: 19
217.75.82.0/23 maxlen: 23
81.88.128.0/20 maxlen: 20
193.58.192.0/22 maxlen: 22
193.58.196.0/23 maxlen: 23
185.220.120.0/22 maxlen: 22
62.65.160.0/19 maxlen: 19
194.1.172.0/22 maxlen: 22
195.72.0.0/19 maxlen: 19
62.152.224.0/19 maxlen: 19
195.98.0.0/19 maxlen: 19
83.168.128.0/18 maxlen: 18
212.81.0.0/19 maxlen: 19
217.172.144.0/20 maxlen: 20
217.118.96.0/20 maxlen: 20
2001:1ba0::/32 maxlen: 32
2a06:dbc0::/29 maxlen: 29
2a02:770::/32 maxlen: 32
2a00:1298::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:b0:bb:c2:4f:3f:d2:01:b3:15:ba:27:50:1d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 2 12:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d93fee92424cc73dfa27eb9b78a6aa8a613aaf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:77:81:23:ae:a7:e8:d7:56:84:8f:3f:05:
39:c9:51:ea:80:17:ce:f6:4e:ee:53:75:70:fa:a7:
dd:7b:8d:99:46:dd:dd:6e:c4:cc:91:17:ee:9f:fe:
bc:84:d1:ae:fe:86:9c:aa:77:1d:cf:0e:8b:19:29:
21:83:0f:5e:95:fe:47:8e:44:16:13:95:51:50:8e:
75:3b:f0:55:31:9d:bd:fe:2a:d5:85:63:75:70:b0:
d5:7e:7c:cc:0a:84:aa:26:c1:e9:9d:4b:74:f4:7f:
c6:c6:dc:aa:96:7b:62:b7:71:d5:b1:f7:03:9c:8c:
56:2f:ec:4c:3b:cd:b6:a1:89:10:6a:cc:bd:70:34:
f2:cb:d8:e7:27:8a:d9:63:85:5f:a0:ab:3b:df:7b:
31:bb:31:9b:10:92:34:c2:52:1e:9f:dc:eb:e8:1c:
14:86:14:a3:c5:95:ac:70:de:48:92:db:31:7d:73:
4e:32:bb:32:c7:f3:76:4f:e9:6a:b0:29:c0:ca:2e:
da:75:96:9e:22:11:9b:d9:82:4d:b2:75:d6:7b:79:
d1:84:3b:35:69:70:d6:85:f5:52:96:1d:5e:8b:b9:
09:66:1f:fb:4b:da:42:a5:b3:5b:f5:d0:a3:fb:33:
de:c0:58:2d:bd:0c:c4:ac:0b:91:68:1f:ef:1c:e6:
28:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3F:EE:92:42:4C:C7:3D:FA:27:EB:9B:78:A6:AA:8A:61:3A:AF:4B
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/2T_ukkJMxz36J-ubeKaqimE6r0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.65.160.0/19
62.152.224.0/19
62.168.64.0/18
62.197.192.0/18
80.250.240.0/20
81.88.128.0/20
82.119.224.0/20
83.168.128.0/18
84.245.64.0/18
85.248.0.0/16
92.60.56.0/21
94.124.144.0/21
185.130.220.0/22
185.220.120.0/22
193.58.192.0-193.58.197.255
193.110.186.0/23
194.1.172.0/22
194.1.224.0/21
195.12.128.0/19
195.46.64.0/19
195.72.0.0/19
195.98.0.0/19
195.168.0.0/16
212.26.160.0/19
212.81.0.0/19
213.215.64.0/18
217.67.16.0/20
217.75.64.0/19
217.118.96.0/20
217.172.144.0/20
IPv6:
2001:1ba0::/32
2a00:1298::/32
2a02:770::/32
2a06:dbc0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:b4:a3:a2:57:31:60:68:23:37:40:a8:14:70:08:07:7c:33:
70:31:79:2f:bc:eb:50:c9:c9:20:fd:15:c4:94:98:5c:0e:42:
a3:4f:f6:eb:b8:89:90:3f:9e:47:c9:37:1a:7b:40:86:12:ad:
43:70:f4:2a:ee:03:6a:47:43:11:d9:00:99:95:8d:72:74:67:
29:59:35:25:97:ba:d7:04:c7:f6:53:b3:9c:6a:ed:01:39:08:
bd:53:74:35:f7:83:96:8d:8c:3b:cc:bf:12:27:fd:55:8e:ac:
b9:d7:88:11:0c:ed:99:b1:87:37:c1:64:f6:09:0c:69:4b:1e:
36:2e:02:76:64:cc:6a:8c:20:5f:c7:6a:3b:57:6e:52:0c:82:
96:63:01:17:30:d0:6c:09:08:e6:df:97:d4:f7:80:59:8c:0a:
74:d4:a6:2f:1a:c3:c6:ef:9a:e2:02:e0:87:bf:14:fa:75:77:
58:45:9a:05:01:fb:f6:fd:7b:1c:8e:4c:62:b2:5e:cf:a5:77:
69:44:0e:48:b2:a5:18:1d:41:29:69:60:d3:ac:52:31:13:62:
2b:c0:38:a2:8a:41:9a:9e:18:75:22:d3:66:5f:e7:3b:cd:02:
77:ed:1c:b3:87:55:74:25:45:7f:28:e7:07:f6:aa:b1:1e:5c:
af:85:6d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:04:02 2024 by rpki-client on console-fra.rpki-client.org