Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/SNHMfQvbf26ZYNT4WhKWTiKmroA.roa
File: SNHMfQvbf26ZYNT4WhKWTiKmroA.roa (raw, json)
Hash identifier: 7WCN2/mhNsYOS0N0tSSnqNwci4n3NqBNUoj0d3Hot9I=
Subject key identifier: 48:D1:CC:7D:0B:DB:7F:6E:99:60:D4:F8:5A:12:96:4E:22:A6:AE:80
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018FD24E72E4AA69CED0F7C4047CC9CE5F69
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/SNHMfQvbf26ZYNT4WhKWTiKmroA.roa
Signing time: Sat 01 Jun 2024 05:38:27 +0000
ROA not before: Sat 01 Jun 2024 05:38:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 2.56.109.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.144.212.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/24 maxlen: 24
194.242.98.0/24 maxlen: 24
194.242.99.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a07:9200::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a10:dfc0::/29 maxlen: 29
2a11:580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Jun 2024 11:40:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d2:4e:72:e4:aa:69:ce:d0:f7:c4:04:7c:c9:ce:5f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 1 05:38:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48d1cc7d0bdb7f6e9960d4f85a12964e22a6ae80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ec:80:ef:cc:32:68:e0:92:c5:ac:d3:53:95:
fc:ed:16:1f:fa:f1:87:01:bd:b1:ff:ec:d5:c5:bd:
c5:10:26:fa:4a:6a:8d:ed:2a:e0:9a:f2:7c:e3:12:
fb:1e:6f:d0:a7:7a:79:91:80:1e:9d:d7:29:28:60:
14:b9:d5:03:c9:60:48:7a:14:6d:06:6e:2a:ef:7a:
05:ca:19:ae:c8:ea:17:21:e0:e3:d1:db:41:5a:76:
31:7e:89:1c:50:cf:4e:85:6b:08:62:6e:5b:f5:36:
2b:e4:f0:bb:8c:1c:eb:b2:36:ab:62:4d:97:9f:69:
39:08:f8:2a:8c:0c:53:03:27:f7:9e:2b:8b:f9:21:
82:0e:48:b7:a9:bc:2b:f4:10:1d:87:9f:cd:3c:09:
58:9d:e1:e2:51:9e:68:98:bc:0b:9d:9c:a6:2c:a5:
7d:4a:e7:fc:0d:91:a1:2d:2f:0e:84:ed:e9:83:a2:
11:b4:0f:8b:a8:7d:c0:df:87:85:6c:72:5a:35:ba:
12:4d:f8:75:7d:77:10:72:53:c1:fa:2e:78:02:27:
98:b5:d6:83:2b:df:30:53:e1:18:c8:56:65:84:d1:
4b:4f:6c:ab:cf:96:55:b0:cb:e6:7a:ae:38:ff:9d:
bf:4a:67:47:62:f8:c8:e6:70:8b:14:3d:33:a5:13:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D1:CC:7D:0B:DB:7F:6E:99:60:D4:F8:5A:12:96:4E:22:A6:AE:80
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/SNHMfQvbf26ZYNT4WhKWTiKmroA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
5.181.84.0/24
5.181.87.0/24
45.9.29.0/24
45.81.115.0/24
45.88.136.0/24
45.88.138.0/24
45.94.171.0/24
45.132.180.0/22
45.144.212.0/24
45.151.3.0/24
77.83.37.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/24
194.242.98.0/23
195.177.93.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
74:ab:c4:f4:64:6d:f3:1c:34:8b:ef:65:9b:71:d0:ed:6d:4e:
5d:d6:8d:1d:2b:cf:9e:78:aa:b9:bf:89:3b:1a:f0:5a:7d:0b:
5f:b6:4d:20:59:20:87:2c:5e:33:bd:a4:0c:6f:78:5a:b5:55:
95:02:7d:86:fa:43:bf:25:64:10:c8:be:99:71:a5:ee:a8:b8:
58:f5:97:12:f2:a1:25:a2:ae:30:09:c2:dd:0e:cc:48:89:df:
21:21:33:36:d1:53:c4:2a:b5:7b:04:d3:95:0e:7f:1c:28:5f:
a1:da:06:ce:60:53:ff:7c:0a:e8:1a:9a:7a:48:b0:56:25:6e:
17:d7:aa:66:d1:83:f1:ff:d3:3b:24:ba:23:8f:f6:50:c7:68:
74:4e:b1:f4:74:79:f5:7d:a0:03:93:e1:64:60:ed:d8:a8:32:
ac:b9:b3:76:67:bb:69:f3:b3:bf:f6:60:8f:bf:67:10:ec:84:
ba:63:42:a0:36:e1:32:40:ba:e5:9f:b5:9e:40:64:e5:b7:db:
91:62:ec:2d:ff:71:90:b7:6c:0b:ac:50:48:93:9e:7e:e7:f1:
38:a3:c0:d9:e6:cb:f3:db:32:fd:82:ee:a0:4c:81:7f:77:53:
e8:06:a2:75:87:79:a8:52:91:b6:0e:25:86:b5:3c:47:a9:0f:
76:f6:48:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 16:21:37 2024 by rpki-client on console-ams.rpki-client.org