Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/R3ah98bTNLKVwamLUZNAMD2VfVE.roa
File: R3ah98bTNLKVwamLUZNAMD2VfVE.roa (raw, json)
Hash identifier: jL7sMyFB6XUjGvIkLrJIJLBvMuAvR8LR2foDs4adzVY=
Subject key identifier: 47:76:A1:F7:C6:D3:34:B2:95:C1:A9:8B:51:93:40:30:3D:95:7D:51
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 018CC2DB190A31EBA3EB8FB188CA329A205C
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/R3ah98bTNLKVwamLUZNAMD2VfVE.roa
Signing time: Mon 01 Jan 2024 02:29:47 +0000
ROA not before: Mon 01 Jan 2024 02:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43350
IP address blocks: 185.107.44.0/22 maxlen: 24
109.201.128.0/19 maxlen: 19
185.107.45.0/24 maxlen: 24
185.107.56.0/22 maxlen: 22
185.107.68.0/22 maxlen: 22
185.107.80.0/22 maxlen: 22
185.107.37.0/24 maxlen: 24
185.107.36.0/24 maxlen: 24
185.107.38.0/24 maxlen: 24
212.92.112.0/21 maxlen: 21
212.92.120.0/22 maxlen: 22
212.92.124.0/23 maxlen: 23
92.114.100.0/24 maxlen: 24
92.114.100.0/22 maxlen: 22
89.38.160.0/22 maxlen: 22
85.159.232.0/21 maxlen: 24
46.166.176.0/20 maxlen: 24
37.143.32.0/21 maxlen: 24
185.107.92.0/22 maxlen: 22
185.107.100.0/22 maxlen: 24
185.107.116.0/22 maxlen: 24
46.166.128.0/19 maxlen: 24
212.92.104.0/21 maxlen: 21
185.11.144.0/24 maxlen: 24
37.156.228.0/24 maxlen: 24
188.209.57.0/24 maxlen: 24
188.209.56.0/24 maxlen: 24
188.209.55.0/24 maxlen: 24
37.153.168.0/22 maxlen: 22
77.247.176.0/24 maxlen: 24
77.247.176.0/21 maxlen: 21
5.104.136.0/21 maxlen: 24
185.7.76.0/22 maxlen: 24
176.126.232.0/24 maxlen: 24
176.126.233.0/24 maxlen: 24
2a00:1768::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 07:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:19:0a:31:eb:a3:eb:8f:b1:88:ca:32:9a:20:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Jan 1 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4776a1f7c6d334b295c1a98b519340303d957d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:64:00:5d:c4:f6:e9:a3:56:83:48:eb:7b:1d:
4d:bc:72:c7:d8:d3:a2:5d:08:c5:dd:d9:ed:47:28:
91:81:bf:e8:ba:bc:9a:20:04:69:fb:e0:ad:35:44:
f7:87:09:6c:51:eb:9a:11:72:11:16:3f:72:c4:49:
11:fa:53:28:6c:dc:e0:c5:d1:43:92:ba:bf:09:9e:
f3:bd:69:85:dc:d9:4a:ac:34:c3:1e:b9:14:e9:98:
af:db:ce:86:10:c2:c4:0f:ae:e7:c4:82:e2:39:54:
1a:00:0b:5c:e1:52:79:a8:1a:e8:23:3a:3d:fd:8e:
6e:af:fc:d7:72:5d:c7:4a:ea:f3:db:28:b8:8b:82:
30:b2:f3:0b:37:9c:0a:5c:fb:f2:e0:b4:fa:2b:c0:
1e:e3:7c:72:b3:24:35:e0:65:39:1f:ec:a7:e2:d5:
5c:9b:c9:55:db:9b:48:00:b9:c6:75:d0:3d:0b:2b:
c2:7f:af:a6:0e:84:fb:2c:78:9f:51:67:d8:0f:f8:
8e:a1:81:94:09:5e:1d:3e:a0:09:d6:45:1e:01:df:
b9:cb:78:4b:b9:c5:8e:4f:ef:99:22:e0:7f:c6:ce:
46:0f:8f:8c:b5:00:47:e7:7f:7b:3f:3b:9a:4c:ea:
67:d6:03:e4:e2:dd:e2:1f:4b:56:c7:68:31:1b:a5:
4f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:76:A1:F7:C6:D3:34:B2:95:C1:A9:8B:51:93:40:30:3D:95:7D:51
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/R3ah98bTNLKVwamLUZNAMD2VfVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.136.0/21
37.143.32.0/21
37.153.168.0/22
37.156.228.0/24
46.166.128.0/19
46.166.176.0/20
77.247.176.0/21
85.159.232.0/21
89.38.160.0/22
92.114.100.0/22
109.201.128.0/19
176.126.232.0/23
185.7.76.0/22
185.11.144.0/24
185.107.36.0-185.107.38.255
185.107.44.0/22
185.107.56.0/22
185.107.68.0/22
185.107.80.0/22
185.107.92.0/22
185.107.100.0/22
185.107.116.0/22
188.209.55.0-188.209.57.255
212.92.104.0-212.92.125.255
IPv6:
2a00:1768::/32
Signature Algorithm: sha256WithRSAEncryption
bf:32:9b:ac:0c:dc:52:d6:2b:8b:46:22:51:e7:01:1a:8b:80:
05:32:2d:5d:7a:eb:7b:df:8a:96:ae:86:c6:54:31:67:db:af:
6e:5f:e0:a7:76:8e:47:e9:0f:81:fb:bb:08:7f:e5:71:d0:d9:
53:49:c1:b3:a1:7d:c0:dd:37:50:cf:76:09:99:78:04:d2:d8:
e2:a0:d0:41:17:09:4d:3f:9a:16:72:76:be:bb:84:9a:8e:6b:
08:91:74:2d:25:52:d7:96:db:b7:a2:df:67:3e:04:76:55:e2:
12:8b:ec:28:b3:7d:86:5c:75:86:67:c8:82:12:c9:70:cb:70:
38:72:3e:bd:40:f6:e3:1c:22:74:0e:3d:41:9b:e4:88:0b:18:
7c:c9:12:d1:09:16:12:3b:f7:73:0a:c7:b3:db:ea:e7:c7:74:
11:4d:fd:c6:87:ac:85:90:e6:a5:b4:56:68:1a:5a:f5:c6:d5:
8a:ea:b4:0e:2b:9a:4d:78:c5:ef:d1:52:c9:4b:31:62:5f:40:
3b:93:95:e6:a1:6a:e0:2f:de:aa:37:06:d1:64:e4:b7:be:af:
c5:9b:8a:9e:44:38:b2:93:fd:01:8b:f6:b4:b0:89:93:5d:3c:
27:e5:96:08:26:37:63:ae:ce:9e:88:3d:59:b7:70:f3:90:37:
dd:03:d4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:01:58 2024 by rpki-client on console-ams.rpki-client.org