Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/SdaG1RUEHlXcZNj5OsLUlcmslQM.roa
File: SdaG1RUEHlXcZNj5OsLUlcmslQM.roa (raw, json)
Hash identifier: fAyJgcwRz9/whIxsTCHa+XB94tUVRGhIK4b3BVgxI68=
Subject key identifier: 49:D6:86:D5:15:04:1E:55:DC:64:D8:F9:3A:C2:D4:95:C9:AC:95:03
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 018CC501088650FE3224C62F3503E1AEA0F1
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/SdaG1RUEHlXcZNj5OsLUlcmslQM.roa
Signing time: Mon 01 Jan 2024 12:30:28 +0000
ROA not before: Mon 01 Jan 2024 12:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21219
IP address blocks: 46.164.128.0/18 maxlen: 24
195.225.52.0/23 maxlen: 24
194.110.79.0/24 maxlen: 24
193.238.96.0/22 maxlen: 24
185.46.248.0/22 maxlen: 24
94.232.72.0/21 maxlen: 24
195.114.128.0/19 maxlen: 24
80.77.32.0/20 maxlen: 24
194.146.196.0/22 maxlen: 24
91.237.152.0/24 maxlen: 24
193.109.164.0/22 maxlen: 24
93.183.192.0/18 maxlen: 24
195.69.176.0/22 maxlen: 24
176.241.128.0/19 maxlen: 24
91.197.220.0/22 maxlen: 24
176.241.104.0/21 maxlen: 24
91.204.92.0/22 maxlen: 24
194.29.60.0/22 maxlen: 24
176.102.32.0/19 maxlen: 24
77.88.200.0/21 maxlen: 24
77.88.208.0/20 maxlen: 24
176.112.0.0/19 maxlen: 24
5.1.0.0/19 maxlen: 24
88.81.224.0/19 maxlen: 24
188.247.96.0/19 maxlen: 24
193.109.80.0/24 maxlen: 24
217.112.208.0/20 maxlen: 24
91.193.68.0/22 maxlen: 24
77.88.214.0/23 maxlen: 23
77.88.240.0/20 maxlen: 24
185.8.40.0/22 maxlen: 24
178.213.168.0/21 maxlen: 24
188.0.64.0/19 maxlen: 24
31.128.64.0/23 maxlen: 24
31.128.68.0/22 maxlen: 24
31.128.72.0/21 maxlen: 24
31.128.80.0/20 maxlen: 24
31.3.192.0/20 maxlen: 24
193.108.48.0/22 maxlen: 24
195.114.133.0/24 maxlen: 24
77.222.128.0/19 maxlen: 24
109.206.32.0/19 maxlen: 24
80.91.160.0/20 maxlen: 24
85.159.0.0/21 maxlen: 24
193.108.128.0/23 maxlen: 24
80.91.176.0/20 maxlen: 24
193.41.48.0/22 maxlen: 24
213.111.192.0/18 maxlen: 24
80.249.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:08:86:50:fe:32:24:c6:2f:35:03:e1:ae:a0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 12:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49d686d515041e55dc64d8f93ac2d495c9ac9503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:71:69:0a:23:30:a1:23:ae:d1:d0:cf:12:ce:
ff:84:df:f7:96:f0:03:b5:db:82:a3:65:e9:90:19:
04:08:56:4e:b9:99:ef:75:c1:f4:2e:a1:5b:0d:e5:
c9:16:48:c5:cc:ab:6a:86:e3:8d:af:87:6a:4e:e3:
d2:ae:22:46:27:c7:b6:32:83:8d:2b:27:04:de:9a:
58:3f:90:97:10:3c:c0:0f:d7:f0:cb:7c:f4:95:23:
d3:eb:56:25:bb:91:e6:3a:9b:e3:76:db:3f:5b:1e:
0e:91:59:f3:b7:8b:17:79:f9:ea:f4:d9:b6:ca:a0:
b9:f4:ca:1b:1d:06:5a:7d:41:85:e5:cc:69:e7:4b:
37:3d:b0:04:40:b9:43:6e:58:c3:b5:f9:ac:5f:f3:
43:0b:db:6c:11:c1:96:a7:f1:31:4f:3a:15:41:1e:
10:c2:94:33:a9:27:3c:73:e2:fe:43:d4:89:50:86:
ab:78:11:30:02:d5:ef:82:cf:dc:b3:f6:85:1d:61:
8e:cf:e9:7d:4b:04:5a:a3:24:c1:61:56:44:b4:47:
3c:7c:37:9f:d0:4c:f0:6a:05:8f:b3:8d:48:18:fb:
20:fd:69:1b:4e:39:ef:55:3e:75:98:a0:80:e8:ed:
1a:33:73:fd:71:18:83:58:55:25:35:ca:e7:44:a4:
76:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D6:86:D5:15:04:1E:55:DC:64:D8:F9:3A:C2:D4:95:C9:AC:95:03
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/SdaG1RUEHlXcZNj5OsLUlcmslQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.0.0/19
31.3.192.0/20
31.128.64.0/23
31.128.68.0-31.128.95.255
46.164.128.0/18
77.88.200.0-77.88.223.255
77.88.240.0/20
77.222.128.0/19
80.77.32.0/20
80.91.160.0/19
80.249.224.0/20
85.159.0.0/21
88.81.224.0/19
91.193.68.0/22
91.197.220.0/22
91.204.92.0/22
91.237.152.0/24
93.183.192.0/18
94.232.72.0/21
109.206.32.0/19
176.102.32.0/19
176.112.0.0/19
176.241.104.0/21
176.241.128.0/19
178.213.168.0/21
185.8.40.0/22
185.46.248.0/22
188.0.64.0/19
188.247.96.0/19
193.41.48.0/22
193.108.48.0/22
193.108.128.0/23
193.109.80.0/24
193.109.164.0/22
193.238.96.0/22
194.29.60.0/22
194.110.79.0/24
194.146.196.0/22
195.69.176.0/22
195.114.128.0/19
195.225.52.0/23
213.111.192.0/18
217.112.208.0/20
Signature Algorithm: sha256WithRSAEncryption
70:0b:65:d3:0f:72:eb:88:e5:69:35:d3:2d:96:0a:c6:f4:cd:
fc:0c:a3:a9:26:b4:2b:c8:d4:fb:77:8e:ea:b7:ca:df:2d:83:
81:83:fe:2d:4b:94:02:c6:4e:a0:a4:f0:71:73:95:1a:79:a0:
a0:5a:b6:e7:67:44:ec:da:f6:08:32:44:7f:4f:36:f5:c5:6d:
5e:b0:d3:da:a7:7a:c2:23:09:fb:a3:bd:bc:b4:f8:23:46:af:
0a:db:bc:61:65:84:da:5a:0b:45:7e:c0:99:44:fb:85:8f:47:
10:56:a2:0c:6d:13:be:0a:f9:27:2e:5d:59:c7:1a:25:25:16:
54:50:1f:f7:e7:cd:20:17:b5:62:a4:dd:47:41:ec:82:42:db:
59:ca:06:0d:a9:7f:5e:bc:76:4b:95:4d:bb:8d:4a:54:12:34:
ce:51:8b:96:80:d7:f5:a9:da:23:d2:99:f3:6c:56:98:23:6f:
ed:b9:30:51:42:dd:0f:fd:9b:70:d2:6d:d3:d7:19:91:5a:8a:
56:02:6e:15:f9:8c:ec:4c:c3:7f:35:4f:6f:68:02:c3:9c:de:
95:f8:4b:a3:50:6b:85:46:48:a8:dd:0d:e7:4b:5b:0d:6e:da:
7b:07:d6:a4:75:6d:55:7a:41:7d:94:3f:7f:01:28:f3:40:49:
ac:98:11:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:41:24 2024 by rpki-client on console-fra.rpki-client.org