Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS262287.roa
File: AS262287.roa (raw, json)
Hash identifier: iDmECe+mwlLTnx6yfeL0n/v2BxfCWKSe8DjNr1lnjd0=
Subject key identifier: 5D:76:EF:DB:BE:38:0B:31:31:90:36:6B:7B:0C:99:DF:59:2F:D9:5A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 48CD3D73ACFFFC68FBD83460BB140FBE0C7CE51B
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS262287.roa
Signing time: Wed 26 Jun 2024 16:05:25 +0000
ROA not before: Wed 26 Jun 2024 16:00:25 +0000
ROA not after: Wed 25 Jun 2025 16:05:25 +0000
asID: 262287
IP address blocks: 85.208.74.0/24 maxlen: 24
85.208.75.0/24 maxlen: 24
181.41.220.0/24 maxlen: 24
181.214.150.0/24 maxlen: 24
181.214.151.0/24 maxlen: 24
181.214.249.0/24 maxlen: 24
181.215.97.0/24 maxlen: 24
181.215.99.0/24 maxlen: 24
181.215.101.0/24 maxlen: 24
181.215.102.0/24 maxlen: 24
181.215.104.0/24 maxlen: 24
181.215.128.0/24 maxlen: 24
181.215.172.0/24 maxlen: 24
181.215.195.0/24 maxlen: 24
191.96.19.0/24 maxlen: 24
191.96.139.0/24 maxlen: 24
191.96.247.0/24 maxlen: 24
191.101.152.0/24 maxlen: 24
191.101.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:cd:3d:73:ac:ff:fc:68:fb:d8:34:60:bb:14:0f:be:0c:7c:e5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 26 16:00:25 2024 GMT
Not After : Jun 25 16:05:25 2025 GMT
Subject: CN=5D76EFDBBE380B313190366B7B0C99DF592FD95A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:75:c6:c0:54:09:90:4c:9a:35:a6:d2:fc:
14:5b:aa:ac:62:25:bc:0b:70:e4:bf:89:d4:1b:13:
af:8c:78:1c:74:6f:74:e6:32:0a:92:82:7f:6b:7b:
4c:c3:bc:6e:22:4f:33:f9:86:a2:a7:2c:dc:aa:9f:
81:ce:46:06:05:45:37:55:8a:e6:b9:c8:60:5c:39:
0d:7a:14:4c:71:68:1f:71:5d:fc:f5:4d:ff:6a:80:
d0:a6:a6:29:66:15:62:db:9f:c1:4c:1e:bf:a7:cf:
0b:de:e6:37:f9:23:3e:c4:e7:75:f9:e5:5f:a9:d7:
c7:f6:c3:71:b0:12:bf:62:4b:61:d2:f5:dc:df:ff:
25:7c:f3:8e:46:ed:57:e3:2d:00:d9:d6:a7:78:61:
c4:b1:f4:76:99:a6:c5:4e:e7:1e:7c:9a:16:7a:86:
bb:b9:43:03:ff:12:25:e1:9d:1c:39:70:06:82:e3:
e1:14:d0:61:e5:d9:45:7d:a1:ba:15:d2:83:db:d9:
12:85:f8:da:d1:7e:c3:0e:7c:f3:88:f5:89:bb:4c:
e6:0a:2c:74:17:ad:b8:0e:7e:84:fc:ef:90:3a:a1:
d7:9c:80:9d:9c:dd:d7:d1:c1:8a:39:8b:1c:b9:d6:
7b:ef:55:0f:fc:44:73:17:4f:b9:64:5a:8a:7b:f9:
e1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:76:EF:DB:BE:38:0B:31:31:90:36:6B:7B:0C:99:DF:59:2F:D9:5A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS262287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.74.0/23
181.41.220.0/24
181.214.150.0/23
181.214.249.0/24
181.215.97.0/24
181.215.99.0/24
181.215.101.0-181.215.102.255
181.215.104.0/24
181.215.128.0/24
181.215.172.0/24
181.215.195.0/24
191.96.19.0/24
191.96.139.0/24
191.96.247.0/24
191.101.152.0/24
191.101.240.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:48:78:0d:a8:94:58:be:56:77:8f:ba:c1:72:2e:e1:ad:6c:
2c:72:62:95:48:74:d5:fb:fb:e3:d2:56:92:2d:a2:8a:b9:c9:
ad:c9:b2:3c:01:6d:51:28:ea:8c:17:46:5f:ce:f5:b4:b3:3c:
91:cd:6c:87:85:a4:cd:d7:fa:da:04:1e:35:80:96:32:22:c1:
82:69:d7:f1:25:79:8e:52:63:22:e0:da:46:ca:65:48:ad:58:
7a:d9:0c:80:fb:20:06:0c:4d:1b:c3:7e:47:5b:21:56:6e:6e:
c5:bb:1e:b3:34:ba:72:e0:76:90:9f:8a:b5:16:9f:07:bf:05:
d4:c3:99:2d:25:86:5a:11:00:b0:a4:1e:53:e4:85:55:3e:3b:
bd:73:1b:05:c3:c0:9c:21:52:b3:b7:29:91:ee:be:20:eb:e2:
f9:72:88:31:d8:85:d9:43:92:41:c6:7c:c6:6c:bd:e1:ac:fc:
37:eb:ee:0d:0f:76:98:60:eb:67:05:5f:42:21:1c:21:f1:9e:
47:ec:ef:ef:78:f5:47:44:78:ba:3c:c2:23:d1:bc:bc:4b:7a:
78:f7:e6:8c:c6:ed:b1:70:6f:1c:b0:06:81:86:7b:51:b4:53:
7c:36:02:d4:ce:d2:9d:bc:f4:dd:4f:03:d9:b3:56:e2:19:1e:
41:3b:a3:66
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgIUSM09c6z//Gj72DRguxQPvgx85RswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDA2MjYxNjAwMjVaFw0yNTA2MjUxNjA1MjVaMDMxMTAvBgNV
BAMTKDVENzZFRkRCQkUzODBCMzEzMTkwMzY2QjdCMEM5OURGNTkyRkQ5NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDz3XGwFQJkEyaNabS/BRbqqxi
JbwLcOS/idQbE6+MeBx0b3TmMgqSgn9re0zDvG4iTzP5hqKnLNyqn4HORgYFRTdV
iua5yGBcOQ16FExxaB9xXfz1Tf9qgNCmpilmFWLbn8FMHr+nzwve5jf5Iz7E53X5
5V+p18f2w3GwEr9iS2HS9dzf/yV8845G7VfjLQDZ1qd4YcSx9HaZpsVO5x58mhZ6
hru5QwP/EiXhnRw5cAaC4+EU0GHl2UV9oboV0oPb2RKF+NrRfsMOfPOI9Ym7TOYK
LHQXrbgOfoT875A6odecgJ2c3dfRwYo5ixy51nvvVQ/8RHMXT7lkWop7+eFlAgMB
AAGjggJtMIICaTAdBgNVHQ4EFgQUXXbv2744CzExkDZrewyZ31kv2VowHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjYyMjg3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEAVXQ
SgMEALUp3AMEAbXWlgMEALXW+QMEALXXYQMEALXXYzAMAwQAtddlAwQAtddmAwQA
tddoAwQAtdeAAwQAtdesAwQAtdfDAwQAv2ATAwQAv2CLAwQAv2D3AwQAv2WYAwQA
v2XwMA0GCSqGSIb3DQEBCwUAA4IBAQCPSHgNqJRYvlZ3j7rBci7hrWwscmKVSHTV
+/vj0laSLaKKucmtybI8AW1RKOqMF0ZfzvW0szyRzWyHhaTN1/raBB41gJYyIsGC
adfxJXmOUmMi4NpGymVIrVh62QyA+yAGDE0bw35HWyFWbm7Fux6zNLpy4HaQn4q1
Fp8HvwXUw5ktJYZaEQCwpB5T5IVVPju9cxsFw8CcIVKztymR7r4g6+L5cogx2IXZ
Q5JBxnzGbL3hrPw36+4ND3aYYOtnBV9CIRwh8Z5H7O/vePVHRHi6PMIj0by8S3p4
9+aMxu2xcG8csAaBhntRtFN8NgLUztKdvPTdTwPZs1biGR5BO6Nm
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:58 2024 by rpki-client on console-ams.rpki-client.org