Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/N2EH7_Nuy22K1i4GewzrT8g6dSk.roa
File: N2EH7_Nuy22K1i4GewzrT8g6dSk.roa (raw, json)
Hash identifier: n/ojeuGxhpA8UXeel+HdaSzrE8PD1EeVQ41mK7dJxmU=
Subject key identifier: 37:61:07:EF:F3:6E:CB:6D:8A:D6:2E:06:7B:0C:EB:4F:C8:3A:75:29
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01901D0F6B019883087B1D38796796FDA353
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/N2EH7_Nuy22K1i4GewzrT8g6dSk.roa
Signing time: Sat 15 Jun 2024 18:01:07 +0000
ROA not before: Sat 15 Jun 2024 18:01:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12741
IP address blocks: 5.226.64.0/18 maxlen: 18
5.226.92.0/24 maxlen: 24
5.226.135.0/24 maxlen: 24
37.128.0.0/17 maxlen: 17
62.87.128.0/17 maxlen: 17
62.89.64.0/18 maxlen: 18
62.111.128.0/17 maxlen: 17
62.111.250.0/24 maxlen: 24
62.148.64.0/19 maxlen: 19
62.181.160.0/19 maxlen: 19
62.233.128.0/17 maxlen: 17
62.244.128.0/19 maxlen: 19
77.65.134.0/24 maxlen: 24
77.65.155.0/24 maxlen: 24
77.65.171.0/24 maxlen: 24
77.65.188.0/24 maxlen: 24
77.65.193.0/24 maxlen: 24
77.65.209.0/24 maxlen: 24
77.252.0.0/14 maxlen: 14
78.8.0.0/14 maxlen: 14
81.168.128.0/17 maxlen: 17
81.210.0.0/17 maxlen: 17
81.219.0.0/16 maxlen: 16
82.143.128.0/18 maxlen: 18
83.238.0.0/16 maxlen: 16
84.40.128.0/17 maxlen: 17
85.31.252.0/24 maxlen: 24
85.128.0.0/17 maxlen: 17
85.202.54.0/24 maxlen: 24
85.202.59.0/24 maxlen: 24
87.105.0.0/16 maxlen: 16
87.204.0.0/15 maxlen: 15
87.239.216.0/21 maxlen: 22
89.171.0.0/16 maxlen: 16
91.192.88.0/22 maxlen: 22
93.159.0.0/18 maxlen: 18
93.180.160.0/19 maxlen: 19
159.205.0.0/16 maxlen: 16
178.16.116.0/24 maxlen: 24
178.16.121.0/24 maxlen: 24
178.16.125.0/24 maxlen: 24
178.36.0.0/15 maxlen: 15
185.58.160.0/22 maxlen: 22
185.58.160.0/23 maxlen: 23
185.58.162.0/23 maxlen: 23
185.72.184.0/22 maxlen: 22
185.164.140.0/22 maxlen: 22
185.244.96.0/22 maxlen: 22
193.19.104.0/23 maxlen: 23
193.91.16.0/20 maxlen: 20
193.192.173.0/24 maxlen: 24
193.192.181.0/24 maxlen: 24
193.192.188.0/24 maxlen: 24
193.192.190.0/24 maxlen: 24
195.114.160.0/19 maxlen: 19
212.49.32.0/19 maxlen: 19
212.106.0.0/19 maxlen: 19
213.17.128.0/17 maxlen: 17
213.17.244.0/24 maxlen: 24
213.134.128.0/19 maxlen: 19
213.146.32.0/19 maxlen: 19
213.186.64.0/19 maxlen: 19
213.195.128.0/18 maxlen: 18
213.216.64.0/18 maxlen: 18
213.238.64.0/18 maxlen: 18
213.241.0.0/17 maxlen: 17
213.241.89.0/24 maxlen: 24
217.30.128.0/19 maxlen: 19
2001:16b0::/32 maxlen: 32
2001:41b0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:0f:6b:01:98:83:08:7b:1d:38:79:67:96:fd:a3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jun 15 18:01:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=376107eff36ecb6d8ad62e067b0ceb4fc83a7529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:ba:08:41:9a:1d:86:09:78:ac:aa:9e:82:
38:78:a2:6d:5c:fa:06:ad:ea:dd:52:16:86:c3:f5:
49:80:d8:90:5f:03:cf:f4:8e:2d:c1:7a:ac:fa:9f:
da:23:5c:b0:6c:9a:4d:87:07:be:35:66:db:56:89:
5d:2c:41:61:34:3e:14:42:4a:55:36:4c:96:ee:3b:
bf:1f:08:22:9f:0e:50:38:9a:73:d1:ed:17:b9:7d:
bb:1f:2e:79:69:13:7d:8b:f0:98:ee:b4:54:f4:9f:
f8:13:cf:90:83:42:d6:bb:4a:65:39:44:ec:33:22:
3f:36:3e:10:28:e2:e7:87:43:cd:08:52:4d:92:69:
55:50:07:e4:11:0b:32:21:38:41:ca:3c:38:1d:94:
6b:0e:0c:8b:28:f0:58:24:f8:fd:5c:95:7d:f6:aa:
09:ab:2d:4e:b4:f8:36:71:f3:3d:20:ef:95:6f:5e:
db:01:58:e1:44:ec:cb:a0:38:41:4e:ac:a4:54:70:
b1:d1:09:0e:79:2b:da:fd:15:27:e9:f1:09:81:87:
34:c7:f0:25:7d:57:57:8e:e6:96:a0:fd:4a:43:03:
43:21:5d:e8:36:77:2e:81:27:5c:6c:1e:59:ef:83:
87:1f:1b:f0:36:29:84:aa:4b:af:0f:50:ee:9f:60:
ec:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:61:07:EF:F3:6E:CB:6D:8A:D6:2E:06:7B:0C:EB:4F:C8:3A:75:29
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/N2EH7_Nuy22K1i4GewzrT8g6dSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.64.0/18
5.226.135.0/24
37.128.0.0/17
62.87.128.0/17
62.89.64.0/18
62.111.128.0/17
62.148.64.0/19
62.181.160.0/19
62.233.128.0/17
62.244.128.0/19
77.65.134.0/24
77.65.155.0/24
77.65.171.0/24
77.65.188.0/24
77.65.193.0/24
77.65.209.0/24
77.252.0.0/14
78.8.0.0/14
81.168.128.0/17
81.210.0.0/17
81.219.0.0/16
82.143.128.0/18
83.238.0.0/16
84.40.128.0/17
85.31.252.0/24
85.128.0.0/17
85.202.54.0/24
85.202.59.0/24
87.105.0.0/16
87.204.0.0/15
87.239.216.0/21
89.171.0.0/16
91.192.88.0/22
93.159.0.0/18
93.180.160.0/19
159.205.0.0/16
178.16.116.0/24
178.16.121.0/24
178.16.125.0/24
178.36.0.0/15
185.58.160.0/22
185.72.184.0/22
185.164.140.0/22
185.244.96.0/22
193.19.104.0/23
193.91.16.0/20
193.192.173.0/24
193.192.181.0/24
193.192.188.0/24
193.192.190.0/24
195.114.160.0/19
212.49.32.0/19
212.106.0.0/19
213.17.128.0/17
213.134.128.0/19
213.146.32.0/19
213.186.64.0/19
213.195.128.0/18
213.216.64.0/18
213.238.64.0/18
213.241.0.0/17
217.30.128.0/19
IPv6:
2001:16b0::/32
2001:41b0::/32
Signature Algorithm: sha256WithRSAEncryption
94:fa:7a:56:81:39:f6:5b:3c:a0:42:d5:30:46:98:c7:6c:de:
a8:6d:6f:7c:87:1a:2e:51:51:da:58:79:bd:7b:2d:67:e1:6e:
5c:d5:d8:91:6a:5c:2e:b4:5e:8b:78:62:d9:f3:f7:2b:65:14:
a5:e3:34:ac:88:88:0d:09:96:53:af:18:60:5f:ef:be:14:e4:
73:a5:a1:40:58:30:b5:5d:83:99:47:d5:3a:4b:93:ff:b5:4a:
8e:2f:f3:b6:39:03:b7:77:84:e8:c6:d2:71:dd:ae:d1:68:cb:
6a:be:1c:04:83:ff:8c:6e:5c:e1:c0:0c:5f:a1:bb:4d:e4:01:
01:b3:02:69:1a:22:19:a1:53:a7:ea:49:05:d1:e5:66:60:a1:
41:b8:b2:44:35:53:88:21:18:41:34:ab:c7:f7:78:82:98:9b:
21:d2:c5:f3:9b:54:f6:ca:f2:8d:9f:9e:fb:63:35:aa:24:e7:
37:d3:5a:d3:59:e4:2a:21:ce:01:51:bf:5e:76:06:65:18:27:
ff:82:d7:04:85:13:b6:36:9b:a1:60:18:ea:26:11:a9:e5:c9:
77:8f:21:f1:9f:52:f6:69:11:36:bd:a5:2b:4b:00:5f:32:b7:
e9:df:a0:e9:2f:50:a7:0e:01:c4:b0:65:6b:9d:d3:e5:5d:d4:
de:56:c9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:56:59 2024 by rpki-client on console-fra.rpki-client.org