Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/OxmZ0eMMSE0aavGU_60wnid80rM.roa
File: OxmZ0eMMSE0aavGU_60wnid80rM.roa (raw, json)
Hash identifier: 4JIU0MLjcRHublGSowOq1VZZUiXJ9NNQ1YOjFJo1R/s=
Subject key identifier: 3B:19:99:D1:E3:0C:48:4D:1A:6A:F1:94:FF:AD:30:9E:27:7C:D2:B3
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0192A08B4E2EC288C9502096A923F6DE149B
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/OxmZ0eMMSE0aavGU_60wnid80rM.roa
Signing time: Fri 18 Oct 2024 16:52:16 +0000
ROA not before: Fri 18 Oct 2024 16:52:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13194
IP address blocks: 82.140.129.0/24 maxlen: 24
84.15.0.0/16 maxlen: 24
84.15.223.0/24 maxlen: 24
84.46.139.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.1.0/24 maxlen: 24
86.38.41.0/24 maxlen: 24
86.38.52.0/24 maxlen: 24
86.38.62.0/24 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.81.0/24 maxlen: 24
86.38.84.0/24 maxlen: 24
86.38.97.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.228.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.245.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.92.0/24 maxlen: 24
89.117.93.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.141.0/24 maxlen: 24
89.117.156.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.220.0/24 maxlen: 24
89.117.221.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.225.0/24 maxlen: 24
89.117.243.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.255.0/24 maxlen: 24
185.189.154.0/24 maxlen: 24
213.226.128.0/18 maxlen: 24
213.226.161.0/24 maxlen: 24
213.252.192.0/20 maxlen: 20
213.252.194.0/24 maxlen: 24
213.252.220.0/24 maxlen: 24
213.252.223.0/24 maxlen: 24
213.252.224.0/22 maxlen: 22
213.252.234.0/23 maxlen: 23
213.252.236.0/23 maxlen: 23
213.252.252.0/24 maxlen: 24
213.252.254.0/24 maxlen: 24
217.9.248.0/23 maxlen: 23
2a00:f500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a0:8b:4e:2e:c2:88:c9:50:20:96:a9:23:f6:de:14:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Oct 18 16:52:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b1999d1e30c484d1a6af194ffad309e277cd2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:61:ba:da:fc:c8:2d:46:d2:65:67:48:f2:
9c:7e:5e:f6:d0:54:ae:ec:d8:62:6e:34:d1:fc:e4:
7f:19:16:4d:7f:f3:d4:d5:df:48:fe:7d:d0:4b:01:
03:0d:32:ce:8d:07:b6:d5:6a:25:97:5b:fe:0b:ce:
50:8f:4e:67:18:50:eb:c6:f3:3d:3c:8a:4e:b1:af:
55:4a:4d:82:dc:49:ec:52:dc:fb:83:dd:05:84:6d:
3a:1c:55:8b:8f:00:58:60:ed:18:a4:57:9d:99:68:
79:25:2b:13:0b:5c:82:72:c2:80:1d:80:bb:1b:06:
94:c3:fc:76:68:3a:6b:d4:a4:9f:af:19:47:ca:d9:
78:43:5e:12:d3:98:6a:a3:67:de:e6:14:01:ac:80:
d7:ae:f2:6c:4a:f5:95:da:53:ef:a2:d9:b0:ea:d7:
e9:cf:9f:da:cb:36:b7:fa:b1:26:c6:a7:fb:bd:51:
04:c3:3b:2f:fd:9f:a4:89:26:e0:0e:a5:af:d6:a4:
6d:7e:83:b1:4f:11:ec:b0:4b:02:6a:c0:aa:8b:13:
12:47:f1:68:72:55:37:30:c3:7c:eb:dc:ea:c9:92:
40:6b:05:9d:fa:eb:17:bd:a6:98:c7:54:d2:af:98:
0b:e6:7a:e6:f2:00:1a:76:4a:46:0e:f2:14:3e:b9:
71:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:19:99:D1:E3:0C:48:4D:1A:6A:F1:94:FF:AD:30:9E:27:7C:D2:B3
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/OxmZ0eMMSE0aavGU_60wnid80rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.129.0/24
84.15.0.0/16
84.46.139.0/24
84.46.204.0/24
84.46.207.0/24
86.38.1.0/24
86.38.41.0/24
86.38.52.0/24
86.38.62.0/24
86.38.72.0/22
86.38.81.0/24
86.38.84.0/24
86.38.97.0/24
86.38.152.0/23
86.38.215.0/24
86.38.228.0/24
86.38.230.0/24
86.38.245.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.92.0/23
89.117.125.0/24
89.117.127.0/24
89.117.138.0/24
89.117.141.0/24
89.117.156.0/24
89.117.165.0/24
89.117.220.0/23
89.117.223.0/24
89.117.225.0/24
89.117.243.0/24
89.117.247.0/24
89.117.249.0/24
89.117.255.0/24
185.189.154.0/24
213.226.128.0/18
213.252.192.0/20
213.252.220.0/24
213.252.223.0-213.252.227.255
213.252.234.0-213.252.237.255
213.252.252.0/24
213.252.254.0/24
217.9.248.0/23
IPv6:
2a00:f500::/29
Signature Algorithm: sha256WithRSAEncryption
9c:4a:1a:38:59:3d:80:0e:81:dd:69:05:45:f3:58:43:d6:40:
ab:b1:6a:16:16:75:89:a2:61:bf:9e:1b:ec:f4:4b:58:51:53:
90:56:11:b6:2c:26:25:e9:e1:17:fe:2e:a8:54:34:20:4d:ba:
f4:8e:be:7c:fa:f3:b4:05:b3:1c:03:e6:54:96:a7:9b:39:db:
61:7a:42:ac:97:ea:d6:df:40:bd:71:27:f4:35:dd:e3:c2:5d:
de:c3:1f:b1:ad:70:07:8a:91:c0:eb:31:37:6a:3f:82:2c:56:
6a:24:26:88:11:10:b1:3b:d8:98:5f:ce:22:a2:fc:c7:8c:1f:
ab:ca:20:c6:2d:92:ed:53:3d:66:5d:e4:05:e8:f8:2a:1c:34:
ac:1d:89:e8:17:56:68:03:ee:ff:c2:ab:13:bd:77:4f:3d:cd:
3b:8d:14:56:9e:55:68:ca:fe:74:d5:22:30:00:15:97:ed:c6:
c9:36:ff:0d:64:1b:c8:ef:e3:44:15:2a:f0:fd:b9:6d:5e:37:
46:ea:ac:4e:0a:13:38:8b:ad:83:22:2a:fe:31:17:2a:2f:89:
5a:37:eb:9d:bb:df:19:3b:a9:a6:d8:b1:35:e1:a2:4f:7d:31:
91:01:74:63:08:45:4a:54:f9:25:a5:5f:45:0c:bd:a1:e4:f2:
f3:41:99:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:22 2024 by rpki-client on console-fra.rpki-client.org