Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/c0pbqffkEdx_ctpKHjp5uDrWReM.roa
File: c0pbqffkEdx_ctpKHjp5uDrWReM.roa (raw, json)
Hash identifier: /kv5rRirbOvjRoV98oBr3JuMGbfxRsDIxAZmRNSQ3Ms=
Subject key identifier: 73:4A:5B:A9:F7:E4:11:DC:7F:72:DA:4A:1E:3A:79:B8:3A:D6:45:E3
Certificate issuer: /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial: 018EBCDB545C293521A988A4C344F18647C4
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/c0pbqffkEdx_ctpKHjp5uDrWReM.roa
Signing time: Mon 08 Apr 2024 08:37:54 +0000
ROA not before: Mon 08 Apr 2024 08:37:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20911
IP address blocks: 46.229.192.0/20 maxlen: 20
46.229.192.0/23 maxlen: 23
46.229.192.0/24 maxlen: 24
46.229.193.0/24 maxlen: 24
46.229.194.0/24 maxlen: 24
46.229.195.0/24 maxlen: 24
46.229.196.0/22 maxlen: 22
46.229.196.0/24 maxlen: 24
46.229.197.0/24 maxlen: 24
46.229.198.0/24 maxlen: 24
46.229.199.0/24 maxlen: 24
46.229.200.0/22 maxlen: 22
46.229.200.0/23 maxlen: 24
46.229.200.0/24 maxlen: 24
46.229.201.0/24 maxlen: 24
46.229.202.0/24 maxlen: 24
46.229.203.0/24 maxlen: 24
46.229.204.0/24 maxlen: 24
46.229.205.0/24 maxlen: 24
46.229.206.0/24 maxlen: 24
46.229.206.128/25 maxlen: 25
46.229.207.0/24 maxlen: 24
46.229.207.128/25 maxlen: 25
93.152.228.0/23 maxlen: 23
93.152.228.0/24 maxlen: 24
93.152.229.0/24 maxlen: 24
93.152.248.0/21 maxlen: 24
93.152.248.0/22 maxlen: 22
93.152.248.0/24 maxlen: 24
93.152.249.0/24 maxlen: 24
93.152.250.0/24 maxlen: 24
93.152.251.0/24 maxlen: 24
93.152.252.0/23 maxlen: 23
93.152.252.0/24 maxlen: 24
93.152.253.0/24 maxlen: 24
93.152.254.0/23 maxlen: 23
93.152.254.0/24 maxlen: 24
93.152.255.0/24 maxlen: 24
178.254.192.0/24 maxlen: 24
178.254.193.0/24 maxlen: 24
178.254.194.0/23 maxlen: 23
178.254.194.0/24 maxlen: 24
178.254.195.0/24 maxlen: 24
178.254.196.0/23 maxlen: 23
178.254.196.0/24 maxlen: 24
178.254.197.0/24 maxlen: 24
178.254.198.0/23 maxlen: 23
178.254.198.0/24 maxlen: 24
178.254.199.0/24 maxlen: 24
178.254.200.0/23 maxlen: 23
178.254.200.0/24 maxlen: 24
178.254.201.0/24 maxlen: 24
178.254.202.0/24 maxlen: 24
178.254.203.0/24 maxlen: 24
178.254.204.0/22 maxlen: 22
178.254.204.0/24 maxlen: 24
178.254.205.0/24 maxlen: 24
178.254.206.0/23 maxlen: 23
178.254.206.0/24 maxlen: 24
178.254.207.0/24 maxlen: 24
178.254.208.0/22 maxlen: 22
178.254.208.0/24 maxlen: 24
178.254.209.0/24 maxlen: 24
178.254.210.0/24 maxlen: 24
178.254.211.0/24 maxlen: 24
178.254.212.0/23 maxlen: 23
178.254.212.0/24 maxlen: 24
178.254.213.0/24 maxlen: 24
178.254.214.0/24 maxlen: 24
178.254.215.0/24 maxlen: 24
178.254.216.0/21 maxlen: 21
178.254.216.0/24 maxlen: 24
178.254.217.0/24 maxlen: 24
178.254.218.0/24 maxlen: 24
178.254.219.0/24 maxlen: 24
178.254.220.0/24 maxlen: 24
178.254.221.0/24 maxlen: 24
178.254.222.0/24 maxlen: 24
178.254.223.0/24 maxlen: 24
178.254.224.0/23 maxlen: 23
178.254.224.0/24 maxlen: 24
178.254.225.0/24 maxlen: 24
178.254.226.0/24 maxlen: 24
178.254.227.0/24 maxlen: 24
178.254.228.0/22 maxlen: 22
178.254.228.0/24 maxlen: 24
178.254.229.0/24 maxlen: 24
178.254.230.0/24 maxlen: 24
178.254.231.0/24 maxlen: 24
178.254.232.0/21 maxlen: 21
178.254.232.0/24 maxlen: 24
178.254.233.0/24 maxlen: 24
178.254.234.0/24 maxlen: 24
178.254.235.0/24 maxlen: 24
178.254.236.0/24 maxlen: 24
178.254.237.0/24 maxlen: 24
178.254.238.0/24 maxlen: 24
178.254.239.0/24 maxlen: 24
178.254.240.0/20 maxlen: 20
178.254.240.0/24 maxlen: 24
178.254.241.0/24 maxlen: 24
178.254.242.0/24 maxlen: 24
178.254.243.0/24 maxlen: 24
178.254.244.0/24 maxlen: 24
178.254.245.0/24 maxlen: 24
178.254.246.0/24 maxlen: 24
178.254.247.0/24 maxlen: 24
178.254.248.0/24 maxlen: 24
178.254.249.0/24 maxlen: 24
178.254.250.0/24 maxlen: 24
178.254.251.0/24 maxlen: 24
178.254.252.0/24 maxlen: 24
178.254.253.0/24 maxlen: 24
178.254.254.0/24 maxlen: 24
178.254.255.0/24 maxlen: 24
185.95.248.0/24 maxlen: 24
185.95.249.0/24 maxlen: 24
185.95.250.0/24 maxlen: 24
185.95.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bc:db:54:5c:29:35:21:a9:88:a4:c3:44:f1:86:47:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Validity
Not Before: Apr 8 08:37:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=734a5ba9f7e411dc7f72da4a1e3a79b83ad645e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7e:05:e2:ea:63:82:68:cc:07:44:9b:95:42:
ab:24:c3:c0:ca:8d:2a:50:21:db:64:d0:37:fa:04:
72:76:c2:1e:e3:dd:b1:f1:bc:11:b3:e1:98:63:50:
c8:06:45:9c:5f:12:97:0d:46:21:b8:79:1a:9e:2e:
fb:34:f9:6c:22:22:c0:e8:c9:07:e2:da:a3:63:49:
26:a5:42:c6:28:ef:84:ec:ff:cd:d2:ab:2d:a8:11:
bf:f8:e3:da:33:74:18:9a:20:36:ab:c7:a1:4e:46:
bf:c9:38:70:f7:d8:a4:97:53:b6:e7:dd:4b:47:be:
47:71:37:00:5d:49:61:b4:2b:7f:f7:69:79:9a:3d:
9f:d7:a4:2d:b9:f1:08:7d:2b:4b:9e:e9:8c:bb:d1:
94:31:ff:2a:0c:99:12:06:70:b7:56:c7:75:05:ca:
a2:98:b2:66:57:5f:9e:9b:d1:a1:72:b1:0c:74:05:
ba:b5:fa:d5:bd:55:e9:c1:2a:73:99:4c:2b:eb:c3:
5e:18:ae:47:4d:88:d2:0a:22:08:10:83:e2:c9:34:
e7:3f:6e:7e:e3:ea:88:54:9a:e4:c1:17:ea:8e:65:
07:98:29:06:7f:f0:11:ac:61:89:3a:9a:9f:7d:2a:
a8:41:cd:38:f5:9b:d9:58:d0:de:6e:b8:98:81:cf:
e1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4A:5B:A9:F7:E4:11:DC:7F:72:DA:4A:1E:3A:79:B8:3A:D6:45:E3
X509v3 Authority Key Identifier:
keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/c0pbqffkEdx_ctpKHjp5uDrWReM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.192.0/20
93.152.228.0/23
93.152.248.0/21
178.254.192.0/18
185.95.248.0/22
Signature Algorithm: sha256WithRSAEncryption
52:8e:69:b9:13:83:d4:28:a3:ae:3f:3d:9f:91:8a:f5:f9:3f:
44:7d:74:dd:59:8a:53:c4:d1:ab:29:49:a9:12:61:78:80:43:
38:12:b9:e4:bd:72:7c:68:2b:63:ca:f5:b0:a2:db:d9:16:2d:
38:52:6c:b7:6c:b5:69:15:3d:66:f4:ff:5a:ea:1b:05:ab:79:
94:02:64:3e:d5:0e:28:ea:6c:8d:b5:cf:55:79:45:0c:37:d1:
ba:b2:b9:c8:fd:9e:68:4f:7f:2f:bd:94:11:55:a6:5a:32:6e:
33:94:c2:a5:cc:9a:5a:09:15:76:d8:73:97:00:10:ab:9d:27:
85:69:f6:cd:7d:fd:63:86:c6:7b:ca:0c:91:62:79:d7:56:d5:
a5:b4:2c:c7:a9:b3:37:ee:d9:04:83:c0:3d:07:da:64:8e:05:
3d:f9:17:64:4d:d5:96:b7:e8:4f:0f:bc:3e:10:a9:b8:0d:f2:
30:da:68:9f:c4:eb:91:91:12:95:7a:9f:93:c8:f7:29:ff:0e:
c2:80:0e:80:ff:eb:1a:16:04:7f:ba:50:4c:b2:8c:9c:7b:a2:
c4:84:07:13:7b:48:59:ed:f7:78:1e:57:f3:7d:0e:4a:9a:00:
ff:5c:9c:1d:a0:8c:5b:21:69:ac:8e:90:d6:2e:b4:df:c3:6c:
2c:56:2d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:35:27 2024 by rpki-client on console-fra.rpki-client.org