Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/xqYohFz7JaKgQMVQ2JDyGUJlrjg.roa
File: xqYohFz7JaKgQMVQ2JDyGUJlrjg.roa (raw, json)
Hash identifier: vtjZ0SbWnf9RutZsnQxwwSlYs2Akc3CtmLo1HF37QR0=
Subject key identifier: C6:A6:28:84:5C:FB:25:A2:A0:40:C5:50:D8:90:F2:19:42:65:AE:38
Certificate issuer: /CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Certificate serial: 018DD649C50B2B2ED63AEF72E4ED3E2B4F8A
Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/xqYohFz7JaKgQMVQ2JDyGUJlrjg.roa
Signing time: Fri 23 Feb 2024 14:06:15 +0000
ROA not before: Fri 23 Feb 2024 14:06:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48314
IP address blocks: 5.180.64.0/24 maxlen: 24
5.180.65.0/24 maxlen: 24
5.180.66.0/24 maxlen: 24
5.180.67.0/24 maxlen: 24
27.123.244.0/22 maxlen: 24
31.214.144.0/24 maxlen: 24
45.10.25.0/24 maxlen: 24
45.10.26.0/24 maxlen: 24
45.10.27.0/24 maxlen: 24
45.91.100.0/24 maxlen: 24
45.91.101.0/24 maxlen: 24
45.91.102.0/24 maxlen: 24
45.91.103.0/24 maxlen: 24
45.133.8.0/24 maxlen: 24
45.133.10.0/23 maxlen: 24
46.251.251.0/24 maxlen: 24
88.218.224.0/24 maxlen: 24
88.218.225.0/24 maxlen: 24
88.218.226.0/24 maxlen: 24
91.210.225.0/24 maxlen: 24
91.210.226.0/24 maxlen: 24
91.210.227.0/24 maxlen: 24
91.216.245.0/24 maxlen: 24
94.199.212.0/24 maxlen: 24
94.199.213.0/24 maxlen: 24
94.199.214.0/24 maxlen: 24
94.199.215.0/24 maxlen: 24
103.241.48.0/22 maxlen: 24
109.230.219.0/24 maxlen: 24
134.255.244.0/24 maxlen: 24
134.255.247.0/24 maxlen: 24
152.89.236.0/24 maxlen: 24
152.89.237.0/24 maxlen: 24
152.89.238.0/24 maxlen: 24
185.194.236.0/24 maxlen: 24
185.194.237.0/24 maxlen: 24
185.194.238.0/24 maxlen: 24
185.194.239.0/24 maxlen: 24
185.242.112.0/24 maxlen: 24
185.242.113.0/24 maxlen: 24
185.242.114.0/24 maxlen: 24
185.242.115.0/24 maxlen: 24
185.245.97.0/24 maxlen: 24
185.245.98.0/24 maxlen: 24
185.245.99.0/24 maxlen: 24
185.248.141.0/24 maxlen: 24
185.248.142.0/24 maxlen: 24
185.248.143.0/24 maxlen: 24
185.250.248.0/24 maxlen: 24
185.250.249.0/24 maxlen: 24
185.250.250.0/24 maxlen: 24
185.250.251.0/24 maxlen: 24
193.32.220.0/24 maxlen: 24
193.32.221.0/24 maxlen: 24
193.32.222.0/24 maxlen: 24
193.32.223.0/24 maxlen: 24
193.135.8.0/24 maxlen: 24
193.135.9.0/24 maxlen: 24
193.135.11.0/24 maxlen: 24
193.142.40.0/24 maxlen: 24
193.142.41.0/24 maxlen: 24
193.142.42.0/24 maxlen: 24
193.142.43.0/24 maxlen: 24
194.26.180.0/24 maxlen: 24
194.26.181.0/24 maxlen: 24
194.26.182.0/24 maxlen: 24
194.26.183.0/24 maxlen: 24
194.45.36.0/24 maxlen: 24
194.45.37.0/24 maxlen: 24
194.45.196.0/23 maxlen: 24
194.48.168.0/24 maxlen: 24
194.48.169.0/24 maxlen: 24
194.48.170.0/24 maxlen: 24
194.48.171.0/24 maxlen: 24
213.190.28.0/24 maxlen: 24
213.190.29.0/24 maxlen: 24
213.190.30.0/24 maxlen: 24
213.190.31.0/24 maxlen: 24
2a0a:51c0::/32 maxlen: 32
2a0a:51c1::/32 maxlen: 48
2a0a:51c2::/32 maxlen: 32
2a0a:51c3::/32 maxlen: 32
2a0a:51c4::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d6:49:c5:0b:2b:2e:d6:3a:ef:72:e4:ed:3e:2b:4f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Validity
Not Before: Feb 23 14:06:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6a628845cfb25a2a040c550d890f2194265ae38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:8f:18:74:3b:73:54:22:52:2e:04:a1:4c:
47:7d:1e:e7:98:42:83:b6:59:9c:93:d0:e9:95:59:
d3:28:19:3c:bb:18:8a:4e:a8:25:14:87:39:ba:a5:
31:ab:b1:12:49:1f:b3:e5:f3:7a:bc:a6:e4:c9:df:
a0:a9:c6:fa:06:f0:80:4b:77:6b:33:d6:0c:5f:f1:
46:3c:f7:41:1b:7a:14:33:2d:cf:50:da:47:e6:45:
e0:50:a5:b4:43:3b:7b:92:b7:c4:2e:3f:9b:08:8d:
20:77:31:6b:d3:0d:7c:89:be:61:f4:00:2b:a7:9a:
25:49:a3:07:47:71:c3:a5:9b:8f:a2:56:45:29:70:
a2:5b:ed:77:8c:3b:94:05:29:7f:2d:d7:e4:f7:9a:
49:7b:29:f2:c4:89:93:b9:2f:33:9c:6f:e2:08:eb:
90:f4:61:7f:34:b8:a9:b0:75:d6:5a:80:1c:e3:82:
a6:55:4e:53:28:8c:6d:1b:86:68:8c:90:1d:bc:3c:
18:f4:c5:9b:ba:ec:89:c1:75:5f:ed:7c:ce:3f:9e:
8e:60:12:ba:15:a8:8b:44:ee:4d:76:e1:33:0a:90:
e8:ad:27:d9:9f:8b:a2:52:93:04:33:00:03:de:9d:
0b:44:95:26:1b:c2:b0:5b:3f:25:65:09:af:43:c7:
87:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A6:28:84:5C:FB:25:A2:A0:40:C5:50:D8:90:F2:19:42:65:AE:38
X509v3 Authority Key Identifier:
keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/xqYohFz7JaKgQMVQ2JDyGUJlrjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.64.0/22
27.123.244.0/22
31.214.144.0/24
45.10.25.0-45.10.27.255
45.91.100.0/22
45.133.8.0/24
45.133.10.0/23
46.251.251.0/24
88.218.224.0-88.218.226.255
91.210.225.0-91.210.227.255
91.216.245.0/24
94.199.212.0/22
103.241.48.0/22
109.230.219.0/24
134.255.244.0/24
134.255.247.0/24
152.89.236.0-152.89.238.255
185.194.236.0/22
185.242.112.0/22
185.245.97.0-185.245.99.255
185.248.141.0-185.248.143.255
185.250.248.0/22
193.32.220.0/22
193.135.8.0/23
193.135.11.0/24
193.142.40.0/22
194.26.180.0/22
194.45.36.0/23
194.45.196.0/23
194.48.168.0/22
213.190.28.0/22
IPv6:
2a0a:51c0::-2a0a:51c4:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9b:3b:38:1d:10:d0:7d:c0:90:53:35:40:75:aa:ba:ce:11:75:
91:70:2d:9e:d7:82:26:c2:ec:3a:49:2e:6e:d6:97:69:63:0e:
82:94:55:97:dd:14:b4:a4:51:fe:85:9b:3e:e0:89:82:df:27:
8a:41:21:9c:25:ed:da:59:0a:3e:76:8c:23:73:cc:70:63:d3:
7d:1e:4a:b7:88:87:f5:aa:28:5a:a8:70:50:ac:a6:72:7b:3f:
ee:5b:89:e4:71:b5:a0:c8:60:41:65:b5:83:a6:d3:ad:cc:5c:
42:e9:f0:2f:b4:79:6b:6a:5d:37:7d:37:88:7e:8c:2e:27:b5:
a2:1f:dc:ac:74:12:5e:cc:30:a7:00:fd:a1:6d:e2:64:7a:77:
61:ae:df:85:0b:dd:bb:13:9a:7a:d1:70:e8:9f:6c:3a:e9:dd:
22:25:f6:36:5a:26:7e:a5:51:ec:2a:f0:4a:54:eb:b8:8d:c4:
c1:0e:ec:33:f3:6e:11:20:b0:1a:50:6d:97:95:b5:02:9b:ba:
a9:8f:0b:d9:43:2b:26:57:99:04:48:9b:19:46:80:71:47:43:
a8:c4:c1:2f:0f:a2:7c:9a:38:23:de:eb:bf:d2:bf:8e:7c:8d:
a2:0e:f5:9d:a4:cb:97:33:ab:83:2a:5e:ce:16:e0:8c:28:77:
23:b8:55:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 17:11:10 2024 by rpki-client on console-fra.rpki-client.org