Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/BArZQwi0O2Fn5tAP6Tvj8QRlKQQ.roa
File: BArZQwi0O2Fn5tAP6Tvj8QRlKQQ.roa (raw, json)
Hash identifier: 8Xx+Wt+4YmStmRMjZ6gm7f7h73Xvfc2hmsd1Cfp3Jg8=
Subject key identifier: 04:0A:D9:43:08:B4:3B:61:67:E6:D0:0F:E9:3B:E3:F1:04:65:29:04
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 018CC493200BDE593CD111012D855D94FA6C
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/BArZQwi0O2Fn5tAP6Tvj8QRlKQQ.roa
Signing time: Mon 01 Jan 2024 10:30:25 +0000
ROA not before: Mon 01 Jan 2024 10:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25441
IP address blocks: 89.124.0.0/17 maxlen: 17
89.127.128.0/18 maxlen: 18
85.134.136.0/21 maxlen: 21
83.141.64.0/18 maxlen: 18
85.134.144.0/21 maxlen: 21
85.134.152.0/21 maxlen: 21
89.127.224.0/20 maxlen: 20
89.124.128.0/18 maxlen: 18
85.134.160.0/21 maxlen: 21
85.134.168.0/21 maxlen: 21
89.127.240.0/21 maxlen: 21
85.134.176.0/21 maxlen: 21
85.134.184.0/21 maxlen: 21
89.127.248.0/22 maxlen: 22
87.232.0.0/19 maxlen: 19
89.127.192.0/19 maxlen: 19
85.134.128.0/21 maxlen: 21
85.134.128.0/17 maxlen: 17
62.231.32.0/19 maxlen: 19
89.127.0.0/17 maxlen: 17
78.135.208.0/21 maxlen: 21
78.135.216.0/21 maxlen: 21
78.135.224.0/21 maxlen: 21
78.135.232.0/21 maxlen: 21
78.135.240.0/21 maxlen: 21
78.135.248.0/21 maxlen: 21
87.192.216.0/22 maxlen: 22
87.192.224.0/19 maxlen: 19
87.192.222.0/23 maxlen: 23
89.126.28.0/22 maxlen: 22
185.247.52.0/22 maxlen: 22
89.126.0.0/22 maxlen: 22
89.126.4.0/22 maxlen: 22
89.126.0.0/16 maxlen: 16
89.126.8.0/22 maxlen: 22
89.126.12.0/22 maxlen: 22
89.126.16.0/22 maxlen: 22
89.126.20.0/22 maxlen: 22
89.126.24.0/22 maxlen: 22
85.134.240.0/21 maxlen: 21
87.232.160.0/19 maxlen: 19
87.192.64.0/20 maxlen: 20
89.124.224.0/20 maxlen: 20
85.134.248.0/21 maxlen: 21
89.124.246.0/23 maxlen: 23
87.192.84.0/22 maxlen: 22
89.124.245.0/24 maxlen: 24
87.232.192.0/24 maxlen: 24
87.192.82.0/23 maxlen: 23
87.232.194.0/23 maxlen: 23
89.124.248.0/21 maxlen: 21
87.232.196.0/22 maxlen: 22
87.192.88.0/21 maxlen: 21
87.232.200.0/21 maxlen: 21
87.192.96.0/19 maxlen: 19
87.232.208.0/20 maxlen: 20
89.125.0.0/16 maxlen: 16
87.192.0.0/18 maxlen: 18
85.134.192.0/21 maxlen: 21
89.127.254.0/23 maxlen: 23
85.134.200.0/21 maxlen: 21
85.134.208.0/21 maxlen: 21
89.124.192.0/19 maxlen: 19
85.134.216.0/21 maxlen: 21
87.232.144.0/20 maxlen: 20
85.134.224.0/21 maxlen: 21
85.134.232.0/21 maxlen: 21
87.192.192.0/20 maxlen: 20
78.135.128.0/17 maxlen: 17
87.192.208.0/21 maxlen: 21
87.232.226.0/23 maxlen: 23
87.232.225.0/24 maxlen: 24
87.232.228.0/22 maxlen: 22
87.232.232.0/21 maxlen: 21
87.192.128.0/18 maxlen: 18
87.232.240.0/21 maxlen: 21
87.232.248.0/23 maxlen: 23
2001:4d68::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:20:0b:de:59:3c:d1:11:01:2d:85:5d:94:fa:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: Jan 1 10:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=040ad94308b43b6167e6d00fe93be3f104652904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fb:25:d2:7c:6b:ee:87:15:46:a5:79:ff:2b:
2a:fa:40:da:85:91:fc:c1:29:26:a4:7b:e2:3b:5a:
b9:65:bc:a2:2b:3f:0c:ad:c3:6b:73:88:55:81:c1:
f7:c7:64:75:71:95:ec:24:9a:f7:9a:b4:d7:21:8d:
33:9a:15:f5:6c:7a:d1:1e:d9:90:b4:49:30:f5:ab:
d3:64:f6:70:3b:c9:ad:8f:5a:1d:c6:47:3b:b0:08:
39:f1:20:f9:13:01:9d:4d:cb:5e:93:e2:6c:69:f0:
6c:64:1d:13:2f:50:22:80:d6:f0:b9:24:69:51:45:
99:90:85:a1:5e:ac:86:8c:ab:88:5b:e4:15:22:bc:
c5:c0:b7:84:fb:a0:40:13:3e:5d:15:20:10:71:d2:
41:6d:33:47:6d:54:b1:85:53:ca:1d:76:d6:93:df:
ee:fb:17:8b:74:b6:9b:8c:1d:4f:9d:fe:72:d8:dd:
a4:d0:e0:da:26:e0:92:ad:62:3a:45:63:ab:67:18:
1b:b1:86:9f:0d:23:ac:02:e5:a7:54:d2:97:e1:9c:
b4:57:2d:66:8b:bf:75:96:12:16:4c:43:e2:48:b2:
ec:4c:5f:d8:d3:23:cf:b2:39:9e:59:82:6b:e3:05:
8e:67:38:1b:79:bc:37:ca:10:92:b7:66:c1:4f:b2:
2b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0A:D9:43:08:B4:3B:61:67:E6:D0:0F:E9:3B:E3:F1:04:65:29:04
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/BArZQwi0O2Fn5tAP6Tvj8QRlKQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.231.32.0/19
78.135.128.0/17
83.141.64.0/18
85.134.128.0/17
87.192.0.0-87.192.79.255
87.192.82.0-87.192.219.255
87.192.222.0-87.192.255.255
87.232.0.0/19
87.232.144.0-87.232.192.255
87.232.194.0-87.232.223.255
87.232.225.0-87.232.249.255
89.124.0.0-89.124.239.255
89.124.245.0-89.127.251.255
89.127.254.0/23
185.247.52.0/22
IPv6:
2001:4d68::/32
Signature Algorithm: sha256WithRSAEncryption
03:62:41:c8:28:97:75:cb:a7:2f:45:45:2d:f7:06:bd:34:15:
75:4a:f4:1d:6c:21:f3:f5:36:1f:8d:20:4a:41:8f:52:22:bc:
c3:89:43:64:1c:39:2a:04:fe:9d:a4:13:4d:2b:bc:01:f1:14:
91:66:56:e9:0d:57:a7:69:65:fe:e8:cb:ca:43:c0:ac:90:0d:
8d:86:ec:ea:39:27:e6:21:d7:92:45:fb:1c:a2:22:16:ab:b0:
a9:ee:e3:5e:85:04:be:0f:34:86:b7:da:87:06:0f:b8:38:e5:
0d:2b:39:a2:9d:94:da:5c:83:83:c8:d3:03:73:45:77:26:6d:
46:7f:7b:95:9f:34:e4:d6:6f:b2:02:01:0b:e2:fb:4f:c4:9b:
e6:78:57:0f:16:23:be:cc:83:92:66:af:dc:a7:1d:67:39:c6:
16:92:4b:37:51:34:e4:bf:c4:66:f8:b0:70:fb:0c:fe:03:88:
43:2d:2b:86:51:23:70:6b:65:a9:53:46:67:95:6a:93:75:3c:
5a:44:5c:40:08:fb:25:a7:b5:20:0c:5b:6a:07:69:02:c6:64:
1a:98:25:da:1a:60:6c:c5:ce:dc:b0:61:d2:b5:3b:5b:3e:38:
40:a7:3d:51:0e:97:21:d6:61:69:67:8f:5a:eb:7e:8f:e9:b4:
cc:a1:d2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 14:53:58 2024 by rpki-client on console-fra.rpki-client.org