Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/YULTmqz8uvCjqPI0eV68pqxYH_4.roa
File: YULTmqz8uvCjqPI0eV68pqxYH_4.roa (raw, json)
Hash identifier: HVbo0nQRa7dgoEbvJuaTlkOOrFH7ZWnkPaiWluNJI4M=
Subject key identifier: 61:42:D3:9A:AC:FC:BA:F0:A3:A8:F2:34:79:5E:BC:A6:AC:58:1F:FE
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018F5DF08CF4C88CBB29A3EC75A82B834C02
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/YULTmqz8uvCjqPI0eV68pqxYH_4.roa
Signing time: Thu 09 May 2024 15:19:56 +0000
ROA not before: Thu 09 May 2024 15:19:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 147.45.101.0/24 maxlen: 24
147.45.102.0/24 maxlen: 24
147.45.103.0/24 maxlen: 24
147.45.104.0/24 maxlen: 24
147.45.105.0/24 maxlen: 24
147.45.106.0/24 maxlen: 24
147.45.107.0/24 maxlen: 24
147.45.108.0/24 maxlen: 24
147.45.109.0/24 maxlen: 24
147.45.110.0/24 maxlen: 24
147.45.111.0/24 maxlen: 24
147.45.132.0/24 maxlen: 24
147.45.133.0/24 maxlen: 24
147.45.134.0/24 maxlen: 24
147.45.135.0/24 maxlen: 24
147.45.136.0/24 maxlen: 24
147.45.137.0/24 maxlen: 24
147.45.138.0/24 maxlen: 24
147.45.139.0/24 maxlen: 24
147.45.140.0/24 maxlen: 24
147.45.141.0/24 maxlen: 24
147.45.142.0/24 maxlen: 24
147.45.143.0/24 maxlen: 24
147.45.144.0/20 maxlen: 24
147.45.160.0/20 maxlen: 24
147.45.180.0/24 maxlen: 24
147.45.181.0/24 maxlen: 24
147.45.182.0/24 maxlen: 24
147.45.183.0/24 maxlen: 24
147.45.184.0/24 maxlen: 24
147.45.185.0/24 maxlen: 24
147.45.186.0/24 maxlen: 24
147.45.187.0/24 maxlen: 24
147.45.189.0/24 maxlen: 24
147.45.190.0/24 maxlen: 24
147.45.191.0/24 maxlen: 24
147.45.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5d:f0:8c:f4:c8:8c:bb:29:a3:ec:75:a8:2b:83:4c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: May 9 15:19:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6142d39aacfcbaf0a3a8f234795ebca6ac581ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:c4:b8:44:54:7c:c7:30:71:aa:ee:41:5b:
ea:c6:5a:21:93:bb:3f:62:5d:c6:5d:8a:1d:32:1f:
a9:84:b1:6c:6d:d2:5e:88:85:b5:3b:56:9e:8a:3e:
58:a9:e5:3d:f1:56:6e:64:7c:38:ad:b8:2e:6e:19:
ee:1b:12:77:f6:8e:f0:6f:f8:eb:03:c4:30:6e:8d:
62:21:49:33:a2:c1:62:24:da:56:d4:20:cf:47:e6:
05:bc:b3:b9:e2:3a:a7:07:61:34:bb:e5:3d:0c:e2:
fe:d2:7c:16:c4:93:a4:70:a7:1f:46:49:9a:67:34:
a0:6c:66:b0:da:50:13:39:e7:ab:ed:e6:ae:7e:df:
48:4e:34:c6:a9:13:24:69:6c:44:13:8c:91:45:6a:
34:c8:8b:cd:7a:46:5d:0c:c1:0f:e1:75:42:2e:ac:
a3:72:e4:05:08:dc:06:39:59:e2:cb:7d:fc:23:69:
e3:c1:1a:44:bb:ce:f0:35:23:47:e0:f6:10:04:c6:
79:91:0e:0f:f5:15:47:2c:0a:34:54:1a:f1:90:30:
f0:ab:be:a7:16:7a:02:7c:1a:f7:1f:a2:5a:64:cf:
b6:f2:20:1e:4a:7f:a3:05:74:ad:60:47:4a:89:a5:
d1:ac:1c:d4:35:5c:88:8d:4b:34:ad:88:65:0c:28:
c9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:42:D3:9A:AC:FC:BA:F0:A3:A8:F2:34:79:5E:BC:A6:AC:58:1F:FE
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/YULTmqz8uvCjqPI0eV68pqxYH_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.101.0-147.45.111.255
147.45.132.0-147.45.175.255
147.45.180.0-147.45.187.255
147.45.189.0-147.45.191.255
147.45.224.0/19
Signature Algorithm: sha256WithRSAEncryption
0b:c1:8a:fb:40:26:71:75:28:e2:7f:ef:2d:1f:13:0c:92:fa:
52:ef:9e:6c:5e:0e:e2:2e:3f:25:fe:a5:cf:b6:e2:e8:af:90:
df:e6:ad:bf:8d:bb:0f:0f:a1:d1:b5:13:f0:de:3b:24:ee:c4:
73:20:da:62:b7:f0:51:77:a3:b7:1b:ec:f8:bc:5b:e8:56:11:
06:09:9e:5d:4f:bd:77:a5:57:1d:c4:47:90:a1:93:50:04:36:
4d:42:71:2b:1b:29:91:01:ad:0b:de:87:0a:e6:e0:cf:b9:aa:
e8:57:f2:d5:0f:d3:4d:fe:e8:0c:bf:79:c5:6b:e8:a0:6d:bb:
c6:63:cf:72:63:53:f9:eb:2e:a5:96:7f:58:fb:3a:d3:b6:be:
01:e1:a5:7d:8b:1d:5b:31:c9:a4:ed:49:20:16:53:fa:de:67:
68:8e:66:8e:f5:99:c1:b6:8d:27:b5:8c:b4:aa:1a:03:10:9a:
c9:9d:f7:e0:ba:5c:b2:a7:5f:a3:eb:8b:d1:6a:b9:58:31:52:
4a:d8:1e:7a:bf:e6:2a:d8:0f:b7:78:2b:40:d8:20:8a:93:05:
1d:d4:ad:db:74:d7:31:27:a2:19:2c:08:fa:13:8e:28:a4:78:
f8:46:bb:8b:31:05:c9:15:38:89:bf:b5:47:06:6d:4f:ae:c3:
b2:73:18:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:32:08 2024 by rpki-client on console-ams.rpki-client.org