Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9NuKgsq06vvD-TEZpmr1dMXFFXU.roa
File: 9NuKgsq06vvD-TEZpmr1dMXFFXU.roa (raw, json)
Hash identifier: sFzQg6kPZ9dYYaJqxyYtiy51JxpToExGDSA6HzPxk5o=
Subject key identifier: F4:DB:8A:82:CA:B4:EA:FB:C3:F9:31:19:A6:6A:F5:74:C5:C5:15:75
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190063C03A6931939EA97172E749D973C95
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9NuKgsq06vvD-TEZpmr1dMXFFXU.roa
Signing time: Tue 11 Jun 2024 07:38:34 +0000
ROA not before: Tue 11 Jun 2024 07:38:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.86.0/23 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Jun 2024 10:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:3c:03:a6:93:19:39:ea:97:17:2e:74:9d:97:3c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 11 07:38:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4db8a82cab4eafbc3f93119a66af574c5c51575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:14:3e:f2:55:45:c9:80:a5:4a:9b:56:28:
cc:64:b4:f6:b8:81:32:e2:43:87:cd:2c:3b:5c:ca:
67:b9:ff:ae:54:f0:d2:13:ab:d3:9d:18:ee:eb:3d:
9d:1e:c6:79:eb:34:dd:d8:88:71:1a:d6:1d:b6:03:
cd:17:b5:92:40:ac:39:55:d4:8b:db:fb:45:ea:80:
2e:80:bf:60:f2:1b:8e:95:56:3d:4d:cf:f2:17:80:
3f:21:2c:c9:91:d6:81:95:85:15:8a:0f:27:01:0a:
7b:d7:98:3e:3c:1b:c4:55:9d:b9:ff:57:fa:75:e6:
ba:05:af:2f:5e:4c:1b:e4:6f:05:8c:2c:68:36:16:
fb:63:58:1b:3e:e0:54:0f:4e:26:df:a9:39:8c:6b:
a4:68:63:91:5c:83:c8:c2:f3:43:75:95:4b:43:72:
5d:c9:6e:8b:5d:3b:dd:19:33:fc:cf:6a:e9:be:bf:
56:a2:11:87:5b:bc:eb:3e:fe:d2:dd:fd:92:78:55:
4c:e3:88:a4:2e:76:80:e3:2e:4d:28:92:e8:a7:c0:
08:ab:ba:35:da:ae:1d:84:74:9d:dc:5f:1d:87:92:
0b:64:e6:d5:5c:d8:94:ec:98:02:17:9c:a5:cd:0d:
90:4d:1c:4e:34:f4:08:04:9c:0d:07:7f:75:21:44:
80:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DB:8A:82:CA:B4:EA:FB:C3:F9:31:19:A6:6A:F5:74:C5:C5:15:75
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9NuKgsq06vvD-TEZpmr1dMXFFXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.88.88.0/24
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
83.219.97.0/24
84.21.174.0/23
87.120.87.0/24
87.121.45.0/24
87.121.86.0/23
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
95.214.25.0-95.214.26.255
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.48.248.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
45:0d:57:be:27:b1:45:b8:06:59:9c:09:a2:3e:a7:4d:68:15:
00:8f:e7:9a:fe:f7:8b:3a:60:46:67:3d:0d:8f:83:77:ae:3a:
1a:74:be:bc:46:a8:4b:3d:71:dc:ea:a3:5b:98:40:64:b5:86:
24:40:09:08:81:7d:b6:48:f3:b4:67:77:4d:47:ee:4e:29:6f:
dd:c0:21:c5:19:f9:cb:fd:56:60:94:0e:40:5a:b2:23:cb:4a:
8d:0d:dd:d9:62:b4:6c:77:17:96:aa:29:bd:ab:a1:8e:99:15:
ab:0e:1c:07:dc:86:3b:33:ca:c2:a5:61:e5:06:1d:01:a5:c2:
90:a0:32:5e:be:b5:a0:c5:bd:cc:05:72:af:40:11:69:d0:df:
9e:47:dc:69:4b:ea:e8:2d:9c:bd:da:e2:d6:85:da:4c:24:72:
6b:a8:f3:ea:77:5d:e6:5f:ed:65:23:f0:39:26:a0:d0:c9:3a:
8f:8e:74:de:34:b1:cb:05:13:ae:7f:08:54:74:d6:c6:49:f9:
fc:9d:2b:d7:99:52:42:66:85:3c:39:8e:f8:ff:ba:f2:b2:1a:
63:fa:f9:20:83:9d:b7:b5:70:03:e6:62:06:34:ab:ea:12:4d:
70:0d:87:bf:e7:ee:0e:6c:61:c1:3f:23:fb:0a:c0:9c:04:a1:
4f:b1:fe:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 16:14:24 2024 by rpki-client on console-ams.rpki-client.org