Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/KJTkc8eLrEZaV27oqs83kkNd6QU.roa
File: KJTkc8eLrEZaV27oqs83kkNd6QU.roa (raw, json)
Hash identifier: bKX+v/PwBxdwWjSWRgnFWaIsadmUHYd1pqB6LAxG8XM=
Subject key identifier: 28:94:E4:73:C7:8B:AC:46:5A:57:6E:E8:AA:CF:37:92:43:5D:E9:05
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 01904333EC289A2D321118451E199FE0533C
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/KJTkc8eLrEZaV27oqs83kkNd6QU.roa
Signing time: Sun 23 Jun 2024 03:46:34 +0000
ROA not before: Sun 23 Jun 2024 03:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15774
IP address blocks: 31.216.170.0/24 maxlen: 24
37.61.176.0/21 maxlen: 32
46.20.64.0/20 maxlen: 32
46.166.65.0/24 maxlen: 24
46.166.79.0/24 maxlen: 24
46.166.80.0/23 maxlen: 24
46.166.80.0/24 maxlen: 24
46.166.81.0/24 maxlen: 24
46.166.82.0/24 maxlen: 24
46.166.83.0/24 maxlen: 24
46.166.84.0/22 maxlen: 23
46.166.88.0/23 maxlen: 23
46.166.91.0/24 maxlen: 24
46.166.93.0/24 maxlen: 24
46.166.94.0/24 maxlen: 24
46.166.95.0/24 maxlen: 24
46.182.128.0/22 maxlen: 22
46.182.131.0/24 maxlen: 24
46.226.240.0/21 maxlen: 32
62.33.122.0/23 maxlen: 32
79.132.96.0/19 maxlen: 32
81.4.192.0/18 maxlen: 32
81.18.128.0/19 maxlen: 32
83.234.10.0/24 maxlen: 24
83.234.54.0/24 maxlen: 32
83.234.136.0/23 maxlen: 23
83.234.168.0/23 maxlen: 32
83.234.240.0/21 maxlen: 21
89.186.234.0/24 maxlen: 24
91.204.96.0/22 maxlen: 32
109.74.208.0/20 maxlen: 32
109.233.172.0/22 maxlen: 32
164.177.176.0/21 maxlen: 32
176.104.128.0/21 maxlen: 21
176.104.152.0/22 maxlen: 22
176.104.156.0/22 maxlen: 22
176.104.160.0/22 maxlen: 22
176.104.164.0/22 maxlen: 22
176.125.64.0/18 maxlen: 18
178.76.194.0/23 maxlen: 23
178.76.196.0/22 maxlen: 22
178.76.205.0/24 maxlen: 24
178.76.207.0/24 maxlen: 24
178.76.208.0/23 maxlen: 23
178.76.210.0/23 maxlen: 23
178.76.212.0/24 maxlen: 24
178.76.214.0/24 maxlen: 24
178.76.216.0/21 maxlen: 21
178.76.224.0/19 maxlen: 24
178.76.234.0/24 maxlen: 24
185.6.236.0/22 maxlen: 32
185.43.84.0/23 maxlen: 32
185.43.86.0/23 maxlen: 32
185.61.24.0/22 maxlen: 32
2a00:1138::/32 maxlen: 128
2a03:3700::/36 maxlen: 128
2a03:3700:1000::/36 maxlen: 128
2a03:3700:2000::/36 maxlen: 128
2a03:3700:3000::/36 maxlen: 128
2a03:3700:4000::/36 maxlen: 128
2a03:3700:5000::/36 maxlen: 128
2a03:3700:6000::/36 maxlen: 128
2a03:3700:7000::/36 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:43:33:ec:28:9a:2d:32:11:18:45:1e:19:9f:e0:53:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jun 23 03:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2894e473c78bac465a576ee8aacf3792435de905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:02:7d:79:de:da:ec:ed:e6:7a:07:ba:e3:
79:4e:de:ea:d1:9c:03:e5:2d:44:41:88:7c:f4:da:
7e:2b:1b:33:ec:cf:e8:9d:4a:4b:d4:2d:c3:00:77:
67:0c:72:bc:d2:3f:48:27:7d:39:0e:85:fb:f2:e8:
dc:cf:0d:38:60:10:fd:b2:76:f3:a5:c8:b7:fa:38:
8a:78:63:5d:86:f3:7c:6c:e5:b3:19:f4:1e:7f:85:
79:95:71:2f:88:11:59:84:c5:83:ec:af:e0:96:43:
d2:8a:d3:03:19:63:e8:07:24:87:2e:db:0d:32:6d:
57:39:0c:73:ec:6f:ce:2c:4b:7d:7c:a6:18:b1:18:
16:9d:8f:20:26:11:2d:28:4e:f6:86:07:fa:ff:bf:
1e:d5:db:13:d0:d7:a1:46:a2:d2:65:51:3f:06:0b:
c3:cf:af:68:28:f4:08:f8:a9:97:0e:21:fc:d6:99:
d7:ba:cd:b8:98:32:75:91:d5:a3:5b:30:13:f8:0b:
c6:49:af:b6:f7:c8:ec:db:40:25:bf:57:80:22:ef:
17:63:bf:43:24:89:4e:e1:fe:df:e8:a7:9f:ce:fe:
51:81:91:c9:2a:eb:f5:37:ef:54:3f:ee:f5:cc:4d:
95:1d:59:86:18:5e:0f:08:f2:c8:b5:c3:20:2b:0e:
df:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:94:E4:73:C7:8B:AC:46:5A:57:6E:E8:AA:CF:37:92:43:5D:E9:05
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/KJTkc8eLrEZaV27oqs83kkNd6QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.170.0/24
37.61.176.0/21
46.20.64.0/20
46.166.65.0/24
46.166.79.0-46.166.89.255
46.166.91.0/24
46.166.93.0-46.166.95.255
46.182.128.0/22
46.226.240.0/21
62.33.122.0/23
79.132.96.0/19
81.4.192.0/18
81.18.128.0/19
83.234.10.0/24
83.234.54.0/24
83.234.136.0/23
83.234.168.0/23
83.234.240.0/21
89.186.234.0/24
91.204.96.0/22
109.74.208.0/20
109.233.172.0/22
164.177.176.0/21
176.104.128.0/21
176.104.152.0-176.104.167.255
176.125.64.0/18
178.76.194.0-178.76.199.255
178.76.205.0/24
178.76.207.0-178.76.212.255
178.76.214.0/24
178.76.216.0-178.76.255.255
185.6.236.0/22
185.43.84.0/22
185.61.24.0/22
IPv6:
2a00:1138::/32
2a03:3700::/33
Signature Algorithm: sha256WithRSAEncryption
9a:7f:1d:69:ff:bf:19:51:24:30:0e:a8:bc:e2:ca:ae:85:b3:
6c:df:d1:ac:fd:9c:d4:4e:64:8a:f9:89:5c:e1:74:ba:dd:30:
25:80:f7:63:7b:5e:c7:93:45:2e:11:52:20:46:6e:33:e6:71:
a1:1c:17:05:87:3c:51:1f:c8:de:ab:14:c3:e8:5a:e9:2e:71:
28:d8:4d:42:a0:51:50:18:fb:07:b7:8c:0b:3a:df:ec:05:8b:
e4:fa:db:93:bf:02:6c:38:57:b1:44:31:cc:d6:17:a6:55:4a:
68:ce:61:46:ea:72:d7:15:6b:60:3e:a9:1c:58:b2:45:2f:70:
17:fe:a1:b7:a9:54:d0:ce:03:4f:b0:f0:d8:86:c2:fe:ed:20:
59:69:cf:75:b4:ea:9f:8e:f4:55:08:47:48:2c:0e:57:c8:be:
e8:85:50:eb:54:90:86:de:3b:74:dd:56:5d:59:a3:b5:bb:ce:
c0:f2:fe:59:03:11:92:31:2b:66:77:9b:25:f3:1d:98:13:af:
d8:59:c4:df:54:ae:92:4f:f2:81:ef:27:89:9e:3d:23:88:d6:
4f:cb:d4:78:e2:f0:d9:29:59:ad:4b:e3:2e:1b:09:6a:d0:fb:
2b:6c:52:c0:5a:8c:36:8e:d5:01:ca:2d:32:48:d8:e5:45:d7:
7d:ca:e0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:09:22 2024 by rpki-client on console-ams.rpki-client.org