Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/JQsNAFFfzyFArDI4G9Y4cTwJoqM.roa
File: JQsNAFFfzyFArDI4G9Y4cTwJoqM.roa (raw, json)
Hash identifier: 8TxGpeMxyxJ4KiEenvFBZq/vIU3SXhsTgNIyeIJdTRA=
Subject key identifier: 25:0B:0D:00:51:5F:CF:21:40:AC:32:38:1B:D6:38:71:3C:09:A2:A3
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018E80B972DE293CA9A8E582BC99D052D0D1
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/JQsNAFFfzyFArDI4G9Y4cTwJoqM.roa
Signing time: Wed 27 Mar 2024 16:23:40 +0000
ROA not before: Wed 27 Mar 2024 16:23:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13194
IP address blocks: 82.140.129.0/24 maxlen: 24
84.15.0.0/16 maxlen: 24
84.46.139.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.1.0/24 maxlen: 24
86.38.34.0/24 maxlen: 24
86.38.41.0/24 maxlen: 24
86.38.52.0/24 maxlen: 24
86.38.62.0/24 maxlen: 24
86.38.64.0/18 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.81.0/24 maxlen: 24
86.38.84.0/24 maxlen: 24
86.38.97.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.228.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.237.0/24 maxlen: 24
86.38.245.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.92.0/24 maxlen: 24
89.117.93.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.141.0/24 maxlen: 24
89.117.156.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.220.0/24 maxlen: 24
89.117.221.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.225.0/24 maxlen: 24
89.117.243.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.248.0/23 maxlen: 24
89.117.255.0/24 maxlen: 24
185.189.154.0/24 maxlen: 24
213.226.128.0/18 maxlen: 24
213.226.161.0/24 maxlen: 24
213.252.192.0/20 maxlen: 20
213.252.194.0/24 maxlen: 24
213.252.220.0/24 maxlen: 24
213.252.223.0/24 maxlen: 24
213.252.224.0/22 maxlen: 22
213.252.234.0/23 maxlen: 23
213.252.236.0/23 maxlen: 23
213.252.252.0/24 maxlen: 24
213.252.254.0/24 maxlen: 24
217.9.248.0/23 maxlen: 23
2a00:f500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:b9:72:de:29:3c:a9:a8:e5:82:bc:99:d0:52:d0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Mar 27 16:23:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=250b0d00515fcf2140ac32381bd638713c09a2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:05:4f:ca:de:b3:1c:c7:c6:a3:98:2a:6d:
59:f8:81:89:bd:f4:31:96:47:92:d6:ad:da:91:05:
60:66:27:d9:3c:d6:0c:9c:16:35:b7:03:60:fe:7d:
c4:f4:7f:6f:e7:da:7e:44:27:87:38:d6:a2:7e:de:
e9:1d:e5:e9:4f:34:95:65:b4:9d:75:c9:5c:f3:15:
c7:95:9d:8b:26:94:91:8f:bd:70:bf:f1:f1:c0:ee:
cf:72:d3:dd:bf:9b:31:d7:bb:45:ea:d1:14:fb:46:
8f:88:4b:94:b7:2f:b7:d4:80:bc:47:75:d8:79:45:
0b:33:e7:10:5c:ea:13:d1:a3:30:09:a5:9c:7b:53:
7a:15:b1:9e:c7:69:89:11:70:64:1a:37:14:2d:41:
cc:7f:0e:9f:1f:25:48:63:74:10:6a:bd:0f:43:4e:
da:e0:8f:9c:79:a2:dc:21:91:cd:84:b7:5b:10:f4:
fa:2c:df:82:de:f1:ac:31:4d:df:43:3a:ae:87:79:
0a:39:70:0a:06:ad:ed:11:3d:5a:85:f2:8e:a7:02:
61:d8:33:04:24:83:27:f4:f8:6d:51:49:38:88:4c:
d3:1c:97:9a:bf:ee:17:c6:4c:eb:14:49:04:af:d0:
ab:80:9a:ce:7b:90:40:37:ea:f5:24:27:1c:e0:89:
6d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0B:0D:00:51:5F:CF:21:40:AC:32:38:1B:D6:38:71:3C:09:A2:A3
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/JQsNAFFfzyFArDI4G9Y4cTwJoqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.129.0/24
84.15.0.0/16
84.46.139.0/24
84.46.204.0/24
84.46.207.0/24
86.38.1.0/24
86.38.34.0/24
86.38.41.0/24
86.38.52.0/24
86.38.62.0/24
86.38.64.0/18
86.38.152.0/23
86.38.215.0/24
86.38.228.0/24
86.38.230.0/24
86.38.237.0/24
86.38.245.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.92.0/23
89.117.125.0/24
89.117.127.0/24
89.117.138.0/24
89.117.141.0/24
89.117.156.0/24
89.117.165.0/24
89.117.220.0/23
89.117.223.0/24
89.117.225.0/24
89.117.243.0/24
89.117.247.0-89.117.249.255
89.117.255.0/24
185.189.154.0/24
213.226.128.0/18
213.252.192.0/20
213.252.220.0/24
213.252.223.0-213.252.227.255
213.252.234.0-213.252.237.255
213.252.252.0/24
213.252.254.0/24
217.9.248.0/23
IPv6:
2a00:f500::/29
Signature Algorithm: sha256WithRSAEncryption
75:30:4a:d7:c1:6c:e8:25:ef:25:23:59:1c:e5:05:3e:37:3b:
57:b1:a1:78:cf:d6:ad:1a:f9:7b:24:ef:56:e3:57:b7:56:0d:
cc:97:59:5e:f6:2f:27:8b:11:0d:cf:ea:28:ff:b1:4e:19:8d:
31:32:38:76:9a:e3:92:3c:8d:c1:8a:e5:b3:98:f0:ea:f7:ed:
1b:44:86:01:24:33:1a:c6:81:ba:70:4a:89:85:f7:0c:04:91:
39:a0:7b:60:ac:81:10:d5:21:d7:56:69:55:0a:6f:f1:8c:25:
c4:c5:43:a5:75:61:77:35:6a:d8:e2:0b:1c:06:0c:a6:d5:ee:
e2:66:f9:22:14:e4:b8:e2:8a:c9:13:22:dc:7c:14:dd:d8:32:
db:1a:46:d3:bb:6c:7a:5b:10:9a:7d:16:ef:28:af:19:30:03:
84:fb:3c:21:ef:18:b8:d8:67:89:07:a1:86:d2:76:b6:cf:d4:
ed:8d:63:f5:1a:4c:f3:56:67:a6:ec:71:a9:cb:ab:10:72:83:
f1:96:87:dd:d4:94:bf:f6:03:d2:9f:dd:f1:ef:3e:d5:3a:99:
74:f2:30:94:7f:9c:48:9b:1c:51:3a:82:b7:ef:41:7e:8e:47:
d9:88:b4:8e:9a:f3:69:26:3a:7b:20:cc:60:db:75:7c:38:ff:
9a:83:84:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:29:39 2024 by rpki-client on console-ams.rpki-client.org