Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/A1_KgY5Uq9rNxJ4v3tZkPRUdhxE.roa
File: A1_KgY5Uq9rNxJ4v3tZkPRUdhxE.roa (raw, json)
Hash identifier: qqdElvurhMLT66aDDQk7DC2eiJbzw0Mw1Yc8hyIryEY=
Subject key identifier: 03:5F:CA:81:8E:54:AB:DA:CD:C4:9E:2F:DE:D6:64:3D:15:1D:87:11
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 018CC3489108140C0356CEEE7DF17B3AB938
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/A1_KgY5Uq9rNxJ4v3tZkPRUdhxE.roa
Signing time: Mon 01 Jan 2024 04:29:21 +0000
ROA not before: Mon 01 Jan 2024 04:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202053
IP address blocks: 94.237.4.0/22 maxlen: 22
94.237.1.0/24 maxlen: 24
94.237.0.0/24 maxlen: 24
94.237.2.0/23 maxlen: 23
94.237.8.0/21 maxlen: 21
5.22.208.0/21 maxlen: 21
185.26.48.0/22 maxlen: 22
5.22.216.0/22 maxlen: 22
5.22.220.0/22 maxlen: 22
94.237.80.0/20 maxlen: 20
94.237.96.0/21 maxlen: 21
94.237.104.0/22 maxlen: 22
94.237.108.0/22 maxlen: 22
94.237.112.0/21 maxlen: 21
94.237.16.0/21 maxlen: 21
94.237.24.0/21 maxlen: 21
94.237.32.0/21 maxlen: 21
94.237.40.0/21 maxlen: 21
94.237.48.0/20 maxlen: 20
94.237.64.0/20 maxlen: 20
185.20.136.0/22 maxlen: 22
94.237.120.0/22 maxlen: 22
94.237.124.0/23 maxlen: 23
185.70.196.0/22 maxlen: 22
94.237.126.0/24 maxlen: 24
194.62.96.0/22 maxlen: 22
95.111.208.0/22 maxlen: 22
95.111.216.0/21 maxlen: 21
83.136.248.0/21 maxlen: 21
95.111.192.0/20 maxlen: 20
80.69.172.0/22 maxlen: 22
2a04:3546::/32 maxlen: 32
2a04:3545::/32 maxlen: 32
2a04:3542::/32 maxlen: 32
2a04:3542:8000::/34 maxlen: 34
2a04:3543::/32 maxlen: 32
2a04:3541:8000::/34 maxlen: 34
2a04:3541::/32 maxlen: 32
2a04:3544:8000::/34 maxlen: 34
2a04:3544::/32 maxlen: 32
2a04:3540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:91:08:14:0c:03:56:ce:ee:7d:f1:7b:3a:b9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Jan 1 04:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=035fca818e54abdacdc49e2fded6643d151d8711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b6:4a:8c:a3:42:3c:3c:9b:e3:4c:fd:c1:41:
61:32:0c:3d:e7:a3:1d:e1:d8:92:55:35:57:5c:8d:
42:dc:5b:14:48:1a:3d:20:3e:28:98:95:1e:aa:70:
86:c8:f0:71:98:a3:40:48:85:51:3c:09:20:bd:1f:
13:a5:1c:e0:78:2e:3b:bb:fa:ad:df:d1:8c:43:a3:
a0:9c:3b:89:f9:15:4b:9b:75:b1:46:04:d8:c4:8e:
a1:1a:43:b6:5d:6a:44:03:89:1d:74:90:35:73:c5:
fc:98:dd:6b:3a:df:e3:ec:fc:b2:bb:77:e5:5a:b8:
42:2b:d8:b3:84:7c:ae:ca:04:5a:b8:5f:41:86:cc:
82:23:a2:7c:25:ed:5b:ee:73:54:bb:e3:31:30:fd:
76:56:4f:ad:98:c7:3e:21:fc:62:86:d2:3c:f2:5d:
1c:29:42:84:fc:e5:c8:61:84:bf:29:28:da:26:cc:
69:f7:50:eb:9f:a7:03:f3:f7:0a:19:8d:77:52:6a:
76:df:7d:a8:c4:89:23:6f:bc:6d:1e:74:a1:10:da:
63:18:fc:07:ba:e4:18:af:26:b7:65:6a:6d:38:2a:
ec:a1:1c:2a:c0:a6:90:2a:1b:a6:f1:36:10:bc:d0:
b1:c9:c0:24:db:54:33:d4:9a:31:a4:ab:4e:df:5d:
d7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5F:CA:81:8E:54:AB:DA:CD:C4:9E:2F:DE:D6:64:3D:15:1D:87:11
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/A1_KgY5Uq9rNxJ4v3tZkPRUdhxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.208.0/20
80.69.172.0/22
83.136.248.0/21
94.237.0.0-94.237.126.255
95.111.192.0-95.111.211.255
95.111.216.0/21
185.20.136.0/22
185.26.48.0/22
185.70.196.0/22
194.62.96.0/22
IPv6:
2a04:3540::-2a04:3546:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
16:88:5d:3f:a4:be:de:f8:d2:0d:c1:f1:e7:92:04:57:9f:b3:
93:01:d9:27:87:6b:b8:88:81:f3:29:dd:6c:10:aa:09:17:95:
65:14:1d:82:dd:7f:06:64:bf:8a:40:e1:11:b0:ab:6a:db:00:
9a:39:2c:41:a5:30:6e:7f:a4:72:23:07:ef:d2:59:04:c9:b0:
12:3c:b7:59:a7:84:38:26:a6:9e:e7:5e:50:ce:a2:56:2c:73:
dc:17:4a:9e:22:bf:54:a4:54:8d:69:4e:ad:fc:4f:d7:d9:4c:
b1:cf:3a:d2:24:22:8c:8f:8c:0e:0a:f0:99:78:77:f0:1d:e2:
6f:b4:9d:a2:f2:a3:c3:72:b7:9d:3a:64:73:ca:60:8b:9e:ee:
c0:95:23:f7:f9:b0:cf:6b:6c:3c:66:00:ae:30:e9:f3:26:93:
3c:43:ea:53:72:5b:d3:a6:3f:cf:46:4b:08:aa:90:ad:00:71:
c3:56:5a:06:f5:31:b2:3b:6a:b9:47:6a:04:fc:c7:9c:88:9f:
0c:d5:1d:71:03:69:de:c2:a2:ad:2f:ed:4c:e1:78:f8:d5:b5:
1d:87:d9:48:79:70:32:6c:6c:b5:08:fa:07:bc:ee:75:5b:4b:
c8:ef:26:1c:46:a5:03:93:ea:f4:8c:31:c4:db:96:4c:c4:b9:
a2:b2:77:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:41:19 2024 by rpki-client on console-fra.rpki-client.org