Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/G5aYZ6a1MI2EG_BMVthDJq94cRQ.roa
File: G5aYZ6a1MI2EG_BMVthDJq94cRQ.roa (raw, json)
Hash identifier: FVYdn4th02MXKQedbADkzJMc9VwKUADOIx78UppwnmA=
Subject key identifier: 1B:96:98:67:A6:B5:30:8D:84:1B:F0:4C:56:D8:43:26:AF:78:71:14
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018DC17C426D2DA390FDE3B3667C0FB180D4
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/G5aYZ6a1MI2EG_BMVthDJq94cRQ.roa
Signing time: Mon 19 Feb 2024 13:09:22 +0000
ROA not before: Mon 19 Feb 2024 13:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3301
IP address blocks: 192.36.96.0/24 maxlen: 24
192.121.40.0/24 maxlen: 24
192.121.50.0/23 maxlen: 23
192.121.52.0/24 maxlen: 24
192.121.115.0/24 maxlen: 24
192.121.229.0/24 maxlen: 24
192.165.12.0/24 maxlen: 24
192.165.31.0/24 maxlen: 24
192.165.95.0/24 maxlen: 24
192.165.173.0/24 maxlen: 24
192.165.180.0/24 maxlen: 24
192.165.229.0/24 maxlen: 24
192.176.33.0/24 maxlen: 24
192.176.124.0/24 maxlen: 24
193.180.7.0/24 maxlen: 24
193.180.175.0/24 maxlen: 24
193.180.176.0/24 maxlen: 24
193.181.72.0/24 maxlen: 24
193.181.73.0/24 maxlen: 24
193.181.74.0/24 maxlen: 24
193.182.107.0/24 maxlen: 24
193.182.126.0/24 maxlen: 24
193.182.152.0/23 maxlen: 23
193.182.152.0/24 maxlen: 24
193.182.153.0/24 maxlen: 24
193.182.190.0/24 maxlen: 24
193.183.228.0/23 maxlen: 23
193.183.230.0/23 maxlen: 23
193.183.236.0/23 maxlen: 23
193.234.184.0/24 maxlen: 24
193.234.185.0/24 maxlen: 24
194.14.154.0/24 maxlen: 24
194.14.155.0/24 maxlen: 24
194.14.156.0/24 maxlen: 24
194.14.245.0/24 maxlen: 24
194.68.72.0/22 maxlen: 22
194.68.76.0/23 maxlen: 23
194.68.79.0/24 maxlen: 24
194.68.127.0/24 maxlen: 24
194.103.240.0/20 maxlen: 20
194.103.240.0/21 maxlen: 21
194.103.249.0/24 maxlen: 24
194.103.250.0/23 maxlen: 23
194.103.252.0/22 maxlen: 22
194.132.95.0/24 maxlen: 24
194.132.188.0/23 maxlen: 23
194.132.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:7c:42:6d:2d:a3:90:fd:e3:b3:66:7c:0f:b1:80:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 19 13:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b969867a6b5308d841bf04c56d84326af787114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4b:82:b9:da:a2:64:0d:00:df:78:d7:2a:d2:
f9:2b:46:92:b5:49:26:06:50:02:40:cf:ea:5f:4f:
f9:d6:74:a7:f3:d1:68:f2:b5:02:b9:09:c3:29:b4:
27:b1:9a:87:c6:a1:05:58:8d:e0:7b:33:ef:33:b4:
24:0a:96:23:70:f6:8d:ca:6b:3b:ba:3e:0c:f7:a9:
a6:92:ac:16:30:7a:98:c6:74:53:c3:56:a2:e4:5c:
7b:b4:8a:a6:fc:5a:e7:23:cc:3e:6f:21:03:88:1b:
16:43:6c:3f:b9:c2:a2:d9:e3:a9:f2:f4:10:46:10:
18:78:ff:77:10:e6:5c:40:79:4c:e7:99:c6:ab:60:
c5:d8:29:7d:1d:66:ca:0e:19:74:cc:8e:27:b5:c5:
f5:66:8f:86:7f:6a:5c:2f:c0:81:a8:21:6f:91:34:
0b:70:c4:ca:9a:59:e5:05:3f:fa:e0:0d:6a:ee:5d:
3b:d3:e2:6d:6c:1a:25:d4:7b:1e:70:1f:b2:fb:e1:
b5:bf:5b:3f:cf:23:51:01:57:bc:00:12:12:df:0a:
bd:15:96:ed:6e:31:75:f8:20:78:01:5c:ac:a4:d4:
84:03:35:f8:20:4f:6f:43:f3:51:d7:06:73:42:17:
a8:cd:b8:77:fa:36:bd:79:77:ba:e3:38:57:d0:c0:
da:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:96:98:67:A6:B5:30:8D:84:1B:F0:4C:56:D8:43:26:AF:78:71:14
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/G5aYZ6a1MI2EG_BMVthDJq94cRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.96.0/24
192.121.40.0/24
192.121.50.0-192.121.52.255
192.121.115.0/24
192.121.229.0/24
192.165.12.0/24
192.165.31.0/24
192.165.95.0/24
192.165.173.0/24
192.165.180.0/24
192.165.229.0/24
192.176.33.0/24
192.176.124.0/24
193.180.7.0/24
193.180.175.0-193.180.176.255
193.181.72.0-193.181.74.255
193.182.107.0/24
193.182.126.0/24
193.182.152.0/23
193.182.190.0/24
193.183.228.0/22
193.183.236.0/23
193.234.184.0/23
194.14.154.0-194.14.156.255
194.14.245.0/24
194.68.72.0-194.68.77.255
194.68.79.0/24
194.68.127.0/24
194.103.240.0/20
194.132.95.0/24
194.132.188.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:bd:7e:9c:cf:d7:59:38:de:24:3d:95:34:9b:0b:0e:1a:3b:
ab:d5:21:41:6a:e2:e3:e9:bb:f7:e0:ff:09:fd:3c:b4:84:0f:
d5:a6:46:ff:61:bf:cd:0c:28:64:ff:a8:3e:d0:8d:fd:0e:28:
22:5d:38:83:75:2a:a7:8a:cb:e2:2d:4a:c8:22:59:30:ef:23:
d7:f1:c4:c6:41:8c:94:44:d2:ce:e4:dc:46:ee:51:1d:4e:51:
c8:25:71:1f:b4:14:03:45:87:b2:1f:9c:4a:df:9d:96:3b:ee:
aa:1f:c0:be:68:b8:88:c6:80:bc:43:d0:73:14:d2:ae:92:f9:
3f:c9:00:30:d2:0a:1e:24:a8:03:79:9f:8d:38:a0:26:52:75:
1f:78:3b:b5:7e:ed:44:e7:6c:47:68:89:f7:9e:fa:b4:c3:f9:
40:4d:6b:d0:65:c8:18:19:07:57:cd:5b:b7:ad:20:3b:ac:dd:
5a:22:a1:30:e1:d5:ce:d1:3c:41:20:97:54:f5:bf:56:a3:a9:
08:20:35:c6:d5:03:19:81:0b:25:d0:97:86:a6:b4:24:7a:75:
8a:d9:53:b0:6f:56:fc:8b:31:60:66:0d:21:c0:5f:99:b3:bf:
1b:87:bc:c6:7c:a1:94:04:c2:e1:b7:8d:2e:20:cb:31:61:8d:
25:f2:8a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 17:30:49 2024 by rpki-client on console-fra.rpki-client.org