Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/bSRQ2xuL_gzs_t9DJKDSjWerK9M.roa
File: bSRQ2xuL_gzs_t9DJKDSjWerK9M.roa (raw, json)
Hash identifier: E7LltKVbItSfpmIiDwQ923PieJGLKHbDBHaO0N5K89w=
Subject key identifier: 6D:24:50:DB:1B:8B:FE:0C:EC:FE:DF:43:24:A0:D2:8D:67:AB:2B:D3
Certificate issuer: /CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Certificate serial: 018CC6B8FF9C296623DC3CBE607D020DD5FA
Authority key identifier: E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/bSRQ2xuL_gzs_t9DJKDSjWerK9M.roa
Signing time: Mon 01 Jan 2024 20:31:01 +0000
ROA not before: Mon 01 Jan 2024 20:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202596
IP address blocks: 45.12.240.0/22 maxlen: 22
185.225.44.0/22 maxlen: 22
193.39.240.0/22 maxlen: 22
160.19.180.0/22 maxlen: 22
195.26.112.0/20 maxlen: 20
185.96.220.0/22 maxlen: 22
80.249.16.0/20 maxlen: 20
130.195.48.0/22 maxlen: 22
130.195.60.0/22 maxlen: 22
176.97.152.0/22 maxlen: 22
185.239.32.0/22 maxlen: 22
95.141.16.0/20 maxlen: 20
185.254.136.0/22 maxlen: 22
85.8.164.0/22 maxlen: 22
185.247.172.0/22 maxlen: 22
62.197.32.0/21 maxlen: 21
62.197.42.0/23 maxlen: 23
62.197.46.0/23 maxlen: 23
62.197.56.0/21 maxlen: 21
62.197.52.0/22 maxlen: 22
185.106.72.0/22 maxlen: 22
185.248.104.0/22 maxlen: 22
45.133.120.0/21 maxlen: 21
45.133.128.0/22 maxlen: 22
193.29.28.0/22 maxlen: 22
193.46.20.0/22 maxlen: 22
185.14.88.0/22 maxlen: 22
45.159.64.0/23 maxlen: 23
185.236.184.0/22 maxlen: 22
45.139.12.0/22 maxlen: 22
161.38.0.0/21 maxlen: 21
185.159.76.0/22 maxlen: 22
185.176.160.0/22 maxlen: 22
185.250.188.0/22 maxlen: 22
45.92.120.0/22 maxlen: 22
45.149.188.0/22 maxlen: 22
185.240.108.0/22 maxlen: 22
45.95.156.0/22 maxlen: 22
45.152.232.0/22 maxlen: 22
86.105.196.0/24 maxlen: 24
194.6.251.0/24 maxlen: 24
194.6.252.0/24 maxlen: 24
194.6.254.0/24 maxlen: 24
45.145.48.0/22 maxlen: 22
185.222.80.0/22 maxlen: 22
45.141.132.0/22 maxlen: 22
45.80.244.0/22 maxlen: 22
185.111.72.0/22 maxlen: 22
45.134.228.0/22 maxlen: 22
158.41.48.0/20 maxlen: 20
185.226.36.0/22 maxlen: 22
185.179.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:ff:9c:29:66:23:dc:3c:be:60:7d:02:0d:d5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Validity
Not Before: Jan 1 20:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d2450db1b8bfe0cecfedf4324a0d28d67ab2bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:8e:33:e5:f1:41:7f:6d:92:50:f3:04:cc:
c1:da:96:df:92:b7:6c:90:e1:7e:fd:42:7a:97:ee:
25:c5:f3:15:77:9a:3d:8d:8b:d9:4d:1c:bb:85:94:
39:19:ee:55:fb:f7:39:d3:07:f1:a5:9e:91:6e:9a:
cb:23:e1:48:9e:bb:32:94:72:83:68:5b:ff:f6:55:
41:f1:82:cb:85:69:bc:73:f4:56:61:95:2d:f8:ab:
b5:89:91:e5:e6:a8:25:da:93:6d:b1:56:bb:bd:94:
6e:42:d9:1e:2a:b8:9c:43:c9:62:b4:61:a9:18:69:
f5:21:79:fe:b7:54:f7:7b:99:ae:e0:4e:7e:0c:9f:
90:8c:d4:4a:28:4e:45:7a:5a:f7:19:d2:a5:33:62:
ca:5d:84:a9:cf:84:dd:e3:ad:7c:e1:3d:0b:a6:b7:
58:d0:28:7d:4a:0c:96:7e:cf:1f:f5:89:61:29:ad:
a9:5e:84:9c:d8:17:e2:a8:59:12:4d:cb:d6:d2:55:
72:d9:69:3e:40:7f:86:05:d0:b3:3d:5f:c3:63:07:
ab:6a:bd:0a:16:cc:99:21:23:72:87:85:57:69:e6:
00:16:c0:f8:5b:ab:f5:39:99:0b:d6:c0:6d:c9:aa:
ee:6a:25:de:c9:b8:36:97:ba:bb:e0:2a:8b:02:2e:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:24:50:DB:1B:8B:FE:0C:EC:FE:DF:43:24:A0:D2:8D:67:AB:2B:D3
X509v3 Authority Key Identifier:
keyid:E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/bSRQ2xuL_gzs_t9DJKDSjWerK9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.240.0/22
45.80.244.0/22
45.92.120.0/22
45.95.156.0/22
45.133.120.0-45.133.131.255
45.134.228.0/22
45.139.12.0/22
45.141.132.0/22
45.145.48.0/22
45.149.188.0/22
45.152.232.0/22
45.159.64.0/23
62.197.32.0/21
62.197.42.0/23
62.197.46.0/23
62.197.52.0-62.197.63.255
80.249.16.0/20
85.8.164.0/22
86.105.196.0/24
95.141.16.0/20
130.195.48.0/22
130.195.60.0/22
158.41.48.0/20
160.19.180.0/22
161.38.0.0/21
176.97.152.0/22
185.14.88.0/22
185.96.220.0/22
185.106.72.0/22
185.111.72.0/22
185.159.76.0/22
185.176.160.0/22
185.179.12.0/22
185.222.80.0/22
185.225.44.0/22
185.226.36.0/22
185.236.184.0/22
185.239.32.0/22
185.240.108.0/22
185.247.172.0/22
185.248.104.0/22
185.250.188.0/22
185.254.136.0/22
193.29.28.0/22
193.39.240.0/22
193.46.20.0/22
194.6.251.0-194.6.252.255
194.6.254.0/24
195.26.112.0/20
Signature Algorithm: sha256WithRSAEncryption
9a:9a:04:a8:a0:0e:b1:04:0b:75:63:c5:52:db:f1:03:23:ac:
30:58:20:e8:95:13:5c:b3:21:87:70:4e:06:07:21:14:75:9f:
6d:f0:52:84:32:cb:0e:c1:9d:c0:3f:53:64:9d:c6:74:74:e9:
a6:d9:8c:5d:79:b3:e2:24:26:b2:66:ea:28:18:ad:26:9d:c8:
35:36:d2:9b:64:f0:94:4d:6a:16:54:45:1b:47:4a:71:7b:de:
87:8d:30:12:fd:50:cc:b1:fd:85:5c:50:94:36:b7:5b:6f:4b:
fc:13:c6:7b:ad:88:3e:ea:d3:b9:99:10:f3:3b:08:eb:32:5d:
99:37:af:25:a3:84:01:1e:6e:2d:66:35:6d:af:34:a4:f8:44:
0e:e7:3f:12:fe:1f:c7:ad:fd:4b:a0:87:5c:98:9c:d1:bb:45:
0c:eb:db:1e:8d:f2:cf:3a:c7:92:f9:7a:5f:6a:30:bd:c6:a0:
0d:e1:36:48:49:7d:61:0e:3d:54:96:ba:ff:9d:3b:db:28:a9:
cf:68:c6:8b:ee:18:2f:40:a8:aa:77:1e:f4:e4:c4:7d:91:f6:
22:3d:62:d5:e7:5f:e1:5a:5a:7f:d9:0d:92:61:85:51:b9:69:
39:77:da:fc:10:98:5a:a2:58:a8:14:6e:cc:60:ae:c5:35:b0:
c0:7d:1e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:50:47 2024 by rpki-client on console-fra.rpki-client.org