Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/iUWaqawJoNVKAEF5zWVeG9WYcpg.roa
File: iUWaqawJoNVKAEF5zWVeG9WYcpg.roa (raw, json)
Hash identifier: hFWEb3piNCe1WrjfESSJ6wKyuHb9RxI1VevC03AmEik=
Subject key identifier: 89:45:9A:A9:AC:09:A0:D5:4A:00:41:79:CD:65:5E:1B:D5:98:72:98
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B72ED9238591B288B2E4C0E5A1EFF4
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/iUWaqawJoNVKAEF5zWVeG9WYcpg.roa
Signing time: Mon 01 Jan 2024 06:30:11 +0000
ROA not before: Mon 01 Jan 2024 06:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12479
IP address blocks: 92.178.0.0/16 maxlen: 24
90.77.0.0/16 maxlen: 24
92.176.0.0/16 maxlen: 24
90.75.0.0/16 maxlen: 24
90.74.0.0/16 maxlen: 24
90.106.0.0/16 maxlen: 24
90.69.0.0/19 maxlen: 19
90.69.0.0/16 maxlen: 24
92.190.0.0/16 maxlen: 24
90.94.0.0/16 maxlen: 24
92.185.0.0/16 maxlen: 24
92.172.0.0/16 maxlen: 24
90.69.80.0/21 maxlen: 21
90.71.0.0/16 maxlen: 24
92.189.0.0/16 maxlen: 24
90.69.112.0/21 maxlen: 21
90.69.32.0/19 maxlen: 19
92.187.0.0/16 maxlen: 24
90.69.64.0/20 maxlen: 20
92.177.0.0/16 maxlen: 24
90.69.176.0/21 maxlen: 21
90.69.184.0/22 maxlen: 22
90.68.0.0/16 maxlen: 24
90.69.188.0/22 maxlen: 22
90.69.192.0/20 maxlen: 20
92.191.0.0/16 maxlen: 24
92.186.0.0/16 maxlen: 24
90.69.208.0/20 maxlen: 20
90.69.224.0/19 maxlen: 19
90.69.124.0/22 maxlen: 22
90.69.128.0/19 maxlen: 19
90.69.160.0/21 maxlen: 21
2a01:c500::/28 maxlen: 46
2a01:c500::/31 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2e:d9:23:85:91:b2:88:b2:e4:c0:e5:a1:ef:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89459aa9ac09a0d54a004179cd655e1bd5987298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a2:0c:5b:85:b8:4d:60:48:e8:a5:08:54:b0:
d2:a2:e0:2d:66:22:78:ad:04:a5:12:ba:70:7e:dc:
03:c1:45:ad:3d:f2:e9:b4:6d:0d:19:a4:68:3d:6c:
f1:17:ac:dd:23:00:b7:df:cc:ed:8d:9c:e3:f3:74:
c7:13:76:42:13:fe:d2:a3:45:61:9d:fb:ad:9c:7a:
d0:22:d1:ec:12:e7:18:db:20:c8:ee:f8:63:6a:17:
a2:44:24:ab:16:af:9f:a1:d1:fe:00:aa:81:21:00:
52:fe:9d:4d:3d:6b:02:d8:27:17:4a:3c:76:3b:70:
9f:04:ea:2d:28:c6:67:4a:57:58:25:35:83:2c:95:
82:d1:f6:0d:4c:6f:03:17:f4:ba:60:7d:1f:4d:d0:
be:3c:35:02:c5:19:af:2f:f4:fb:65:b5:e2:41:0c:
5b:11:46:08:d7:86:e7:f7:27:87:08:27:05:a2:27:
e0:f5:f4:ae:26:62:05:85:ae:96:e0:80:0f:68:0e:
fa:4e:12:96:c4:21:23:2e:e1:a2:b0:d1:78:93:d0:
52:27:94:17:bf:55:2b:10:b1:f5:07:51:38:53:8d:
67:44:b8:07:f5:e7:3a:67:bb:28:81:ea:42:85:a0:
5a:3f:64:20:fc:46:e5:a5:c3:ae:1a:97:1d:ec:c8:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:45:9A:A9:AC:09:A0:D5:4A:00:41:79:CD:65:5E:1B:D5:98:72:98
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/iUWaqawJoNVKAEF5zWVeG9WYcpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.68.0.0/15
90.71.0.0/16
90.74.0.0/15
90.77.0.0/16
90.94.0.0/16
90.106.0.0/16
92.172.0.0/16
92.176.0.0-92.178.255.255
92.185.0.0-92.187.255.255
92.189.0.0-92.191.255.255
IPv6:
2a01:c500::/28
Signature Algorithm: sha256WithRSAEncryption
27:59:b6:7b:0b:51:00:ac:84:82:0b:3d:59:10:4d:dd:d2:b8:
e7:a7:cf:8a:fb:8b:6a:b0:0b:bb:ec:d2:d1:50:e6:b6:5b:ac:
26:92:2f:dc:b4:49:a0:c1:d5:f9:ce:4e:6d:3f:70:29:c0:54:
6e:4d:cd:2a:42:b4:1b:1d:a9:de:e7:35:f7:bc:cc:72:68:86:
2c:52:4c:96:89:cd:82:60:ec:80:bf:ca:b6:4b:c5:9f:25:94:
ed:cb:e2:25:09:47:cf:75:e7:a9:3b:bd:0e:2a:e1:f2:44:1e:
5c:16:55:c9:ee:86:b4:a7:29:84:80:a9:9d:d0:6b:68:42:2a:
2f:af:67:e2:b1:ce:5b:51:b4:9e:03:e4:b7:0a:32:d5:e3:3e:
ba:cc:97:37:16:b6:59:53:bd:38:bc:56:c8:4e:27:02:2c:af:
7b:2f:f7:23:58:b5:95:24:30:58:06:33:88:5d:2d:e2:aa:aa:
42:94:33:0d:88:27:b3:79:f1:5c:73:56:c1:a9:b3:15:9b:ed:
5a:7a:95:d8:5b:9e:57:6c:f4:d5:1d:9c:86:70:b4:b4:77:54:
42:a9:7b:66:3a:c4:0d:78:4c:c1:42:8f:d8:7d:26:eb:6c:f4:
7e:cd:1d:8e:8e:d5:67:5a:6c:79:a6:41:bb:8f:09:de:1b:b0:
9b:4b:bd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:32:58 2024 by rpki-client on console-ams.rpki-client.org