Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/Sck682QsJxSO7N2y5g2grBzmVPY.roa
File: Sck682QsJxSO7N2y5g2grBzmVPY.roa (raw, json)
Hash identifier: fcFdxsYVbYS0d5V9lTqau/fQwGJbuO67SZYhCer5IEU=
Subject key identifier: 49:C9:3A:F3:64:2C:27:14:8E:EC:DD:B2:E6:0D:A0:AC:1C:E6:54:F6
Certificate issuer: /CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Certificate serial: 018CC6B7A1D32C53747F844EB151400CFE2D
Authority key identifier: 58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/Sck682QsJxSO7N2y5g2grBzmVPY.roa
Signing time: Mon 01 Jan 2024 20:29:32 +0000
ROA not before: Mon 01 Jan 2024 20:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43146
IP address blocks: 185.46.8.0/22 maxlen: 22
194.58.124.0/24 maxlen: 24
194.58.125.0/24 maxlen: 24
80.78.244.0/22 maxlen: 22
80.78.249.0/24 maxlen: 24
176.99.2.0/24 maxlen: 24
176.99.3.0/24 maxlen: 24
176.99.10.0/24 maxlen: 24
176.99.14.0/24 maxlen: 24
212.158.162.0/24 maxlen: 24
194.67.107.0/24 maxlen: 24
89.108.112.0/24 maxlen: 24
89.108.110.0/24 maxlen: 24
89.108.108.0/24 maxlen: 24
89.108.106.0/24 maxlen: 24
89.108.111.0/24 maxlen: 24
89.108.109.0/24 maxlen: 24
89.108.107.0/24 maxlen: 24
89.108.108.0/22 maxlen: 22
89.108.118.0/24 maxlen: 24
89.108.116.0/24 maxlen: 24
89.108.117.0/24 maxlen: 24
89.108.116.0/22 maxlen: 22
89.108.120.0/24 maxlen: 24
89.108.124.0/24 maxlen: 24
89.108.122.0/24 maxlen: 24
89.108.119.0/24 maxlen: 24
89.108.125.0/24 maxlen: 24
89.108.123.0/24 maxlen: 24
89.108.121.0/24 maxlen: 24
89.108.124.0/22 maxlen: 22
89.108.120.0/22 maxlen: 22
89.108.126.0/24 maxlen: 24
89.108.127.0/24 maxlen: 24
89.108.68.0/24 maxlen: 24
89.108.74.0/24 maxlen: 24
89.108.72.0/24 maxlen: 24
89.108.72.0/22 maxlen: 22
89.108.75.0/24 maxlen: 24
89.108.73.0/24 maxlen: 24
89.108.84.0/24 maxlen: 24
89.108.82.0/24 maxlen: 24
89.108.80.0/24 maxlen: 24
89.108.85.0/24 maxlen: 24
89.108.90.0/24 maxlen: 24
89.108.86.0/24 maxlen: 24
89.108.91.0/24 maxlen: 24
89.108.87.0/24 maxlen: 24
89.108.96.0/24 maxlen: 24
89.108.92.0/24 maxlen: 24
89.108.97.0/24 maxlen: 24
89.108.93.0/24 maxlen: 24
89.108.104.0/24 maxlen: 24
89.108.105.0/24 maxlen: 24
2a03:4900:fffd::/48 maxlen: 48
2a03:4900:a0::/48 maxlen: 48
2a03:4900:fffb::/48 maxlen: 48
2a03:4900:ffff::/48 maxlen: 48
2a03:4900:a1::/48 maxlen: 48
2a00:f940:8::/48 maxlen: 48
2a03:4900:fffc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a1:d3:2c:53:74:7f:84:4e:b1:51:40:0c:fe:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Validity
Not Before: Jan 1 20:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49c93af3642c27148eecddb2e60da0ac1ce654f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:12:8f:5f:19:53:58:ea:49:ec:d6:0c:96:d7:
57:33:f7:7b:e8:ca:7a:5b:ba:2e:af:a5:73:ac:dc:
cf:bd:c3:be:cf:ef:9b:cc:5d:c4:98:d6:b5:91:d2:
1e:17:b6:68:20:a5:2d:d6:2c:74:e8:6d:09:c4:74:
77:9e:dd:21:a6:62:75:82:d6:54:96:ea:81:48:c2:
ed:cf:c1:55:3c:93:9c:94:7e:a0:8c:cb:a6:2f:19:
58:10:17:95:0e:91:d0:df:cc:4c:93:26:cb:3e:f7:
65:c9:73:9a:6b:7c:6f:50:75:8a:68:2c:3a:ed:c9:
87:1b:4e:c6:e5:4c:ec:a3:df:26:0b:a8:d3:a6:27:
41:c8:80:2a:8d:0d:b9:59:1c:e4:25:9f:69:5e:0d:
0b:b5:ae:3d:0c:f8:26:19:39:8f:0d:e2:b8:37:38:
7f:8c:cd:ec:2e:7c:eb:c1:f0:ca:9e:5a:d8:84:e5:
2d:59:5d:7d:74:f5:7a:11:54:4d:42:2b:2d:aa:c9:
a6:86:6c:d5:37:2e:b5:7b:24:d6:96:4d:e1:a0:71:
f2:ed:d2:6c:4f:35:ea:b1:2f:41:85:1b:33:5b:a9:
89:7b:0a:68:8b:53:2a:d6:58:be:fd:05:50:de:db:
6f:0b:64:16:37:99:3d:9c:93:e7:34:8c:d7:97:54:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C9:3A:F3:64:2C:27:14:8E:EC:DD:B2:E6:0D:A0:AC:1C:E6:54:F6
X509v3 Authority Key Identifier:
keyid:58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/Sck682QsJxSO7N2y5g2grBzmVPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.78.244.0/22
80.78.249.0/24
89.108.68.0/24
89.108.72.0/22
89.108.80.0/24
89.108.82.0/24
89.108.84.0/22
89.108.90.0-89.108.93.255
89.108.96.0/23
89.108.104.0-89.108.112.255
89.108.116.0-89.108.127.255
176.99.2.0/23
176.99.10.0/24
176.99.14.0/24
185.46.8.0/22
194.58.124.0/23
194.67.107.0/24
212.158.162.0/24
IPv6:
2a00:f940:8::/48
2a03:4900:a0::/47
2a03:4900:fffb::-2a03:4900:fffd:ffff:ffff:ffff:ffff:ffff
2a03:4900:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
d3:50:98:7c:f9:60:be:4e:b4:31:51:3b:16:2a:d4:26:e9:a5:
a4:35:46:99:4d:da:6a:6b:68:04:b9:fa:65:e8:64:9a:ae:71:
e7:3d:dc:55:96:68:7e:21:9d:78:41:a9:ea:3e:3d:0f:11:bf:
7c:5f:9a:ba:be:91:15:d9:a2:c7:c6:f4:8c:7b:96:05:4f:6a:
56:f5:79:6e:62:d8:25:0f:75:70:05:2d:d1:bb:f6:31:80:70:
2f:3d:a4:5d:a7:8b:64:d0:11:a3:8f:a5:98:21:e9:3d:de:97:
16:22:f6:43:39:7d:93:e2:d3:2a:cc:18:6c:d5:63:8a:6b:b6:
b3:3a:49:fc:6d:98:bd:af:59:db:41:dc:51:9b:bd:90:df:7f:
cb:9c:f3:f1:2e:e8:5e:21:ca:45:5a:e7:69:6d:06:5b:bd:f0:
66:07:56:0a:23:a8:89:eb:4a:5d:0a:07:88:6c:f3:6d:58:33:
53:da:2d:42:d5:58:8b:27:0e:69:95:87:9a:ae:c0:71:fb:97:
aa:5c:b4:37:12:ab:8e:d4:a3:17:a7:bf:26:c3:90:60:8a:95:
06:cc:e7:df:7e:c6:94:af:ee:46:b8:01:e3:03:e7:2a:2e:41:
de:b7:53:38:61:20:80:2e:47:80:a3:62:be:32:29:b7:1d:bd:
c2:24:93:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:53:35 2024 by rpki-client on console-fra.rpki-client.org