Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/1CGD5tQBbaefuItjV8AOIIQ2ApU.roa
File: 1CGD5tQBbaefuItjV8AOIIQ2ApU.roa (raw, json)
Hash identifier: FSOA9oUUuL44I8rKYLgdgbq4UCFmiTX8wVv2hxYgUEo=
Subject key identifier: D4:21:83:E6:D4:01:6D:A7:9F:B8:8B:63:57:C0:0E:20:84:36:02:95
Certificate issuer: /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial: 018CC726F9C754D77E7AC782982A6A4A10A3
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/1CGD5tQBbaefuItjV8AOIIQ2ApU.roa
Signing time: Mon 01 Jan 2024 22:31:09 +0000
ROA not before: Mon 01 Jan 2024 22:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33924
IP address blocks: 31.222.44.0/24 maxlen: 24
31.222.44.0/22 maxlen: 22
31.222.40.0/22 maxlen: 22
31.222.40.0/21 maxlen: 21
31.222.40.0/24 maxlen: 24
31.222.41.0/24 maxlen: 24
31.222.42.0/24 maxlen: 24
31.222.43.0/24 maxlen: 24
31.222.45.0/24 maxlen: 24
31.222.46.0/24 maxlen: 24
31.222.47.0/24 maxlen: 24
185.55.44.0/22 maxlen: 22
185.55.44.0/24 maxlen: 24
185.55.44.0/23 maxlen: 23
185.55.45.0/24 maxlen: 24
185.55.46.0/23 maxlen: 23
185.55.46.0/24 maxlen: 24
185.55.47.0/24 maxlen: 24
84.20.64.0/19 maxlen: 19
84.20.64.0/20 maxlen: 20
84.20.64.0/24 maxlen: 24
84.20.64.0/22 maxlen: 22
84.20.64.0/21 maxlen: 21
84.20.65.0/24 maxlen: 24
84.20.66.0/24 maxlen: 24
84.20.67.0/24 maxlen: 24
84.20.68.0/24 maxlen: 24
84.20.68.0/22 maxlen: 22
84.20.69.0/24 maxlen: 24
84.20.70.0/24 maxlen: 24
84.20.71.0/24 maxlen: 24
84.20.78.0/24 maxlen: 24
84.20.72.0/24 maxlen: 24
84.20.72.0/22 maxlen: 22
84.20.78.0/23 maxlen: 23
84.20.73.0/24 maxlen: 24
84.20.74.0/24 maxlen: 24
84.20.75.0/24 maxlen: 24
84.20.76.0/23 maxlen: 23
84.20.76.0/24 maxlen: 24
84.20.76.0/22 maxlen: 22
84.20.77.0/24 maxlen: 24
84.20.85.0/24 maxlen: 24
84.20.83.0/24 maxlen: 24
84.20.82.0/24 maxlen: 24
84.20.84.0/24 maxlen: 24
84.20.84.0/22 maxlen: 22
84.20.79.0/24 maxlen: 24
84.20.80.0/22 maxlen: 22
84.20.80.0/24 maxlen: 24
84.20.80.0/21 maxlen: 21
84.20.81.0/24 maxlen: 24
84.20.86.0/24 maxlen: 24
84.20.87.0/24 maxlen: 24
84.20.88.0/23 maxlen: 23
84.20.88.0/24 maxlen: 24
84.20.88.0/22 maxlen: 22
84.20.89.0/24 maxlen: 24
84.20.90.0/24 maxlen: 24
84.20.91.0/24 maxlen: 24
84.20.95.0/24 maxlen: 24
84.20.92.0/24 maxlen: 24
2a00:6b81::/32 maxlen: 32
2a00:6b82::/32 maxlen: 32
2a00:6b84::/32 maxlen: 32
2a00:6b85::/32 maxlen: 32
2a00:6b80::/29 maxlen: 29
2a00:6b87::/32 maxlen: 32
2a00:6b83::/32 maxlen: 32
2a00:6b86::/32 maxlen: 32
2a00:6b80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:f9:c7:54:d7:7e:7a:c7:82:98:2a:6a:4a:10:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Validity
Not Before: Jan 1 22:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d42183e6d4016da79fb88b6357c00e2084360295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a4:75:8a:49:aa:d2:7e:2d:ab:a2:7d:58:3b:
b9:72:b4:9d:79:e2:ea:1e:70:18:39:6e:8c:08:0f:
b9:19:c9:91:a3:cd:ac:5b:96:48:22:ef:af:ec:6c:
1c:90:15:7a:66:51:3e:91:16:1f:de:9a:b8:89:e5:
bb:b9:ce:b0:45:01:5e:7f:22:9c:fb:7c:f2:e2:ef:
3f:21:e0:ce:be:31:cc:7b:17:19:15:5a:be:77:ed:
d4:5b:a7:ff:6c:9b:3c:38:0b:0c:3d:17:8c:72:22:
fa:71:28:8c:27:eb:d2:94:25:c4:51:ef:46:9b:52:
1b:72:be:e0:a6:cd:8e:f9:55:20:77:39:78:92:31:
6e:c8:63:e8:03:99:69:7a:ac:9f:d1:8d:35:9c:13:
eb:a0:24:3d:15:26:61:6b:17:45:7a:29:b9:87:31:
09:9b:ac:95:1f:f3:a5:02:8a:75:73:bf:d5:ed:f4:
a9:f6:bd:2b:e4:5c:4e:7c:65:de:b0:56:b1:d4:74:
c7:ea:6b:ad:cd:be:08:e9:f2:ee:03:23:4a:9c:66:
d6:2c:3e:6c:d0:04:34:c6:5c:1d:20:63:be:de:b4:
88:1a:19:4f:b4:67:27:fc:2e:a1:c6:d1:ae:b6:21:
36:78:9b:12:1d:79:51:ff:28:b8:04:a7:e4:bb:8f:
a4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:21:83:E6:D4:01:6D:A7:9F:B8:8B:63:57:C0:0E:20:84:36:02:95
X509v3 Authority Key Identifier:
keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/1CGD5tQBbaefuItjV8AOIIQ2ApU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.40.0/21
84.20.64.0/19
185.55.44.0/22
IPv6:
2a00:6b80::/29
Signature Algorithm: sha256WithRSAEncryption
26:1c:46:dd:46:37:52:17:e6:a0:21:93:04:40:ce:93:2c:32:
44:76:14:04:f6:28:ae:1f:cd:db:99:46:64:11:82:6b:41:6a:
94:9d:c3:48:46:c6:be:94:78:dd:b3:a4:6c:ac:c8:ab:47:1e:
42:f9:e3:5c:95:38:0f:17:85:fa:5b:05:19:7e:33:78:80:c0:
71:05:52:22:eb:90:3e:54:59:f3:ba:97:9b:53:d5:7b:31:21:
2d:eb:7d:b4:84:fb:f5:12:aa:50:21:d0:47:9d:a3:6b:32:4d:
d9:6f:f6:04:fc:10:24:8b:f4:e7:c6:10:9a:e1:04:65:0b:31:
bc:22:b7:71:a3:db:b0:25:0e:99:e2:d8:b4:70:86:f7:67:65:
ae:72:86:6e:ea:e5:a8:89:10:55:e6:d7:1e:24:4a:e4:cf:63:
3b:16:76:46:04:1a:26:4d:b9:17:11:09:0e:da:f5:55:37:7f:
80:4e:d3:92:8b:1b:9e:50:f9:c2:73:84:ee:1c:be:54:68:b0:
82:f2:c7:ae:73:31:af:7f:eb:eb:be:7c:6b:3f:ff:9b:93:2b:
93:96:b4:9a:b1:01:4f:a6:85:b6:83:5b:6b:cd:95:83:cb:b5:
f4:6f:8d:0e:b3:23:3f:cb:39:7e:de:80:b2:f0:bd:eb:4c:d5:
23:f4:0e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:48:41 2024 by rpki-client on console-ams.rpki-client.org