Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/HNgX5sOk7KOrNo2XJhRZ1qmNqHY.roa
File: HNgX5sOk7KOrNo2XJhRZ1qmNqHY.roa (raw, json)
Hash identifier: d3szMe/pokdzikygggFMTGPbgLkQJjBnMrOk8SOt7GU=
Subject key identifier: 1C:D8:17:E6:C3:A4:EC:A3:AB:36:8D:97:26:14:59:D6:A9:8D:A8:76
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 0192AF1D2A136A653AAEE25B6F8DC29FCDA7
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/HNgX5sOk7KOrNo2XJhRZ1qmNqHY.roa
Signing time: Mon 21 Oct 2024 12:46:16 +0000
ROA not before: Mon 21 Oct 2024 12:46:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8903
IP address blocks: 77.72.104.0/21 maxlen: 24
84.18.0.0/19 maxlen: 24
92.60.160.0/20 maxlen: 24
176.98.220.0/22 maxlen: 24
185.66.60.0/22 maxlen: 24
185.145.224.0/22 maxlen: 24
185.155.64.0/22 maxlen: 24
185.173.44.0/22 maxlen: 24
185.187.180.0/22 maxlen: 24
185.224.76.0/22 maxlen: 24
193.34.240.0/22 maxlen: 24
195.5.64.0/19 maxlen: 24
212.49.128.0/18 maxlen: 24
212.49.189.0/24 maxlen: 24
212.66.161.0/24 maxlen: 24
212.66.162.0/23 maxlen: 23
212.66.163.0/24 maxlen: 24
212.66.164.0/22 maxlen: 22
212.66.168.0/21 maxlen: 21
212.66.176.0/20 maxlen: 24
212.163.0.0/16 maxlen: 24
213.9.128.0/17 maxlen: 24
213.192.192.0/18 maxlen: 24
213.192.193.0/24 maxlen: 24
213.192.195.0/24 maxlen: 24
213.192.200.0/22 maxlen: 22
213.192.203.0/24 maxlen: 24
213.192.206.0/23 maxlen: 23
213.192.212.0/22 maxlen: 22
213.192.213.0/24 maxlen: 24
213.192.216.0/21 maxlen: 21
213.192.224.0/22 maxlen: 22
213.192.228.0/23 maxlen: 23
213.192.232.0/22 maxlen: 22
213.192.238.0/24 maxlen: 24
213.192.239.0/24 maxlen: 24
213.192.240.0/24 maxlen: 24
213.192.241.0/24 maxlen: 24
213.192.242.0/23 maxlen: 23
213.192.244.0/23 maxlen: 23
213.192.246.0/24 maxlen: 24
213.192.247.0/24 maxlen: 24
213.192.248.0/21 maxlen: 21
213.192.249.0/24 maxlen: 24
213.192.251.0/24 maxlen: 24
213.192.252.0/23 maxlen: 23
213.192.253.0/24 maxlen: 24
213.192.254.0/24 maxlen: 24
213.192.255.0/24 maxlen: 24
2001:ac0::/29 maxlen: 29
2001:ac0::/32 maxlen: 48
2001:ac0:c0c0::/44 maxlen: 44
2001:ac0:c880::/44 maxlen: 44
2a0d:59c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:1d:2a:13:6a:65:3a:ae:e2:5b:6f:8d:c2:9f:cd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Oct 21 12:46:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cd817e6c3a4eca3ab368d97261459d6a98da876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:f3:37:61:91:c5:5d:e2:5a:63:13:84:1a:
44:32:b8:c8:6c:6b:03:38:f6:ca:af:8d:5e:fe:50:
89:c5:1e:c6:a5:2d:53:3a:e9:d5:bb:85:b1:3c:32:
14:94:72:06:6f:63:a2:5d:5b:5e:81:e7:b0:7e:d4:
ae:f9:44:2c:02:23:f1:f2:26:ea:69:56:3f:83:49:
50:d0:65:e0:38:7c:b6:f7:cf:a1:6f:93:f0:6d:26:
73:e1:80:06:e1:bd:fa:04:7f:09:e5:75:e7:7e:02:
16:7a:7d:85:3b:ef:96:09:3b:0f:c3:b1:77:d0:50:
4d:ba:b4:75:66:b2:a1:93:da:94:5c:e5:90:60:5a:
13:c3:0c:fd:8a:10:7f:d6:38:7d:16:d8:3a:e2:d1:
2a:f2:03:c8:53:21:98:42:fc:56:2a:c1:19:86:54:
2b:80:c0:56:ce:cf:cc:95:1f:c0:28:70:9a:8f:c5:
1a:9c:39:0b:0c:41:e7:05:79:98:6d:38:e2:61:99:
c4:19:68:c3:29:4e:03:74:72:80:75:7f:03:50:fe:
7e:28:48:9d:61:13:50:91:c3:a7:fb:f9:94:0c:0f:
bd:17:c1:61:39:f0:bd:84:01:10:83:68:3a:05:ca:
84:a2:43:d7:68:29:da:0a:31:bd:64:12:78:05:bc:
b3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D8:17:E6:C3:A4:EC:A3:AB:36:8D:97:26:14:59:D6:A9:8D:A8:76
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/HNgX5sOk7KOrNo2XJhRZ1qmNqHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.104.0/21
84.18.0.0/19
92.60.160.0/20
176.98.220.0/22
185.66.60.0/22
185.145.224.0/22
185.155.64.0/22
185.173.44.0/22
185.187.180.0/22
185.224.76.0/22
193.34.240.0/22
195.5.64.0/19
212.49.128.0/18
212.66.161.0-212.66.191.255
212.163.0.0/16
213.9.128.0/17
213.192.192.0/18
IPv6:
2001:ac0::/29
2a0d:59c0::/29
Signature Algorithm: sha256WithRSAEncryption
4e:5c:5b:0b:b4:c8:d2:00:bb:c7:bd:ee:58:90:3f:e7:7c:36:
ea:35:ba:ab:10:c0:39:84:71:e1:74:6c:ab:72:d8:ac:2a:ec:
71:9b:69:34:e2:65:61:77:a8:f1:26:88:9c:b0:25:1e:b1:56:
ba:8f:08:e4:c5:ac:b3:7c:9b:21:e5:07:65:ce:59:ec:92:3b:
b3:4b:f3:7a:e0:46:d4:2d:8a:50:07:50:69:95:ee:70:b2:37:
2f:c5:40:69:a5:f6:50:d8:0d:c8:c3:8e:2f:3c:d4:0d:87:20:
80:c3:cc:02:e2:bf:97:7c:4a:39:c5:73:96:8c:ec:34:4e:c8:
70:8b:52:a9:ca:53:a4:02:b8:7f:25:d3:ef:5e:68:95:75:6d:
88:47:4f:9d:b0:a8:9e:3c:00:f5:91:11:c9:9f:b6:6b:79:0b:
a0:e6:08:5f:76:43:53:d6:62:5b:28:2e:e9:9e:40:cd:48:e6:
cb:c1:9d:7f:88:76:8d:37:71:8c:1a:73:5d:ea:76:87:88:22:
3c:df:25:32:a7:9b:71:15:1a:bd:09:87:15:57:7b:c6:59:c7:
56:e9:57:cb:69:3f:5d:9b:b0:26:fe:f6:1a:96:9a:1d:42:62:
1c:60:b5:86:de:af:9e:71:4a:d5:5e:26:a0:06:b0:c7:b3:af:
28:5b:68:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:11:18 2024 by rpki-client on console-fra.rpki-client.org