Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/PYoQYwZSMFkG7VOcSoKkjf_uvrk.roa
File: PYoQYwZSMFkG7VOcSoKkjf_uvrk.roa (raw, json)
Hash identifier: 4wJ+q01Ek9jbusUjYXR6Lx56ZwE479U0YDwCeKqdwjM=
Subject key identifier: 3D:8A:10:63:06:52:30:59:06:ED:53:9C:4A:82:A4:8D:FF:EE:BE:B9
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 018CC3B6EEE28DFBD48DE178A0ACA8F4944D
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/PYoQYwZSMFkG7VOcSoKkjf_uvrk.roa
Signing time: Mon 01 Jan 2024 06:29:54 +0000
ROA not before: Mon 01 Jan 2024 06:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 46.197.69.0/24 maxlen: 24
178.233.156.0/23 maxlen: 23
178.233.164.0/23 maxlen: 23
24.133.118.0/23 maxlen: 23
176.240.2.0/24 maxlen: 24
176.240.3.0/24 maxlen: 24
176.240.0.0/23 maxlen: 23
46.197.16.0/21 maxlen: 21
176.240.228.0/22 maxlen: 22
94.54.8.0/22 maxlen: 22
94.54.12.0/23 maxlen: 23
178.233.112.0/20 maxlen: 20
178.233.36.0/22 maxlen: 22
94.55.124.0/23 maxlen: 24
94.55.120.0/21 maxlen: 24
94.55.122.0/23 maxlen: 24
94.55.126.0/24 maxlen: 24
94.55.127.0/24 maxlen: 24
24.133.225.0/24 maxlen: 24
2a00:1d58::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ee:e2:8d:fb:d4:8d:e1:78:a0:ac:a8:f4:94:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Jan 1 06:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d8a10630652305906ed539c4a82a48dffeebeb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:55:4a:46:41:13:51:02:5c:ea:c1:05:53:
30:c6:00:bb:29:74:aa:55:8f:cf:b3:52:2c:ce:0f:
bc:17:b6:61:bb:fe:80:a4:bb:c3:2c:d1:3e:1b:68:
78:df:17:cf:33:4b:62:21:f1:c4:bb:d5:3c:fd:b7:
75:35:7f:72:9f:9e:61:42:0b:80:ad:49:3c:3c:c3:
30:50:0a:f5:b2:27:8f:f5:a7:cb:ff:12:54:77:1b:
0d:0b:b9:49:50:2f:b9:a3:07:df:cc:2a:48:9d:fd:
2c:77:2a:22:71:a3:d5:94:28:d9:73:cc:dc:7a:b9:
45:f5:50:46:25:47:dd:38:57:7f:54:50:ab:f6:c0:
32:1a:53:5a:75:08:04:a7:d0:d4:c3:77:3a:de:70:
18:41:81:d8:77:de:3f:4e:74:44:7c:8d:55:e9:97:
61:ef:8b:5a:1c:94:6c:64:99:8e:5a:46:b0:55:eb:
96:35:80:71:86:29:a0:13:45:a9:d2:68:97:e9:cd:
ef:42:f0:9f:d1:8c:8d:78:20:08:51:7f:3b:93:2d:
4f:2a:0d:e5:52:c4:6d:4f:e9:6d:ef:2a:e1:b6:c3:
da:e9:42:29:0d:c0:d5:d7:71:ff:99:0d:b4:79:7f:
75:78:70:d1:8b:10:2f:70:6a:3e:dd:09:89:b0:04:
a1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8A:10:63:06:52:30:59:06:ED:53:9C:4A:82:A4:8D:FF:EE:BE:B9
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/PYoQYwZSMFkG7VOcSoKkjf_uvrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.133.118.0/23
24.133.225.0/24
46.197.16.0/21
46.197.69.0/24
94.54.8.0-94.54.13.255
94.55.120.0/21
176.240.0.0/22
176.240.228.0/22
178.233.36.0/22
178.233.112.0/20
178.233.156.0/23
178.233.164.0/23
IPv6:
2a00:1d58::/36
Signature Algorithm: sha256WithRSAEncryption
66:4d:6d:e4:75:90:9e:ca:3e:80:d5:e3:19:28:19:08:2f:e6:
19:e9:62:fb:a4:e7:a4:7d:87:1c:c8:64:a8:c8:67:f8:e1:19:
5c:83:03:2e:2f:d2:64:e8:df:51:03:f0:90:56:d0:68:9c:56:
97:c9:2e:af:49:45:ad:11:70:19:aa:9a:f5:e0:9b:ff:1c:82:
24:18:30:28:92:b6:49:b4:be:4a:54:3f:5a:ca:81:50:fa:e8:
63:4d:31:51:dd:94:2b:95:8b:2d:fa:a1:fe:97:89:14:99:ff:
4d:07:8e:24:dc:8c:ef:b1:25:aa:71:3a:48:54:cf:dd:b5:c8:
c0:fa:33:85:07:77:32:6a:3f:bf:b0:86:08:49:e6:bf:a1:61:
e4:e7:d0:f3:ff:69:4a:27:a6:77:31:9b:1e:30:50:42:40:f4:
19:6c:e7:7c:67:78:c7:b1:c4:d3:85:98:93:b1:7b:81:5c:af:
d2:f4:2b:cd:2f:86:78:f0:01:64:56:d2:06:f4:4e:ca:96:33:
6b:ce:22:fc:97:96:8d:52:1f:b2:89:88:3d:07:73:60:eb:d1:
61:f2:37:66:fd:f6:ee:22:4f:a4:45:f2:52:89:1a:97:87:ad:
10:6f:1c:53:cf:63:55:a8:b2:2b:d8:12:46:e4:92:92:3b:50:
c1:96:05:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:28:40 2024 by rpki-client on console-ams.rpki-client.org