Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/JZpD5bgt9V8mG3TpVmHTcfFXVKg.roa
File: JZpD5bgt9V8mG3TpVmHTcfFXVKg.roa (raw, json)
Hash identifier: P2mBAvXqhcFeBQvhq1AlV9x5k5mD7iggCIEm7NTJ4FI=
Subject key identifier: 25:9A:43:E5:B8:2D:F5:5F:26:1B:74:E9:56:61:D3:71:F1:57:54:A8
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 01932FED6F7490B464E8D588B14324B67256
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/JZpD5bgt9V8mG3TpVmHTcfFXVKg.roa
Signing time: Fri 15 Nov 2024 13:05:09 +0000
ROA not before: Fri 15 Nov 2024 13:05:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.62.42.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
213.159.76.0/24 maxlen: 24
213.159.77.0/24 maxlen: 24
213.159.78.0/24 maxlen: 24
213.159.79.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a11:4c06::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2d85::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2f:ed:6f:74:90:b4:64:e8:d5:88:b1:43:24:b6:72:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Nov 15 13:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=259a43e5b82df55f261b74e95661d371f15754a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:22:f4:fc:8c:9a:15:03:fe:21:52:6f:ab:51:
8f:d4:6e:e4:8b:f4:50:31:f5:a9:83:66:e7:60:86:
91:46:b2:d7:eb:62:b8:b0:53:29:d2:7f:77:4a:d8:
06:b2:58:12:96:f4:23:94:f8:6e:12:3f:c8:7e:71:
fc:cc:37:b8:d9:9c:9e:ac:07:b2:31:25:0c:21:00:
dc:89:4f:b7:dd:32:56:20:6c:23:24:d9:c2:30:f6:
2e:67:2f:23:f3:14:e3:e4:bd:8f:52:2d:e7:df:84:
49:50:14:2e:42:5b:e3:a7:bf:50:2b:cf:15:b3:0f:
27:24:e2:37:90:f4:cb:24:b5:33:a9:9a:21:c1:c7:
68:9c:28:e5:39:be:94:06:d0:35:ee:8c:4b:dd:91:
11:1e:01:5a:4f:95:a3:e2:32:3d:b7:36:b3:5c:49:
89:93:3b:9b:81:82:c0:5d:1d:70:dd:b6:fe:17:dc:
6a:99:a0:0a:05:a3:48:67:f3:e4:6f:99:75:58:81:
ca:10:12:dc:01:53:4d:20:68:9a:7d:3c:29:63:79:
ef:2b:55:62:3a:4b:cc:45:ca:13:c1:83:2f:e4:a1:
42:bf:f9:b8:9e:61:ce:53:e3:cc:74:39:51:07:44:
a5:f3:c0:d8:a5:9d:03:e6:ad:ff:01:a1:08:c7:f9:
f5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9A:43:E5:B8:2D:F5:5F:26:1B:74:E9:56:61:D3:71:F1:57:54:A8
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/JZpD5bgt9V8mG3TpVmHTcfFXVKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.54.156.0/22
194.62.42.0/24
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a11:3805::/32
2a11:3c02::/31
2a11:4c06::/32
2a14:2d80::/30
2a14:2d85::/32
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/32
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
77:13:3c:a6:4c:8d:11:02:62:5b:ca:9a:a3:3b:5c:bb:a0:46:
a8:a0:8d:d6:9a:de:80:e7:0d:28:e1:87:f8:51:16:29:f4:e7:
a6:cb:3f:3b:3b:c5:8d:ba:39:56:64:d8:c4:ce:cc:70:82:17:
3b:b2:02:41:bc:77:12:a1:2d:48:b5:dd:a0:b1:76:c4:8c:c1:
a2:bf:e3:b4:41:9c:6c:47:10:41:f7:78:6c:78:8e:2b:6f:e2:
9e:1e:ff:17:78:15:67:e7:e0:6a:62:83:86:fc:b6:05:f3:c5:
ee:70:55:19:aa:04:07:d5:90:b9:e7:ab:44:da:20:d3:52:08:
ea:40:03:3c:7e:27:5d:e3:7a:34:42:1f:08:4f:6e:42:4d:a1:
88:38:d7:d6:b9:1b:c0:c1:13:51:64:79:e1:b0:41:38:22:0c:
65:42:c0:60:26:bf:86:ca:e2:d6:86:38:be:d5:f2:c7:c7:6c:
68:ce:b3:5c:78:bb:38:c5:aa:5d:2a:fa:2b:87:fb:97:98:eb:
e2:66:5f:d8:60:67:15:1d:cd:7c:2f:45:d6:a1:81:67:93:d0:
ef:24:58:c6:d5:2d:a4:30:bf:36:74:3a:32:01:46:3d:fd:49:
8e:f5:0a:c4:0a:61:06:92:7f:a5:3f:a5:3d:ef:ba:65:2b:98:
c6:7b:d9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:38:15 2024 by rpki-client on console-ams.rpki-client.org