Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/hkZpM95uN5pk1mZ4TTFTd8mKSRo.roa
File: hkZpM95uN5pk1mZ4TTFTd8mKSRo.roa (raw, json)
Hash identifier: eTfz58mUb1xjKD63wUmMVHhcu/uLwggOxlBB0eGLteY=
Subject key identifier: 86:46:69:33:DE:6E:37:9A:64:D6:66:78:4D:31:53:77:C9:8A:49:1A
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 0192B7FD8189B3249762811072A501147BC1
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/hkZpM95uN5pk1mZ4TTFTd8mKSRo.roa
Signing time: Wed 23 Oct 2024 06:08:17 +0000
ROA not before: Wed 23 Oct 2024 06:08:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54994
IP address blocks: 91.194.205.0/24 maxlen: 24
91.202.200.0/24 maxlen: 24
93.188.135.0/24 maxlen: 24
148.253.34.0/24 maxlen: 24
148.253.36.0/24 maxlen: 24
148.253.47.0/24 maxlen: 24
148.253.228.0/24 maxlen: 24
148.253.229.0/24 maxlen: 24
148.253.231.0/24 maxlen: 24
148.253.232.0/24 maxlen: 24
148.253.233.0/24 maxlen: 24
148.253.234.0/24 maxlen: 24
148.253.235.0/24 maxlen: 24
148.253.237.0/24 maxlen: 24
148.253.239.0/24 maxlen: 24
148.253.246.0/24 maxlen: 24
148.253.248.0/24 maxlen: 24
151.249.92.0/24 maxlen: 24
151.249.93.0/24 maxlen: 24
151.249.94.0/24 maxlen: 24
163.171.64.0/24 maxlen: 24
163.171.67.0/24 maxlen: 24
163.171.70.0/24 maxlen: 24
163.171.71.0/24 maxlen: 24
163.171.84.0/24 maxlen: 24
163.171.85.0/24 maxlen: 24
163.171.87.0/24 maxlen: 24
163.171.93.0/24 maxlen: 24
163.171.94.0/24 maxlen: 24
163.171.96.0/24 maxlen: 24
163.171.97.0/24 maxlen: 24
163.171.98.0/24 maxlen: 24
163.171.101.0/24 maxlen: 24
163.171.102.0/24 maxlen: 24
163.171.103.0/24 maxlen: 24
163.171.104.0/24 maxlen: 24
163.171.126.0/24 maxlen: 24
163.171.166.0/24 maxlen: 24
163.171.176.0/24 maxlen: 24
163.171.177.0/24 maxlen: 24
163.171.182.0/24 maxlen: 24
163.171.188.0/24 maxlen: 24
163.171.198.0/24 maxlen: 24
163.171.207.0/24 maxlen: 24
163.171.222.0/24 maxlen: 24
163.171.224.0/24 maxlen: 24
163.171.225.0/24 maxlen: 24
163.171.231.0/24 maxlen: 24
163.171.249.0/24 maxlen: 24
163.171.252.0/24 maxlen: 24
194.107.19.0/24 maxlen: 24
2a01:53c0:ffc6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b7:fd:81:89:b3:24:97:62:81:10:72:a5:01:14:7b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Oct 23 06:08:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86466933de6e379a64d666784d315377c98a491a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:80:63:51:f0:bc:c1:97:66:e0:2b:22:6f:53:
cc:91:f5:8f:16:95:69:b3:05:77:5f:d4:bb:d9:06:
5f:7a:21:61:53:3f:d7:ad:60:63:fd:91:60:84:62:
b7:fb:3b:13:96:12:c9:9a:c4:da:07:44:4d:d7:48:
4e:e7:dc:b8:0c:52:e3:0e:7c:3c:1a:96:76:29:10:
2b:82:91:6c:30:3c:01:22:25:39:37:ac:3b:40:fd:
b9:55:ef:14:3b:12:11:21:78:92:eb:0c:c1:51:7d:
d4:8a:30:c7:58:6c:2c:07:f9:d6:3f:43:18:50:8b:
25:b6:c1:e5:d2:0f:20:ba:9c:95:6d:11:f9:55:a5:
5f:4e:db:23:3f:d6:bd:90:68:79:be:7f:0d:cb:b9:
21:ec:0c:91:53:31:d2:f9:6e:b0:1b:2d:95:0f:1e:
d8:2f:64:c7:d4:ac:db:67:05:45:bd:eb:76:5b:fc:
94:70:55:1c:cf:3e:7f:39:a5:89:e1:b4:2d:9c:50:
28:be:24:46:89:86:6b:30:12:d7:f6:20:e7:47:26:
54:30:52:9d:88:de:27:f7:86:e4:b8:71:39:7a:22:
6c:d8:ff:76:1a:d2:41:a6:1a:b9:df:3a:4b:4d:b2:
ed:06:4e:b7:b7:6c:2d:db:ad:82:97:18:2d:29:ea:
8d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:46:69:33:DE:6E:37:9A:64:D6:66:78:4D:31:53:77:C9:8A:49:1A
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/hkZpM95uN5pk1mZ4TTFTd8mKSRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.205.0/24
91.202.200.0/24
93.188.135.0/24
148.253.34.0/24
148.253.36.0/24
148.253.47.0/24
148.253.228.0/23
148.253.231.0-148.253.235.255
148.253.237.0/24
148.253.239.0/24
148.253.246.0/24
148.253.248.0/24
151.249.92.0-151.249.94.255
163.171.64.0/24
163.171.67.0/24
163.171.70.0/23
163.171.84.0/23
163.171.87.0/24
163.171.93.0-163.171.94.255
163.171.96.0-163.171.98.255
163.171.101.0-163.171.104.255
163.171.126.0/24
163.171.166.0/24
163.171.176.0/23
163.171.182.0/24
163.171.188.0/24
163.171.198.0/24
163.171.207.0/24
163.171.222.0/24
163.171.224.0/23
163.171.231.0/24
163.171.249.0/24
163.171.252.0/24
194.107.19.0/24
IPv6:
2a01:53c0:ffc6::/48
Signature Algorithm: sha256WithRSAEncryption
3e:bd:16:57:a3:53:95:18:cb:ed:64:02:42:e4:8d:06:b3:3a:
25:7c:d7:3f:19:0c:64:57:92:60:00:86:84:02:fb:8a:46:f7:
62:71:c3:ca:09:6d:28:5d:b2:73:27:b0:08:87:4f:db:05:29:
9e:7e:7d:9c:d1:ef:7a:f9:dd:b1:4c:3e:e7:f2:73:af:80:fd:
07:cf:81:ee:5b:11:e9:0c:17:cb:f0:4d:e9:69:13:b4:ac:dd:
0f:5c:32:48:3d:9e:57:9f:1f:63:de:f0:38:9c:4b:1d:b7:39:
d6:0b:4d:37:44:27:41:ba:b4:29:05:75:19:fe:83:7f:75:a7:
a2:79:06:c2:aa:a8:ba:6f:ad:70:83:f5:2d:f8:54:36:58:b8:
2f:e6:ea:c6:82:80:80:6b:67:52:83:c0:ce:a5:73:b1:0f:53:
f6:d2:f6:80:a7:73:a0:ba:63:bd:ae:c9:d9:b9:af:63:7e:ab:
98:27:17:17:80:5c:93:03:89:6a:df:6d:a2:4e:b7:cf:97:69:
5b:90:0a:6e:72:eb:5c:ef:e2:b6:c6:25:09:5d:d4:e6:d9:14:
47:e4:c9:f6:d6:77:f6:78:d7:9f:25:0e:f5:2a:44:bf:5e:84:
8b:47:7b:fd:f1:25:6f:1f:86:08:55:3d:b0:44:e1:84:cf:71:
58:3b:0f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:29:36 2024 by rpki-client on console-ams.rpki-client.org