Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/3rO7XFiAwrdL-xFUx5mBuvHisnQ.roa
File: 3rO7XFiAwrdL-xFUx5mBuvHisnQ.roa (raw, json)
Hash identifier: Lk4n3JmczzcltYQM4wJaIVU+ebBCzbF2RwBPgOOOi40=
Subject key identifier: DE:B3:BB:5C:58:80:C2:B7:4B:FB:11:54:C7:99:81:BA:F1:E2:B2:74
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018DCB7EAA25BF9AFDEA9B451CBCEA3FAFBC
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/3rO7XFiAwrdL-xFUx5mBuvHisnQ.roa
Signing time: Wed 21 Feb 2024 11:48:12 +0000
ROA not before: Wed 21 Feb 2024 11:48:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200740
IP address blocks: 45.9.72.0/24 maxlen: 24
45.138.73.0/24 maxlen: 24
46.17.105.0/24 maxlen: 24
80.76.32.0/23 maxlen: 23
80.76.34.0/23 maxlen: 23
91.217.76.0/24 maxlen: 24
92.118.8.0/23 maxlen: 23
94.142.136.0/23 maxlen: 23
94.142.136.0/24 maxlen: 24
94.142.137.0/24 maxlen: 24
95.214.9.0/24 maxlen: 24
95.214.10.0/23 maxlen: 23
95.214.10.0/24 maxlen: 24
95.214.11.0/24 maxlen: 24
185.40.7.0/24 maxlen: 24
185.94.164.0/23 maxlen: 23
185.94.164.0/24 maxlen: 24
185.94.165.0/24 maxlen: 24
185.102.136.0/24 maxlen: 24
185.103.252.0/23 maxlen: 23
185.103.252.0/24 maxlen: 24
185.103.253.0/24 maxlen: 24
185.103.254.0/23 maxlen: 23
185.103.254.0/24 maxlen: 24
185.103.255.0/24 maxlen: 24
185.112.81.0/24 maxlen: 24
185.114.72.0/23 maxlen: 23
185.114.72.0/24 maxlen: 24
185.114.73.0/24 maxlen: 24
185.117.116.0/24 maxlen: 24
185.117.119.0/24 maxlen: 24
185.200.190.0/24 maxlen: 24
185.232.170.0/23 maxlen: 23
185.233.80.0/23 maxlen: 23
185.233.82.0/24 maxlen: 24
185.233.202.0/23 maxlen: 23
185.252.144.0/24 maxlen: 24
193.239.160.0/23 maxlen: 23
193.239.166.0/23 maxlen: 23
194.36.178.0/23 maxlen: 23
2a04:5200:68::/48 maxlen: 48
2a04:5201:2::/48 maxlen: 48
2a04:5201:4::/48 maxlen: 48
2a04:5201:6::/48 maxlen: 48
2a04:5201:7::/48 maxlen: 48
2a04:5201:9::/48 maxlen: 48
2a04:5201:8018::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Jun 2024 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cb:7e:aa:25:bf:9a:fd:ea:9b:45:1c:bc:ea:3f:af:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Feb 21 11:48:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=deb3bb5c5880c2b74bfb1154c79981baf1e2b274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:55:30:d2:79:4a:96:1e:88:8b:fd:b4:fb:
59:ee:bd:99:ec:a0:7a:04:74:9f:48:e1:c6:d2:ec:
a3:58:71:73:67:99:3e:4c:de:cf:fc:1f:9a:03:6f:
f4:c1:9d:c4:99:73:ff:20:da:6d:57:3e:be:1a:35:
ee:62:af:fa:1f:7b:84:63:d7:b3:09:25:e7:58:82:
7c:c5:a5:36:35:66:46:d5:5e:88:69:62:39:b9:b8:
09:60:df:c2:7b:eb:26:96:77:14:0b:40:34:f9:8e:
df:51:07:c7:55:e6:cc:be:48:ff:d6:75:b0:d6:b0:
f9:eb:4c:4d:9c:86:4f:b0:6c:3d:7b:2d:14:55:81:
80:a8:99:97:1a:34:f5:b3:0e:94:65:d3:4d:24:9d:
2d:5e:90:89:3d:69:10:77:5c:e2:b9:f1:52:77:6c:
85:2c:4d:0b:6d:57:f8:86:ea:2d:eb:b1:f5:06:90:
7b:35:b3:1f:86:71:46:03:ab:9d:99:07:75:3f:f4:
d5:16:f4:fd:67:57:27:52:9b:97:e6:e4:94:28:e9:
34:e3:16:77:c3:08:9a:52:9f:5f:20:63:1b:7b:e8:
4c:56:ad:3b:bb:87:83:31:30:b6:97:f9:d9:e2:51:
0a:3f:8d:e0:2c:77:7e:3e:57:81:10:da:0a:52:77:
1c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B3:BB:5C:58:80:C2:B7:4B:FB:11:54:C7:99:81:BA:F1:E2:B2:74
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/3rO7XFiAwrdL-xFUx5mBuvHisnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.72.0/24
45.138.73.0/24
46.17.105.0/24
80.76.32.0/22
91.217.76.0/24
92.118.8.0/23
94.142.136.0/23
95.214.9.0-95.214.11.255
185.40.7.0/24
185.94.164.0/23
185.102.136.0/24
185.103.252.0/22
185.112.81.0/24
185.114.72.0/23
185.117.116.0/24
185.117.119.0/24
185.200.190.0/24
185.232.170.0/23
185.233.80.0-185.233.82.255
185.233.202.0/23
185.252.144.0/24
193.239.160.0/23
193.239.166.0/23
194.36.178.0/23
IPv6:
2a04:5200:68::/48
2a04:5201:2::/48
2a04:5201:4::/48
2a04:5201:6::/47
2a04:5201:9::/48
2a04:5201:8018::/48
Signature Algorithm: sha256WithRSAEncryption
71:c8:ec:d3:40:ad:39:41:91:88:84:64:d6:35:bc:bb:76:92:
01:72:ea:4c:86:5e:97:e4:11:24:ec:16:86:ce:96:57:a2:26:
12:71:21:ab:c8:7b:df:a4:45:26:70:7d:9f:42:34:be:dd:0c:
01:38:0d:c3:d5:3e:bd:45:b2:37:61:4d:3c:dc:3e:e0:24:36:
fa:05:50:e5:5e:14:c0:44:a0:7d:79:76:2c:92:98:60:48:ff:
c4:9c:89:b2:a8:2d:cc:69:d6:2c:07:d4:5e:d3:db:a6:f6:cd:
79:d0:69:b8:e5:2f:f3:af:fa:1a:69:f7:cb:d0:4f:1b:e1:e5:
86:b6:98:13:cc:42:0e:4e:33:f3:1c:8f:e6:ae:e2:75:57:be:
ad:93:93:11:b2:c0:91:7b:c4:9d:25:9d:4a:8b:d8:42:c7:f2:
3d:9b:3a:84:8c:33:7f:7b:53:c4:ca:cd:7b:a9:e9:17:eb:ae:
15:b6:bf:ec:96:3f:b8:f4:0d:3d:34:db:51:d0:65:36:87:af:
32:d9:6e:f5:fa:d9:81:e0:c3:70:bf:75:a1:58:c6:18:1a:45:
f0:67:3d:71:2f:4c:72:b1:74:06:3c:20:36:7f:72:75:dc:19:
57:d5:96:93:79:11:53:c0:5b:65:f1:56:78:d2:12:ea:9b:3b:
62:e9:56:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 10:30:54 2024 by rpki-client on console-fra.rpki-client.org