Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/qdq54RRvB-AYc2A3gwXZmONGDXM.roa
File: qdq54RRvB-AYc2A3gwXZmONGDXM.roa (raw, json)
Hash identifier: Z1B3kHVP2VFDkhqL0JJ0MITwjyvsVFJS+vaGTTglo3U=
Subject key identifier: A9:DA:B9:E1:14:6F:07:E0:18:73:60:37:83:05:D9:98:E3:46:0D:73
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 0190DF9AC03FF2326E457CFEB226F91156C2
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/qdq54RRvB-AYc2A3gwXZmONGDXM.roa
Signing time: Tue 23 Jul 2024 12:39:39 +0000
ROA not before: Tue 23 Jul 2024 12:39:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7342
IP address blocks: 81.19.192.0/24 maxlen: 24
81.19.193.0/24 maxlen: 24
81.19.196.0/24 maxlen: 24
81.19.197.0/24 maxlen: 24
81.19.198.0/24 maxlen: 24
81.19.199.0/24 maxlen: 24
81.19.200.0/24 maxlen: 24
81.19.201.0/24 maxlen: 24
81.19.202.0/24 maxlen: 24
81.19.203.0/24 maxlen: 24
81.19.204.0/24 maxlen: 24
81.19.205.0/24 maxlen: 24
81.19.206.0/24 maxlen: 24
81.19.207.0/24 maxlen: 24
185.100.3.0/24 maxlen: 24
193.109.220.0/24 maxlen: 24
194.110.75.0/24 maxlen: 24
217.30.80.0/24 maxlen: 24
217.30.80.7/32 maxlen: 32
217.30.81.0/24 maxlen: 24
217.30.82.0/24 maxlen: 24
217.30.83.0/24 maxlen: 24
217.30.84.0/24 maxlen: 24
217.30.85.0/24 maxlen: 24
217.30.87.0/24 maxlen: 24
217.30.92.0/24 maxlen: 24
217.30.94.0/24 maxlen: 24
217.30.95.0/24 maxlen: 24
2a10:eec0::/48 maxlen: 48
2a10:eec0:1::/48 maxlen: 48
2a10:eec0:2::/48 maxlen: 48
2a10:eec0:2:101::7/128 maxlen: 128
2a10:eec0:3::/48 maxlen: 48
2a10:eec0:4::/48 maxlen: 48
2a10:eec0:5::/48 maxlen: 48
2a10:eec0:6::/48 maxlen: 48
2a10:eec0:7::/48 maxlen: 48
2a10:eec0:8::/48 maxlen: 48
2a10:eec0:9::/48 maxlen: 48
2a10:eec0:a::/48 maxlen: 48
2a10:eec0:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:df:9a:c0:3f:f2:32:6e:45:7c:fe:b2:26:f9:11:56:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jul 23 12:39:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9dab9e1146f07e0187360378305d998e3460d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:37:b1:d5:2c:2e:e8:45:1e:6b:c7:24:8c:
d8:e1:23:81:00:ad:7d:84:03:0c:25:48:a4:1d:23:
0f:74:98:80:5e:44:12:05:f8:a6:a2:24:d9:4e:b1:
8d:ae:54:58:99:e1:49:e7:b2:d6:f6:95:3d:99:82:
a1:7c:e3:da:6e:f3:74:48:f1:f0:b1:e8:46:41:ab:
d2:39:95:ad:a8:de:f2:8f:6c:25:b1:73:02:5c:6b:
19:05:16:4f:7d:cd:b7:21:31:94:77:8e:8a:eb:be:
72:cd:5c:ee:59:6d:7b:dc:c2:db:af:2f:e1:3b:fb:
aa:73:e5:a7:bf:b3:ef:3b:ba:65:6d:c1:87:2c:99:
b2:26:3e:9d:98:09:4d:34:30:7c:22:01:15:02:45:
aa:b9:52:82:de:a1:71:6b:6b:38:7f:98:89:d6:1a:
bd:65:16:1c:15:c6:27:66:0d:29:40:ea:52:67:2f:
dc:ef:97:ad:e5:67:aa:2d:66:b0:9e:4c:57:bd:f3:
aa:c1:1a:eb:58:1b:bb:a6:a5:19:e1:02:be:c9:8d:
bf:f3:a4:dc:02:a6:8b:4c:c7:5b:e8:f2:0e:ad:6e:
50:e7:d4:9f:a0:91:68:a0:02:1b:c5:e3:f2:c5:71:
d9:90:2d:4e:e0:de:1f:2d:a2:eb:dd:8e:f1:85:cf:
c2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DA:B9:E1:14:6F:07:E0:18:73:60:37:83:05:D9:98:E3:46:0D:73
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/qdq54RRvB-AYc2A3gwXZmONGDXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.192.0/23
81.19.196.0-81.19.207.255
185.100.3.0/24
193.109.220.0/24
194.110.75.0/24
217.30.80.0-217.30.85.255
217.30.87.0/24
217.30.92.0/24
217.30.94.0/23
IPv6:
2a10:eec0::-2a10:eec0:a:ffff:ffff:ffff:ffff:ffff
2a10:eec0:c::/48
Signature Algorithm: sha256WithRSAEncryption
68:bd:0a:37:db:7b:21:61:b3:65:5b:d2:61:53:8a:93:e5:ae:
f1:6c:40:d4:25:16:f2:8d:5b:29:2d:da:c6:3f:ce:64:76:4d:
cc:3c:f8:30:87:fb:fe:8c:a4:44:fa:58:5d:b1:7c:86:b0:ff:
4c:59:38:13:a2:3f:d7:e2:d5:7e:bf:a5:ef:e1:d3:44:69:7c:
51:26:2c:42:20:b8:ef:fa:00:0e:d7:f3:f9:9f:16:42:b3:96:
fd:e6:f3:dd:17:b3:d8:79:e1:8a:e2:0d:d0:c3:a2:33:de:1b:
4d:80:23:23:dc:42:a6:2d:fe:6d:0c:d6:4f:e4:78:ba:8c:b3:
91:96:1f:2b:15:0b:7d:2c:68:9b:51:ab:1d:0f:06:60:61:a3:
78:93:4c:ca:5e:d6:51:56:3d:dc:80:35:5a:44:27:f4:18:0f:
b0:55:e3:9d:a7:bd:bd:86:ee:e3:7b:09:d2:68:1c:39:12:29:
1a:68:3e:ab:25:8c:d8:87:98:8d:6f:d4:b9:dd:36:97:f0:89:
fc:e8:6f:eb:07:30:b1:54:61:b0:f3:b7:c4:dc:5b:1e:e8:39:
b5:21:83:2f:80:14:e6:c4:dd:fa:9e:0c:d6:86:ca:09:32:18:
d1:90:d2:e0:78:1e:a6:6f:c4:8b:31:ec:cc:7c:ea:62:61:12:
65:03:e2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:47:18 2024 by rpki-client on console-ams.rpki-client.org