Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/8PoTQzYM_sY1rwY9hLbsw5K8PC8.roa
File: 8PoTQzYM_sY1rwY9hLbsw5K8PC8.roa (raw, json)
Hash identifier: R9w1yMUzLOutKpCtZbStAmpvG2jBAJgS3ua6qtpP2PY=
Subject key identifier: F0:FA:13:43:36:0C:FE:C6:35:AF:06:3D:84:B6:EC:C3:92:BC:3C:2F
Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Certificate serial: 0190BA0CB91880236C6D24BCE74FFE45FE39
Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/8PoTQzYM_sY1rwY9hLbsw5K8PC8.roa
Signing time: Tue 16 Jul 2024 05:38:34 +0000
ROA not before: Tue 16 Jul 2024 05:38:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6805
IP address blocks: 62.109.64.0/18 maxlen: 18
78.48.0.0/13 maxlen: 13
78.48.0.0/16 maxlen: 16
78.48.0.0/18 maxlen: 18
78.48.64.0/18 maxlen: 18
78.48.128.0/18 maxlen: 18
78.48.192.0/18 maxlen: 18
78.49.0.0/16 maxlen: 16
78.49.0.0/18 maxlen: 18
78.49.64.0/18 maxlen: 18
78.49.128.0/18 maxlen: 18
78.49.192.0/18 maxlen: 18
78.50.0.0/16 maxlen: 16
78.50.0.0/17 maxlen: 17
78.50.128.0/17 maxlen: 17
78.51.0.0/19 maxlen: 19
78.51.32.0/19 maxlen: 19
78.51.64.0/19 maxlen: 19
78.51.96.0/19 maxlen: 19
78.51.128.0/18 maxlen: 18
78.51.192.0/18 maxlen: 18
78.54.0.0/18 maxlen: 18
78.54.64.0/18 maxlen: 18
78.54.128.0/18 maxlen: 18
78.54.192.0/18 maxlen: 18
78.55.0.0/18 maxlen: 18
78.55.64.0/18 maxlen: 18
78.55.128.0/18 maxlen: 18
78.55.192.0/18 maxlen: 18
80.171.0.0/16 maxlen: 16
80.171.0.0/18 maxlen: 18
80.171.64.0/18 maxlen: 18
85.176.0.0/13 maxlen: 13
85.183.16.0/23 maxlen: 23
85.183.18.0/23 maxlen: 23
89.12.0.0/14 maxlen: 14
89.12.0.0/18 maxlen: 18
89.12.64.0/18 maxlen: 18
89.12.128.0/18 maxlen: 18
89.12.192.0/18 maxlen: 18
89.13.0.0/16 maxlen: 16
89.13.0.0/17 maxlen: 17
89.13.128.0/17 maxlen: 17
89.14.0.0/18 maxlen: 18
89.14.64.0/18 maxlen: 18
89.14.128.0/18 maxlen: 18
89.14.192.0/18 maxlen: 18
89.15.232.0/21 maxlen: 21
92.224.0.0/13 maxlen: 13
92.224.0.0/16 maxlen: 16
92.225.0.0/16 maxlen: 16
92.227.194.0/23 maxlen: 23
92.228.72.0/23 maxlen: 23
92.228.74.0/23 maxlen: 23
92.228.76.0/23 maxlen: 23
92.228.78.0/23 maxlen: 23
92.228.80.0/23 maxlen: 23
92.228.82.0/23 maxlen: 23
92.228.84.0/23 maxlen: 23
92.228.86.0/23 maxlen: 23
92.229.0.0/16 maxlen: 16
92.229.0.0/17 maxlen: 17
92.230.20.0/23 maxlen: 23
92.230.22.0/23 maxlen: 23
185.93.236.0/22 maxlen: 22
213.39.128.0/17 maxlen: 17
213.191.64.0/19 maxlen: 19
2a01:c00::/26 maxlen: 39
2a01:c08::/47 maxlen: 47
2a01:c20:7000::/39 maxlen: 39
2a01:c20:7200::/47 maxlen: 47
2a01:c22:1c00::/47 maxlen: 47
2a01:c22:1e00::/39 maxlen: 39
2a01:c22:3400::/39 maxlen: 39
2a01:c22:3600::/47 maxlen: 47
2a01:c22:6c00::/47 maxlen: 47
2a01:c22:6e00::/39 maxlen: 39
2a01:c22:7000::/47 maxlen: 47
2a01:c22:7200::/39 maxlen: 39
2a01:c22:7400::/47 maxlen: 47
2a01:c22:7600::/39 maxlen: 39
2a01:c22:7800::/47 maxlen: 47
2a01:c22:7a00::/39 maxlen: 39
2a01:c22:8400::/39 maxlen: 39
2a01:c22:8600::/47 maxlen: 47
2a01:c22:8800::/39 maxlen: 39
2a01:c22:8a00::/47 maxlen: 47
2a01:c22:8c00::/39 maxlen: 39
2a01:c22:8e00::/47 maxlen: 47
2a01:c22:a600::/47 maxlen: 47
2a01:c22:aa00::/47 maxlen: 47
2a01:c22:ae00::/47 maxlen: 47
2a01:c22:b200::/47 maxlen: 47
2a01:c22:b600::/47 maxlen: 47
2a01:c22:ba00::/47 maxlen: 47
2a01:c22:be00::/47 maxlen: 47
2a01:c22:c200::/47 maxlen: 47
2a01:c22:ca00::/47 maxlen: 47
2a01:c22:ce00::/47 maxlen: 47
2a01:c22:d200::/47 maxlen: 47
2a01:c22:d600::/47 maxlen: 47
2a01:c23:5e00::/47 maxlen: 47
2a01:c23:6200::/47 maxlen: 47
2a01:c23:6600::/47 maxlen: 47
2a01:c23:6a00::/47 maxlen: 47
2a01:c23:6e00::/47 maxlen: 47
2a01:c23:7200::/47 maxlen: 47
2a01:c23:7600::/47 maxlen: 47
2a01:c23:8a00::/47 maxlen: 47
2a01:c23:8e00::/47 maxlen: 47
2a01:c23:9200::/47 maxlen: 47
2a01:c23:9600::/47 maxlen: 47
2a01:c23:ba00::/47 maxlen: 47
2a01:c23:be00::/47 maxlen: 47
2a01:c23:c200::/47 maxlen: 47
2a01:c23:c600::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ba:0c:b9:18:80:23:6c:6d:24:bc:e7:4f:fe:45:fe:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Validity
Not Before: Jul 16 05:38:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0fa1343360cfec635af063d84b6ecc392bc3c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7a:23:85:22:44:19:8c:8b:8b:73:0d:a4:f0:
92:1f:e0:47:4a:2e:1c:0b:df:75:32:a1:60:bf:14:
d0:6d:5e:2f:ce:79:e1:6f:8c:ab:72:7e:49:c8:00:
11:ca:e6:c8:d5:33:5b:df:c8:2e:19:35:e2:40:07:
15:44:fe:01:f6:87:67:79:d6:0e:e5:ed:8c:1b:2e:
b4:31:15:29:b5:bb:19:c6:ae:dd:3f:c9:8b:f9:d0:
d9:d4:7a:50:18:10:2d:35:6a:87:e9:c0:66:4e:90:
4f:da:30:74:66:03:bf:fc:fc:93:6f:93:69:7d:8d:
d6:93:d5:b3:99:62:77:25:43:bb:c4:92:4d:3d:24:
c4:50:21:e2:aa:16:a2:aa:46:b6:8d:65:4f:2a:a5:
09:e7:e6:51:8a:9c:89:8c:c1:69:17:1f:05:b2:54:
24:0e:fe:1b:43:b0:d5:ac:9e:2e:ba:aa:74:e7:49:
5c:53:16:f8:5c:16:e8:6c:a6:1d:f5:19:3b:c6:59:
8c:3e:2f:16:91:9c:a0:aa:9c:76:57:ed:be:5c:6f:
cf:99:7c:6b:22:0c:97:f0:39:89:9b:38:ed:b9:a0:
8a:1c:6d:9b:32:cd:46:33:f0:4d:3b:2b:9c:88:18:
54:6e:c3:49:78:77:5a:e7:b5:ca:a1:c4:ce:56:a4:
7b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FA:13:43:36:0C:FE:C6:35:AF:06:3D:84:B6:EC:C3:92:BC:3C:2F
X509v3 Authority Key Identifier:
keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/8PoTQzYM_sY1rwY9hLbsw5K8PC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.109.64.0/18
78.48.0.0/13
80.171.0.0/16
85.176.0.0/13
89.12.0.0/14
92.224.0.0/13
185.93.236.0/22
213.39.128.0/17
213.191.64.0/19
IPv6:
2a01:c00::/26
Signature Algorithm: sha256WithRSAEncryption
9c:2a:23:ff:a8:28:21:51:91:7a:af:59:dc:7a:43:4a:61:95:
48:0d:4a:03:84:84:7a:72:f7:dd:f8:c3:49:fa:e0:54:fd:2c:
2b:ed:59:93:cf:58:7e:a3:b9:9c:27:93:4f:dc:bc:b3:6e:3b:
18:35:4d:8e:9f:19:77:d0:31:13:ef:91:f3:7a:24:82:46:f2:
74:bf:da:dd:70:eb:71:e2:2c:0e:ea:4a:f8:16:68:44:de:6c:
a3:9f:59:57:ce:db:4c:d5:a4:7f:11:16:b8:c4:4f:87:08:a4:
65:66:07:ed:a6:12:9b:1b:74:f6:d8:f2:03:e2:dd:c3:6a:5b:
e3:2b:af:36:98:ad:3a:a7:72:fe:82:28:d2:9e:f7:a2:0a:d1:
b4:e6:91:9a:cb:9c:3a:4c:5b:f9:1d:1d:7a:53:f3:b3:de:ad:
a0:e0:63:42:cc:95:5f:ba:23:0c:7a:ac:81:28:f7:16:cb:9a:
1e:f6:7f:12:20:2c:31:7c:7c:6f:b1:d8:ca:08:c4:e5:e8:48:
e7:5c:22:00:3d:7a:16:bf:31:15:8c:d7:05:8d:66:28:5b:a1:
e3:ac:07:9b:96:53:7a:3e:5f:6c:e4:c8:59:8e:76:b0:c1:c2:
b3:20:e7:6e:c4:29:8e:1a:fc:88:87:e1:aa:de:18:12:27:b4:
1d:20:c3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:20:20 2024 by rpki-client on console-ams.rpki-client.org