Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/USu1ZqgBAoI2oh8mzYhrOBMpvFo.roa
File: USu1ZqgBAoI2oh8mzYhrOBMpvFo.roa (raw, json)
Hash identifier: oqMcFEiuTq6Sw7tluuEwgdoJauGdcoGSl1Dw6WIijrw=
Subject key identifier: 51:2B:B5:66:A8:01:02:82:36:A2:1F:26:CD:88:6B:38:13:29:BC:5A
Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Certificate serial: 018CC50104EFF1349D942F18591EF390FBCD
Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/USu1ZqgBAoI2oh8mzYhrOBMpvFo.roa
Signing time: Mon 01 Jan 2024 12:30:27 +0000
ROA not before: Mon 01 Jan 2024 12:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29684
IP address blocks: 46.235.88.0/21 maxlen: 24
212.12.160.0/23 maxlen: 23
212.12.160.0/19 maxlen: 24
212.12.162.0/23 maxlen: 23
212.12.163.0/24 maxlen: 24
212.12.160.0/20 maxlen: 20
212.12.164.0/24 maxlen: 24
212.12.164.0/23 maxlen: 23
212.12.166.0/24 maxlen: 24
212.12.172.0/23 maxlen: 23
212.12.169.0/24 maxlen: 24
212.12.170.0/24 maxlen: 24
212.12.170.0/23 maxlen: 23
212.12.171.0/24 maxlen: 24
176.241.184.0/21 maxlen: 24
212.12.166.0/23 maxlen: 23
212.12.167.0/24 maxlen: 24
212.12.168.0/24 maxlen: 24
212.12.168.0/23 maxlen: 23
212.12.183.0/24 maxlen: 24
193.242.127.0/24 maxlen: 24
88.85.224.0/19 maxlen: 24
79.110.229.0/24 maxlen: 24
185.10.112.0/22 maxlen: 24
178.20.144.0/21 maxlen: 24
62.204.48.0/24 maxlen: 24
77.75.224.0/24 maxlen: 24
176.97.216.0/24 maxlen: 24
193.105.25.0/24 maxlen: 24
146.19.71.0/24 maxlen: 24
176.98.32.0/24 maxlen: 24
176.98.32.0/22 maxlen: 22
176.98.33.0/24 maxlen: 24
176.98.34.0/24 maxlen: 24
176.98.34.0/23 maxlen: 23
176.98.35.0/24 maxlen: 24
194.104.226.0/24 maxlen: 24
2a00:1560:18::/48 maxlen: 48
2a00:1560:1111::/48 maxlen: 48
2a00:1560:c::/48 maxlen: 48
2a00:1560:10::/48 maxlen: 48
2a00:1560:4::/47 maxlen: 47
2a00:1560:17::/48 maxlen: 48
2a00:1560:5::/48 maxlen: 48
2a00:1560::/32 maxlen: 32
2a00:1560:60::/48 maxlen: 48
2a00:1560:16::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 16:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:04:ef:f1:34:9d:94:2f:18:59:1e:f3:90:fb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Validity
Not Before: Jan 1 12:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=512bb566a801028236a21f26cd886b381329bc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:c0:5f:2b:4a:c3:c3:1a:e4:53:50:21:1e:
ec:fd:96:23:42:43:b7:a1:b4:f1:65:d2:4c:a8:c6:
4b:d9:e2:95:6e:3f:6a:03:04:e6:e7:3f:de:9f:d8:
a6:0d:3e:7e:d4:ff:3a:11:7e:71:39:62:b5:36:a5:
8d:ec:e5:fc:38:3b:5d:d8:17:ca:aa:64:56:62:da:
ba:b8:dd:06:52:1f:63:51:e5:88:09:27:a4:3a:68:
a3:c9:45:04:79:01:4b:4c:bb:0a:09:69:36:63:da:
16:7b:d6:a2:13:f3:8b:d4:3f:09:aa:20:ab:23:06:
3a:a9:32:1a:94:33:71:30:f9:7c:8c:9e:d6:50:3a:
9e:e5:10:c1:80:cb:07:83:64:fb:e5:09:b7:da:d3:
9f:25:90:b2:6d:c5:9f:15:2f:6c:26:46:b7:3a:2c:
32:03:9c:96:5f:54:c1:4f:89:cd:61:08:3d:ca:13:
bb:e8:8a:6f:f1:95:34:df:9c:cd:55:c1:5e:86:bf:
e7:f5:89:b5:80:d7:1c:f5:c7:be:03:ad:0b:1a:fc:
9b:a0:e4:c0:cf:98:65:eb:58:47:e6:b1:26:83:f9:
ed:8c:41:34:0e:39:c7:de:b2:07:b7:1f:29:9e:79:
50:3d:c6:e6:87:af:af:05:9b:f1:66:ed:a1:19:61:
07:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2B:B5:66:A8:01:02:82:36:A2:1F:26:CD:88:6B:38:13:29:BC:5A
X509v3 Authority Key Identifier:
keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/USu1ZqgBAoI2oh8mzYhrOBMpvFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.88.0/21
62.204.48.0/24
77.75.224.0/24
79.110.229.0/24
88.85.224.0/19
146.19.71.0/24
176.97.216.0/24
176.98.32.0/22
176.241.184.0/21
178.20.144.0/21
185.10.112.0/22
193.105.25.0/24
193.242.127.0/24
194.104.226.0/24
212.12.160.0/19
IPv6:
2a00:1560::/32
Signature Algorithm: sha256WithRSAEncryption
c3:6c:9c:32:04:5e:3c:19:75:1d:b2:28:30:af:8b:e2:09:03:
6c:db:b8:2b:66:fe:f3:c7:2a:ec:e5:c8:fc:1e:ff:f6:df:48:
dc:87:83:a2:74:31:48:10:00:ed:28:f0:bf:26:b5:b8:86:b6:
aa:9c:fb:64:93:7d:ea:83:f7:6c:f4:d8:1a:7e:95:f0:7d:18:
48:14:68:26:53:00:4d:86:6b:35:8e:d4:71:ce:0c:17:fb:ef:
0e:28:c7:30:34:6c:07:2e:94:66:a2:d9:59:e5:5d:27:43:af:
78:34:d4:50:a4:de:f4:3d:74:54:82:90:66:51:e2:e3:57:10:
8a:81:36:4d:5b:60:1d:9e:b9:5f:26:ec:c8:fa:02:5e:f4:bf:
bc:7c:8e:06:5c:6e:16:c9:c1:a5:98:6b:8c:3c:33:a1:eb:c5:
6e:0a:5c:2a:d7:80:c9:fb:8f:42:ac:7f:49:44:cf:e1:09:20:
47:49:ac:ef:38:22:f3:fe:63:f7:14:85:34:43:a3:7c:6c:53:
a4:35:87:07:15:cb:90:c8:1c:5b:de:2a:22:f2:05:cf:64:a4:
17:76:1e:f8:95:5e:f5:c7:9e:7a:bf:37:c6:b9:9d:9b:ce:4c:
b7:83:3f:d7:9f:e5:0e:1e:30:3f:88:49:b7:7f:f4:0d:6e:c9:
28:b5:cf:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 01:05:07 2024 by rpki-client on console-fra.rpki-client.org