Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/laqv6uVsMJalR6aIBwFhMjlqv54.roa
File: laqv6uVsMJalR6aIBwFhMjlqv54.roa (raw, json)
Hash identifier: pUyHLbd0EifwY2GyyP/E2KbdXX3pAL8ZB837sxM6F6s=
Subject key identifier: 95:AA:AF:EA:E5:6C:30:96:A5:47:A6:88:07:01:61:32:39:6A:BF:9E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01922E33A38FC5C3B5CFCB9DACC107D437EB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/laqv6uVsMJalR6aIBwFhMjlqv54.roa
Signing time: Thu 26 Sep 2024 11:59:49 +0000
ROA not before: Thu 26 Sep 2024 11:59:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 62.76.233.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
193.124.35.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
194.58.57.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.49.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.84.0/24 maxlen: 24
194.87.86.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.133.0/24 maxlen: 24
194.87.134.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.140.0/24 maxlen: 24
194.87.143.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.201.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
194.87.215.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.250.0/24 maxlen: 24
194.135.36.0/24 maxlen: 24
194.135.38.0/24 maxlen: 24
194.135.105.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.37.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.20.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.24.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.27.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.40.0/24 maxlen: 24
195.133.41.0/24 maxlen: 24
195.133.50.0/24 maxlen: 24
195.133.63.0/24 maxlen: 24
195.133.66.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.77.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
212.192.217.0/24 maxlen: 24
212.192.220.0/24 maxlen: 24
212.193.24.0/24 maxlen: 24
212.193.26.0/24 maxlen: 24
212.193.27.0/24 maxlen: 24
212.193.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2e:33:a3:8f:c5:c3:b5:cf:cb:9d:ac:c1:07:d4:37:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 26 11:59:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95aaafeae56c3096a547a68807016132396abf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3d:bd:36:58:6e:77:f9:78:dc:e4:ca:d3:2e:
fd:46:80:0e:0d:87:58:64:d1:01:d7:7d:76:d1:6b:
26:16:6c:37:9c:ad:92:93:ae:49:e0:1b:be:b9:de:
71:34:7c:e1:48:f5:a4:56:2a:c6:7b:ef:6a:a0:b2:
d9:39:4f:03:b3:cb:01:b5:35:f0:7e:b2:a8:fc:68:
a1:6c:29:8e:ec:d6:d0:aa:12:06:36:0f:34:ac:f4:
53:f9:6c:cc:ca:76:f3:1a:c7:f4:6a:f4:9a:8e:06:
b2:58:e5:d5:0f:b0:22:a0:8b:61:24:c3:a1:db:e1:
ac:f7:97:02:89:6d:50:d6:4e:7b:b6:d1:36:aa:71:
97:02:68:4e:51:c1:7e:e6:72:c8:39:35:4f:ba:7d:
eb:63:88:2f:22:99:b4:5b:97:84:5f:7b:48:9b:d3:
bf:11:ab:d1:8e:dd:7a:cb:79:be:70:04:9c:6f:5b:
c4:44:48:73:bb:a1:19:6c:d0:2b:45:2f:17:f3:85:
b6:98:79:94:48:f0:de:54:5a:34:6e:d3:74:f4:65:
db:9a:42:1c:fa:cd:14:ba:0d:2c:f5:e2:89:4b:2c:
a8:86:a3:fd:67:ad:9e:37:03:44:0a:7b:a3:6b:1a:
4a:00:aa:a1:ca:0b:3e:14:cd:86:9a:dc:8a:d5:36:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AA:AF:EA:E5:6C:30:96:A5:47:A6:88:07:01:61:32:39:6A:BF:9E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/laqv6uVsMJalR6aIBwFhMjlqv54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.233.0/24
193.108.115.0/24
193.124.35.0/24
193.124.47.0/24
194.58.57.0/24
194.87.26.0/23
194.87.43.0-194.87.44.255
194.87.49.0/24
194.87.56.0/24
194.87.76.0/24
194.87.83.0-194.87.84.255
194.87.86.0/24
194.87.104.0/24
194.87.115.0/24
194.87.118.0/24
194.87.130.0/23
194.87.133.0-194.87.134.255
194.87.138.0/24
194.87.140.0/24
194.87.143.0/24
194.87.151.0/24
194.87.161.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0-194.87.202.255
194.87.208.0/24
194.87.215.0/24
194.87.220.0-194.87.222.255
194.87.226.0/24
194.87.243.0/24
194.87.250.0/24
194.135.36.0/24
194.135.38.0/24
194.135.105.0/24
195.58.34.0/24
195.58.36.0/23
195.58.61.0/24
195.133.14.0/23
195.133.20.0/23
195.133.24.0/23
195.133.27.0/24
195.133.30.0/24
195.133.40.0/23
195.133.50.0/24
195.133.63.0/24
195.133.66.0/24
195.133.73.0/24
195.133.76.0/23
195.133.81.0/24
195.133.194.0/24
212.192.217.0/24
212.192.220.0/24
212.193.24.0/24
212.193.26.0/23
212.193.30.0/24
Signature Algorithm: sha256WithRSAEncryption
83:1e:e2:62:c4:36:69:f2:86:e9:98:b2:e6:69:e3:0f:12:cb:
cd:a4:f4:51:07:d7:e1:02:24:38:6b:d1:2c:44:43:30:2d:d3:
5d:b6:21:8c:dd:19:cf:76:68:27:be:8b:70:bd:23:08:6a:91:
58:65:b9:4c:d2:8d:7f:d5:18:c9:3e:96:9b:b8:6a:fa:68:51:
88:bf:8e:e8:7f:ec:ba:42:47:fa:3b:a4:fa:64:f6:7e:63:5c:
0e:8b:0c:7e:f7:b1:51:08:69:18:5a:41:e7:82:0d:8e:e8:84:
24:37:c5:91:9c:d2:71:ed:f9:92:9f:60:cc:a6:fb:5c:6d:50:
3b:d3:8d:8b:ad:3a:62:ae:ac:56:fe:e4:d9:bb:e7:55:0e:45:
8a:e6:a2:74:61:af:1e:47:05:3f:de:dc:37:89:a9:4e:ef:1c:
4a:39:99:ab:5b:0d:16:c5:28:24:ba:f4:12:a8:25:2d:67:b1:
43:a2:a0:d8:52:2b:63:44:ed:84:e4:d2:4b:b7:12:37:cc:8a:
cc:41:f3:6f:7a:53:fa:d5:0f:af:e3:1c:66:73:36:9b:98:eb:
18:df:10:53:6d:7f:bd:90:15:08:dc:1d:f1:d9:0f:6a:19:74:
86:a9:c3:b4:3a:1c:25:29:12:5c:fd:b8:f9:ad:3e:2d:56:3c:
ef:d6:38:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:14:52 2024 by rpki-client on console-ams.rpki-client.org