Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/liAPiiq4efUl67kmck7OAfaXLoI.roa
File: liAPiiq4efUl67kmck7OAfaXLoI.roa (raw, json)
Hash identifier: mdqQvqln1Op5zvTAxqYdiYFBMW2avgCVeayPFBzA/YM=
Subject key identifier: 96:20:0F:8A:2A:B8:79:F5:25:EB:B9:26:72:4E:CE:01:F6:97:2E:82
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0192B48F8360A1182CC5578BE27996BD0EE7
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/liAPiiq4efUl67kmck7OAfaXLoI.roa
Signing time: Tue 22 Oct 2024 14:09:17 +0000
ROA not before: Tue 22 Oct 2024 14:09:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208258
IP address blocks: 45.144.244.0/23 maxlen: 24
45.144.246.0/24 maxlen: 24
45.151.156.0/23 maxlen: 24
45.151.158.0/24 maxlen: 24
45.154.238.0/24 maxlen: 24
185.208.208.0/24 maxlen: 24
185.208.209.0/24 maxlen: 24
185.208.210.0/24 maxlen: 24
185.208.211.0/24 maxlen: 24
185.227.82.0/24 maxlen: 24
185.228.83.0/24 maxlen: 24
185.243.112.0/24 maxlen: 24
185.243.113.0/24 maxlen: 24
194.146.48.0/24 maxlen: 24
195.26.6.0/24 maxlen: 24
195.26.7.0/24 maxlen: 24
2a0b:3c40:1::/48 maxlen: 48
2a0b:3c40:9::/48 maxlen: 48
2a0b:3c40:11::/48 maxlen: 48
2a0b:3c40:12::/48 maxlen: 48
2a0b:3c40:15::/48 maxlen: 48
2a0b:3c40:16::/48 maxlen: 48
2a0b:3c40:17::/48 maxlen: 48
2a0b:3c40:20::/48 maxlen: 48
2a0b:3c40:21::/48 maxlen: 48
2a0b:3c40:25::/48 maxlen: 48
2a0b:3c40:fca6::/48 maxlen: 48
2a0e:5540::/48 maxlen: 48
2a0e:5540:10::/48 maxlen: 48
2a0e:5540:11::/48 maxlen: 48
2a0e:5540:12::/48 maxlen: 48
2a0e:5540:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b4:8f:83:60:a1:18:2c:c5:57:8b:e2:79:96:bd:0e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Oct 22 14:09:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96200f8a2ab879f525ebb926724ece01f6972e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:87:3d:36:aa:26:d2:c7:66:47:8d:8c:7a:
6c:2e:18:fe:59:57:9f:84:0a:78:25:85:51:67:40:
f8:3f:b3:0e:03:85:b6:70:c1:48:4b:02:96:c6:0f:
d3:b4:4b:b0:9a:b4:99:bf:4e:43:7a:c4:5f:54:91:
07:61:d0:ce:54:a8:a4:d9:52:a9:8c:cc:c8:06:56:
f0:85:87:16:84:af:70:5b:7c:77:32:9d:d1:c3:ad:
c1:f9:2d:fa:e1:13:2c:d0:e3:f0:05:d8:66:d4:f1:
0e:38:71:ca:53:94:01:ec:3a:55:bf:26:5d:de:55:
bf:ed:24:ce:32:cd:6d:5d:f3:3e:35:ca:67:68:25:
7c:86:9d:6d:ad:5e:81:4a:f0:31:4e:02:10:30:39:
23:37:9a:31:da:03:d7:22:0c:7c:ad:5b:fd:9b:64:
87:91:06:2f:15:92:21:88:90:2d:21:65:83:31:3d:
64:a5:f9:b3:48:47:58:83:58:29:11:9b:6e:71:a3:
52:d5:eb:66:49:6b:aa:b9:ba:f0:4b:ff:04:4f:c7:
94:8f:7e:73:a9:bc:16:24:36:ba:a6:19:eb:35:c9:
7e:51:1c:46:ea:16:d9:f5:1e:cc:f6:82:6d:da:e9:
3b:29:c9:dd:a0:a8:45:33:8b:52:08:a7:f0:e0:0d:
d9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:20:0F:8A:2A:B8:79:F5:25:EB:B9:26:72:4E:CE:01:F6:97:2E:82
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/liAPiiq4efUl67kmck7OAfaXLoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.244.0-45.144.246.255
45.151.156.0-45.151.158.255
45.154.238.0/24
185.208.208.0/22
185.227.82.0/24
185.228.83.0/24
185.243.112.0/23
194.146.48.0/24
195.26.6.0/23
IPv6:
2a0b:3c40:1::/48
2a0b:3c40:9::/48
2a0b:3c40:11::-2a0b:3c40:12:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:15::-2a0b:3c40:17:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:20::/47
2a0b:3c40:25::/48
2a0b:3c40:fca6::/48
2a0e:5540::/48
2a0e:5540:10::-2a0e:5540:12:ffff:ffff:ffff:ffff:ffff
2a0e:5540:100::/48
Signature Algorithm: sha256WithRSAEncryption
7a:db:85:6f:64:bd:2f:cb:40:93:00:e6:a8:a0:ec:69:85:e5:
af:ad:5d:6e:e9:b9:b8:1d:67:92:32:42:00:c4:70:55:e9:eb:
bc:55:ab:8f:02:59:ad:e5:b2:59:0a:9f:09:d3:64:c3:3d:d4:
6d:0f:7f:b3:1d:01:ad:76:d8:fb:cb:06:bb:15:22:2a:ca:85:
40:f9:fc:64:51:21:da:75:f5:68:4b:6e:33:c9:3f:72:84:02:
fa:18:8c:7b:b1:92:c6:2f:21:ce:08:4c:71:cf:4e:cb:ff:0f:
67:24:16:f5:fd:9f:15:8c:2e:fc:d9:8f:26:3f:01:c9:ff:50:
8a:ee:0b:66:bc:e0:ab:d1:6b:7e:17:21:d5:c6:77:c1:57:1a:
55:41:2b:ac:d8:4e:aa:2e:5d:16:43:69:c6:76:84:ae:c9:16:
a0:08:15:e5:d8:26:b9:56:70:f9:5c:48:eb:98:a9:6d:aa:93:
55:3d:fc:86:a3:bd:b9:e6:b2:45:cd:39:d4:8b:d3:6b:19:10:
6d:1a:cc:f4:7c:fe:92:88:f4:31:36:ec:e8:a9:f4:97:c3:71:
e8:fc:e4:89:e0:a0:a6:97:f5:ca:e3:bc:ed:f7:bf:06:75:c7:
dc:b7:61:b7:e2:9c:6f:f6:18:dd:f8:87:88:f3:a6:c5:d9:af:
e5:35:ae:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:39:18 2024 by rpki-client on console-fra.rpki-client.org