Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/LeF9wI4CcTL9ilZnHIUMu4LMNNg.roa
File: LeF9wI4CcTL9ilZnHIUMu4LMNNg.roa (raw, json)
Hash identifier: R/260ayWSds3fkmGf472rAEx+Tu19ConoVaBfpd9ckg=
Subject key identifier: 2D:E1:7D:C0:8E:02:71:32:FD:8A:56:67:1C:85:0C:BB:82:CC:34:D8
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 019233EAA569502DB6F3FFDE1B0952CF3B50
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/LeF9wI4CcTL9ilZnHIUMu4LMNNg.roa
Signing time: Fri 27 Sep 2024 14:37:48 +0000
ROA not before: Fri 27 Sep 2024 14:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1820
IP address blocks: 31.172.136.0/21 maxlen: 32
31.172.142.0/24 maxlen: 32
31.223.224.0/21 maxlen: 32
80.92.224.0/20 maxlen: 32
82.117.244.0/24 maxlen: 32
85.90.211.0/24 maxlen: 32
85.90.223.0/24 maxlen: 32
91.226.1.0/24 maxlen: 32
91.231.127.0/24 maxlen: 32
92.60.176.0/20 maxlen: 32
92.119.220.0/22 maxlen: 32
128.0.168.0/21 maxlen: 32
185.16.228.0/22 maxlen: 32
185.38.208.0/23 maxlen: 32
185.39.196.0/22 maxlen: 32
185.45.244.0/22 maxlen: 32
185.170.192.0/22 maxlen: 32
193.16.47.0/24 maxlen: 32
193.104.182.0/24 maxlen: 32
193.111.0.0/23 maxlen: 32
193.111.48.0/22 maxlen: 32
195.66.93.0/24 maxlen: 32
195.177.72.0/22 maxlen: 32
212.110.129.0/24 maxlen: 32
212.110.130.0/23 maxlen: 32
212.110.132.0/23 maxlen: 32
212.110.134.0/23 maxlen: 32
212.110.136.0/22 maxlen: 32
212.110.140.0/23 maxlen: 32
212.110.142.0/23 maxlen: 32
212.110.152.0/23 maxlen: 32
212.110.154.0/23 maxlen: 32
217.20.160.0/19 maxlen: 32
217.20.164.0/22 maxlen: 32
217.20.176.0/20 maxlen: 32
217.20.184.0/22 maxlen: 32
2a01:6b0::/32 maxlen: 128
2a13:8800::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:33:ea:a5:69:50:2d:b6:f3:ff:de:1b:09:52:cf:3b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Sep 27 14:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2de17dc08e027132fd8a56671c850cbb82cc34d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9d:12:14:39:b0:49:7c:56:76:60:aa:b7:4f:
c0:74:40:3b:9e:0a:a7:55:3c:5f:b9:20:e4:0a:26:
b1:8b:83:f4:67:ed:a7:1f:ca:20:84:45:e9:ab:b7:
80:d7:0d:9e:6c:5b:2a:e0:19:81:5c:b1:43:a2:a6:
99:67:ab:a1:7c:e2:1b:9b:1a:46:44:60:42:72:06:
73:38:37:1f:39:ca:94:00:63:c7:86:bc:0d:39:3a:
1a:12:a5:50:ed:26:b6:0d:22:4d:b9:b4:af:bb:1e:
17:56:08:9c:0b:82:f0:37:d6:cd:be:4e:7d:a3:bd:
11:85:fe:cc:03:5f:2b:56:1f:5f:38:13:62:64:1b:
58:91:a5:ad:0a:59:f3:1f:7b:65:69:31:e3:6d:fa:
c4:29:e6:b3:53:8d:7f:0c:96:4c:d0:7e:e5:f4:64:
5b:e9:21:90:90:02:b9:b2:c2:77:d5:e3:f9:7a:64:
3d:df:69:79:97:12:99:77:c1:b7:43:d1:ff:91:f4:
60:8f:1b:78:eb:73:e2:6e:5e:56:ea:bd:e4:89:0e:
95:1e:f4:9e:3e:5d:b5:64:5f:9a:da:0b:eb:40:0a:
ad:bd:51:5c:f9:7e:36:2d:dc:d7:60:b2:df:94:33:
a3:b6:54:bd:a7:af:16:fa:1f:f5:02:7d:69:9f:1f:
d1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E1:7D:C0:8E:02:71:32:FD:8A:56:67:1C:85:0C:BB:82:CC:34:D8
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/LeF9wI4CcTL9ilZnHIUMu4LMNNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.136.0/21
31.223.224.0/21
80.92.224.0/20
82.117.244.0/24
85.90.211.0/24
85.90.223.0/24
91.226.1.0/24
91.231.127.0/24
92.60.176.0/20
92.119.220.0/22
128.0.168.0/21
185.16.228.0/22
185.38.208.0/23
185.39.196.0/22
185.45.244.0/22
185.170.192.0/22
193.16.47.0/24
193.104.182.0/24
193.111.0.0/23
193.111.48.0/22
195.66.93.0/24
195.177.72.0/22
212.110.129.0-212.110.143.255
212.110.152.0/22
217.20.160.0/19
IPv6:
2a01:6b0::/32
2a13:8800::/29
Signature Algorithm: sha256WithRSAEncryption
09:de:2c:a9:74:c4:5e:49:49:08:d1:a9:17:04:b4:7d:c6:02:
a8:a0:95:d3:31:4c:33:57:9c:47:c3:22:1d:f1:cf:bc:7e:6b:
4b:78:cd:c5:18:c0:c2:72:09:4d:e6:ac:5d:3d:81:50:1e:0a:
eb:d9:3a:03:3e:f4:e3:16:35:c0:e7:dc:b0:1c:0e:34:c2:f0:
54:11:6e:12:90:6e:49:6b:d9:ae:02:50:bd:8e:78:f9:33:d5:
ea:1f:f5:e6:8d:44:6e:2e:46:1b:9f:c1:22:b0:16:3f:d9:fd:
ce:14:12:24:a5:7d:97:5c:0f:36:56:db:62:f1:63:0d:6a:12:
7a:4c:4f:cc:c7:5b:a1:bc:38:ee:6c:a8:b7:5d:b1:51:97:ce:
fc:af:8e:9a:ea:38:38:83:5e:bb:71:6a:77:77:c9:9a:c2:75:
85:ed:3a:f2:10:70:ec:81:1e:ae:7f:0d:b3:43:61:86:f6:67:
0c:a1:39:b2:85:ae:4c:65:38:b4:5f:0d:a1:e3:da:e9:73:91:
a8:3d:55:5c:35:e1:73:46:1e:89:9f:38:44:9b:3b:9a:28:b3:
17:a4:49:a9:fc:1f:d6:45:bc:c5:66:be:69:d3:58:d9:6d:13:
b1:2a:56:5f:82:28:6a:47:e6:6d:8c:e9:55:b8:df:27:cb:26:
d7:38:13:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:01:28 2024 by rpki-client on console-ams.rpki-client.org