Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/8BXA6hGVxJ9HgVl_9U04sA0xC50.roa
File: 8BXA6hGVxJ9HgVl_9U04sA0xC50.roa (raw, json)
Hash identifier: XK2qsoSycC/gwqOs+/ozyKjYhycgc3fhPqdxvl+8dhI=
Subject key identifier: F0:15:C0:EA:11:95:C4:9F:47:81:59:7F:F5:4D:38:B0:0D:31:0B:9D
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0192E2ED16C15DB7327693CDD35536EBC3E6
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/8BXA6hGVxJ9HgVl_9U04sA0xC50.roa
Signing time: Thu 31 Oct 2024 14:14:01 +0000
ROA not before: Thu 31 Oct 2024 14:14:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 5.182.185.0/24 maxlen: 24
5.182.196.0/24 maxlen: 24
5.182.197.0/24 maxlen: 24
78.31.205.0/24 maxlen: 24
79.98.183.0/24 maxlen: 24
92.249.29.0/24 maxlen: 24
94.154.171.0/24 maxlen: 24
94.154.178.0/24 maxlen: 24
103.130.176.0/24 maxlen: 24
103.130.177.0/24 maxlen: 24
103.216.196.0/24 maxlen: 24
103.216.198.0/24 maxlen: 24
104.232.36.0/24 maxlen: 24
147.78.207.0/24 maxlen: 24
162.218.93.0/24 maxlen: 24
185.52.138.0/24 maxlen: 24
185.52.139.0/24 maxlen: 24
185.161.190.0/24 maxlen: 24
185.187.214.0/24 maxlen: 24
185.187.215.0/24 maxlen: 24
185.198.89.0/24 maxlen: 24
185.198.90.0/24 maxlen: 24
185.198.91.0/24 maxlen: 24
185.201.42.0/24 maxlen: 24
185.205.204.0/24 maxlen: 24
185.208.152.0/24 maxlen: 24
185.208.153.0/24 maxlen: 24
185.208.154.0/24 maxlen: 24
185.230.121.0/24 maxlen: 24
185.253.120.0/24 maxlen: 24
185.253.121.0/24 maxlen: 24
192.145.70.0/24 maxlen: 24
212.60.13.0/24 maxlen: 24
212.60.14.0/24 maxlen: 24
217.197.170.0/24 maxlen: 24
2a0a:8f40:3::/48 maxlen: 48
2a0a:8f40:7::/48 maxlen: 48
2a0a:8f40:8::/48 maxlen: 48
2a0a:8f40:9::/48 maxlen: 48
2a0a:8f40:a::/48 maxlen: 48
2a0a:8f40:b::/48 maxlen: 48
2a0a:8f40:c::/48 maxlen: 48
2a0a:8f40:1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e2:ed:16:c1:5d:b7:32:76:93:cd:d3:55:36:eb:c3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Oct 31 14:14:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f015c0ea1195c49f4781597ff54d38b00d310b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:09:ed:67:06:45:de:3c:69:22:32:9c:34:d3:
65:07:0b:bf:99:e6:14:c1:22:33:51:e2:2a:f7:64:
84:92:db:a4:94:55:2c:d3:76:a4:77:b8:39:9a:e8:
10:4b:71:66:18:6f:19:98:5e:6a:d8:d2:ef:8e:b9:
6d:1c:8a:f3:b9:4a:15:a9:36:ee:36:35:fc:56:9e:
60:91:80:b7:cc:c9:25:96:32:c7:ee:3e:e0:56:7d:
45:e9:a9:3b:41:00:62:84:a6:04:b8:83:39:22:c5:
c6:b4:70:29:43:fa:5e:6b:41:37:91:db:bb:fa:b8:
71:f1:ec:30:4d:66:87:47:19:27:a7:58:08:de:59:
b3:d3:c8:1f:d4:86:bd:3d:00:a0:ee:6d:eb:10:0f:
c5:0b:ca:ac:c3:51:36:76:22:42:48:fb:c8:f8:9f:
db:db:58:9a:eb:de:7c:50:a3:f4:e1:38:cf:e3:17:
d1:dd:99:1e:1b:7a:0e:09:97:6f:13:75:1a:81:e1:
85:13:79:56:bd:fa:6f:f9:36:aa:ab:d0:c1:09:54:
29:7c:7a:c7:d2:49:d4:a8:c0:d4:fe:da:d2:ac:d3:
13:f3:5a:bb:5d:37:35:5b:a6:60:4b:12:fe:36:f2:
24:e9:41:80:aa:f2:03:f1:ad:1a:40:10:2d:c8:9f:
a4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:15:C0:EA:11:95:C4:9F:47:81:59:7F:F5:4D:38:B0:0D:31:0B:9D
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/8BXA6hGVxJ9HgVl_9U04sA0xC50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.185.0/24
5.182.196.0/23
78.31.205.0/24
79.98.183.0/24
92.249.29.0/24
94.154.171.0/24
94.154.178.0/24
103.130.176.0/23
103.216.196.0/24
103.216.198.0/24
104.232.36.0/24
147.78.207.0/24
162.218.93.0/24
185.52.138.0/23
185.161.190.0/24
185.187.214.0/23
185.198.89.0-185.198.91.255
185.201.42.0/24
185.205.204.0/24
185.208.152.0-185.208.154.255
185.230.121.0/24
185.253.120.0/23
192.145.70.0/24
212.60.13.0-212.60.14.255
217.197.170.0/24
IPv6:
2a0a:8f40:3::/48
2a0a:8f40:7::-2a0a:8f40:c:ffff:ffff:ffff:ffff:ffff
2a0a:8f40:1c::/48
Signature Algorithm: sha256WithRSAEncryption
1d:cf:b5:e4:84:7d:c9:c9:61:b5:57:85:36:15:23:b1:5c:35:
6b:27:ca:f0:6b:ef:fb:85:9b:9b:ef:79:85:db:79:2f:6e:d3:
31:69:09:9a:95:7d:76:1d:4e:d9:19:41:9f:cc:5c:d1:b7:ea:
1c:6c:73:ca:21:86:20:fa:ad:8d:dd:73:ad:bc:10:73:f5:19:
2b:91:a0:f1:d5:cb:92:4f:55:c3:bb:3e:0d:57:ee:3f:8e:af:
c3:88:15:30:ff:38:35:b3:da:05:76:c3:23:41:a8:41:75:01:
cc:67:5c:5d:64:82:04:8e:01:66:1d:7f:e2:79:27:1c:4c:94:
7c:ee:05:9d:81:e5:2c:ba:ee:4c:96:7e:0d:15:a9:9f:45:a4:
dc:c6:3b:07:ac:f8:b3:c6:48:93:8d:f3:e8:a0:df:05:f8:97:
00:f9:74:d6:21:50:84:0b:6f:57:9a:dd:15:da:61:6f:bd:8c:
ea:10:df:f6:3a:8c:13:d5:9f:c3:93:fd:4e:5d:ab:21:9d:c6:
c5:0d:5d:ce:35:43:0e:e8:6f:77:79:00:b4:df:65:7a:d0:73:
40:65:26:79:30:8e:c2:99:e6:f7:f3:61:4a:79:0c:46:46:ba:
60:7a:4f:9e:81:4c:d4:22:64:09:eb:29:9a:20:09:5f:64:ae:
0f:33:77:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:07:58 2024 by rpki-client on console-ams.rpki-client.org