Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/kPN6GNcoeT0aB2uniprrQi5s5eo.roa
File: kPN6GNcoeT0aB2uniprrQi5s5eo.roa (raw, json)
Hash identifier: PpyUXmXAC/hz7Zk6dHb5OnYDL8NfJ+qiqGQTwse6iSQ=
Subject key identifier: 90:F3:7A:18:D7:28:79:3D:1A:07:6B:A7:8A:9A:EB:42:2E:6C:E5:EA
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 01902B0C73CAC65AD254338C19CD46991F0B
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/kPN6GNcoeT0aB2uniprrQi5s5eo.roa
Signing time: Tue 18 Jun 2024 11:12:34 +0000
ROA not before: Tue 18 Jun 2024 11:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21342
IP address blocks: 2.16.40.0/24 maxlen: 24
2.16.122.0/24 maxlen: 24
2.16.123.0/24 maxlen: 24
2.16.126.0/24 maxlen: 24
2.16.127.0/24 maxlen: 24
2.16.130.0/24 maxlen: 24
2.17.46.0/24 maxlen: 24
2.21.230.0/24 maxlen: 24
2.22.230.0/24 maxlen: 24
2.22.243.0/24 maxlen: 24
84.53.139.0/24 maxlen: 24
88.221.81.0/24 maxlen: 24
88.221.162.0/24 maxlen: 24
88.221.163.0/24 maxlen: 24
92.122.123.0/24 maxlen: 24
92.123.94.0/24 maxlen: 24
92.123.95.0/24 maxlen: 24
95.100.168.0/24 maxlen: 24
95.100.173.0/24 maxlen: 24
95.100.174.0/24 maxlen: 24
95.100.175.0/24 maxlen: 24
95.101.36.0/24 maxlen: 24
95.101.76.0/24 maxlen: 24
193.108.88.0/24 maxlen: 24
193.108.91.0/24 maxlen: 24
2a02:26f0:67::/48 maxlen: 48
2a02:26f0:68::/48 maxlen: 48
2a02:26f0:117::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2b:0c:73:ca:c6:5a:d2:54:33:8c:19:cd:46:99:1f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jun 18 11:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90f37a18d728793d1a076ba78a9aeb422e6ce5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a2:50:03:89:c0:8e:3a:ea:ce:c8:f5:24:4f:
c7:ca:91:1e:c2:f5:5d:90:d8:34:7f:e3:a6:92:5e:
70:02:d2:ad:f6:d8:33:1b:75:70:9b:a7:97:41:44:
b2:9e:79:70:21:23:bc:9e:c8:b2:a3:fc:e3:da:ba:
e0:59:f7:75:d8:92:8c:de:fc:b2:c3:3b:69:4d:04:
5c:11:ca:ae:c4:47:46:69:85:3f:06:52:a3:24:dc:
b9:63:95:0f:6d:e3:a7:6a:70:a1:dd:70:5a:cf:17:
83:06:49:11:9f:2c:f3:36:29:33:44:bd:da:9d:f8:
6e:77:a4:a3:c1:11:6c:62:bb:f6:fd:6e:8e:7e:a1:
83:ad:5e:96:7d:7e:34:e8:65:5d:11:f2:d6:45:28:
a6:05:96:4b:da:9a:68:06:cd:53:bc:68:eb:5b:99:
1b:90:13:be:22:43:07:ac:ba:e4:93:88:16:7f:75:
2e:79:64:26:a4:7e:99:ed:98:6b:c8:d3:e8:e8:22:
82:e1:d1:2b:9a:1d:77:ce:ca:d9:60:64:3b:c1:23:
12:04:d5:0e:cc:f7:25:79:e8:67:d7:8c:8b:46:8b:
bb:01:52:b7:f5:b4:91:03:89:ab:80:d1:d1:b9:8b:
1b:80:4c:8b:db:35:5d:0f:11:3f:eb:52:11:9d:49:
32:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F3:7A:18:D7:28:79:3D:1A:07:6B:A7:8A:9A:EB:42:2E:6C:E5:EA
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/kPN6GNcoeT0aB2uniprrQi5s5eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.16.40.0/24
2.16.122.0/23
2.16.126.0/23
2.16.130.0/24
2.17.46.0/24
2.21.230.0/24
2.22.230.0/24
2.22.243.0/24
84.53.139.0/24
88.221.81.0/24
88.221.162.0/23
92.122.123.0/24
92.123.94.0/23
95.100.168.0/24
95.100.173.0-95.100.175.255
95.101.36.0/24
95.101.76.0/24
193.108.88.0/24
193.108.91.0/24
IPv6:
2a02:26f0:67::-2a02:26f0:68:ffff:ffff:ffff:ffff:ffff
2a02:26f0:117::/48
Signature Algorithm: sha256WithRSAEncryption
47:ac:83:72:5f:f9:35:ba:de:ed:b4:da:11:c9:0a:91:ec:6f:
41:e4:74:d7:42:1a:e3:a9:5e:0e:aa:49:73:7c:68:e0:8f:4b:
94:6b:de:64:3c:97:92:d6:78:ab:b0:21:4b:c5:2f:26:3a:84:
68:85:d3:d8:58:ee:fb:22:5f:be:2d:dd:6f:49:2f:fe:69:e7:
19:1d:cc:a5:16:6f:56:d5:68:01:4e:47:6c:97:8a:88:0c:5e:
e3:00:b5:ca:ba:a5:54:1c:b0:76:2a:55:cd:70:fb:c3:40:39:
5a:f8:62:dc:6a:be:e9:0d:96:69:e4:d5:41:15:9b:3c:98:cf:
ae:f1:ec:bf:17:7c:6b:9a:a1:fb:4c:bb:b9:43:53:4e:01:a5:
c0:e1:a6:09:8a:28:31:77:d8:c3:d9:fc:81:5f:07:d3:f5:e5:
c4:37:8d:eb:20:2f:ab:f2:c0:cf:9e:8e:b0:d2:36:a1:68:75:
ad:1c:ab:82:43:97:ef:86:73:78:d2:e0:2b:28:3d:ff:00:85:
99:d8:c0:b5:cf:c0:b6:2a:b5:5e:44:d2:e9:af:a2:c5:50:5e:
83:b8:55:1a:48:a4:61:b8:9b:62:29:be:d1:59:3f:66:34:5d:
91:a4:f0:44:0f:19:3b:1e:62:30:42:b5:d9:a4:41:21:7f:7e:
d8:c7:98:cf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:47:52 2024 by rpki-client on console-ams.rpki-client.org