Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/Z7aiPluYEIOymkTtYHGHYk-dedc.roa
File: Z7aiPluYEIOymkTtYHGHYk-dedc.roa (raw, json)
Hash identifier: e5tt1IIURNdWbHrLnbauhe6D5U02KLtvfR0jJEqljn4=
Subject key identifier: 67:B6:A2:3E:5B:98:10:83:B2:9A:44:ED:60:71:87:62:4F:9D:79:D7
Certificate issuer: /CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Certificate serial: 018CCA2901BA6A865F221FDFBA67DD0E1AE4
Authority key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/Z7aiPluYEIOymkTtYHGHYk-dedc.roa
Signing time: Tue 02 Jan 2024 12:32:14 +0000
ROA not before: Tue 02 Jan 2024 12:32:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8426
IP address blocks: 185.39.232.0/23 maxlen: 24
212.49.192.0/18 maxlen: 24
194.88.132.0/23 maxlen: 24
194.112.32.0/19 maxlen: 24
195.102.0.0/16 maxlen: 24
89.206.128.0/17 maxlen: 24
195.58.192.0/19 maxlen: 24
62.173.64.0/18 maxlen: 24
185.77.74.0/24 maxlen: 24
185.77.72.0/22 maxlen: 24
195.8.64.0/19 maxlen: 24
212.188.128.0/17 maxlen: 24
195.245.201.0/24 maxlen: 24
194.119.128.0/18 maxlen: 24
80.168.0.0/16 maxlen: 24
185.78.204.0/22 maxlen: 24
89.206.216.0/22 maxlen: 22
89.206.218.0/23 maxlen: 23
89.206.216.0/23 maxlen: 23
81.171.128.0/17 maxlen: 24
217.158.0.0/16 maxlen: 24
185.77.200.0/22 maxlen: 24
213.2.0.0/16 maxlen: 24
213.253.0.0/18 maxlen: 24
195.157.0.0/16 maxlen: 24
79.123.0.0/17 maxlen: 24
212.126.128.0/19 maxlen: 24
185.22.164.0/23 maxlen: 24
62.231.128.0/19 maxlen: 24
195.216.0.0/19 maxlen: 24
213.165.128.0/19 maxlen: 24
212.169.0.0/18 maxlen: 24
212.125.64.0/19 maxlen: 24
176.52.208.0/21 maxlen: 24
2001:67c:1089::/48 maxlen: 48
2001:a88::/32 maxlen: 32
2001:67c:27dc::/48 maxlen: 48
2001:67c:1088::/47 maxlen: 48
2a02:e100::/29 maxlen: 29
2a00:ed0::/32 maxlen: 32
2a00:62e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:01:ba:6a:86:5f:22:1f:df:ba:67:dd:0e:1a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Validity
Not Before: Jan 2 12:32:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67b6a23e5b981083b29a44ed607187624f9d79d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b5:52:f4:5d:d0:44:b5:00:65:d0:21:d4:02:
64:5d:eb:bd:c5:03:27:54:21:5b:6a:31:85:b4:00:
f5:d8:cf:72:a6:d1:b2:0d:03:7a:7a:8e:ed:72:65:
66:d0:10:aa:3d:bf:53:c6:a1:bf:a4:71:a2:d5:28:
04:b8:78:4e:d2:df:82:3b:a2:23:0b:23:74:dd:f6:
7f:8e:d2:92:91:5d:14:2f:f0:a8:b1:59:26:6c:12:
b4:fb:35:a3:fd:3e:67:fc:44:56:d8:00:a3:76:9c:
5c:98:47:a8:2b:2e:e3:ce:b8:da:fc:1b:ad:95:7f:
1d:cb:bf:b0:ad:36:a9:5c:09:85:c3:48:95:98:50:
f0:ac:47:b3:2f:79:0c:7a:79:35:66:c7:1c:e8:bc:
11:ba:68:c1:b3:c3:62:7c:b8:9b:5e:6e:3c:1e:ea:
a0:bd:53:02:db:01:9f:04:4b:a0:33:0f:76:24:3d:
b4:fd:e2:e9:40:3e:23:02:80:25:e3:5c:ba:6a:c3:
09:0b:c5:e2:79:0d:e4:42:01:88:5f:d5:10:2b:49:
a5:12:40:5d:84:82:e9:00:eb:e5:e9:33:f4:05:c0:
fb:29:10:cd:ee:ee:c3:1a:0b:ac:f9:e1:3d:5a:53:
83:51:29:be:42:10:83:4a:84:e6:66:4a:0e:33:66:
0b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B6:A2:3E:5B:98:10:83:B2:9A:44:ED:60:71:87:62:4F:9D:79:D7
X509v3 Authority Key Identifier:
keyid:77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/Z7aiPluYEIOymkTtYHGHYk-dedc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.173.64.0/18
62.231.128.0/19
79.123.0.0/17
80.168.0.0/16
81.171.128.0/17
89.206.128.0/17
176.52.208.0/21
185.22.164.0/23
185.39.232.0/23
185.77.72.0/22
185.77.200.0/22
185.78.204.0/22
194.88.132.0/23
194.112.32.0/19
194.119.128.0/18
195.8.64.0/19
195.58.192.0/19
195.102.0.0/16
195.157.0.0/16
195.216.0.0/19
195.245.201.0/24
212.49.192.0/18
212.125.64.0/19
212.126.128.0/19
212.169.0.0/18
212.188.128.0/17
213.2.0.0/16
213.165.128.0/19
213.253.0.0/18
217.158.0.0/16
IPv6:
2001:67c:1088::/47
2001:67c:27dc::/48
2001:a88::/32
2a00:ed0::/32
2a00:62e0::/32
2a02:e100::/29
Signature Algorithm: sha256WithRSAEncryption
91:ff:92:3b:11:a6:b6:0b:fe:5f:45:f4:e2:a1:5f:60:0c:63:
21:34:6b:71:cc:d9:64:7d:85:77:95:ee:e8:72:95:8e:92:36:
da:54:00:c2:15:8c:a4:9d:28:88:b4:84:99:f2:9f:5f:b8:29:
26:af:0b:7f:52:d0:41:fd:1a:02:b1:af:b2:ee:95:b0:2b:ee:
93:68:44:37:88:42:3e:08:b8:4e:ef:00:dd:ee:25:f1:c1:be:
46:2e:f9:2c:21:07:1d:8c:c3:80:86:cd:30:fb:b6:f5:50:2d:
25:f1:d1:6c:dc:83:62:4b:18:ee:ed:6e:9d:84:73:a6:d9:f3:
14:2d:29:43:35:92:a5:c7:02:fc:0d:aa:dc:2a:2c:2e:44:68:
f7:47:76:78:66:88:90:c7:c8:3d:a2:37:33:3c:cd:f0:8a:6e:
4b:78:14:97:60:b8:98:1b:fd:24:ea:1a:ad:7f:9e:e6:18:4d:
38:7e:ef:d0:57:d9:34:df:f0:b0:be:cf:11:9b:c7:8e:3f:21:
cb:3e:e0:51:99:ba:54:1b:73:16:13:b9:ad:67:b4:55:24:0c:
45:66:55:24:7c:4c:1f:e9:ee:14:80:8a:50:5b:9f:33:bd:3c:
4b:9e:1b:3b:c8:a9:39:7f:54:d1:89:10:a8:c2:c4:05:a6:68:
a6:d1:f5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:24:38 2024 by rpki-client on console-ams.rpki-client.org