Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/VvMNULo90OSq3YWMsQX2HueB9Y0.roa
File: VvMNULo90OSq3YWMsQX2HueB9Y0.roa (raw, json)
Hash identifier: /v6TbsCsNw7Rogy/M+RU5DC1iHiG4Gxb+AoOLmkdhmE=
Subject key identifier: 56:F3:0D:50:BA:3D:D0:E4:AA:DD:85:8C:B1:05:F6:1E:E7:81:F5:8D
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018CC7951EDB59711CFA3B4AAA929536D55C
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/VvMNULo90OSq3YWMsQX2HueB9Y0.roa
Signing time: Tue 02 Jan 2024 00:31:27 +0000
ROA not before: Tue 02 Jan 2024 00:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 194.156.0.0/24 maxlen: 24
194.156.27.0/24 maxlen: 24
45.152.212.0/24 maxlen: 24
45.152.213.0/24 maxlen: 24
91.213.35.0/24 maxlen: 24
45.135.177.0/24 maxlen: 24
45.158.45.0/24 maxlen: 24
45.156.151.0/24 maxlen: 24
45.156.148.0/24 maxlen: 24
87.247.141.0/24 maxlen: 24
45.152.214.0/24 maxlen: 24
45.152.215.0/24 maxlen: 24
45.147.252.0/24 maxlen: 24
193.8.171.0/24 maxlen: 24
91.188.231.0/24 maxlen: 24
91.188.228.0/24 maxlen: 24
91.188.229.0/24 maxlen: 24
91.188.230.0/24 maxlen: 24
91.220.229.0/24 maxlen: 24
45.143.142.0/24 maxlen: 24
45.92.172.0/24 maxlen: 24
91.220.206.0/24 maxlen: 24
213.226.102.0/24 maxlen: 24
213.226.103.0/24 maxlen: 24
45.142.74.0/24 maxlen: 24
45.142.75.0/24 maxlen: 24
45.142.72.0/24 maxlen: 24
45.142.73.0/24 maxlen: 24
45.140.62.0/24 maxlen: 24
45.140.63.0/24 maxlen: 24
45.140.60.0/24 maxlen: 24
45.138.144.0/24 maxlen: 24
45.138.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:1e:db:59:71:1c:fa:3b:4a:aa:92:95:36:d5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 00:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56f30d50ba3dd0e4aadd858cb105f61ee781f58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:60:a0:e3:96:4d:b0:14:fc:9a:63:f0:81:
1a:41:0c:ec:af:03:43:d0:ba:f8:c0:83:fa:ca:0f:
4a:bc:bf:e6:88:a4:8a:38:24:10:94:4b:18:37:55:
e7:84:96:02:0c:21:96:93:5b:09:6b:9d:27:61:fe:
84:f4:01:e3:e0:64:47:a9:ed:91:9f:89:ee:09:1f:
de:9a:ba:42:9c:6f:e0:ae:28:a7:d1:e6:9d:29:84:
22:94:f5:41:42:fc:f2:54:f0:64:87:e8:42:c1:b2:
77:8a:73:e8:9f:5b:4d:20:70:50:9d:21:33:56:89:
2f:1f:9f:08:91:c6:51:fa:5f:5a:ed:f4:ae:99:26:
d1:e1:12:32:31:18:5b:df:0b:ec:39:a4:94:be:4b:
b9:dd:ea:4f:bb:e3:b5:f8:45:86:4f:e0:b9:fe:b7:
7f:78:dd:cb:23:1a:21:ff:1f:c4:a2:f4:87:2c:f2:
3d:f5:b5:b5:dc:32:5d:40:ee:47:1e:5c:56:3d:02:
58:67:9f:94:b0:fb:82:62:4a:ad:a8:46:7b:63:c6:
ec:c4:f7:ad:6d:73:9f:9b:f5:be:9a:c7:0a:a0:50:
e2:d1:ac:47:31:bf:d5:da:fc:b8:e3:eb:50:07:d3:
63:7c:3b:22:0e:cb:0f:e1:94:94:03:be:15:1e:4f:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F3:0D:50:BA:3D:D0:E4:AA:DD:85:8C:B1:05:F6:1E:E7:81:F5:8D
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/VvMNULo90OSq3YWMsQX2HueB9Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.172.0/24
45.135.177.0/24
45.138.144.0/24
45.138.147.0/24
45.140.60.0/24
45.140.62.0/23
45.142.72.0/22
45.143.142.0/24
45.147.252.0/24
45.152.212.0/22
45.156.148.0/24
45.156.151.0/24
45.158.45.0/24
87.247.141.0/24
91.188.228.0/22
91.213.35.0/24
91.220.206.0/24
91.220.229.0/24
193.8.171.0/24
194.156.0.0/24
194.156.27.0/24
213.226.102.0/23
Signature Algorithm: sha256WithRSAEncryption
84:e1:6d:eb:36:4d:b1:69:73:c4:97:b3:e5:5b:8d:f1:ec:43:
f2:ac:09:48:e2:61:c1:6b:ac:64:cc:f0:ce:22:d4:dd:69:29:
89:0c:37:f5:0d:6a:c1:a8:75:c3:39:3a:e7:48:51:fd:ca:aa:
d0:e3:e6:55:a3:2b:a9:1a:c9:52:23:ed:27:30:e8:32:f2:28:
77:5d:00:2f:ac:2d:b0:da:58:89:75:7a:d4:61:58:db:2b:13:
7e:74:32:64:d6:38:dd:d3:22:d2:a9:af:69:64:8e:df:a8:a4:
0a:22:7a:94:15:bc:6d:20:04:fa:5b:b3:6c:52:c3:61:c2:a8:
b3:3f:1f:e1:61:e3:e1:b6:29:b7:51:bb:d3:b5:3b:a3:57:df:
04:25:f9:16:0b:8d:e8:50:90:3a:e3:62:4c:1c:76:b5:9c:28:
a4:7d:8f:45:12:5a:d5:68:94:08:b8:90:fd:fb:23:bc:86:2c:
d0:fc:22:72:90:f0:24:21:ec:58:61:c9:74:7b:2d:88:b1:6f:
4e:a4:f1:78:78:c3:d8:ca:6d:20:bf:27:da:1e:57:8f:2c:a8:
4c:9d:1d:c2:fd:71:f5:35:73:e7:36:93:8e:ce:1c:d2:eb:43:
52:9f:db:a4:9a:dd:5f:65:e2:a5:2d:69:97:e7:be:4f:c4:58:
8e:bf:d1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:01:17 2024 by rpki-client on console-ams.rpki-client.org