Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/sXxyT3PRq3gPyYFL0e1h8wEf82A.roa
File: sXxyT3PRq3gPyYFL0e1h8wEf82A.roa (raw, json)
Hash identifier: oqgnHpLLyybFQK0v6qYvssY9pK5DMJMoRlu0q6KaoDA=
Subject key identifier: B1:7C:72:4F:73:D1:AB:78:0F:C9:81:4B:D1:ED:61:F3:01:1F:F3:60
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018EA9A609E85572A727733649BFFCF08EF5
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/sXxyT3PRq3gPyYFL0e1h8wEf82A.roa
Signing time: Thu 04 Apr 2024 15:06:54 +0000
ROA not before: Thu 04 Apr 2024 15:06:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 64.137.8.0/24 maxlen: 24
64.137.10.0/23 maxlen: 23
64.137.14.0/23 maxlen: 23
64.137.18.0/23 maxlen: 23
64.137.42.0/23 maxlen: 23
64.137.48.0/23 maxlen: 23
64.137.58.0/23 maxlen: 23
64.137.60.0/22 maxlen: 22
64.137.73.0/24 maxlen: 24
64.137.74.0/24 maxlen: 24
64.137.77.0/24 maxlen: 24
64.137.78.0/24 maxlen: 24
64.137.80.0/22 maxlen: 22
64.137.89.0/24 maxlen: 24
64.137.92.0/23 maxlen: 23
64.137.94.0/23 maxlen: 23
64.137.96.0/22 maxlen: 22
64.137.100.0/23 maxlen: 23
104.143.232.0/21 maxlen: 21
104.143.240.0/22 maxlen: 22
104.143.248.0/21 maxlen: 24
104.233.0.0/21 maxlen: 21
104.238.0.0/22 maxlen: 22
104.239.95.0/24 maxlen: 24
104.249.29.0/24 maxlen: 24
104.249.36.0/24 maxlen: 24
104.249.37.0/24 maxlen: 24
104.249.55.0/24 maxlen: 24
104.250.208.0/20 maxlen: 20
138.128.151.0/24 maxlen: 24
138.128.153.0/24 maxlen: 24
216.173.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a9:a6:09:e8:55:72:a7:27:73:36:49:bf:fc:f0:8e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 4 15:06:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b17c724f73d1ab780fc9814bd1ed61f3011ff360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:36:30:31:c2:85:04:72:62:ba:45:a3:b1:9f:
b7:95:d5:55:c6:75:c6:f2:4d:44:11:6e:60:fd:b5:
9c:26:54:a8:f9:6b:69:31:66:6d:39:64:4f:e4:a5:
9b:ac:60:eb:c7:d6:d2:c0:a7:d3:da:14:62:c9:54:
b6:89:40:25:fc:cc:ae:58:41:e6:07:c1:5b:33:4c:
a9:2c:22:07:e4:c3:af:62:03:76:18:9c:ef:89:4a:
f2:a2:e2:6b:0c:94:92:9e:34:66:0c:39:4f:0d:f5:
b5:a4:6a:1b:95:d4:55:17:14:c2:e7:7c:8a:50:dc:
61:df:79:31:50:29:6f:56:0a:b9:cb:39:c5:b4:b5:
f8:2a:b3:1b:c7:2e:4c:a9:8f:8d:2c:62:0d:ed:63:
12:d6:75:ff:3e:5e:ff:0a:47:84:ca:5d:cf:8d:00:
13:4d:d3:d8:d8:13:26:15:1a:79:77:e5:52:33:16:
d8:47:8d:16:43:37:5f:31:d5:a8:9c:e0:c7:25:8b:
7a:1d:d6:c9:65:19:52:5d:d6:5e:26:4f:56:11:6e:
e0:c8:1d:0c:e0:2f:59:13:62:db:99:2e:9d:f8:8b:
df:fd:f3:2c:a4:56:8e:4b:92:63:44:ca:3a:6b:d2:
b2:9e:24:d2:6e:a0:ce:12:b7:ab:24:be:17:21:39:
fc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7C:72:4F:73:D1:AB:78:0F:C9:81:4B:D1:ED:61:F3:01:1F:F3:60
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/sXxyT3PRq3gPyYFL0e1h8wEf82A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.8.0/24
64.137.10.0/23
64.137.14.0/23
64.137.18.0/23
64.137.42.0/23
64.137.48.0/23
64.137.58.0-64.137.63.255
64.137.73.0-64.137.74.255
64.137.77.0-64.137.78.255
64.137.80.0/22
64.137.89.0/24
64.137.92.0-64.137.101.255
104.143.232.0-104.143.243.255
104.143.248.0/21
104.233.0.0/21
104.238.0.0/22
104.239.95.0/24
104.249.29.0/24
104.249.36.0/23
104.249.55.0/24
104.250.208.0/20
138.128.151.0/24
138.128.153.0/24
216.173.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:08:96:fc:6b:76:52:8c:82:c3:eb:78:de:4d:b8:26:ae:79:
7e:59:d8:b0:7f:d5:0e:c1:44:54:6f:7a:05:d1:18:b2:11:e4:
b6:fb:69:0f:4f:5d:26:bc:b1:7a:68:16:39:ca:06:73:cd:93:
8f:c8:8d:fd:62:82:77:1e:44:bd:86:87:83:fd:a4:89:13:3e:
bd:59:94:be:91:c1:36:a1:51:41:c8:4a:43:e5:ee:9b:1e:68:
79:ac:9e:28:a1:5d:97:19:36:37:c3:eb:65:ae:26:77:e2:ef:
ff:b4:8b:3a:f1:b7:74:64:e5:b0:cf:ac:b6:20:c4:93:b1:e6:
10:3f:f8:15:af:6f:04:3d:67:40:3a:f9:6b:79:a2:0b:3e:84:
8e:c2:34:91:eb:25:ca:eb:e0:4b:2a:01:ad:51:73:db:e9:04:
00:5e:aa:df:ff:a5:32:6a:d7:02:cc:d1:55:f6:ee:e3:a3:2a:
88:18:45:d5:a4:b6:c0:69:ea:51:f6:54:17:76:b5:18:42:9e:
8c:3d:d1:09:d7:11:8a:82:6c:bd:c8:74:91:41:e0:f3:6c:fc:
15:2e:84:96:35:ae:d0:cf:1e:46:af:22:ae:9d:0b:d4:33:ea:
b1:b5:4b:3f:13:65:a4:3b:e8:3b:eb:ea:92:50:e5:b8:07:21:
d9:57:e2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 08:08:42 2024 by rpki-client on console-ams.rpki-client.org