Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/0JOpQBThJ1AfmbjDUqUihb-3uHk.roa
File: 0JOpQBThJ1AfmbjDUqUihb-3uHk.roa (raw, json)
Hash identifier: RWN5TEsa8wHLP13EfKfg6spfexrb6BzTBMk9Vp7trWc=
Subject key identifier: D0:93:A9:40:14:E1:27:50:1F:99:B8:C3:52:A5:22:85:BF:B7:B8:79
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 018CC2DB212D8557FE2F900ADB48371C70F0
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/0JOpQBThJ1AfmbjDUqUihb-3uHk.roa
Signing time: Mon 01 Jan 2024 02:29:49 +0000
ROA not before: Mon 01 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200088
IP address blocks: 188.225.14.0/24 maxlen: 24
94.228.122.0/24 maxlen: 24
185.247.16.0/24 maxlen: 24
188.225.60.0/24 maxlen: 24
193.201.115.0/24 maxlen: 24
89.191.228.0/24 maxlen: 24
87.249.50.0/24 maxlen: 24
85.193.93.0/24 maxlen: 24
85.193.92.0/24 maxlen: 24
85.193.95.0/24 maxlen: 24
90.156.228.0/24 maxlen: 24
90.156.231.0/24 maxlen: 24
217.151.229.0/24 maxlen: 24
217.151.231.0/24 maxlen: 24
185.104.112.0/24 maxlen: 24
185.104.115.0/24 maxlen: 24
217.25.91.0/24 maxlen: 24
194.35.116.0/24 maxlen: 24
194.35.118.0/24 maxlen: 24
194.35.117.0/24 maxlen: 24
217.25.95.0/24 maxlen: 24
194.35.119.0/24 maxlen: 24
78.40.216.0/24 maxlen: 24
176.57.221.0/24 maxlen: 24
2a03:6f00:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:21:2d:85:57:fe:2f:90:0a:db:48:37:1c:70:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Jan 1 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d093a94014e127501f99b8c352a52285bfb7b879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:54:f9:79:cd:66:1b:80:f3:e9:c2:9a:42:
17:a4:52:48:3b:9c:00:b4:42:ff:30:2f:e4:00:b0:
88:b4:db:96:b3:1f:29:f2:f9:b2:d2:fe:20:79:91:
e7:69:0a:24:eb:97:bc:0c:83:10:b5:bf:a3:82:f3:
9c:65:30:58:64:e4:09:37:a4:22:b3:01:29:76:82:
fe:08:f3:70:bf:95:d8:49:d6:70:a7:fc:0a:e6:39:
8e:6e:c4:a4:36:73:db:cb:b4:1c:ca:43:9b:00:af:
36:6c:2b:f7:57:a2:5c:55:7c:07:bb:1b:31:57:ce:
e1:e4:08:25:0b:9b:1a:3b:fb:9a:96:62:d9:52:14:
27:c6:2d:cf:71:0f:01:d8:b9:1d:99:34:03:d9:20:
e9:26:54:9e:a8:a4:45:25:ce:e6:5b:78:83:93:59:
f4:70:e4:3a:52:74:c4:f9:fd:d5:7d:fa:1d:44:6b:
6c:88:ab:2e:87:b9:d9:bb:56:bb:3a:19:00:85:b2:
ce:86:85:4a:c7:ea:4d:29:8d:6b:7b:e8:f4:b9:79:
3c:84:a6:68:27:b7:06:0e:ef:bb:31:e7:48:ae:05:
12:e7:bb:81:4f:6c:e8:24:9a:7b:67:78:e0:c3:45:
ae:ca:7e:a8:73:cf:da:8d:20:14:0b:8c:0b:0b:f1:
cf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:93:A9:40:14:E1:27:50:1F:99:B8:C3:52:A5:22:85:BF:B7:B8:79
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/0JOpQBThJ1AfmbjDUqUihb-3uHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.216.0/24
85.193.92.0/23
85.193.95.0/24
87.249.50.0/24
89.191.228.0/24
90.156.228.0/24
90.156.231.0/24
94.228.122.0/24
176.57.221.0/24
185.104.112.0/24
185.104.115.0/24
185.247.16.0/24
188.225.14.0/24
188.225.60.0/24
193.201.115.0/24
194.35.116.0/22
217.25.91.0/24
217.25.95.0/24
217.151.229.0/24
217.151.231.0/24
IPv6:
2a03:6f00:8::/48
Signature Algorithm: sha256WithRSAEncryption
a5:c3:38:bb:46:71:d2:f5:c1:6d:da:e0:80:0e:cc:d5:be:50:
8d:20:a9:a2:aa:35:59:ab:58:8c:00:39:fb:bd:db:76:3f:21:
1c:f0:41:98:5a:52:88:be:f6:88:ce:61:1e:f6:b2:af:c6:4b:
da:91:2c:14:6b:c9:58:0e:bc:39:b1:ed:09:53:39:05:f6:55:
90:10:c0:d1:8f:1b:c0:f5:86:83:5b:e5:eb:f4:98:79:12:52:
09:dd:a6:a4:31:f8:8a:87:da:43:e6:fb:c6:bd:ee:6b:54:49:
83:22:99:70:06:dc:9a:8b:8b:17:4a:d4:bd:3e:e9:72:fc:68:
00:27:a2:4a:77:03:bf:b9:63:b6:0b:eb:23:20:16:4b:ad:14:
32:0c:67:b1:aa:5a:c3:20:6c:a6:d0:9e:9d:9a:a2:4f:2c:a1:
dd:4a:e4:ae:7a:11:9a:9c:ed:7e:e5:05:f9:7d:c2:8e:5d:14:
04:fd:11:04:0b:47:d1:a7:77:70:6b:91:3f:6f:93:f7:0a:04:
80:a6:08:64:e6:d2:40:24:55:a2:cd:1a:b7:3f:01:ef:16:4d:
21:21:ea:e2:1d:10:bc:70:0a:1a:7a:ce:99:d8:fd:21:8b:f3:
f2:c3:06:4e:0e:52:9b:cc:fe:4f:7c:04:9f:a5:a1:22:61:df:
99:aa:ef:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 17:58:32 2024 by rpki-client on console-fra.rpki-client.org