Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/2zZ0I4ldkObC1Haqj5CKFUgPmAw.roa
File: 2zZ0I4ldkObC1Haqj5CKFUgPmAw.roa (raw, json)
Hash identifier: Tt4WOSoIp2UALX1/b38vUtbHX0OsXNPNdx6C1V6IMRo=
Subject key identifier: DB:36:74:23:89:5D:90:E6:C2:D4:76:AA:8F:90:8A:15:48:0F:98:0C
Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial: 018D694B41DDDB684EDE857C33F0DB99B3DE
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/2zZ0I4ldkObC1Haqj5CKFUgPmAw.roa
Signing time: Fri 02 Feb 2024 10:09:16 +0000
ROA not before: Fri 02 Feb 2024 10:09:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31122
IP address blocks: 37.46.16.0/21 maxlen: 21
46.183.104.0/23 maxlen: 23
78.137.128.0/18 maxlen: 18
78.143.128.0/18 maxlen: 18
80.93.16.0/20 maxlen: 20
83.147.128.0/18 maxlen: 18
84.203.0.0/16 maxlen: 16
89.16.64.0/19 maxlen: 19
89.184.32.0/22 maxlen: 22
89.184.40.0/21 maxlen: 21
89.184.48.0/21 maxlen: 21
89.184.56.0/23 maxlen: 23
89.234.64.0/18 maxlen: 18
91.142.96.0/20 maxlen: 20
92.51.192.0/18 maxlen: 18
92.51.208.0/20 maxlen: 20
93.92.8.0/21 maxlen: 21
94.247.48.0/21 maxlen: 21
109.106.96.0/20 maxlen: 20
109.106.112.0/21 maxlen: 21
109.106.124.0/22 maxlen: 22
176.52.216.0/22 maxlen: 22
176.52.220.0/23 maxlen: 23
185.47.144.0/22 maxlen: 22
185.53.32.0/24 maxlen: 24
185.53.35.0/24 maxlen: 24
185.182.72.0/22 maxlen: 22
185.205.228.0/22 maxlen: 22
185.233.176.0/22 maxlen: 22
185.242.236.0/23 maxlen: 23
212.126.32.0/19 maxlen: 19
212.126.60.0/22 maxlen: 22
217.78.0.0/20 maxlen: 20
2001:1bb8::/32 maxlen: 32
2a00:15b8::/32 maxlen: 32
2a00:15b8:400::/40 maxlen: 40
2a01:258::/32 maxlen: 32
2a01:8aa0::/32 maxlen: 32
2a02:220::/32 maxlen: 32
2a0a:e780::/29 maxlen: 30
2a0b:bc0::/29 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:69:4b:41:dd:db:68:4e:de:85:7c:33:f0:db:99:b3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
Validity
Not Before: Feb 2 10:09:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db367423895d90e6c2d476aa8f908a15480f980c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:eb:9a:f7:56:01:e3:4b:e0:0b:fd:69:01:37:
f2:f9:d0:28:0b:c7:5e:a2:d5:18:df:7c:ea:b7:82:
04:18:85:b7:1d:86:92:2a:3f:32:9b:ff:87:ae:d3:
03:c7:36:dc:2a:ce:33:e0:b3:d0:5b:0d:ab:ca:f7:
f1:4a:40:c9:a5:6c:52:d2:d2:fa:3e:44:25:97:e0:
98:be:8c:98:34:e8:59:73:94:c6:73:85:ff:3c:c2:
4a:63:99:1f:57:be:08:d9:11:74:6b:ec:39:0a:02:
a2:fb:02:aa:95:6a:fa:af:61:99:53:8f:1c:b5:9a:
59:0f:e6:a0:4e:77:9c:40:a9:4f:88:92:d3:c7:47:
f2:82:94:ef:35:03:c2:f1:fb:29:a1:65:01:41:ef:
5f:7a:26:c0:2c:80:4c:71:f2:32:bd:27:a3:47:bc:
ee:e9:fb:d5:27:2f:3a:ce:0e:7f:11:11:0c:0e:4a:
69:65:57:2f:8b:bf:89:87:a2:fc:85:0c:dd:f5:76:
06:58:f5:2e:ae:b6:1f:30:9c:8f:b4:8b:02:ea:e8:
62:19:70:eb:25:af:69:1a:4f:6c:58:6a:22:8e:05:
ee:b0:0a:8d:d4:b7:97:9b:c1:07:63:37:4f:32:5d:
2c:db:bf:96:cf:e7:c8:90:22:09:d2:15:b3:61:eb:
a2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:36:74:23:89:5D:90:E6:C2:D4:76:AA:8F:90:8A:15:48:0F:98:0C
X509v3 Authority Key Identifier:
keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/2zZ0I4ldkObC1Haqj5CKFUgPmAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.16.0/21
46.183.104.0/23
78.137.128.0/18
78.143.128.0/18
80.93.16.0/20
83.147.128.0/18
84.203.0.0/16
89.16.64.0/19
89.184.32.0/22
89.184.40.0-89.184.57.255
89.234.64.0/18
91.142.96.0/20
92.51.192.0/18
93.92.8.0/21
94.247.48.0/21
109.106.96.0-109.106.119.255
109.106.124.0/22
176.52.216.0-176.52.221.255
185.47.144.0/22
185.53.32.0/24
185.53.35.0/24
185.182.72.0/22
185.205.228.0/22
185.233.176.0/22
185.242.236.0/23
212.126.32.0/19
217.78.0.0/20
IPv6:
2001:1bb8::/32
2a00:15b8::/32
2a01:258::/32
2a01:8aa0::/32
2a02:220::/32
2a0a:e780::/29
2a0b:bc0::/29
Signature Algorithm: sha256WithRSAEncryption
44:95:9f:65:0d:24:64:d7:3d:f0:af:8e:9a:1b:2b:8e:ce:6d:
01:26:30:ab:0a:d5:f3:de:aa:9c:c5:a7:69:b2:3a:63:4b:1e:
3f:f1:8e:03:df:ad:6d:57:92:d5:26:88:c6:c6:4a:cb:85:d0:
48:a1:d8:a6:1e:27:85:96:20:3b:76:8f:06:f6:8b:79:e6:86:
6f:d4:58:3b:14:fc:c2:98:41:61:5f:d8:4a:54:09:a2:9a:c7:
9c:26:c0:9b:e9:2d:a7:1b:e0:2e:0a:93:cd:59:dd:84:d2:34:
a9:e3:b1:97:79:02:cc:34:3f:29:31:b8:f2:e8:d2:63:b6:31:
a7:8c:60:9a:b4:1f:e3:84:e4:88:3b:3c:cf:e4:94:c6:10:a3:
c8:7a:70:5e:16:f5:40:7e:e9:f5:9e:b8:c4:5b:b7:dd:27:c9:
f4:01:a1:c7:64:0e:11:84:fd:52:27:c0:42:18:f0:a6:8d:34:
69:92:e0:77:2b:94:f7:0f:df:0f:1e:34:d0:01:5f:f5:1d:ac:
bc:20:90:0d:f9:ee:44:aa:ac:14:7a:df:3b:a8:c6:67:8a:1c:
c9:b6:42:c5:0e:d0:aa:10:30:ae:7d:ed:19:05:10:b4:4f:94:
e5:97:bd:86:18:57:d1:60:a4:f5:e5:d0:f6:fd:a1:0c:88:d1:
0c:4f:5d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:34:53 2024 by rpki-client on console-ams.rpki-client.org