Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/S_80LJ87Ni9tMix-NwnsOSqnSjw.roa
File: S_80LJ87Ni9tMix-NwnsOSqnSjw.roa (raw, json)
Hash identifier: QxqMXtORAhZqxWnT41j6nRo5MwZ2J5dLqeFY4RkvJmg=
Subject key identifier: 4B:FF:34:2C:9F:3B:36:2F:6D:32:2C:7E:37:09:EC:39:2A:A7:4A:3C
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 018D41C2F3135B029E60D71AA551A216151E
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/S_80LJ87Ni9tMix-NwnsOSqnSjw.roa
Signing time: Thu 25 Jan 2024 17:55:11 +0000
ROA not before: Thu 25 Jan 2024 17:55:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200598
IP address blocks: 24.235.22.0/23 maxlen: 24
31.187.92.0/22 maxlen: 24
50.20.224.0/20 maxlen: 24
66.9.96.0/20 maxlen: 24
66.117.8.0/22 maxlen: 24
69.72.72.0/22 maxlen: 24
74.124.204.0/22 maxlen: 24
77.223.192.0/21 maxlen: 24
77.223.200.0/23 maxlen: 24
79.110.184.0/22 maxlen: 24
79.139.64.0/23 maxlen: 24
83.142.200.0/21 maxlen: 24
85.204.28.0/23 maxlen: 24
86.106.28.0/23 maxlen: 24
89.20.50.0/23 maxlen: 24
89.37.60.0/23 maxlen: 24
89.39.184.0/23 maxlen: 24
89.40.236.0/23 maxlen: 24
91.210.80.0/22 maxlen: 24
91.217.106.0/23 maxlen: 24
94.101.103.0/24 maxlen: 24
95.215.144.0/22 maxlen: 24
121.127.48.0/20 maxlen: 24
128.0.60.0/22 maxlen: 24
134.199.80.0/20 maxlen: 24
141.193.108.0/22 maxlen: 24
141.193.214.0/23 maxlen: 24
158.247.56.0/22 maxlen: 24
162.216.138.0/23 maxlen: 24
162.250.216.0/22 maxlen: 24
168.149.248.0/23 maxlen: 24
173.214.200.0/22 maxlen: 24
176.111.54.0/23 maxlen: 24
176.222.48.0/22 maxlen: 24
178.216.184.0/21 maxlen: 24
178.255.244.0/22 maxlen: 24
188.215.12.0/22 maxlen: 24
192.200.192.0/19 maxlen: 24
193.91.8.0/23 maxlen: 24
194.149.76.0/22 maxlen: 24
195.78.90.0/23 maxlen: 24
198.14.16.0/20 maxlen: 24
198.145.112.0/22 maxlen: 24
199.48.230.0/23 maxlen: 24
204.15.4.0/22 maxlen: 24
205.134.244.0/22 maxlen: 24
205.220.216.0/23 maxlen: 24
212.69.88.0/21 maxlen: 24
217.144.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:41:c2:f3:13:5b:02:9e:60:d7:1a:a5:51:a2:16:15:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jan 25 17:55:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bff342c9f3b362f6d322c7e3709ec392aa74a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:13:5e:0c:65:97:da:b2:8e:55:e6:eb:31:
d7:fd:ac:fd:67:3d:87:f5:e2:8e:54:82:c6:f0:07:
ef:51:38:25:42:ee:36:5a:0b:d7:b3:2f:ba:6b:a5:
03:7a:bd:72:d1:11:6b:98:34:95:a7:9d:28:77:c3:
24:4b:49:28:af:f7:84:8c:36:67:4e:c2:fe:85:09:
d9:33:c3:7e:62:85:17:5b:a2:eb:38:09:81:69:fb:
4a:9c:8a:b7:b7:ec:1c:b4:ef:43:2c:86:ca:c8:fe:
8b:45:15:59:b2:8a:be:20:87:7e:98:fc:42:54:ce:
29:28:4a:05:ac:8c:4c:3a:8a:d2:3b:5f:69:d2:01:
e3:35:3f:2a:fb:1e:49:c0:e9:3b:40:bc:b7:16:3b:
d5:c6:b3:65:78:0f:bd:23:34:fc:55:7a:eb:74:6b:
27:d1:b8:34:25:05:85:61:94:9e:41:de:6f:59:a8:
fe:50:2f:50:d6:27:c0:46:23:79:35:c4:eb:f2:77:
39:7d:c5:a4:53:1d:d0:c0:0d:62:08:5a:92:dc:d8:
e2:de:b9:c8:77:5b:51:71:4d:26:d6:81:fe:85:60:
4c:fe:14:0f:1d:e8:18:47:fc:1e:dc:1b:77:44:ef:
aa:b2:82:52:e3:c2:a7:a7:e2:80:6e:c2:3b:de:57:
93:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FF:34:2C:9F:3B:36:2F:6D:32:2C:7E:37:09:EC:39:2A:A7:4A:3C
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/S_80LJ87Ni9tMix-NwnsOSqnSjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.235.22.0/23
31.187.92.0/22
50.20.224.0/20
66.9.96.0/20
66.117.8.0/22
69.72.72.0/22
74.124.204.0/22
77.223.192.0-77.223.201.255
79.110.184.0/22
79.139.64.0/23
83.142.200.0/21
85.204.28.0/23
86.106.28.0/23
89.20.50.0/23
89.37.60.0/23
89.39.184.0/23
89.40.236.0/23
91.210.80.0/22
91.217.106.0/23
94.101.103.0/24
95.215.144.0/22
121.127.48.0/20
128.0.60.0/22
134.199.80.0/20
141.193.108.0/22
141.193.214.0/23
158.247.56.0/22
162.216.138.0/23
162.250.216.0/22
168.149.248.0/23
173.214.200.0/22
176.111.54.0/23
176.222.48.0/22
178.216.184.0/21
178.255.244.0/22
188.215.12.0/22
192.200.192.0/19
193.91.8.0/23
194.149.76.0/22
195.78.90.0/23
198.14.16.0/20
198.145.112.0/22
199.48.230.0/23
204.15.4.0/22
205.134.244.0/22
205.220.216.0/23
212.69.88.0/21
217.144.108.0/22
Signature Algorithm: sha256WithRSAEncryption
60:f9:c8:9b:e4:14:e9:d3:24:cf:f3:bc:bf:88:86:b8:cb:d2:
f4:17:70:82:87:56:9d:50:0b:27:71:54:e1:52:ce:17:2f:e6:
d9:47:3d:b7:c9:07:00:cd:ca:8f:f5:28:6c:7e:ea:88:2e:28:
db:a4:9c:e5:28:44:e1:e1:1a:6c:f1:0d:17:ce:7c:da:1f:c2:
6d:b5:38:0e:64:6d:30:25:d3:a6:31:6d:36:6b:92:8a:3e:1a:
65:70:14:9a:d6:f3:b4:83:4b:ac:97:97:bb:0f:a5:f6:ba:65:
ee:21:b2:df:59:f4:d9:54:e8:24:f1:14:ab:9c:81:a2:19:2d:
7d:34:ea:e3:ed:fe:4b:c8:14:ba:4a:66:0f:3b:53:02:d3:76:
aa:ce:39:b3:a4:9f:53:c6:17:ed:23:ec:b7:e3:7f:5d:a8:7a:
06:eb:05:de:89:8c:0d:9c:b0:bc:ae:7e:42:aa:d2:f0:41:b7:
fa:76:ae:93:f4:50:8b:20:76:73:98:db:e3:9e:52:ac:5e:c3:
65:4f:4b:62:0f:41:a8:8e:13:f8:64:d7:d1:bb:d5:c6:9f:70:
dc:e4:c8:48:5b:4d:69:bb:a1:a3:b6:3d:05:fa:38:2f:52:1c:
ad:5f:b4:dd:2d:d8:3e:5c:e6:00:5d:90:a2:d3:a1:3d:e5:f7:
53:3f:2d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:33:30 2024 by rpki-client on console-fra.rpki-client.org