Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/kSO2nPPEF1ZOLt-fnBkVdmoJk_w.roa
File: kSO2nPPEF1ZOLt-fnBkVdmoJk_w.roa (raw, json)
Hash identifier: R0vwu65QLGugH4yTz8ty6Nici0gv7UYMx7blNAC5Df8=
Subject key identifier: 91:23:B6:9C:F3:C4:17:56:4E:2E:DF:9F:9C:19:15:76:6A:09:93:FC
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 018DC12F57E2662595E882332B2190F63110
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/kSO2nPPEF1ZOLt-fnBkVdmoJk_w.roa
Signing time: Mon 19 Feb 2024 11:45:21 +0000
ROA not before: Mon 19 Feb 2024 11:45:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200350
IP address blocks: 37.230.172.0/22 maxlen: 24
37.230.188.0/22 maxlen: 24
45.133.96.0/22 maxlen: 24
46.21.244.0/22 maxlen: 24
51.250.0.0/17 maxlen: 24
62.84.112.0/20 maxlen: 24
84.201.128.0/18 maxlen: 24
84.252.128.0/20 maxlen: 24
89.169.128.0/18 maxlen: 24
130.193.32.0/19 maxlen: 24
158.160.0.0/16 maxlen: 24
178.154.192.0/18 maxlen: 24
185.206.164.0/22 maxlen: 24
185.216.194.0/23 maxlen: 24
193.32.216.0/22 maxlen: 24
217.28.224.0/20 maxlen: 24
217.198.168.0/21 maxlen: 24
2a0d:d6c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:2f:57:e2:66:25:95:e8:82:33:2b:21:90:f6:31:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Feb 19 11:45:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9123b69cf3c417564e2edf9f9c1915766a0993fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:98:99:86:8d:5b:7d:d5:42:53:81:71:2b:2e:
71:0a:93:a6:b9:21:f8:6b:3e:65:4c:a8:7a:8b:ce:
d3:b9:ab:d3:ae:0b:77:64:3a:d3:56:2b:f6:69:ed:
18:24:eb:fa:fe:a9:d5:1d:35:c2:ba:35:55:92:f0:
9a:36:38:4f:4a:62:d3:bc:65:b5:32:e9:38:ab:6e:
3f:97:6e:6a:9b:8d:d8:3b:04:ea:af:a2:bc:ac:85:
5a:80:ca:18:6e:d8:dd:ee:ed:a6:c7:72:65:d5:1b:
4a:bc:78:9f:f2:a5:c0:f0:ae:e6:30:cf:b0:3d:1a:
91:11:c8:69:d4:45:73:4a:e1:2f:66:82:51:45:61:
ca:5a:48:78:89:cd:15:9e:52:2b:6d:01:2e:82:45:
46:3e:78:d6:2c:46:1d:8e:e7:08:b0:19:0c:6d:5a:
4e:b1:c0:e9:93:ac:b3:a5:33:7d:97:43:c4:25:aa:
f8:c3:ea:21:b3:e4:b2:01:24:83:76:48:96:67:a8:
78:fc:63:12:50:1f:81:97:59:1c:01:15:80:0a:8a:
d2:56:83:7c:99:73:dd:bb:63:86:bb:e3:94:a0:00:
c0:38:63:93:ed:a7:38:ef:38:3c:f6:1d:b3:41:34:
1a:51:50:c8:10:c5:2b:97:4b:2f:0c:47:24:24:b7:
24:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:23:B6:9C:F3:C4:17:56:4E:2E:DF:9F:9C:19:15:76:6A:09:93:FC
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/kSO2nPPEF1ZOLt-fnBkVdmoJk_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.172.0/22
37.230.188.0/22
45.133.96.0/22
46.21.244.0/22
51.250.0.0/17
62.84.112.0/20
84.201.128.0/18
84.252.128.0/20
89.169.128.0/18
130.193.32.0/19
158.160.0.0/16
178.154.192.0/18
185.206.164.0/22
185.216.194.0/23
193.32.216.0/22
217.28.224.0/20
217.198.168.0/21
IPv6:
2a0d:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
46:e6:f6:e8:d9:cd:b4:37:9b:b3:4d:8d:cf:ae:f8:5d:c1:8b:
45:af:43:c0:07:54:2e:32:a1:dd:30:4f:42:5a:96:56:d0:73:
c6:9f:62:f3:b3:a8:86:10:c7:78:42:25:25:ac:e7:9f:cb:88:
58:40:10:91:8f:65:14:d5:cd:e8:6b:2f:4b:6f:81:f0:f7:01:
9a:6f:58:8e:f3:d0:dc:27:dc:95:35:09:65:7e:10:26:d4:29:
b9:c8:ff:41:ef:9a:f7:27:65:6c:44:3c:83:9c:aa:21:a2:92:
82:c4:1e:9c:5f:5a:d8:19:f0:dd:1f:85:c7:2e:b4:e4:d2:f4:
82:fc:2c:1d:bf:46:7c:b9:6f:4e:7b:4a:d4:dd:88:93:4a:34:
c4:0f:e4:06:e4:70:d2:b4:05:e5:d2:d9:13:25:2e:a1:ae:01:
2b:83:14:ad:79:46:7f:77:00:62:8a:e2:07:42:0a:8e:f7:b3:
97:ff:e9:12:45:b5:9d:2d:3b:4d:66:f8:7e:df:ea:c4:ca:d1:
bf:d1:56:ca:b0:21:60:97:ec:d8:38:f1:87:f9:ea:53:9a:f3:
92:80:cb:48:e3:bf:cc:49:32:14:71:e2:97:08:e3:a7:2c:1e:
51:a1:a9:0b:8b:79:9c:b0:55:69:bc:8e:aa:16:8a:3f:80:b2:
a6:28:0b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:55:27 2024 by rpki-client on console-ams.rpki-client.org