Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/w08NPswvfOBQt57NT9Fqxq56q_k.roa
File: w08NPswvfOBQt57NT9Fqxq56q_k.roa (raw, json)
Hash identifier: Qe7OVcMXjQo+xV62Z3WYoKPJzTL+kJzAFhyremQvqOE=
Subject key identifier: C3:4F:0D:3E:CC:2F:7C:E0:50:B7:9E:CD:4F:D1:6A:C6:AE:7A:AB:F9
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01917E91B1BAB4416D0376187FB46AD60CEB
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/w08NPswvfOBQt57NT9Fqxq56q_k.roa
Signing time: Fri 23 Aug 2024 09:29:22 +0000
ROA not before: Fri 23 Aug 2024 09:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3301
IP address blocks: 192.36.96.0/24 maxlen: 24
192.121.40.0/24 maxlen: 24
192.121.50.0/23 maxlen: 23
192.121.52.0/24 maxlen: 24
192.121.115.0/24 maxlen: 24
192.121.229.0/24 maxlen: 24
192.165.8.0/24 maxlen: 24
192.165.12.0/24 maxlen: 24
192.165.31.0/24 maxlen: 24
192.165.95.0/24 maxlen: 24
192.165.173.0/24 maxlen: 24
192.165.180.0/24 maxlen: 24
192.165.229.0/24 maxlen: 24
192.176.33.0/24 maxlen: 24
192.176.124.0/24 maxlen: 24
193.180.7.0/24 maxlen: 24
193.180.175.0/24 maxlen: 24
193.180.176.0/24 maxlen: 24
193.181.72.0/24 maxlen: 24
193.181.73.0/24 maxlen: 24
193.181.74.0/24 maxlen: 24
193.182.107.0/24 maxlen: 24
193.182.126.0/24 maxlen: 24
193.182.152.0/23 maxlen: 23
193.182.152.0/24 maxlen: 24
193.182.153.0/24 maxlen: 24
193.182.190.0/24 maxlen: 24
193.183.228.0/23 maxlen: 23
193.183.230.0/23 maxlen: 23
193.183.236.0/23 maxlen: 23
193.234.184.0/24 maxlen: 24
193.234.185.0/24 maxlen: 24
193.235.48.0/24 maxlen: 24
194.14.154.0/24 maxlen: 24
194.14.155.0/24 maxlen: 24
194.14.156.0/24 maxlen: 24
194.14.245.0/24 maxlen: 24
194.68.72.0/22 maxlen: 22
194.68.76.0/23 maxlen: 23
194.68.79.0/24 maxlen: 24
194.68.127.0/24 maxlen: 24
194.103.240.0/20 maxlen: 20
194.103.240.0/21 maxlen: 21
194.103.249.0/24 maxlen: 24
194.103.250.0/23 maxlen: 23
194.103.252.0/22 maxlen: 22
194.132.95.0/24 maxlen: 24
194.132.188.0/23 maxlen: 23
194.132.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7e:91:b1:ba:b4:41:6d:03:76:18:7f:b4:6a:d6:0c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Aug 23 09:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c34f0d3ecc2f7ce050b79ecd4fd16ac6ae7aabf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:99:21:8e:1c:99:9a:62:ee:61:10:c6:d9:
0d:eb:6c:29:2c:01:37:2c:9e:b1:6b:c7:c9:a1:b7:
06:98:37:10:98:e9:7a:56:40:67:ac:73:37:81:69:
70:39:54:5b:f9:5d:9d:fb:e3:b3:d8:4e:44:02:50:
41:5c:25:e9:57:85:7b:2a:a0:10:0c:a6:f6:e5:79:
a4:ee:d9:1c:fe:b2:17:33:69:61:4c:9e:d8:7c:d7:
ab:86:38:03:18:15:49:a5:bc:bb:32:2e:4f:f6:59:
77:63:20:b5:f3:00:96:65:c4:03:ca:59:87:fb:1d:
fa:97:2b:82:da:ba:85:2e:85:4c:56:70:89:c6:ea:
fe:ce:da:95:cd:5b:1c:9e:fe:14:97:71:2a:fc:19:
8e:00:fd:d5:ba:79:db:4c:6d:99:ae:42:dc:38:4d:
8c:e1:83:44:35:5a:f9:d5:88:91:37:0d:88:a6:04:
dc:f6:45:87:7f:a2:16:32:0a:20:b2:a1:9b:08:b5:
9c:27:ac:e1:5a:18:df:98:46:38:23:26:ad:cf:9f:
11:e5:f4:51:f5:11:4d:33:5b:c7:34:66:33:16:dd:
c8:a0:11:fc:66:4b:26:26:f4:9f:10:7b:8d:e9:68:
18:55:59:71:1a:8a:4d:34:82:98:5e:fe:1e:36:d9:
0f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4F:0D:3E:CC:2F:7C:E0:50:B7:9E:CD:4F:D1:6A:C6:AE:7A:AB:F9
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/w08NPswvfOBQt57NT9Fqxq56q_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.96.0/24
192.121.40.0/24
192.121.50.0-192.121.52.255
192.121.115.0/24
192.121.229.0/24
192.165.8.0/24
192.165.12.0/24
192.165.31.0/24
192.165.95.0/24
192.165.173.0/24
192.165.180.0/24
192.165.229.0/24
192.176.33.0/24
192.176.124.0/24
193.180.7.0/24
193.180.175.0-193.180.176.255
193.181.72.0-193.181.74.255
193.182.107.0/24
193.182.126.0/24
193.182.152.0/23
193.182.190.0/24
193.183.228.0/22
193.183.236.0/23
193.234.184.0/23
193.235.48.0/24
194.14.154.0-194.14.156.255
194.14.245.0/24
194.68.72.0-194.68.77.255
194.68.79.0/24
194.68.127.0/24
194.103.240.0/20
194.132.95.0/24
194.132.188.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:e4:e8:df:5c:bc:9a:b7:68:e4:4c:1d:41:2e:6d:26:b6:3c:
4e:4a:52:03:b6:e6:4e:a1:eb:c0:61:24:ab:c7:dd:c9:ea:2e:
0c:c4:fa:9d:84:38:93:cf:0c:26:d4:30:4a:36:43:cf:cb:58:
0f:17:38:56:65:6b:38:9e:e5:c0:d2:4f:98:00:ca:08:d1:c5:
04:e2:ea:61:95:7c:fa:8b:b0:92:00:31:3f:32:dc:05:f3:41:
f3:b0:78:15:52:78:24:11:50:d0:4c:bc:06:67:cb:da:0f:d7:
f4:3c:6f:b2:ae:d4:dc:30:e5:b6:ff:42:d8:4f:5e:58:f8:6c:
e3:e4:ce:e7:fb:08:16:0a:d7:1b:54:6f:e6:83:72:29:4a:72:
66:b1:d7:ef:59:fa:1e:1a:ab:b6:74:e3:f0:d1:05:7e:ea:9a:
91:7d:50:b8:3c:db:c2:15:19:87:28:45:1f:1f:cf:45:4f:35:
0f:4c:2c:10:b5:89:7b:c6:03:3a:02:6e:95:ac:a3:64:5d:e5:
27:96:2b:26:64:ad:c0:f0:0e:4b:ca:03:1b:ea:c0:03:f4:b3:
32:1e:27:9c:f8:30:e2:d9:c5:cd:a1:0a:fd:20:bd:ac:98:6f:
a6:99:df:3f:23:37:0a:b6:9d:66:e1:e1:43:2f:9d:1f:f6:91:
ef:2b:10:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:10:30 2024 by rpki-client on console-fra.rpki-client.org