Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/9qgKOOZamY01wr5uWeNVLiq3yJs.roa
File: 9qgKOOZamY01wr5uWeNVLiq3yJs.roa (raw, json)
Hash identifier: cl83kM4vv8tR9ezrtvj3JKPEEWK6EHK1kXYLpa3z0BE=
Subject key identifier: F6:A8:0A:38:E6:5A:99:8D:35:C2:BE:6E:59:E3:55:2E:2A:B7:C8:9B
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018F0AA8D8E5867BBB71D5CAA7869C78E74E
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/9qgKOOZamY01wr5uWeNVLiq3yJs.roa
Signing time: Tue 23 Apr 2024 11:13:08 +0000
ROA not before: Tue 23 Apr 2024 11:13:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24810
IP address blocks: 81.22.200.0/24 maxlen: 24
81.22.201.0/24 maxlen: 24
81.22.202.0/24 maxlen: 24
81.22.203.0/24 maxlen: 24
81.22.204.0/24 maxlen: 24
81.22.205.0/24 maxlen: 24
81.22.206.0/24 maxlen: 24
81.22.207.0/24 maxlen: 24
81.22.208.0/24 maxlen: 24
81.22.209.0/24 maxlen: 24
81.22.210.0/24 maxlen: 24
81.22.211.0/24 maxlen: 24
81.22.212.0/24 maxlen: 24
81.22.213.0/24 maxlen: 24
81.22.214.0/24 maxlen: 24
81.22.215.0/24 maxlen: 24
81.23.144.0/24 maxlen: 24
81.23.145.0/24 maxlen: 24
81.23.147.0/24 maxlen: 24
81.23.148.0/24 maxlen: 24
81.23.149.0/24 maxlen: 24
81.23.156.0/24 maxlen: 24
81.23.158.0/24 maxlen: 24
81.23.159.0/24 maxlen: 24
87.117.160.0/24 maxlen: 24
87.117.161.0/24 maxlen: 24
87.117.162.0/24 maxlen: 24
87.117.164.0/24 maxlen: 24
87.117.165.0/24 maxlen: 24
87.117.166.0/24 maxlen: 24
87.117.167.0/24 maxlen: 24
87.117.168.0/24 maxlen: 24
87.117.170.0/24 maxlen: 24
87.117.171.0/24 maxlen: 24
87.117.177.0/24 maxlen: 24
87.117.183.0/24 maxlen: 24
87.117.184.0/24 maxlen: 24
87.117.188.0/24 maxlen: 24
87.117.190.0/24 maxlen: 24
89.248.112.0/24 maxlen: 24
89.248.122.0/24 maxlen: 24
89.248.123.0/24 maxlen: 24
89.248.124.0/24 maxlen: 24
178.20.128.0/24 maxlen: 24
178.20.129.0/24 maxlen: 24
178.20.134.0/24 maxlen: 24
178.20.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0a:a8:d8:e5:86:7b:bb:71:d5:ca:a7:86:9c:78:e7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 23 11:13:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6a80a38e65a998d35c2be6e59e3552e2ab7c89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:51:cf:de:99:e0:36:29:a6:d9:ef:7b:50:c8:
6a:96:98:62:b5:94:f9:83:e7:71:50:ec:62:23:87:
74:9a:dd:1c:7b:52:2e:c7:8a:bb:d4:45:ed:6c:56:
96:00:5f:1a:fe:e9:46:36:63:43:71:23:61:c1:dd:
71:8a:83:74:2c:81:62:d5:11:8d:70:f4:53:17:0c:
f8:96:0e:9a:ab:3f:ea:74:39:ed:98:da:f6:7a:40:
48:3b:70:79:a4:c4:65:8f:a6:a1:39:00:b7:4c:37:
47:59:89:d0:d4:0e:a0:fe:61:c8:6a:5f:8b:be:c7:
51:88:c0:74:dc:96:2f:4f:c5:35:90:c4:ee:a3:d8:
a5:c8:4e:a2:93:5a:16:33:89:dc:7f:9a:c6:93:5f:
42:60:c7:7c:66:97:c4:bc:d9:f1:68:c8:94:56:54:
8d:c0:ca:d9:01:cb:bb:6e:46:dc:f3:80:6e:b1:40:
70:eb:c4:63:56:e0:56:58:92:1a:b2:63:45:95:5c:
dd:fc:1b:72:3d:c3:e5:0d:23:43:bc:49:6a:fc:77:
6e:6b:8b:a4:cb:fb:5d:b6:2f:5a:30:95:98:8c:af:
36:96:5e:e1:a8:33:0a:23:bc:f6:34:ea:11:5e:92:
9b:54:9c:ae:86:90:fc:88:10:e7:e0:18:d1:80:d3:
3d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A8:0A:38:E6:5A:99:8D:35:C2:BE:6E:59:E3:55:2E:2A:B7:C8:9B
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/9qgKOOZamY01wr5uWeNVLiq3yJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.200.0-81.22.215.255
81.23.144.0/23
81.23.147.0-81.23.149.255
81.23.156.0/24
81.23.158.0/23
87.117.160.0-87.117.162.255
87.117.164.0-87.117.168.255
87.117.170.0/23
87.117.177.0/24
87.117.183.0-87.117.184.255
87.117.188.0/24
87.117.190.0/24
89.248.112.0/24
89.248.122.0-89.248.124.255
178.20.128.0/23
178.20.134.0/23
Signature Algorithm: sha256WithRSAEncryption
95:a0:f6:1d:9b:85:ef:c7:40:d0:43:af:88:72:f7:e2:40:96:
cb:0f:fb:07:04:2f:c3:ea:b1:c3:77:95:8a:68:22:cc:5d:75:
54:83:e1:5d:c1:2f:7c:40:14:15:b5:7a:8c:f4:24:bd:58:76:
26:52:93:19:7f:b4:d2:e9:bc:d3:bb:e5:a8:93:a9:a3:f5:30:
79:67:84:a7:0b:87:81:41:44:18:a4:38:02:b2:d4:25:f8:67:
08:cc:3b:d9:29:49:36:e2:46:a1:8e:45:18:39:2c:f7:ef:eb:
b2:6c:0c:41:9b:55:16:4c:fa:40:df:e3:ca:02:7e:b1:e8:1e:
8d:ff:37:54:89:76:6f:59:89:3e:19:32:2b:b3:53:02:64:c9:
3c:b3:17:b0:d4:04:c5:ed:a1:90:73:d4:b3:00:5e:9e:1c:52:
98:75:94:b7:8a:c5:7c:01:1b:d2:c3:a8:26:fb:d3:5e:5e:8a:
58:6e:58:e8:e1:e9:71:76:b5:05:b1:dc:1a:e7:12:3f:a9:22:
a2:ae:67:65:3c:7b:34:96:a4:e0:0b:a8:25:bf:68:67:ab:03:
58:3e:18:64:58:c0:42:06:a5:02:10:6a:c4:cb:4f:69:6e:89:
e7:4b:c0:47:b7:ca:df:29:42:a7:06:b3:55:ae:17:97:ad:c7:
06:87:6d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:52:55 2024 by rpki-client on console-fra.rpki-client.org