Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/PSRqKzz5QrzvMgkw2sY5vZhnQfw.roa
File: PSRqKzz5QrzvMgkw2sY5vZhnQfw.roa (raw, json)
Hash identifier: XERTwoowjMhQjPJBku57jvMfW/hjmThTgSbu6C6SCUs=
Subject key identifier: 3D:24:6A:2B:3C:F9:42:BC:EF:32:09:30:DA:C6:39:BD:98:67:41:FC
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018F02DFBED04E6B3A5CB44A559C766E8932
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/PSRqKzz5QrzvMgkw2sY5vZhnQfw.roa
Signing time: Sun 21 Apr 2024 22:56:08 +0000
ROA not before: Sun 21 Apr 2024 22:56:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136787
IP address blocks: 84.46.165.0/24 maxlen: 24
84.46.174.0/24 maxlen: 24
86.38.2.0/24 maxlen: 24
86.38.44.0/24 maxlen: 24
86.38.46.0/24 maxlen: 24
86.38.91.0/24 maxlen: 24
86.38.157.0/24 maxlen: 24
86.38.206.0/24 maxlen: 24
86.38.207.0/24 maxlen: 24
86.38.224.0/24 maxlen: 24
86.38.231.0/24 maxlen: 24
89.116.0.0/24 maxlen: 24
89.116.18.0/24 maxlen: 24
89.116.40.0/24 maxlen: 24
89.116.55.0/24 maxlen: 24
89.116.57.0/24 maxlen: 24
89.116.79.0/24 maxlen: 24
89.116.94.0/24 maxlen: 24
89.116.95.0/24 maxlen: 24
89.116.98.0/24 maxlen: 24
89.116.142.0/24 maxlen: 24
89.116.145.0/24 maxlen: 24
89.116.194.0/24 maxlen: 24
89.116.195.0/24 maxlen: 24
89.116.196.0/24 maxlen: 24
89.116.197.0/24 maxlen: 24
89.116.199.0/24 maxlen: 24
89.116.201.0/24 maxlen: 24
89.116.204.0/24 maxlen: 24
89.116.205.0/24 maxlen: 24
89.116.206.0/24 maxlen: 24
89.116.207.0/24 maxlen: 24
89.116.216.0/24 maxlen: 24
89.116.217.0/24 maxlen: 24
89.116.219.0/24 maxlen: 24
89.116.222.0/24 maxlen: 24
89.116.251.0/24 maxlen: 24
89.116.254.0/24 maxlen: 24
89.117.4.0/24 maxlen: 24
89.117.34.0/24 maxlen: 24
89.117.131.0/24 maxlen: 24
89.117.189.0/24 maxlen: 24
89.117.191.0/24 maxlen: 24
89.117.230.0/24 maxlen: 24
89.117.231.0/24 maxlen: 24
89.117.244.0/24 maxlen: 24
217.9.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:02:df:be:d0:4e:6b:3a:5c:b4:4a:55:9c:76:6e:89:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Apr 21 22:56:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d246a2b3cf942bcef320930dac639bd986741fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:30:d7:0f:60:8e:60:8c:90:0e:60:39:6c:e9:
2d:cd:4d:f9:21:36:3b:1b:58:2b:6a:da:c0:60:d4:
2d:02:21:a2:e3:98:ba:38:ae:1c:84:11:ac:d5:f1:
d4:a6:a9:04:9c:dd:c3:78:27:42:bd:37:45:a1:fa:
07:29:5d:75:6e:22:9e:3e:fc:4c:44:b2:69:0f:3a:
28:1f:22:1c:bd:ae:12:cd:48:6f:41:75:26:5b:f8:
cd:6b:25:be:83:ad:d2:28:1b:33:ae:34:9c:74:76:
65:c8:d7:00:9d:9c:5b:47:81:a1:fd:b8:c9:8f:6f:
99:43:34:e0:27:00:71:76:0d:6f:cc:31:13:0d:73:
3a:1d:0e:51:7e:76:21:50:55:6f:22:35:af:2d:a5:
24:b2:df:17:b4:61:14:df:dd:0f:fa:7d:7b:1e:94:
1a:43:5d:dd:37:e5:12:8f:bd:df:ab:2a:e3:b2:ed:
cc:c9:33:92:0e:3d:44:6f:ac:a2:ae:9a:9e:b4:2b:
d5:63:fc:a6:f1:f7:d1:f0:01:36:88:aa:0a:5b:06:
58:de:06:31:ff:4b:83:3a:28:cd:35:9a:48:22:ad:
f4:e4:dc:bc:37:cd:3d:39:e7:e6:b3:30:0f:b6:dd:
29:66:26:90:75:e0:7b:43:e2:b7:10:3a:39:49:32:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:24:6A:2B:3C:F9:42:BC:EF:32:09:30:DA:C6:39:BD:98:67:41:FC
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/PSRqKzz5QrzvMgkw2sY5vZhnQfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.165.0/24
84.46.174.0/24
86.38.2.0/24
86.38.44.0/24
86.38.46.0/24
86.38.91.0/24
86.38.157.0/24
86.38.206.0/23
86.38.224.0/24
86.38.231.0/24
89.116.0.0/24
89.116.18.0/24
89.116.40.0/24
89.116.55.0/24
89.116.57.0/24
89.116.79.0/24
89.116.94.0/23
89.116.98.0/24
89.116.142.0/24
89.116.145.0/24
89.116.194.0-89.116.197.255
89.116.199.0/24
89.116.201.0/24
89.116.204.0/22
89.116.216.0/23
89.116.219.0/24
89.116.222.0/24
89.116.251.0/24
89.116.254.0/24
89.117.4.0/24
89.117.34.0/24
89.117.131.0/24
89.117.189.0/24
89.117.191.0/24
89.117.230.0/23
89.117.244.0/24
217.9.253.0/24
Signature Algorithm: sha256WithRSAEncryption
32:df:c1:a8:5a:4e:33:f5:7a:97:69:dd:a3:f1:7f:c7:6c:f8:
9e:f7:14:d6:68:b9:14:0e:72:5a:7c:de:c2:e1:57:c3:11:d6:
1c:06:7a:35:68:0d:1e:44:a6:55:01:7c:a3:43:a9:07:d4:12:
ff:8f:37:5a:a9:ef:0f:e9:dc:cd:1b:6f:ac:23:85:da:cc:9e:
11:c2:67:39:9e:6b:97:c6:17:e3:67:74:4a:4b:d5:15:65:00:
bd:b5:41:99:95:ba:2d:e3:dc:c5:b0:fb:21:29:85:6f:bc:86:
19:61:84:ce:b3:4f:7e:96:ac:0f:2b:20:ba:9b:bc:1b:63:9a:
8f:f5:d1:a4:93:42:34:d3:b6:ca:94:ef:b9:a6:61:6f:55:4e:
00:48:67:bb:61:06:9e:41:6a:a4:9b:44:dd:94:1f:58:44:3b:
b9:80:bd:6f:de:f5:4e:3c:19:0c:5f:c1:5d:9c:63:1b:98:17:
3b:59:6c:42:44:9a:56:60:2e:a6:fa:ab:fd:0a:02:57:15:07:
69:ba:ff:cd:f4:fd:4e:b0:0a:a2:37:6c:dc:07:ba:b5:ed:e4:
60:67:a0:71:aa:40:6b:12:38:e7:00:b5:0b:d0:29:e7:8a:40:
23:8d:80:5c:13:55:fb:17:cf:a3:00:86:da:65:e7:f0:5f:59:
1b:d9:6c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 13:32:34 2024 by rpki-client on console-ams.rpki-client.org