Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/e1qlrFe1zTK-iiO3swW4phec9Wk.roa
File: e1qlrFe1zTK-iiO3swW4phec9Wk.roa (raw, json)
Hash identifier: qbN6jtssgVrVfm2Y6QiJEb5sLgEoveqiZrItdH9OKWg=
Subject key identifier: 7B:5A:A5:AC:57:B5:CD:32:BE:8A:23:B7:B3:05:B8:A6:17:9C:F5:69
Certificate issuer: /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial: 018CC26D7941EF0C9FE26A1E20636EC79A88
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/e1qlrFe1zTK-iiO3swW4phec9Wk.roa
Signing time: Mon 01 Jan 2024 00:30:03 +0000
ROA not before: Mon 01 Jan 2024 00:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 94.79.96.0/24 maxlen: 24
94.79.97.0/24 maxlen: 24
94.79.98.0/24 maxlen: 24
94.79.93.0/24 maxlen: 24
94.79.94.0/24 maxlen: 24
94.79.95.0/24 maxlen: 24
94.79.92.0/24 maxlen: 24
94.79.103.0/24 maxlen: 24
94.79.104.0/24 maxlen: 24
94.79.105.0/24 maxlen: 24
94.79.100.0/24 maxlen: 24
94.79.101.0/24 maxlen: 24
94.79.102.0/24 maxlen: 24
94.79.99.0/24 maxlen: 24
94.79.110.0/24 maxlen: 24
94.79.111.0/24 maxlen: 24
94.79.112.0/24 maxlen: 24
94.79.107.0/24 maxlen: 24
94.79.108.0/24 maxlen: 24
94.79.109.0/24 maxlen: 24
94.79.106.0/24 maxlen: 24
94.79.117.0/24 maxlen: 24
94.79.118.0/24 maxlen: 24
94.79.114.0/24 maxlen: 24
94.79.115.0/24 maxlen: 24
94.79.116.0/24 maxlen: 24
94.79.113.0/24 maxlen: 24
94.79.124.0/24 maxlen: 24
94.79.125.0/24 maxlen: 24
94.79.121.0/24 maxlen: 24
94.79.122.0/24 maxlen: 24
94.79.123.0/24 maxlen: 24
94.79.119.0/24 maxlen: 24
94.79.120.0/24 maxlen: 24
94.79.126.0/24 maxlen: 24
94.79.127.0/24 maxlen: 24
94.79.64.0/24 maxlen: 24
94.79.68.0/24 maxlen: 24
94.79.69.0/24 maxlen: 24
94.79.70.0/24 maxlen: 24
94.79.71.0/24 maxlen: 24
94.79.65.0/24 maxlen: 24
94.79.66.0/24 maxlen: 24
94.79.67.0/24 maxlen: 24
94.79.75.0/24 maxlen: 24
94.79.76.0/24 maxlen: 24
94.79.77.0/24 maxlen: 24
94.79.78.0/24 maxlen: 24
94.79.72.0/24 maxlen: 24
94.79.73.0/24 maxlen: 24
94.79.74.0/24 maxlen: 24
94.79.82.0/24 maxlen: 24
94.79.83.0/24 maxlen: 24
94.79.84.0/24 maxlen: 24
94.79.85.0/24 maxlen: 24
94.79.79.0/24 maxlen: 24
94.79.80.0/24 maxlen: 24
94.79.81.0/24 maxlen: 24
94.79.89.0/24 maxlen: 24
94.79.90.0/24 maxlen: 24
94.79.91.0/24 maxlen: 24
94.79.86.0/24 maxlen: 24
94.79.87.0/24 maxlen: 24
94.79.88.0/24 maxlen: 24
5.104.4.0/24 maxlen: 24
5.104.0.0/24 maxlen: 24
5.104.1.0/24 maxlen: 24
5.104.2.0/24 maxlen: 24
5.104.3.0/24 maxlen: 24
5.104.11.0/24 maxlen: 24
5.104.7.0/24 maxlen: 24
5.104.8.0/24 maxlen: 24
5.104.9.0/24 maxlen: 24
5.104.10.0/24 maxlen: 24
5.104.5.0/24 maxlen: 24
5.104.6.0/24 maxlen: 24
5.104.14.0/24 maxlen: 24
5.104.15.0/24 maxlen: 24
5.104.12.0/24 maxlen: 24
5.104.13.0/24 maxlen: 24
37.34.3.0/24 maxlen: 24
37.34.4.0/24 maxlen: 24
37.34.0.0/24 maxlen: 24
37.34.1.0/24 maxlen: 24
37.34.2.0/24 maxlen: 24
37.34.10.0/24 maxlen: 24
37.34.11.0/24 maxlen: 24
37.34.6.0/24 maxlen: 24
37.34.7.0/24 maxlen: 24
37.34.8.0/24 maxlen: 24
37.34.9.0/24 maxlen: 24
37.34.5.0/24 maxlen: 24
37.34.17.0/24 maxlen: 24
37.34.13.0/24 maxlen: 24
37.34.14.0/24 maxlen: 24
37.34.15.0/24 maxlen: 24
37.34.16.0/24 maxlen: 24
37.34.12.0/24 maxlen: 24
37.34.24.0/24 maxlen: 24
37.34.20.0/24 maxlen: 24
37.34.21.0/24 maxlen: 24
37.34.22.0/24 maxlen: 24
37.34.23.0/24 maxlen: 24
37.34.18.0/24 maxlen: 24
37.34.19.0/24 maxlen: 24
37.34.31.0/24 maxlen: 24
37.34.27.0/24 maxlen: 24
37.34.28.0/24 maxlen: 24
37.34.29.0/24 maxlen: 24
37.34.30.0/24 maxlen: 24
37.34.25.0/24 maxlen: 24
37.34.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:79:41:ef:0c:9f:e2:6a:1e:20:63:6e:c7:9a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Validity
Not Before: Jan 1 00:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b5aa5ac57b5cd32be8a23b7b305b8a6179cf569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:11:fb:48:26:f0:94:4e:37:6b:98:be:2e:
3c:64:bb:3f:19:e1:61:3c:42:41:fe:32:88:38:81:
58:da:8c:1f:08:c1:9c:7d:de:a8:cb:67:c7:31:a0:
a6:62:cc:9b:98:78:0b:a2:be:53:c2:42:0e:7a:f6:
2a:bc:69:4d:ff:b9:93:37:c6:58:89:2a:63:b0:ec:
76:2c:7b:06:83:5d:43:4c:71:7b:e2:79:f9:92:ae:
3e:f7:eb:70:3a:87:19:f8:a0:92:97:88:60:9d:b8:
69:47:ce:4b:25:7a:5e:48:17:24:2d:d8:66:50:51:
0d:dd:04:4e:e4:df:79:88:2a:f8:17:97:2b:a4:70:
98:92:66:f7:1d:c0:85:b0:3f:92:1b:5f:d9:a3:f1:
82:f1:e7:61:c2:7e:dd:c9:a5:ab:36:57:b0:dd:a8:
3e:ec:a7:96:65:8c:3b:b8:6c:50:4b:c2:2a:c0:4e:
39:df:ea:59:f8:d1:df:c8:4b:44:4d:41:00:78:93:
6c:ca:20:8f:06:ab:4e:bb:0b:f8:a4:ae:46:56:9c:
3e:e0:13:3c:ca:4a:21:92:f9:a7:ee:75:d6:91:4e:
13:48:17:1d:a9:9c:0b:0b:08:1b:a8:88:94:41:bc:
2e:7a:f1:0c:90:91:a9:b9:95:a2:5a:d7:cf:d4:0b:
31:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5A:A5:AC:57:B5:CD:32:BE:8A:23:B7:B3:05:B8:A6:17:9C:F5:69
X509v3 Authority Key Identifier:
keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/e1qlrFe1zTK-iiO3swW4phec9Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.0.0/20
37.34.0.0/19
94.79.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2c:9f:4d:34:f2:61:98:f3:32:07:0e:e7:8f:4e:56:47:8d:2e:
e3:e7:5a:b9:0d:91:97:0f:4c:41:cf:35:ba:1b:49:1d:7f:f3:
fa:b2:99:8f:65:8e:e7:d5:d6:5e:d9:08:18:9e:58:69:dd:d8:
b8:37:62:5a:a8:a2:a8:d0:58:de:9c:fb:4b:34:24:49:e8:15:
d0:ed:7d:09:38:00:8f:ab:03:f3:3a:fa:f9:bd:d4:59:d2:c6:
65:d7:c4:fa:20:be:b7:92:37:2d:0a:03:d7:e9:04:7a:dc:4b:
2d:02:fe:33:74:04:40:89:53:55:77:9f:f8:9d:3a:67:22:3a:
ca:72:38:c4:00:5c:ba:38:0c:e9:72:9e:d7:54:2c:2c:a7:08:
20:70:83:ba:c1:d1:17:04:86:2d:3a:28:c8:b5:47:ba:24:de:
46:dc:4c:3f:9f:c5:61:16:e7:79:bc:cc:7f:ec:1a:2e:47:f7:
93:a9:68:f7:a3:1f:0a:60:4f:18:23:cb:53:af:37:96:b7:f1:
0a:b8:c7:bb:66:92:50:9e:cf:40:7e:72:da:d4:8f:d2:53:1d:
1b:c0:fb:00:e0:f5:ed:7a:f5:8e:c7:1d:18:86:bb:a8:95:2e:
f5:a4:1a:ce:9e:96:57:fc:b9:b3:e0:c9:77:c1:e2:d4:6c:19:
ed:f9:6f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:26:24 2024 by rpki-client on console-ams.rpki-client.org