Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/30ZlXdQUybIN4f0N66zknmOS35U.roa
File: 30ZlXdQUybIN4f0N66zknmOS35U.roa (raw, json)
Hash identifier: +n+3fKyAX4OyH68UeB00atNXSPDkJCOY26ZB7AkJBxo=
Subject key identifier: DF:46:65:5D:D4:14:C9:B2:0D:E1:FD:0D:EB:AC:E4:9E:63:92:DF:95
Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial: 018CCA29ADA8191EAE3109AD791AFFD33CE6
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/30ZlXdQUybIN4f0N66zknmOS35U.roa
Signing time: Tue 02 Jan 2024 12:32:58 +0000
ROA not before: Tue 02 Jan 2024 12:32:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25467
IP address blocks: 81.17.229.0/24 maxlen: 24
81.17.228.0/23 maxlen: 23
81.17.228.0/24 maxlen: 24
82.214.66.0/24 maxlen: 24
82.214.76.0/24 maxlen: 24
82.214.76.0/23 maxlen: 23
82.214.77.0/24 maxlen: 24
82.214.78.0/24 maxlen: 24
82.214.85.0/24 maxlen: 24
82.214.84.0/24 maxlen: 24
82.214.84.0/23 maxlen: 23
82.214.96.0/21 maxlen: 21
82.214.97.0/24 maxlen: 24
82.214.98.0/24 maxlen: 24
82.214.96.0/24 maxlen: 24
82.214.100.0/24 maxlen: 24
82.214.101.0/24 maxlen: 24
82.214.99.0/24 maxlen: 24
82.214.102.0/24 maxlen: 24
82.214.103.0/24 maxlen: 24
82.214.112.0/24 maxlen: 24
82.214.108.0/22 maxlen: 22
82.214.111.0/24 maxlen: 24
82.214.110.0/24 maxlen: 24
82.214.114.0/24 maxlen: 24
82.214.115.0/24 maxlen: 24
82.214.112.0/21 maxlen: 21
82.214.113.0/24 maxlen: 24
82.214.118.0/24 maxlen: 24
82.214.116.0/24 maxlen: 24
82.214.117.0/24 maxlen: 24
82.214.121.0/24 maxlen: 24
82.214.119.0/24 maxlen: 24
82.214.120.0/23 maxlen: 23
82.214.120.0/24 maxlen: 24
2a02:2230:6200::/40 maxlen: 40
2a02:2230:4200::/40 maxlen: 40
2a02:2230:3200::/40 maxlen: 40
2a02:2230:2200::/40 maxlen: 40
2a02:2230:1200::/40 maxlen: 40
2a02:2230:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:ad:a8:19:1e:ae:31:09:ad:79:1a:ff:d3:3c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Validity
Not Before: Jan 2 12:32:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df46655dd414c9b20de1fd0debace49e6392df95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:29:0b:96:f3:ff:66:d1:e3:2e:32:d8:d3:
ae:78:73:a8:a9:cf:88:eb:a0:85:18:41:66:dc:5c:
98:37:78:47:f0:66:b6:6b:15:92:19:0c:78:9f:bf:
5a:48:97:12:bc:a0:71:ff:db:fe:42:79:5e:69:4d:
3c:e6:a6:88:41:d5:77:6f:72:b1:f9:b4:b8:2e:0e:
48:62:12:7e:c2:12:06:2b:3e:67:90:4d:ba:5c:f6:
e0:a8:09:3b:4b:1b:05:38:d7:a9:df:8a:72:3d:7f:
f1:ca:c4:b1:98:92:7a:71:f5:e1:cf:62:0d:6b:52:
7c:c2:77:30:44:19:ae:da:46:1a:5e:7e:59:e0:45:
d8:a7:d8:af:22:9d:56:8c:1f:28:dc:91:24:47:38:
60:a0:00:82:96:62:e7:63:c2:82:38:6f:14:1a:08:
87:ca:e1:40:e3:f2:1f:92:76:11:53:53:2d:92:cd:
1a:aa:83:dd:2c:75:35:eb:1d:c6:e4:b4:6d:19:00:
67:8e:9f:a5:08:c2:d7:a3:1a:e5:35:d2:38:bc:24:
f7:c2:e1:bc:ee:bb:8c:13:67:98:77:2e:26:9f:20:
aa:fd:6f:3c:ce:ec:59:11:d5:45:26:6f:b2:1d:72:
79:54:5f:e0:cc:1d:ca:89:bc:4a:1d:39:8c:eb:ea:
87:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:46:65:5D:D4:14:C9:B2:0D:E1:FD:0D:EB:AC:E4:9E:63:92:DF:95
X509v3 Authority Key Identifier:
keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/30ZlXdQUybIN4f0N66zknmOS35U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.228.0/23
82.214.66.0/24
82.214.76.0-82.214.78.255
82.214.84.0/23
82.214.96.0/21
82.214.108.0-82.214.121.255
IPv6:
2a02:2230:200::/40
2a02:2230:1200::/40
2a02:2230:2200::/40
2a02:2230:3200::/40
2a02:2230:4200::/40
2a02:2230:6200::/40
Signature Algorithm: sha256WithRSAEncryption
33:7a:cd:8f:97:2d:a8:5e:0f:42:3e:49:63:9c:93:33:d4:cc:
ff:08:f1:88:74:6f:ed:62:f4:8e:0c:7b:f8:f4:be:b8:78:b3:
46:e1:5b:c9:7e:37:4a:6a:e5:12:22:f6:09:e7:b5:a3:56:bd:
fa:23:bc:28:b6:93:01:3d:e1:40:ce:9b:49:52:94:43:ec:c6:
2a:a3:e4:71:18:25:51:2b:6c:2f:f1:5d:b1:34:f6:6f:a6:1d:
a5:74:58:0a:10:c4:88:3c:63:c4:e7:fc:84:8d:48:e8:80:c6:
17:82:c2:4d:b8:fe:70:f4:69:f9:74:1a:bd:ce:d7:19:05:7c:
4a:78:d6:b4:7d:fb:52:08:4f:ed:24:e6:56:6f:79:45:1d:66:
28:ae:ab:ab:3d:15:8f:33:95:58:6a:00:ba:3f:b8:16:32:01:
1d:3c:ae:4f:23:70:2d:06:15:4e:4d:7e:2f:a8:6d:a8:38:3a:
b9:dc:31:bc:09:3f:b0:fb:49:5e:6f:ac:f5:c3:ae:17:4a:32:
8f:9e:5c:3c:58:e9:91:56:ec:2d:0c:b5:07:14:49:73:0e:5b:
31:74:5b:5f:49:ee:cf:9f:83:ae:87:d4:da:4c:2c:f7:69:74:
1a:2e:39:ab:78:d7:4d:02:a1:fb:94:f8:ec:43:10:ce:22:5f:
8a:c3:ab:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 08:09:12 2024 by rpki-client on console-ams.rpki-client.org