Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/LryRYP8atopakjUQaEg0A6GB5Ms.roa
File: LryRYP8atopakjUQaEg0A6GB5Ms.roa (raw, json)
Hash identifier: kJP8bsJAiRVpoMcmpBnW6ixFOKslhQYtGMAiXHhbFrA=
Subject key identifier: 2E:BC:91:60:FF:1A:B6:8A:5A:92:35:10:68:48:34:03:A1:81:E4:CB
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 018DE4C53ED361018937B2F422368665372B
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/LryRYP8atopakjUQaEg0A6GB5Ms.roa
Signing time: Mon 26 Feb 2024 09:35:48 +0000
ROA not before: Mon 26 Feb 2024 09:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 37.235.48.0/24 maxlen: 24
37.235.51.0/24 maxlen: 24
46.183.187.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.121.0/24 maxlen: 24
89.31.120.0/24 maxlen: 24
89.31.121.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
91.132.92.0/24 maxlen: 24
91.132.93.0/24 maxlen: 24
91.132.95.0/24 maxlen: 24
92.243.64.0/24 maxlen: 24
103.57.248.0/24 maxlen: 24
103.57.249.0/24 maxlen: 24
103.57.251.0/24 maxlen: 24
134.255.211.0/24 maxlen: 24
149.154.157.0/24 maxlen: 24
149.154.158.0/24 maxlen: 24
149.154.159.0/24 maxlen: 24
151.236.15.0/24 maxlen: 24
151.236.16.0/24 maxlen: 24
151.236.17.0/24 maxlen: 24
151.236.18.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.21.0/24 maxlen: 24
151.236.22.0/24 maxlen: 24
151.236.25.0/24 maxlen: 24
158.255.208.0/24 maxlen: 24
158.255.213.0/24 maxlen: 24
158.255.214.0/24 maxlen: 24
158.255.215.0/24 maxlen: 24
176.126.99.0/24 maxlen: 24
185.26.239.0/24 maxlen: 24
185.76.78.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
213.183.55.0/24 maxlen: 24
2a03:f80:32::/48 maxlen: 48
2a03:f80:33::/48 maxlen: 48
2a03:f80:39::/48 maxlen: 48
2a03:f80:40::/48 maxlen: 48
2a03:f80:44::/48 maxlen: 48
2a03:f80:45::/48 maxlen: 48
2a03:f80:47::/48 maxlen: 48
2a03:f80:48::/48 maxlen: 48
2a03:f80:49::/48 maxlen: 48
2a03:f80:61::/48 maxlen: 48
2a03:f80:65::/48 maxlen: 48
2a03:f80:81::/48 maxlen: 48
2a03:f80:381::/48 maxlen: 48
2a03:f80:852::/48 maxlen: 48
2a03:f80:971::/48 maxlen: 48
2a03:f80:4416::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 04:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e4:c5:3e:d3:61:01:89:37:b2:f4:22:36:86:65:37:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Feb 26 09:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ebc9160ff1ab68a5a92351068483403a181e4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:10:2d:40:f2:ef:55:41:ad:e3:6a:a1:3f:
0b:07:6a:31:0f:11:7d:14:ab:fd:04:e1:ee:7a:2b:
da:0f:75:40:af:a3:bc:54:6c:42:a1:d7:ab:44:07:
d6:df:9b:d4:90:bf:62:2c:83:d1:97:89:0a:23:2e:
c6:cf:4a:f4:05:50:6d:fe:5e:06:dc:be:20:20:5f:
7b:cf:76:08:87:cb:de:65:2d:8d:65:a1:ae:21:82:
a4:dc:fe:de:0b:99:0c:a3:e0:ec:b0:29:f9:e1:f4:
c4:99:ba:a8:8d:f2:99:59:e3:6a:be:08:c3:e7:6e:
38:a5:e9:b0:7c:6a:a9:18:e9:51:65:b6:d8:03:72:
7e:b2:da:ad:0b:07:6a:c1:bc:5b:79:3c:ad:bb:ff:
74:fd:72:70:b5:8c:92:29:54:73:c9:01:2d:48:0e:
fc:1a:2d:e5:0b:a8:98:b4:f5:b7:6d:3c:f0:05:ee:
4b:cf:6e:ad:d7:ce:43:f7:69:64:90:55:f3:cc:b9:
6d:eb:69:cf:27:b4:76:17:f4:0d:a0:96:73:4a:69:
6f:10:d7:af:c0:70:40:8f:d0:e8:8e:c2:5d:ad:76:
2d:48:a0:61:04:03:d4:d4:43:a2:78:8b:b1:39:39:
86:79:24:1c:da:9b:be:ed:db:38:cd:1c:64:00:ee:
e1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BC:91:60:FF:1A:B6:8A:5A:92:35:10:68:48:34:03:A1:81:E4:CB
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/LryRYP8atopakjUQaEg0A6GB5Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.48.0/24
37.235.51.0/24
46.183.187.0/24
83.243.120.0/23
89.31.120.0/23
89.31.123.0/24
91.132.92.0/23
91.132.95.0/24
92.243.64.0/24
103.57.248.0/23
103.57.251.0/24
134.255.211.0/24
149.154.157.0-149.154.159.255
151.236.15.0-151.236.18.255
151.236.20.0-151.236.22.255
151.236.25.0/24
158.255.208.0/24
158.255.213.0-158.255.215.255
176.126.99.0/24
185.26.239.0/24
185.76.78.0/23
213.183.55.0/24
IPv6:
2a03:f80:32::/47
2a03:f80:39::/48
2a03:f80:40::/48
2a03:f80:44::/47
2a03:f80:47::-2a03:f80:49:ffff:ffff:ffff:ffff:ffff
2a03:f80:61::/48
2a03:f80:65::/48
2a03:f80:81::/48
2a03:f80:381::/48
2a03:f80:852::/48
2a03:f80:971::/48
2a03:f80:4416::/48
2a03:f80:ed51::/48
Signature Algorithm: sha256WithRSAEncryption
74:90:5d:ec:1e:3b:9e:10:c6:55:03:dc:88:2d:d2:f0:9f:e3:
32:70:c4:7c:50:48:e6:2e:e2:8e:38:65:6a:63:2a:98:a5:23:
48:5b:ed:06:4d:83:80:4a:ca:30:2c:b4:d8:f6:aa:cc:13:c2:
8b:1b:40:da:ca:1f:2a:35:38:a7:00:9a:2a:01:e6:73:ae:09:
99:7d:7a:06:41:48:8e:65:aa:57:e0:80:5c:2b:a1:3c:3e:c3:
6d:27:11:16:d5:69:fb:b1:28:ed:9a:a0:9b:3b:71:b7:91:55:
93:a1:97:7f:db:1a:49:73:16:aa:6a:d8:f5:a5:38:09:73:b6:
89:86:c5:ca:ad:e8:5e:c0:da:08:50:fb:7e:25:fa:0f:20:ce:
ab:16:77:77:2c:30:e1:72:95:cf:34:ff:c6:ec:eb:66:88:b6:
f8:db:8b:2f:1f:2d:d8:5d:5d:8e:ed:4e:36:ec:27:55:04:e1:
3f:0c:60:9f:2e:1a:cb:b9:05:d0:1b:69:59:65:94:43:ce:ed:
62:ac:13:dc:4e:cc:05:06:2f:e0:ec:b8:23:3e:95:3e:3a:0a:
4c:c8:a8:6c:da:1a:6a:05:19:42:09:0d:54:8c:04:1b:00:e0:
e6:e7:92:86:2f:9c:46:d3:d9:87:42:f4:08:e1:42:95:d4:bd:
b0:3e:85:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 13:51:22 2024 by rpki-client on console-ams.rpki-client.org