Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/pdHUsPLd0RbXLZSO3lT30Pa4zLU.roa
File: pdHUsPLd0RbXLZSO3lT30Pa4zLU.roa (raw, json)
Hash identifier: wrwZby8sKoZ2ieDJiIxs8e1YCnIL6T8MXgsDBaVl19c=
Subject key identifier: A5:D1:D4:B0:F2:DD:D1:16:D7:2D:94:8E:DE:54:F7:D0:F6:B8:CC:B5
Certificate issuer: /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial: 018CC49338278F9283768C8199F5C36389E2
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/pdHUsPLd0RbXLZSO3lT30Pa4zLU.roa
Signing time: Mon 01 Jan 2024 10:30:31 +0000
ROA not before: Mon 01 Jan 2024 10:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59447
IP address blocks: 198.55.29.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.31.0/24 maxlen: 24
198.55.30.0/24 maxlen: 24
185.4.225.0/24 maxlen: 24
23.252.67.0/24 maxlen: 24
23.252.68.0/24 maxlen: 24
23.252.71.0/24 maxlen: 24
23.252.76.0/24 maxlen: 24
23.252.79.0/24 maxlen: 24
185.161.110.0/24 maxlen: 24
162.218.177.0/24 maxlen: 24
162.218.176.0/24 maxlen: 24
162.218.179.0/24 maxlen: 24
162.218.178.0/24 maxlen: 24
167.160.1.0/24 maxlen: 24
167.160.0.0/24 maxlen: 24
167.160.3.0/24 maxlen: 24
162.222.90.0/24 maxlen: 24
162.222.89.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.13.0/24 maxlen: 24
167.160.21.0/24 maxlen: 24
167.160.28.0/24 maxlen: 24
167.160.30.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
107.150.163.0/24 maxlen: 24
107.150.162.0/24 maxlen: 24
107.150.164.0/24 maxlen: 24
107.150.166.0/24 maxlen: 24
107.150.167.0/24 maxlen: 24
107.150.168.0/24 maxlen: 24
107.150.169.0/24 maxlen: 24
107.150.172.0/24 maxlen: 24
107.150.171.0/24 maxlen: 24
107.150.173.0/24 maxlen: 24
107.150.175.0/24 maxlen: 24
2a07:5140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:38:27:8f:92:83:76:8c:81:99:f5:c3:63:89:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
Validity
Not Before: Jan 1 10:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5d1d4b0f2ddd116d72d948ede54f7d0f6b8ccb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:14:78:bc:a6:09:cf:7b:6f:43:31:15:e4:60:
68:ac:2f:f1:74:d0:ce:bb:6a:cd:b0:c6:97:6b:66:
57:94:a9:26:04:b9:d3:33:de:9a:fb:c7:27:a5:5d:
bc:65:ce:e4:eb:d3:01:9c:38:a9:e6:3d:c7:9a:c5:
f2:43:45:5c:c4:5f:1d:f0:b8:d2:85:fe:e7:fc:21:
c3:18:39:11:ee:d5:1d:76:8f:26:14:b4:46:2c:93:
6d:46:82:4f:12:0c:8d:10:77:07:df:28:af:f7:88:
65:04:8c:41:43:96:a5:f6:95:d5:74:28:95:99:cb:
98:60:d6:90:16:01:e7:08:65:50:68:81:e1:e8:c4:
ff:16:8a:71:aa:e7:28:38:d2:cc:3e:ab:cf:ae:85:
a9:68:bd:57:06:e6:7c:0e:c9:65:4d:d2:59:8c:c0:
01:0c:08:52:21:22:0e:ec:78:2d:a3:ea:a5:49:b7:
9c:73:c4:cf:2f:fc:78:c4:3b:24:64:cc:93:f1:7a:
84:68:41:d7:f0:8e:d5:72:a2:ab:80:40:5e:c2:e2:
65:38:38:72:81:6a:1b:b0:7f:e0:ef:12:ec:dd:9a:
14:10:ae:90:74:4c:d9:96:d5:f4:b9:2f:95:14:40:
72:ee:cb:51:80:00:e7:01:0b:0b:19:8e:ef:bb:bc:
f4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D1:D4:B0:F2:DD:D1:16:D7:2D:94:8E:DE:54:F7:D0:F6:B8:CC:B5
X509v3 Authority Key Identifier:
keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/pdHUsPLd0RbXLZSO3lT30Pa4zLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.252.67.0-23.252.68.255
23.252.71.0/24
23.252.76.0/24
23.252.79.0/24
107.150.162.0-107.150.164.255
107.150.166.0-107.150.169.255
107.150.171.0-107.150.173.255
107.150.175.0/24
162.218.176.0/22
162.222.89.0-162.222.90.255
167.160.0.0/23
167.160.3.0/24
167.160.13.0/24
167.160.17.0/24
167.160.21.0/24
167.160.28.0-167.160.30.255
185.4.225.0/24
185.161.110.0/24
198.55.28.0/22
IPv6:
2a07:5140::/29
Signature Algorithm: sha256WithRSAEncryption
14:47:ba:22:e1:ba:f3:d7:68:f3:34:12:90:12:b3:88:6a:3a:
02:e6:ff:ce:1e:7b:c2:30:ab:d4:54:da:87:94:cb:77:d7:cc:
09:3d:54:fc:f4:0f:32:80:1c:0d:9c:f7:dd:db:fc:ea:20:1f:
54:67:d7:2e:d2:43:4a:79:d4:c7:da:21:08:64:cf:e2:d0:32:
8a:bd:26:a0:91:62:2a:78:be:ea:05:6d:4b:86:bc:3f:1a:25:
98:4b:45:9b:90:64:3b:c2:ee:94:d6:fa:42:0d:a5:9b:74:6a:
66:d6:7d:01:40:bb:fc:90:66:35:cc:73:17:1f:19:9d:f2:cf:
d0:d3:f9:20:88:35:68:fd:5d:ff:46:65:36:23:88:50:fb:f5:
26:40:c7:0f:05:28:f6:4a:73:9b:03:7a:21:fb:bf:9f:5b:5e:
b0:ca:fe:fa:f1:96:f0:61:e8:f4:d0:d2:c5:32:7c:1e:09:21:
c7:7c:52:f2:17:54:2f:51:6c:84:e9:f9:03:fd:c5:91:88:34:
ed:05:85:73:83:d6:86:83:8b:88:57:7b:4d:89:dc:27:0c:8a:
2e:c3:b2:f0:4b:ae:93:99:c0:3c:17:5d:3a:32:fa:f2:b6:8d:
e2:b2:af:75:a5:65:a7:97:0c:f8:8e:36:4f:07:09:26:72:a1:
9b:a9:8f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:12:47 2024 by rpki-client on console-ams.rpki-client.org