Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/e9r2BhkoK5PzA1nAb463kfratog.roa
File: e9r2BhkoK5PzA1nAb463kfratog.roa (raw, json)
Hash identifier: IaYIHB/lSDHwlRo23CavhPwZdOHfs7AO2xfLWkwgDS4=
Subject key identifier: 7B:DA:F6:06:19:28:2B:93:F3:03:59:C0:6F:8E:B7:91:FA:DA:B6:88
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0193202536C74F47A220E666C432BC319B62
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/e9r2BhkoK5PzA1nAb463kfratog.roa
Signing time: Tue 12 Nov 2024 11:32:10 +0000
ROA not before: Tue 12 Nov 2024 11:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31213
IP address blocks: 37.28.160.0/21 maxlen: 21
37.28.168.0/21 maxlen: 21
37.29.48.0/21 maxlen: 21
37.29.56.0/21 maxlen: 21
37.29.64.0/22 maxlen: 22
37.29.68.0/23 maxlen: 23
37.29.70.0/24 maxlen: 24
37.29.71.0/24 maxlen: 24
78.25.96.0/21 maxlen: 21
78.25.104.0/22 maxlen: 22
78.25.108.0/22 maxlen: 22
78.25.120.0/22 maxlen: 22
83.149.0.0/21 maxlen: 21
85.26.128.0/20 maxlen: 20
85.26.208.0/22 maxlen: 22
85.26.212.0/22 maxlen: 22
85.26.216.0/22 maxlen: 22
85.26.220.0/22 maxlen: 22
85.26.248.0/22 maxlen: 22
85.26.252.0/22 maxlen: 22
94.25.208.0/22 maxlen: 22
94.25.216.0/21 maxlen: 21
94.25.224.0/21 maxlen: 21
94.25.228.0/23 maxlen: 23
94.25.232.0/21 maxlen: 21
109.188.128.0/17 maxlen: 17
128.204.74.0/24 maxlen: 24
128.204.75.0/24 maxlen: 24
176.106.130.0/24 maxlen: 24
176.106.131.0/24 maxlen: 24
178.178.224.0/24 maxlen: 24
178.178.225.0/24 maxlen: 24
178.178.226.0/24 maxlen: 24
178.178.227.0/24 maxlen: 24
188.162.64.0/23 maxlen: 23
188.170.65.0/24 maxlen: 24
188.170.66.0/24 maxlen: 24
188.170.67.0/24 maxlen: 24
188.170.68.0/24 maxlen: 24
188.170.72.0/21 maxlen: 21
188.170.80.0/21 maxlen: 21
188.170.92.0/22 maxlen: 22
2a03:d000::/40 maxlen: 40
2a03:d000::/41 maxlen: 41
2a03:d000:80::/41 maxlen: 41
2a03:d000:100::/40 maxlen: 40
2a03:d000:100::/41 maxlen: 41
2a03:d000:180::/41 maxlen: 41
2a03:d000:200::/41 maxlen: 41
2a03:d000:280::/41 maxlen: 41
2a03:d000:301::/48 maxlen: 48
2a03:d000:400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:20:25:36:c7:4f:47:a2:20:e6:66:c4:32:bc:31:9b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 12 11:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bdaf60619282b93f30359c06f8eb791fadab688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:93:48:17:6b:ef:13:e9:cd:83:6a:da:ee:ae:
2f:c2:6d:12:9f:1e:ab:06:95:2c:62:69:c7:04:9a:
36:3e:84:c6:78:52:25:65:d8:29:4e:50:09:70:36:
ac:fb:74:10:41:ca:0e:17:54:fe:5f:33:d7:98:94:
c0:b1:3f:5a:13:dd:eb:6d:d2:e3:ca:6f:26:5c:5c:
93:fc:1c:c5:b7:38:9a:60:cf:37:a4:a6:98:4e:09:
5f:29:00:3a:b2:39:69:5c:53:b7:e9:73:6e:9c:52:
ad:0e:4e:96:5a:7a:fb:54:b6:ef:76:36:00:8a:0f:
4b:56:54:72:93:81:1d:4b:ac:c3:34:73:c8:d1:62:
3b:7e:29:d5:1a:b7:ff:74:e4:42:3e:f2:91:5b:e3:
3b:ff:61:d1:9e:bc:e7:8b:a3:b9:cd:d2:fe:db:bc:
66:f6:99:0a:68:6d:1d:3f:e5:98:2b:47:df:6d:91:
79:5e:67:5d:ec:06:aa:d6:8a:e1:2b:29:45:8f:c1:
28:bb:8a:ea:a4:cd:d2:f8:9d:61:a3:90:bb:c8:bc:
a2:47:9c:01:c2:aa:d6:49:b1:c0:64:4b:58:35:f8:
36:b2:7f:dd:7d:0e:a9:f6:ab:b8:23:35:a1:a7:65:
1c:f5:d2:d1:6a:36:47:2f:9d:4d:84:9a:0a:d2:76:
7b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DA:F6:06:19:28:2B:93:F3:03:59:C0:6F:8E:B7:91:FA:DA:B6:88
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/e9r2BhkoK5PzA1nAb463kfratog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/20
37.29.48.0-37.29.71.255
78.25.96.0/20
78.25.120.0/22
83.149.0.0/21
85.26.128.0/20
85.26.208.0/20
85.26.248.0/21
94.25.208.0/22
94.25.216.0-94.25.239.255
109.188.128.0/17
128.204.74.0/23
176.106.130.0/23
178.178.224.0/22
188.162.64.0/23
188.170.65.0-188.170.68.255
188.170.72.0-188.170.87.255
188.170.92.0/22
IPv6:
2a03:d000::-2a03:d000:2ff:ffff:ffff:ffff:ffff:ffff
2a03:d000:301::/48
2a03:d000:400::/40
Signature Algorithm: sha256WithRSAEncryption
8a:19:d1:c3:a4:21:46:b7:88:ba:9b:c2:3f:22:c1:f9:2c:e7:
26:e1:09:0b:35:5b:13:13:9a:ea:7b:69:ae:3a:91:b8:7a:dd:
1a:f6:a6:3e:01:0d:8c:f4:24:61:b1:34:4f:cc:6d:d3:0e:e3:
d6:13:20:38:f7:69:de:e8:1d:c3:7b:ea:85:8c:45:dc:b0:b2:
54:4c:6b:59:04:59:42:b6:6c:5e:5b:fc:b6:83:d8:8c:67:9e:
19:3d:20:aa:cd:0f:b2:c9:15:c3:5f:70:14:9b:d3:30:c8:56:
9e:0f:77:7b:82:ba:cb:5b:ca:96:84:13:d7:a5:3b:47:ce:6d:
e1:ee:b4:75:7d:76:25:98:be:7f:e1:42:c8:4c:6a:0f:b3:2a:
fb:5a:5c:81:f9:a2:d9:28:4e:21:de:f9:76:53:c5:f4:07:6f:
d1:1c:b6:d0:94:4c:1e:0f:31:d7:76:34:27:3c:20:6c:58:e6:
f1:9c:8c:51:a3:80:a9:d6:29:c9:65:a7:21:11:a7:73:37:c7:
db:58:6f:ee:89:b7:11:fa:08:45:b7:cf:96:b4:f8:59:ff:5a:
56:a5:00:d8:88:ab:0d:85:e3:2e:8b:0a:03:94:5b:67:89:0d:
c8:6f:76:3f:58:f9:d5:e8:8c:da:f0:2b:a8:5e:0a:c6:6b:98:
48:74:74:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:22:24 2024 by rpki-client on console-ams.rpki-client.org