Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/86cQAUaQiVgyvYuSlncOQAujhrk.roa
File: 86cQAUaQiVgyvYuSlncOQAujhrk.roa (raw, json)
Hash identifier: cKtNReAYpql2Rlq6yOGodlXIx/sgp3FpT5TB8KbxSnk=
Subject key identifier: F3:A7:10:01:46:90:89:58:32:BD:8B:92:96:77:0E:40:0B:A3:86:B9
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 018F696067BF27DBF4D439A7ADD7DA7BB9B6
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/86cQAUaQiVgyvYuSlncOQAujhrk.roa
Signing time: Sat 11 May 2024 20:37:56 +0000
ROA not before: Sat 11 May 2024 20:37:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 45.11.232.0/24 maxlen: 24
45.11.234.0/23 maxlen: 23
45.91.188.0/22 maxlen: 22
45.142.52.0/22 maxlen: 22
45.147.61.0/24 maxlen: 24
45.147.62.0/24 maxlen: 24
45.153.236.0/24 maxlen: 24
45.153.237.0/24 maxlen: 24
45.153.238.0/24 maxlen: 24
77.83.46.0/23 maxlen: 23
77.83.68.0/24 maxlen: 24
77.83.69.0/24 maxlen: 24
77.83.70.0/24 maxlen: 24
77.83.71.0/24 maxlen: 24
80.76.36.0/22 maxlen: 22
84.252.84.0/23 maxlen: 23
84.252.86.0/24 maxlen: 24
84.252.87.0/24 maxlen: 24
95.214.100.0/22 maxlen: 22
171.22.188.0/24 maxlen: 24
171.22.189.0/24 maxlen: 24
171.22.190.0/24 maxlen: 24
185.15.176.0/22 maxlen: 22
185.164.66.0/23 maxlen: 23
193.36.124.0/22 maxlen: 22
194.110.88.0/22 maxlen: 22
212.81.42.0/24 maxlen: 24
212.81.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:69:60:67:bf:27:db:f4:d4:39:a7:ad:d7:da:7b:b9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: May 11 20:37:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3a710014690895832bd8b9296770e400ba386b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1c:e9:a3:91:40:fa:cd:2d:9d:a8:7f:f0:17:
a5:7f:39:93:06:1e:9b:16:47:e1:a7:7f:30:38:01:
bb:b3:70:90:78:d6:25:0f:51:e1:a2:74:3d:f2:fc:
52:93:01:68:4c:42:95:c1:f7:45:92:19:ea:46:40:
1e:84:39:2e:b7:94:fb:93:02:27:27:20:35:27:a8:
ec:f9:f3:1a:c6:f7:9d:79:2d:38:0d:af:99:75:0c:
01:93:c5:17:59:da:e1:5f:1c:98:9e:6c:e5:b7:6c:
a4:85:25:20:5b:43:e0:5a:c8:39:56:3f:ca:a7:d5:
18:00:51:fa:e2:8f:32:e1:f6:c5:fb:29:c6:11:63:
d4:e0:d1:40:59:d8:f1:cb:8b:e5:35:fa:c3:90:7e:
e8:53:81:54:70:15:b1:27:25:8b:b3:12:23:4c:0a:
94:ee:a3:87:94:7c:2a:8e:b7:d8:ac:88:8a:cd:b5:
d0:56:be:25:f3:95:00:80:a9:b0:a7:41:2d:93:f1:
20:be:bb:fd:71:b0:7b:0b:0c:01:3b:37:7e:64:58:
85:69:a7:1d:30:6d:56:22:45:40:73:ee:0d:42:52:
97:34:1a:24:a5:ab:87:7e:1d:51:8f:2c:33:51:fe:
6d:ca:d9:e4:43:3d:be:66:b9:ce:54:3f:c9:a3:c6:
5f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A7:10:01:46:90:89:58:32:BD:8B:92:96:77:0E:40:0B:A3:86:B9
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/86cQAUaQiVgyvYuSlncOQAujhrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.232.0/24
45.11.234.0/23
45.91.188.0/22
45.142.52.0/22
45.147.61.0-45.147.62.255
45.153.236.0-45.153.238.255
77.83.46.0/23
77.83.68.0/22
80.76.36.0/22
84.252.84.0/22
95.214.100.0/22
171.22.188.0-171.22.190.255
185.15.176.0/22
185.164.66.0/23
193.36.124.0/22
194.110.88.0/22
212.81.42.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:ef:0b:74:c3:c2:52:2a:1d:ab:9d:eb:14:e8:c6:5e:be:41:
e9:64:83:b7:3e:c0:3c:79:41:0c:01:cd:a7:dd:1e:3d:3a:84:
b2:81:ca:8c:b9:40:57:1b:d8:af:4f:e9:a1:35:10:b8:1a:8e:
d7:b8:85:09:63:68:5d:0d:96:32:3e:f8:77:d7:f2:7d:60:f5:
d8:2c:f5:ae:da:59:59:d5:f9:d0:5a:8e:d8:0b:77:d9:7a:b9:
f7:c3:19:f6:58:37:75:52:10:30:e8:d7:cd:99:2e:99:44:6a:
46:ee:53:7d:f4:42:72:7b:5c:05:08:c9:68:81:fc:3a:ef:89:
d9:a7:b2:2e:87:ba:fd:a1:f3:6e:b8:21:44:7c:65:49:f6:8f:
ee:d3:14:27:40:07:60:02:18:47:12:ba:31:21:74:89:6a:36:
02:2d:b3:58:f4:80:16:de:4c:d3:ac:3b:eb:eb:a7:0f:48:49:
c8:15:ae:5a:73:84:e5:dc:16:f6:86:16:5b:6d:b0:61:d3:84:
9c:9d:07:d8:e4:16:7b:ce:69:e4:24:38:a8:0e:6d:24:cc:5c:
2e:01:d5:fe:0d:f9:8b:af:10:56:73:bb:e0:4b:bc:6e:9c:d7:
f1:43:34:09:fc:3d:57:50:94:92:f8:14:e7:a6:18:4a:e0:27:
1a:b2:91:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:29:48 2024 by rpki-client on console-ams.rpki-client.org