Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/Tg8Cs43z3XJFXXaUUt5nGdm139Q.roa
File: Tg8Cs43z3XJFXXaUUt5nGdm139Q.roa (raw, json)
Hash identifier: HSUlhUsakcXS4H4OMv1c7ILTOmzLT8M5EAG14wah+qs=
Subject key identifier: 4E:0F:02:B3:8D:F3:DD:72:45:5D:76:94:52:DE:67:19:D9:B5:DF:D4
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 018CCA2A9709E6DFA3D08E5C6151F6F3D995
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/Tg8Cs43z3XJFXXaUUt5nGdm139Q.roa
Signing time: Tue 02 Jan 2024 12:33:57 +0000
ROA not before: Tue 02 Jan 2024 12:33:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5603
IP address blocks: 193.77.0.0/18 maxlen: 18
193.77.0.0/16 maxlen: 16
188.198.0.0/16 maxlen: 16
188.198.0.0/15 maxlen: 15
193.77.64.0/18 maxlen: 18
193.138.9.0/24 maxlen: 24
212.30.64.0/20 maxlen: 20
212.30.64.0/19 maxlen: 19
195.210.192.0/20 maxlen: 20
195.210.192.0/18 maxlen: 18
149.126.144.0/20 maxlen: 20
89.143.128.0/18 maxlen: 18
89.143.64.0/18 maxlen: 18
185.59.24.0/22 maxlen: 22
185.59.24.0/23 maxlen: 23
185.59.26.0/23 maxlen: 23
149.126.128.0/20 maxlen: 20
149.126.128.0/19 maxlen: 19
89.143.192.0/18 maxlen: 18
193.189.176.0/20 maxlen: 20
178.58.128.0/17 maxlen: 17
213.250.32.0/19 maxlen: 19
193.189.160.0/19 maxlen: 19
193.189.160.0/20 maxlen: 20
89.142.128.0/18 maxlen: 18
195.250.192.0/21 maxlen: 21
195.250.192.0/20 maxlen: 20
89.143.0.0/18 maxlen: 18
195.250.200.0/21 maxlen: 21
195.250.212.0/22 maxlen: 22
193.95.224.0/19 maxlen: 19
89.143.0.0/16 maxlen: 16
195.250.208.0/21 maxlen: 21
95.176.192.0/18 maxlen: 18
188.197.0.0/16 maxlen: 16
89.142.192.0/18 maxlen: 18
95.176.128.0/17 maxlen: 17
95.176.128.0/18 maxlen: 18
95.159.192.0/20 maxlen: 20
193.95.192.0/19 maxlen: 19
95.159.192.0/18 maxlen: 18
193.95.192.0/18 maxlen: 18
91.195.146.0/23 maxlen: 23
193.77.192.0/18 maxlen: 18
188.199.0.0/16 maxlen: 16
194.165.96.0/19 maxlen: 19
194.165.96.0/20 maxlen: 20
86.61.0.0/17 maxlen: 17
86.61.0.0/18 maxlen: 18
212.30.80.0/20 maxlen: 20
193.77.128.0/18 maxlen: 18
109.182.0.0/17 maxlen: 17
109.182.0.0/16 maxlen: 16
86.61.64.0/18 maxlen: 18
188.196.0.0/16 maxlen: 16
188.196.0.0/15 maxlen: 15
213.229.192.0/20 maxlen: 20
213.229.192.0/19 maxlen: 19
213.229.192.0/18 maxlen: 18
213.250.0.0/18 maxlen: 18
213.250.0.0/19 maxlen: 19
188.196.0.0/14 maxlen: 14
195.88.82.0/23 maxlen: 23
178.58.0.0/17 maxlen: 17
178.58.0.0/16 maxlen: 16
89.142.64.0/18 maxlen: 18
213.229.224.0/19 maxlen: 19
89.142.0.0/18 maxlen: 18
89.142.0.0/16 maxlen: 16
185.57.226.0/23 maxlen: 23
109.182.128.0/17 maxlen: 17
2a00:ee5::/32 maxlen: 32
2a00:ee4::/32 maxlen: 32
2a00:ee7::/32 maxlen: 32
2a00:ee0::/29 maxlen: 29
2a00:ee3::/32 maxlen: 32
2a00:ee0::/32 maxlen: 32
2a00:ee6::/32 maxlen: 32
2a02:e20::/29 maxlen: 29
2a00:ee1::/32 maxlen: 32
2a00:ee2::/32 maxlen: 32
2a02:e20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:97:09:e6:df:a3:d0:8e:5c:61:51:f6:f3:d9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Jan 2 12:33:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e0f02b38df3dd72455d769452de6719d9b5dfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:06:ad:03:15:fa:be:e9:88:94:75:47:5c:6b:
46:27:39:ff:c7:a9:5d:92:7b:72:eb:a2:84:a9:6f:
cf:7a:5a:57:d2:87:13:60:a7:17:76:84:57:1e:05:
48:40:21:9a:79:6e:fc:bc:e0:aa:20:e4:38:57:e5:
72:1c:7c:fa:58:2f:1b:20:89:67:fa:48:52:24:18:
22:85:9b:22:9c:9f:22:51:24:61:44:b1:4b:79:de:
db:22:7c:3d:0d:f6:09:d1:f2:2c:c7:a7:f1:86:d0:
db:5a:22:a0:27:e5:dd:dc:1c:7a:9c:49:89:5f:97:
2e:25:cf:05:51:ff:b3:d1:b7:3c:d7:32:a3:81:47:
5c:77:45:53:dd:1e:45:49:11:d9:9a:49:11:78:99:
6e:2f:02:c4:b2:fd:84:82:19:30:04:0b:06:ec:92:
75:7c:2c:4d:20:61:c3:45:f6:17:7f:87:d6:5c:06:
b7:bc:5f:6e:63:5a:bc:8d:ca:e0:4b:e4:50:5e:82:
db:0b:b2:4d:24:31:0e:f6:4c:44:43:03:75:1f:1a:
4f:8b:2c:f5:b2:ad:2c:69:11:5c:4e:09:6e:bf:0f:
14:ee:f2:50:49:15:be:e9:87:b5:3c:59:4f:8f:e8:
7c:00:2f:1f:5f:20:c2:7e:60:16:b1:c9:ed:6b:7b:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0F:02:B3:8D:F3:DD:72:45:5D:76:94:52:DE:67:19:D9:B5:DF:D4
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/Tg8Cs43z3XJFXXaUUt5nGdm139Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.61.0.0/17
89.142.0.0/15
91.195.146.0/23
95.159.192.0/18
95.176.128.0/17
109.182.0.0/16
149.126.128.0/19
178.58.0.0/16
185.57.226.0/23
185.59.24.0/22
188.196.0.0/14
193.77.0.0/16
193.95.192.0/18
193.138.9.0/24
193.189.160.0/19
194.165.96.0/19
195.88.82.0/23
195.210.192.0/18
195.250.192.0-195.250.215.255
212.30.64.0/19
213.229.192.0/18
213.250.0.0/18
IPv6:
2a00:ee0::/29
2a02:e20::/29
Signature Algorithm: sha256WithRSAEncryption
49:b8:af:38:ba:4b:84:74:72:54:cd:87:15:cd:11:b9:88:23:
21:d2:9e:de:f1:4c:e2:e1:e4:02:4a:a2:32:94:42:61:ae:b8:
0c:93:35:d5:56:c6:f1:6f:a8:68:6d:cc:fb:c0:a0:4d:18:a0:
b7:da:85:3b:90:4c:51:7a:fb:e7:7c:23:3b:6e:68:0c:a8:f5:
1f:da:38:bc:84:2d:40:39:48:d3:b6:1d:5f:23:de:a8:10:4b:
15:de:3c:2c:64:96:e1:13:75:6c:71:a3:3f:ab:97:90:d8:65:
1f:7a:23:e7:d7:bb:a3:69:c6:b3:c2:85:be:cf:88:8d:6a:35:
af:52:8e:7a:60:ac:58:08:dd:77:43:b4:a8:5b:e4:24:96:e4:
e6:0f:8a:7d:3d:c8:76:c3:54:b9:20:62:43:4e:ef:20:e7:7c:
de:5c:0c:45:4b:fe:1d:e0:6b:78:db:0d:82:75:b5:fe:44:33:
f7:fc:f8:71:ce:28:f8:e8:81:bc:b8:b8:0c:e9:56:41:5b:74:
a8:7d:47:a1:e2:00:94:b7:3a:f4:a6:9a:2e:1d:ec:c6:e7:66:
98:ab:b8:45:c3:01:79:4a:9a:38:1c:23:fd:e1:31:12:84:c7:
83:2c:39:1b:85:c9:6f:89:a3:58:4f:11:02:dc:cf:c6:df:8f:
63:7a:7a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 11:31:58 2024 by rpki-client on console-ams.rpki-client.org