Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pIuDOQtO3hOHyVotM4a0sMzR4j4.roa
File: pIuDOQtO3hOHyVotM4a0sMzR4j4.roa (raw, json)
Hash identifier: Gf9yn6VtI6twwdV4PKbx2AjVrYxLUFXOBegI5+hYDms=
Subject key identifier: A4:8B:83:39:0B:4E:DE:13:87:C9:5A:2D:33:86:B4:B0:CC:D1:E2:3E
Certificate issuer: /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial: 018FA054313894070461E01BFB0B1EB4E0BD
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pIuDOQtO3hOHyVotM4a0sMzR4j4.roa
Signing time: Wed 22 May 2024 12:43:43 +0000
ROA not before: Wed 22 May 2024 12:43:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31027
IP address blocks: 5.56.144.0/20 maxlen: 20
5.179.80.0/20 maxlen: 20
37.49.128.0/20 maxlen: 20
46.32.156.0/22 maxlen: 22
62.12.32.0/20 maxlen: 20
62.12.48.0/21 maxlen: 21
62.116.192.0/19 maxlen: 19
77.233.224.0/19 maxlen: 19
78.153.160.0/19 maxlen: 19
80.88.128.0/20 maxlen: 20
80.243.112.0/20 maxlen: 20
82.192.160.0/19 maxlen: 19
83.136.88.0/21 maxlen: 21
83.151.128.0/18 maxlen: 18
87.116.0.0/18 maxlen: 18
88.212.64.0/18 maxlen: 18
89.221.160.0/20 maxlen: 20
92.62.192.0/20 maxlen: 20
93.176.64.0/18 maxlen: 18
130.185.128.0/20 maxlen: 20
185.20.240.0/22 maxlen: 22
185.67.128.0/22 maxlen: 22
188.120.80.0/21 maxlen: 21
193.105.116.0/24 maxlen: 24
193.105.149.0/24 maxlen: 24
194.182.96.0/21 maxlen: 21
195.93.176.0/23 maxlen: 23
195.93.182.0/23 maxlen: 23
195.140.132.0/22 maxlen: 22
212.60.120.0/21 maxlen: 21
212.98.96.0/24 maxlen: 24
217.74.208.0/20 maxlen: 20
217.116.208.0/20 maxlen: 20
217.195.176.0/20 maxlen: 20
217.195.178.0/24 maxlen: 24
2a02:188::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a0:54:31:38:94:07:04:61:e0:1b:fb:0b:1e:b4:e0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
Validity
Not Before: May 22 12:43:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a48b83390b4ede1387c95a2d3386b4b0ccd1e23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e4:14:82:9b:01:60:46:ea:11:3a:e2:a3:4b:
8d:8a:fb:a2:4e:aa:59:86:b9:e8:a3:df:54:c9:c9:
e1:aa:69:c1:fc:67:14:8b:a6:6f:74:46:39:e1:d8:
f7:38:fb:a6:81:d2:35:51:b9:db:f7:61:d8:d1:aa:
00:58:94:d4:6d:1a:e2:df:2e:03:c9:60:fc:42:fa:
5b:4c:5f:52:ad:78:ef:d9:d3:ba:20:08:a7:1a:c7:
bf:2c:0a:71:ca:8a:c9:d0:4a:a1:d9:3c:f1:48:f8:
91:68:ba:58:da:bf:5e:70:36:ab:b2:ad:47:89:42:
1a:ae:5a:52:fb:25:10:f5:a5:bc:44:6b:b3:38:fd:
e3:4f:52:4e:c1:98:93:70:23:72:69:08:8a:d9:47:
62:9d:9f:9b:e6:a7:b6:0e:43:54:a7:82:5f:59:2b:
63:d3:06:42:a8:9c:3d:9c:12:79:6b:1e:70:2e:00:
1a:76:82:39:07:60:08:ca:2c:4b:77:3a:2a:e9:59:
43:f3:01:e0:58:ae:cd:55:a2:57:48:c6:cf:ae:05:
e6:fe:f6:ed:fe:2f:2d:99:32:53:d6:56:a2:8c:c0:
55:20:c4:4b:f5:13:81:ed:02:c2:ff:b5:00:72:82:
b5:8c:cd:94:b3:15:0f:ea:e0:57:20:03:a3:19:ae:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8B:83:39:0B:4E:DE:13:87:C9:5A:2D:33:86:B4:B0:CC:D1:E2:3E
X509v3 Authority Key Identifier:
keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pIuDOQtO3hOHyVotM4a0sMzR4j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.144.0/20
5.179.80.0/20
37.49.128.0/20
46.32.156.0/22
62.12.32.0-62.12.55.255
62.116.192.0/19
77.233.224.0/19
78.153.160.0/19
80.88.128.0/20
80.243.112.0/20
82.192.160.0/19
83.136.88.0/21
83.151.128.0/18
87.116.0.0/18
88.212.64.0/18
89.221.160.0/20
92.62.192.0/20
93.176.64.0/18
130.185.128.0/20
185.20.240.0/22
185.67.128.0/22
188.120.80.0/21
193.105.116.0/24
193.105.149.0/24
194.182.96.0/21
195.93.176.0/23
195.93.182.0/23
195.140.132.0/22
212.60.120.0/21
212.98.96.0/24
217.74.208.0/20
217.116.208.0/20
217.195.176.0/20
IPv6:
2a02:188::/29
Signature Algorithm: sha256WithRSAEncryption
59:d0:ee:b5:d0:14:c5:2a:41:6d:98:93:c1:d2:11:ff:26:85:
05:35:b9:12:16:88:a3:26:b0:62:80:42:4e:0d:a9:fa:9d:c9:
49:9e:95:fc:ea:61:0d:d7:fd:48:b0:67:9e:50:20:aa:a4:05:
b3:66:2f:1c:21:89:59:22:6c:3d:6f:04:9b:b3:36:a9:5a:70:
d8:7d:d2:34:2f:dd:ea:0e:38:91:8f:93:c0:a2:65:a0:dc:ed:
d0:f4:17:74:91:22:d8:a5:90:c4:47:8e:1e:07:27:e8:d2:5b:
26:82:c5:85:41:03:98:9b:75:66:0d:f4:c6:eb:42:6c:ed:13:
78:a4:06:37:a3:55:9b:bf:86:50:d6:b2:d0:83:69:0a:9b:57:
29:0b:17:71:8d:b0:5b:20:6b:b8:50:70:23:dc:7e:d1:85:3e:
39:75:46:3e:81:75:0a:94:dc:bb:37:56:13:63:bd:0e:42:f2:
d6:14:8d:db:91:c1:f1:8b:9b:87:32:5f:78:cd:37:de:93:c7:
6c:a0:19:a8:95:31:04:a0:ed:25:3d:6a:4d:e4:7c:f0:75:8f:
24:4c:f6:6c:dc:ce:1a:70:c2:b3:69:e0:ca:11:f6:69:c4:fc:
c8:86:3d:37:39:0f:40:96:5d:8b:58:5a:02:69:48:0b:46:e2:
55:79:af:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:38:54 2024 by rpki-client on console-ams.rpki-client.org