Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/MHhdITghPnCbA4fysjSg6_ZH40Q.roa
File: MHhdITghPnCbA4fysjSg6_ZH40Q.roa (raw, json)
Hash identifier: ckj+B4pOpDfUBi4E8PwGbkMoka4GbjrGPc7fL+j/9ME=
Subject key identifier: 30:78:5D:21:38:21:3E:70:9B:03:87:F2:B2:34:A0:EB:F6:47:E3:44
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018FF2A67B275559174D184D9E0911B55F66
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/MHhdITghPnCbA4fysjSg6_ZH40Q.roa
Signing time: Fri 07 Jun 2024 12:22:27 +0000
ROA not before: Fri 07 Jun 2024 12:22:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 2.59.49.0/24 maxlen: 24
31.216.60.0/24 maxlen: 24
37.221.82.0/23 maxlen: 23
45.10.64.0/22 maxlen: 22
45.10.80.0/22 maxlen: 22
45.11.124.0/22 maxlen: 22
45.11.196.0/24 maxlen: 24
45.15.238.0/24 maxlen: 24
45.81.76.0/22 maxlen: 22
45.93.80.0/24 maxlen: 24
45.129.204.0/22 maxlen: 22
45.132.20.0/22 maxlen: 22
45.132.36.0/24 maxlen: 24
45.132.37.0/24 maxlen: 24
45.132.38.0/24 maxlen: 24
45.132.128.0/24 maxlen: 24
45.132.129.0/24 maxlen: 24
45.133.224.0/22 maxlen: 22
45.134.52.0/22 maxlen: 22
45.135.28.0/22 maxlen: 22
45.138.213.0/24 maxlen: 24
45.138.214.0/24 maxlen: 24
45.139.52.0/24 maxlen: 24
45.139.53.0/24 maxlen: 24
45.139.55.0/24 maxlen: 24
45.139.108.0/22 maxlen: 22
45.139.168.0/22 maxlen: 22
45.140.64.0/24 maxlen: 24
45.140.72.0/22 maxlen: 22
45.143.244.0/22 maxlen: 22
45.144.168.0/22 maxlen: 22
45.146.24.0/24 maxlen: 24
45.146.25.0/24 maxlen: 24
45.146.27.0/24 maxlen: 24
45.147.12.0/24 maxlen: 24
45.147.13.0/24 maxlen: 24
45.147.14.0/24 maxlen: 24
45.147.15.0/24 maxlen: 24
45.149.129.0/24 maxlen: 24
45.152.116.0/24 maxlen: 24
45.152.117.0/24 maxlen: 24
45.159.84.0/24 maxlen: 24
45.159.87.0/24 maxlen: 24
62.233.34.0/24 maxlen: 24
62.233.48.0/24 maxlen: 24
84.246.81.0/24 maxlen: 24
84.246.110.0/24 maxlen: 24
87.236.150.0/24 maxlen: 24
89.107.12.0/24 maxlen: 24
91.199.189.0/24 maxlen: 24
91.206.68.0/24 maxlen: 24
91.236.121.0/24 maxlen: 24
93.157.111.0/24 maxlen: 24
93.190.120.0/24 maxlen: 24
93.190.121.0/24 maxlen: 24
94.124.75.0/24 maxlen: 24
94.124.77.0/24 maxlen: 24
176.116.8.0/24 maxlen: 24
176.116.12.0/24 maxlen: 24
176.116.24.0/24 maxlen: 24
176.116.28.0/24 maxlen: 24
176.222.56.0/24 maxlen: 24
176.222.57.0/24 maxlen: 24
176.222.59.0/24 maxlen: 24
185.188.41.0/24 maxlen: 24
192.109.91.0/24 maxlen: 24
192.109.100.0/24 maxlen: 24
193.5.28.0/24 maxlen: 24
193.31.4.0/24 maxlen: 24
193.31.5.0/24 maxlen: 24
193.58.170.0/24 maxlen: 24
193.107.22.0/24 maxlen: 24
193.187.97.0/24 maxlen: 24
194.104.228.0/24 maxlen: 24
195.216.132.0/22 maxlen: 22
195.225.99.0/24 maxlen: 24
213.166.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f2:a6:7b:27:55:59:17:4d:18:4d:9e:09:11:b5:5f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jun 7 12:22:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30785d2138213e709b0387f2b234a0ebf647e344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:56:6e:f5:1e:13:f3:bc:0a:1c:84:86:c0:
34:68:80:8c:51:b4:86:9f:bf:49:2f:1f:80:34:42:
4d:17:24:95:44:2b:22:be:89:e7:f6:f1:a8:8a:11:
33:03:42:47:7c:9b:be:01:aa:da:e1:a0:15:d8:b0:
f4:bd:49:01:cb:ec:d5:c0:0f:e7:69:f6:37:17:a3:
35:86:04:a0:7c:c9:fb:cb:51:49:f2:49:e7:1b:c5:
43:6f:80:8f:95:e0:3e:b0:21:fb:ef:59:88:17:57:
49:b1:ef:92:88:30:d7:13:52:36:63:ca:25:07:0d:
cd:d2:9c:b1:9f:13:4b:a0:5a:df:28:71:f8:79:84:
48:97:d2:84:cf:b0:5d:b7:38:2f:d0:86:0b:60:e4:
93:ff:7c:4c:79:c5:99:a9:41:88:e9:8a:4e:d5:2a:
43:e0:ad:9e:c7:5c:53:01:07:0e:e3:74:ab:89:58:
a9:4a:cb:38:3f:d4:57:b5:67:50:00:f3:df:8a:db:
58:d1:23:4a:aa:dc:bd:d3:3b:85:d0:f5:31:4e:8b:
d3:94:90:87:57:e2:fb:9b:98:a7:cb:dd:c9:0b:b6:
0e:eb:24:89:d8:e1:a4:c3:32:75:7a:f2:fb:b4:ce:
b3:32:64:37:a6:9f:32:31:2f:e8:92:f2:73:ca:bf:
e5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:78:5D:21:38:21:3E:70:9B:03:87:F2:B2:34:A0:EB:F6:47:E3:44
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/MHhdITghPnCbA4fysjSg6_ZH40Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.49.0/24
31.216.60.0/24
37.221.82.0/23
45.10.64.0/22
45.10.80.0/22
45.11.124.0/22
45.11.196.0/24
45.15.238.0/24
45.81.76.0/22
45.93.80.0/24
45.129.204.0/22
45.132.20.0/22
45.132.36.0-45.132.38.255
45.132.128.0/23
45.133.224.0/22
45.134.52.0/22
45.135.28.0/22
45.138.213.0-45.138.214.255
45.139.52.0/23
45.139.55.0/24
45.139.108.0/22
45.139.168.0/22
45.140.64.0/24
45.140.72.0/22
45.143.244.0/22
45.144.168.0/22
45.146.24.0/23
45.146.27.0/24
45.147.12.0/22
45.149.129.0/24
45.152.116.0/23
45.159.84.0/24
45.159.87.0/24
62.233.34.0/24
62.233.48.0/24
84.246.81.0/24
84.246.110.0/24
87.236.150.0/24
89.107.12.0/24
91.199.189.0/24
91.206.68.0/24
91.236.121.0/24
93.157.111.0/24
93.190.120.0/23
94.124.75.0/24
94.124.77.0/24
176.116.8.0/24
176.116.12.0/24
176.116.24.0/24
176.116.28.0/24
176.222.56.0/23
176.222.59.0/24
185.188.41.0/24
192.109.91.0/24
192.109.100.0/24
193.5.28.0/24
193.31.4.0/23
193.58.170.0/24
193.107.22.0/24
193.187.97.0/24
194.104.228.0/24
195.216.132.0/22
195.225.99.0/24
213.166.64.0/22
Signature Algorithm: sha256WithRSAEncryption
30:fc:a5:47:18:e1:99:51:fa:43:92:7b:36:b1:1d:e3:02:2f:
68:10:80:da:b2:39:39:76:4c:ec:65:f9:34:99:a6:51:bb:11:
0f:ab:f7:c8:98:67:13:3e:e8:5b:d0:cb:66:96:e0:b6:c2:71:
ab:2b:ef:53:c9:b4:d3:56:96:63:ac:36:c4:57:de:4a:c3:5f:
47:50:78:de:48:d9:da:8f:c0:90:b6:2d:92:08:a3:96:cf:4d:
f9:c3:66:06:db:0a:bb:1c:9b:62:cf:0a:77:20:cf:a3:e0:88:
dc:9a:0e:75:e7:bd:b5:2b:a1:25:ca:f9:5f:8f:3d:8b:c3:25:
d6:bc:cf:92:cf:ff:18:61:ff:12:c8:a7:32:99:6d:c3:ed:a2:
3f:1b:99:85:51:c9:2d:db:58:52:c1:ed:c3:0b:11:6a:d5:48:
a7:3b:97:ee:98:89:ed:6f:e0:ac:84:7c:78:37:18:52:56:87:
48:7a:98:f2:cb:e1:a8:3c:b5:8a:22:f0:e7:b4:12:92:03:e5:
26:7c:fb:a7:24:71:cb:c4:28:c2:7e:22:8e:25:01:4e:d9:0f:
88:de:4f:5e:19:47:90:4d:0c:9e:07:4b:0a:ba:4d:45:bd:11:
86:26:a5:1e:8a:35:8a:6a:f3:3e:51:1e:9d:94:43:2f:b3:f5:
1c:97:14:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:24:58 2024 by rpki-client on console-ams.rpki-client.org