Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hXPf6eD8f6-uGJHVEo_xFAYQqpI.roa
File: hXPf6eD8f6-uGJHVEo_xFAYQqpI.roa (raw, json)
Hash identifier: UdACCRD66HxuLxsQm7TcJYnfl0R2AdaZu73hBXiZ5E4=
Subject key identifier: 85:73:DF:E9:E0:FC:7F:AF:AE:18:91:D5:12:8F:F1:14:06:10:AA:92
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DE1C022AB30B0F0BFF09D4EECE283
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hXPf6eD8f6-uGJHVEo_xFAYQqpI.roa
Signing time: Mon 01 Jan 2024 14:29:21 +0000
ROA not before: Mon 01 Jan 2024 14:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29648
IP address blocks: 31.173.119.0/24 maxlen: 24
77.233.160.0/19 maxlen: 19
77.233.160.0/24 maxlen: 24
77.233.166.0/24 maxlen: 24
77.233.161.0/24 maxlen: 24
77.233.164.0/24 maxlen: 24
77.233.162.0/24 maxlen: 24
77.233.167.0/24 maxlen: 24
77.233.170.0/24 maxlen: 24
31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
77.233.173.0/24 maxlen: 24
77.233.178.0/24 maxlen: 24
77.233.181.0/24 maxlen: 24
77.233.182.0/24 maxlen: 24
77.233.185.0/24 maxlen: 24
77.233.180.0/24 maxlen: 24
77.233.186.0/24 maxlen: 24
77.233.190.0/24 maxlen: 24
77.233.188.0/24 maxlen: 24
77.233.191.0/24 maxlen: 24
188.170.98.0/24 maxlen: 24
86.109.192.0/19 maxlen: 19
86.109.192.0/20 maxlen: 20
188.170.97.0/24 maxlen: 24
188.170.96.0/24 maxlen: 24
188.170.100.0/24 maxlen: 24
188.170.103.0/24 maxlen: 24
86.109.195.0/24 maxlen: 24
188.170.105.0/24 maxlen: 24
188.170.102.0/24 maxlen: 24
86.109.193.0/24 maxlen: 24
188.170.99.0/24 maxlen: 24
188.170.104.0/24 maxlen: 24
188.170.101.0/24 maxlen: 24
188.170.106.0/24 maxlen: 24
188.170.111.0/24 maxlen: 24
86.109.200.0/23 maxlen: 23
188.170.108.0/24 maxlen: 24
188.170.110.0/24 maxlen: 24
188.170.107.0/24 maxlen: 24
188.170.109.0/24 maxlen: 24
188.170.112.0/24 maxlen: 24
188.170.114.0/24 maxlen: 24
86.109.213.0/24 maxlen: 24
86.109.210.0/24 maxlen: 24
86.109.208.0/24 maxlen: 24
188.170.113.0/24 maxlen: 24
188.170.116.0/24 maxlen: 24
188.170.115.0/24 maxlen: 24
86.109.212.0/24 maxlen: 24
188.170.118.0/24 maxlen: 24
188.170.117.0/24 maxlen: 24
188.170.119.0/24 maxlen: 24
86.109.216.0/24 maxlen: 24
188.170.122.0/24 maxlen: 24
188.170.121.0/24 maxlen: 24
188.170.120.0/24 maxlen: 24
86.109.214.0/24 maxlen: 24
188.170.124.0/24 maxlen: 24
188.170.123.0/24 maxlen: 24
86.109.215.0/24 maxlen: 24
86.109.218.0/23 maxlen: 23
188.170.125.0/24 maxlen: 24
188.170.127.0/24 maxlen: 24
86.109.222.0/24 maxlen: 24
86.109.220.0/24 maxlen: 24
188.170.126.0/24 maxlen: 24
86.109.223.0/24 maxlen: 24
78.109.120.0/24 maxlen: 24
78.109.123.0/24 maxlen: 24
78.109.124.0/24 maxlen: 24
78.109.121.0/24 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.96.0/24 maxlen: 24
178.176.98.0/24 maxlen: 24
178.176.97.0/24 maxlen: 24
178.176.102.0/24 maxlen: 24
178.176.99.0/24 maxlen: 24
178.176.101.0/24 maxlen: 24
178.176.103.0/24 maxlen: 24
178.176.100.0/24 maxlen: 24
178.176.118.0/24 maxlen: 24
178.176.115.0/24 maxlen: 24
178.176.117.0/24 maxlen: 24
178.176.114.0/24 maxlen: 24
178.176.116.0/24 maxlen: 24
178.176.123.0/24 maxlen: 24
178.176.120.0/24 maxlen: 24
178.176.125.0/24 maxlen: 24
178.176.122.0/24 maxlen: 24
178.176.119.0/24 maxlen: 24
178.176.124.0/24 maxlen: 24
178.176.121.0/24 maxlen: 24
178.176.126.0/24 maxlen: 24
178.176.127.0/24 maxlen: 24
83.169.217.0/24 maxlen: 24
83.169.218.0/24 maxlen: 24
83.169.219.0/24 maxlen: 24
83.169.220.0/24 maxlen: 24
83.169.223.0/24 maxlen: 24
83.169.221.0/24 maxlen: 24
83.169.222.0/24 maxlen: 24
188.94.172.0/24 maxlen: 24
188.94.169.0/24 maxlen: 24
188.94.170.0/24 maxlen: 24
188.94.168.0/24 maxlen: 24
188.94.171.0/24 maxlen: 24
188.94.175.0/24 maxlen: 24
188.94.173.0/24 maxlen: 24
188.94.174.0/24 maxlen: 24
217.115.81.0/24 maxlen: 24
217.115.80.0/20 maxlen: 20
217.115.80.0/24 maxlen: 24
217.115.91.0/24 maxlen: 24
2a03:d005:800::/40 maxlen: 40
2a03:d005:600::/40 maxlen: 40
2a03:d005:300::/40 maxlen: 40
2a03:d005::/40 maxlen: 40
2a03:d005:500::/40 maxlen: 40
2a03:d005:200::/40 maxlen: 40
2a03:d005:700::/40 maxlen: 40
2a03:d005:400::/40 maxlen: 40
2a03:d005:900::/40 maxlen: 40
2a03:d005:100::/40 maxlen: 40
2a03:d000:9004::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e1:c0:22:ab:30:b0:f0:bf:f0:9d:4e:ec:e2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8573dfe9e0fc7fafae1891d5128ff1140610aa92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:17:ef:95:3f:33:ac:f5:40:ca:6f:e5:9f:
89:2e:8e:94:cb:37:ff:66:4a:da:68:48:f8:3e:a5:
e4:e1:18:27:3b:78:4b:65:0e:78:00:0b:1d:b6:c9:
41:20:26:61:c9:ed:00:2d:c0:f2:59:be:3a:c8:e9:
03:0b:39:9f:a3:b0:f4:63:60:58:6b:a3:f1:8a:79:
d0:1b:bf:5a:03:bc:3b:01:60:26:65:d5:ad:9c:4a:
ac:35:8c:b1:9a:24:82:51:53:df:25:f4:22:21:e1:
e1:f3:9f:b5:b0:ca:f0:4c:49:c9:60:4a:bc:36:c2:
43:f3:97:c9:cd:b8:27:2a:87:f5:97:3a:0d:a0:a3:
65:f4:8c:35:80:89:79:a3:03:58:ac:b3:32:f1:41:
1c:e7:5c:88:c7:74:55:b9:3c:bc:05:1c:4c:06:e9:
38:9e:70:96:d8:29:1c:a0:7f:18:0b:81:2b:b4:24:
e7:37:ae:43:85:36:ea:5e:28:5c:a7:db:97:85:9e:
79:6f:1c:1d:4c:17:00:0c:19:0e:1e:1c:6e:95:6a:
68:09:bc:59:c5:1c:95:a7:d9:8f:b3:18:86:0b:21:
be:16:89:be:ea:dd:71:3f:35:8d:d3:2e:94:82:51:
b3:a2:9c:43:1f:79:67:cb:4d:7a:ba:b6:93:a7:96:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:73:DF:E9:E0:FC:7F:AF:AE:18:91:D5:12:8F:F1:14:06:10:AA:92
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hXPf6eD8f6-uGJHVEo_xFAYQqpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
77.233.160.0/19
78.109.120.0/23
78.109.123.0-78.109.124.255
83.169.217.0-83.169.223.255
86.109.192.0/19
178.176.96.0/21
178.176.114.0-178.176.127.255
188.94.168.0/21
188.170.96.0/19
195.149.111.0/24
217.115.80.0/20
IPv6:
2a03:d000:9004::/46
2a03:d005::-2a03:d005:9ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5b:50:66:29:fa:48:3c:60:ad:5f:d2:28:f5:86:eb:d5:16:49:
64:92:e4:60:3a:cc:23:e9:65:41:12:6a:90:f8:1a:9e:65:12:
76:20:34:51:33:56:37:90:fa:55:74:63:0f:e6:57:56:93:f0:
a7:3c:13:4f:7a:0a:a1:81:62:f3:14:e5:e3:67:8c:73:a8:57:
32:96:05:eb:37:1d:69:41:9b:df:21:2e:bd:40:5f:4a:e3:b8:
15:e0:a4:df:1b:b9:dd:40:f1:25:54:bf:a9:36:04:45:87:7f:
84:87:17:dd:61:d0:31:05:6d:bd:e8:d6:ff:eb:2d:56:39:13:
3d:c2:81:a2:a2:ac:31:30:cf:5f:4a:e8:f5:5a:5e:e8:22:b6:
92:7a:20:f0:2b:0b:93:2c:f9:7d:99:dc:06:44:37:4d:7f:69:
10:f0:bf:a9:93:97:89:af:52:05:0e:9c:43:8c:2d:42:ef:2b:
34:39:75:32:3d:fd:31:db:ee:94:a1:6d:f9:ff:a0:fa:55:5d:
f7:50:33:b2:ad:28:b9:35:04:ae:d4:42:a5:65:41:f7:6a:f2:
d0:1f:9c:2b:05:39:68:9a:35:03:33:aa:9e:51:d4:13:c3:72:
be:d8:20:2d:74:e8:f4:34:f8:04:a6:07:b9:51:08:d1:99:2f:
56:75:8e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:38:43 2024 by rpki-client on console-fra.rpki-client.org