Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/A9EVdxbewM1FM1Si3aM_f_IrqLI.roa
File: A9EVdxbewM1FM1Si3aM_f_IrqLI.roa (raw, json)
Hash identifier: +IOkIxiMfkVKxTerqHeKZXRfGdE3tRAaVK9LfdaFiR4=
Subject key identifier: 03:D1:15:77:16:DE:C0:CD:45:33:54:A2:DD:A3:3F:7F:F2:2B:A8:B2
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 01904F1BB65963D9FE88B391A92580AD26EC
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/A9EVdxbewM1FM1Si3aM_f_IrqLI.roa
Signing time: Tue 25 Jun 2024 11:15:34 +0000
ROA not before: Tue 25 Jun 2024 11:15:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36454
IP address blocks: 65.181.112.0/24 maxlen: 24
65.181.113.0/24 maxlen: 24
65.181.116.0/24 maxlen: 24
65.181.123.0/24 maxlen: 24
65.181.124.0/24 maxlen: 24
65.181.125.0/24 maxlen: 24
162.208.8.0/24 maxlen: 24
162.208.9.0/24 maxlen: 24
162.208.10.0/24 maxlen: 24
162.208.11.0/24 maxlen: 24
192.243.96.0/24 maxlen: 24
192.243.97.0/24 maxlen: 24
192.243.98.0/24 maxlen: 24
192.243.99.0/24 maxlen: 24
192.243.100.0/24 maxlen: 24
192.243.101.0/24 maxlen: 24
192.243.102.0/24 maxlen: 24
192.243.103.0/24 maxlen: 24
192.243.104.0/24 maxlen: 24
192.243.105.0/24 maxlen: 24
192.243.106.0/24 maxlen: 24
192.243.107.0/24 maxlen: 24
192.243.108.0/24 maxlen: 24
192.243.109.0/24 maxlen: 24
192.243.111.0/24 maxlen: 24
192.250.224.0/20 maxlen: 20
192.250.226.0/24 maxlen: 24
192.250.227.0/24 maxlen: 24
192.250.236.0/24 maxlen: 24
195.250.25.0/24 maxlen: 24
199.175.48.0/24 maxlen: 24
199.175.49.0/24 maxlen: 24
199.175.50.0/24 maxlen: 24
199.175.51.0/24 maxlen: 24
199.175.52.0/24 maxlen: 24
199.175.53.0/24 maxlen: 24
199.175.54.0/24 maxlen: 24
199.175.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:1b:b6:59:63:d9:fe:88:b3:91:a9:25:80:ad:26:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Jun 25 11:15:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03d1157716dec0cd453354a2dda33f7ff22ba8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:92:8e:48:ad:ef:11:fc:4d:4b:69:34:75:
ce:f8:43:9f:81:95:eb:23:ad:6f:78:ee:2b:ca:c6:
1c:22:f3:df:c0:b1:7e:7c:58:7d:a5:b2:90:de:95:
55:c5:22:e7:49:f4:35:b6:b3:c3:46:8d:30:ba:a6:
5a:8b:c9:83:36:5d:11:5c:36:fa:3b:82:e6:bf:2b:
58:68:f7:73:39:f8:6b:ee:f3:d2:9f:ff:bb:e0:2a:
6a:12:ce:d0:05:18:5b:8d:86:b3:d4:2a:d5:df:98:
5b:a0:98:5c:e4:51:40:44:34:95:fc:e0:1c:25:6a:
4f:89:61:3e:74:47:79:4e:8d:53:6b:e3:2a:3a:37:
26:84:c3:c6:7c:6c:ce:b3:ec:06:14:07:f1:d1:6e:
cf:56:ba:a9:60:8a:ed:98:60:4a:6d:f3:25:cb:36:
a1:f7:89:41:0d:ba:ad:a8:71:12:4a:af:b1:ba:53:
36:64:12:8b:45:b9:b3:c5:20:24:89:08:df:cf:db:
44:01:c9:f5:20:1c:b9:23:b0:c8:20:6a:17:38:13:
38:74:8a:a5:39:c9:18:ad:e9:1e:73:5a:7e:28:9f:
fc:fa:0b:91:db:59:94:5b:0e:a0:78:b5:59:1e:0c:
db:72:8a:66:82:ac:f6:d6:9c:a8:2a:8d:e1:eb:31:
94:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D1:15:77:16:DE:C0:CD:45:33:54:A2:DD:A3:3F:7F:F2:2B:A8:B2
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/A9EVdxbewM1FM1Si3aM_f_IrqLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.181.112.0/23
65.181.116.0/24
65.181.123.0-65.181.125.255
162.208.8.0/22
192.243.96.0-192.243.109.255
192.243.111.0/24
192.250.224.0/20
195.250.25.0/24
199.175.48.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:0e:bf:6f:db:15:41:68:13:25:e5:d1:31:24:13:7b:04:a9:
b3:fc:ff:b2:88:ec:20:32:6c:0d:d7:86:53:4c:66:35:ff:c2:
81:d7:31:ea:0f:51:5e:24:1b:6d:58:32:1f:66:77:87:95:60:
3c:08:dd:e4:cd:a0:ca:f1:fe:51:81:fd:6f:cf:15:e8:5e:49:
a5:38:76:e4:18:72:1d:b9:de:d1:bf:4a:ca:71:59:54:46:9b:
ee:10:d5:e9:e5:bc:6e:ee:11:07:0b:3c:fa:60:d6:ab:9c:4a:
9b:f0:97:96:87:55:4a:5c:49:2b:5b:ca:b4:72:29:f2:0c:e7:
b0:bd:a4:89:45:a5:2b:48:9c:8c:6d:e9:10:5a:c7:df:05:81:
99:f2:12:49:c6:47:1f:cf:c8:d5:aa:86:65:98:54:c2:d6:45:
5c:6c:08:71:70:bf:b9:98:27:34:2f:e1:53:ce:ec:31:5f:9d:
11:e6:41:57:63:53:fd:8f:51:93:73:74:70:9b:a7:26:b2:a1:
15:c6:e7:f1:43:ed:8b:2c:39:f7:09:1c:5e:fc:1e:c4:3e:41:
3a:9a:64:18:d4:a7:db:04:39:66:d5:e5:f3:e8:cd:ab:65:de:
5c:87:13:dc:84:d9:01:8b:ac:da:ef:9a:cc:20:af:be:64:f4:
ed:84:1e:8e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZBPG7ZZY9n+iLORqSWArSbsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy
ZWU4ZGQwHhcNMjQwNjI1MTExNTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2QxMTU3NzE2ZGVjMGNkNDUzMzU0YTJkZGEzM2Y3ZmYyMmJhOGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1aSjkit7xH8TUtpNHXO+EOfgZXr
I61veO4rysYcIvPfwLF+fFh9pbKQ3pVVxSLnSfQ1trPDRo0wuqZai8mDNl0RXDb6
O4LmvytYaPdzOfhr7vPSn/+74CpqEs7QBRhbjYaz1CrV35hboJhc5FFARDSV/OAc
JWpPiWE+dEd5To1Ta+MqOjcmhMPGfGzOs+wGFAfx0W7PVrqpYIrtmGBKbfMlyzah
94lBDbqtqHESSq+xulM2ZBKLRbmzxSAkiQjfz9tEAcn1IBy5I7DIIGoXOBM4dIql
OckYrekec1p+KJ/8+guR21mUWw6geLVZHgzbcopmgqz21pyoKo3h6zGUjwIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFAPRFXcW3sDNRTNUot2jP3/yK6iyMB8GA1UdIwQY
MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt
Y2NhMzc2MDZiZjE4LzEvQTlFVmR4YmV3TTFGTTFTaTNhTV9mX0lycUxJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4
LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQBQbVwAwQA
QbV0MAwDBABBtXsDBAFBtXwDBAKi0AgwDAMEBcDzYAMEAcDzbAMEAMDzbwMEBMD6
4AMEAMP6GQMEA8evMDANBgkqhkiG9w0BAQsFAAOCAQEAnw6/b9sVQWgTJeXRMSQT
ewSps/z/sojsIDJsDdeGU0xmNf/Cgdcx6g9RXiQbbVgyH2Z3h5VgPAjd5M2gyvH+
UYH9b88V6F5JpTh25BhyHbne0b9KynFZVEab7hDV6eW8bu4RBws8+mDWq5xKm/CX
lodVSlxJK1vKtHIp8gznsL2kiUWlK0icjG3pEFrH3wWBmfISScZHH8/I1aqGZZhU
wtZFXGwIcXC/uZgnNC/hU87sMV+dEeZBV2NT/Y9Rk3N0cJunJrKhFcbn8UPtiyw5
9wkcXvwexD5BOppkGNSn2wQ5ZtXl8+jNq2XeXIcT3ITZAYus2u+azCCvvmT07YQe
jg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:17 2024 by rpki-client on console-ams.rpki-client.org