Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/SzaXiN-DaZdIYvbS51CQocBKjtU.roa
File: SzaXiN-DaZdIYvbS51CQocBKjtU.roa (raw, json)
Hash identifier: 3VoApGbEcYKj0u+jEsikUrGcTANnY8klyHVpWHsykyY=
Subject key identifier: 4B:36:97:88:DF:83:69:97:48:62:F6:D2:E7:50:90:A1:C0:4A:8E:D5
Certificate issuer: /CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Certificate serial: 018F3D91327E1A1F96D6D49652E5F5E57668
Authority key identifier: 56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/SzaXiN-DaZdIYvbS51CQocBKjtU.roa
Signing time: Fri 03 May 2024 08:27:56 +0000
ROA not before: Fri 03 May 2024 08:27:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25133
IP address blocks: 37.139.160.0/19 maxlen: 19
37.139.160.0/22 maxlen: 22
37.139.164.0/22 maxlen: 22
37.139.168.0/24 maxlen: 24
37.139.169.0/24 maxlen: 24
37.139.170.0/24 maxlen: 24
37.139.171.0/24 maxlen: 24
37.139.172.0/24 maxlen: 24
37.139.173.0/24 maxlen: 24
37.139.174.0/24 maxlen: 24
37.139.175.0/24 maxlen: 24
37.139.176.0/24 maxlen: 24
37.139.177.0/24 maxlen: 24
37.139.178.0/24 maxlen: 24
37.139.179.0/24 maxlen: 24
37.139.180.0/22 maxlen: 22
37.139.184.0/22 maxlen: 22
37.139.188.0/22 maxlen: 22
45.95.164.0/22 maxlen: 22
45.143.48.0/22 maxlen: 22
45.153.208.0/22 maxlen: 22
45.158.48.0/22 maxlen: 22
46.255.32.0/22 maxlen: 22
46.255.36.0/22 maxlen: 22
78.137.0.0/18 maxlen: 18
78.137.0.0/19 maxlen: 19
78.137.32.0/24 maxlen: 24
78.137.33.0/24 maxlen: 24
78.137.34.0/24 maxlen: 24
78.137.35.0/24 maxlen: 24
78.137.36.0/22 maxlen: 22
78.137.40.0/21 maxlen: 21
78.137.48.0/20 maxlen: 20
83.142.48.0/22 maxlen: 22
89.200.232.0/21 maxlen: 21
91.105.207.0/24 maxlen: 24
91.211.136.0/22 maxlen: 22
91.217.144.0/24 maxlen: 24
91.244.0.0/18 maxlen: 18
92.43.80.0/22 maxlen: 22
92.118.220.0/22 maxlen: 22
103.35.160.0/22 maxlen: 22
103.237.44.0/22 maxlen: 22
109.227.64.0/18 maxlen: 18
109.227.64.0/19 maxlen: 19
109.227.96.0/19 maxlen: 19
152.89.20.0/22 maxlen: 22
176.67.0.0/19 maxlen: 19
178.216.16.0/21 maxlen: 21
185.3.148.0/22 maxlen: 22
185.3.148.0/24 maxlen: 24
185.3.149.0/24 maxlen: 24
185.3.150.0/24 maxlen: 24
185.3.151.0/24 maxlen: 24
185.41.192.0/22 maxlen: 22
185.41.192.0/23 maxlen: 23
185.41.194.0/23 maxlen: 23
185.62.96.0/22 maxlen: 22
185.96.28.0/22 maxlen: 22
185.103.40.0/22 maxlen: 22
185.103.40.0/23 maxlen: 23
185.103.42.0/23 maxlen: 23
185.128.92.0/22 maxlen: 22
185.176.108.0/22 maxlen: 22
185.176.112.0/22 maxlen: 22
185.203.244.0/22 maxlen: 22
185.208.112.0/22 maxlen: 22
185.220.94.0/23 maxlen: 23
185.228.100.0/22 maxlen: 22
193.106.80.0/22 maxlen: 22
194.1.220.0/23 maxlen: 23
212.55.64.0/19 maxlen: 19
212.55.64.0/22 maxlen: 22
212.55.68.0/22 maxlen: 22
212.55.72.0/23 maxlen: 23
212.55.74.0/23 maxlen: 23
212.55.76.0/22 maxlen: 22
212.55.80.0/22 maxlen: 22
212.55.84.0/23 maxlen: 23
212.55.86.0/23 maxlen: 23
212.55.88.0/22 maxlen: 22
212.55.92.0/22 maxlen: 22
213.108.52.0/22 maxlen: 22
217.115.96.0/21 maxlen: 21
217.115.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3d:91:32:7e:1a:1f:96:d6:d4:96:52:e5:f5:e5:76:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Validity
Not Before: May 3 08:27:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b369788df8369974862f6d2e75090a1c04a8ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:6d:96:90:2f:5f:ed:53:0b:5e:b7:b2:d6:
de:00:72:ec:d6:55:73:c7:92:7c:29:a9:97:a6:6f:
ce:fa:11:d7:d7:e3:e6:5d:b9:d7:88:75:28:f8:34:
54:62:5d:28:7c:13:f8:cd:26:48:01:97:11:60:50:
ee:92:95:12:d9:20:cb:b1:f3:eb:f2:71:43:4d:78:
4d:b5:cd:6f:8b:78:90:09:01:c2:1a:4c:ea:78:e8:
b6:89:f6:c3:a7:96:f7:04:40:94:6c:a8:d7:38:2e:
be:a1:95:5d:d0:98:12:bb:d3:e1:b7:dd:0f:c6:40:
9d:27:81:d4:49:18:13:8a:8c:e8:02:8b:fc:df:05:
b1:11:8c:a4:f8:8c:95:6d:6d:f0:b7:73:db:1a:26:
7f:71:1a:ce:47:2d:a4:e2:52:20:1d:de:13:68:5f:
72:57:53:49:58:2b:ac:7c:d2:fd:c0:9a:ba:22:f6:
d2:79:af:c5:33:ae:d8:4b:db:2b:21:87:db:78:2e:
ca:c0:67:d7:f3:42:e5:b3:30:05:75:0b:57:72:27:
af:44:a3:39:c0:37:ba:c2:56:f2:e9:f1:a3:04:64:
dd:a5:c3:8f:aa:28:70:66:7f:2f:c4:3c:da:2d:70:
9c:7b:46:e9:66:4c:d5:96:d4:10:de:b3:12:95:6d:
7d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:36:97:88:DF:83:69:97:48:62:F6:D2:E7:50:90:A1:C0:4A:8E:D5
X509v3 Authority Key Identifier:
keyid:56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/SzaXiN-DaZdIYvbS51CQocBKjtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.160.0/19
45.95.164.0/22
45.143.48.0/22
45.153.208.0/22
45.158.48.0/22
46.255.32.0/21
78.137.0.0/18
83.142.48.0/22
89.200.232.0/21
91.105.207.0/24
91.211.136.0/22
91.217.144.0/24
91.244.0.0/18
92.43.80.0/22
92.118.220.0/22
103.35.160.0/22
103.237.44.0/22
109.227.64.0/18
152.89.20.0/22
176.67.0.0/19
178.216.16.0/21
185.3.148.0/22
185.41.192.0/22
185.62.96.0/22
185.96.28.0/22
185.103.40.0/22
185.128.92.0/22
185.176.108.0-185.176.115.255
185.203.244.0/22
185.208.112.0/22
185.220.94.0/23
185.228.100.0/22
193.106.80.0/22
194.1.220.0/23
212.55.64.0/19
213.108.52.0/22
217.115.96.0/20
Signature Algorithm: sha256WithRSAEncryption
11:7b:1f:40:88:34:ff:59:8f:24:87:7f:74:ea:d4:d0:93:fa:
c0:20:ba:9e:5e:10:e6:ae:d1:21:b5:99:9e:9e:d2:39:ee:7f:
f6:8f:6d:5d:d1:65:2e:60:51:5c:18:be:c2:b5:81:45:87:fd:
f5:45:73:51:09:15:f1:07:cb:aa:f7:a1:94:98:96:97:dd:3a:
3a:18:38:b8:f0:74:fe:a3:e6:e8:b2:b6:b8:c9:71:71:3a:ba:
dc:9a:a5:d7:44:c9:97:a7:54:fc:78:e9:77:c1:34:ae:cd:35:
db:82:79:ac:ba:ca:ca:91:80:9b:71:33:a0:64:f6:e6:74:42:
dc:68:6d:a7:3c:54:5b:0d:32:87:11:6d:19:18:a4:9f:20:c9:
f1:af:e8:57:cc:43:ee:9d:d1:5d:fb:5a:c6:ec:ec:e5:98:99:
f1:47:f5:f8:01:ee:b4:04:96:96:10:4b:80:51:26:51:b6:95:
1e:28:14:87:fb:cf:fe:b5:ad:6f:7c:4a:11:b8:88:58:5d:c6:
9c:19:d1:9e:1e:0c:1f:a6:ec:ce:87:e3:bc:55:6d:ea:d8:a9:
43:8c:b6:33:8c:e4:e0:9f:7d:05:7e:f1:5b:d1:5c:e1:52:43:
08:71:f4:3d:08:b9:7f:68:ae:7a:96:8f:7b:e7:c8:72:35:0a:
1c:71:53:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:44:06 2024 by rpki-client on console-ams.rpki-client.org