Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/E9eQPC34i4lzji-Ssl0IT3uinXY.roa
File: E9eQPC34i4lzji-Ssl0IT3uinXY.roa (raw, json)
Hash identifier: tejjr/XN3ecPN/WjBnVxZOmLGts6v51BCp1ng8sVxq4=
Subject key identifier: 13:D7:90:3C:2D:F8:8B:89:73:8E:2F:92:B2:5D:08:4F:7B:A2:9D:76
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 0191E190CD1622872A99697D6172BF9FEB5D
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/E9eQPC34i4lzji-Ssl0IT3uinXY.roa
Signing time: Wed 11 Sep 2024 14:50:48 +0000
ROA not before: Wed 11 Sep 2024 14:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16839
IP address blocks: 37.98.232.0/21 maxlen: 24
37.98.232.0/22 maxlen: 24
37.98.232.0/23 maxlen: 23
37.98.232.0/24 maxlen: 24
37.98.233.0/24 maxlen: 24
37.98.234.0/23 maxlen: 23
37.98.234.0/24 maxlen: 24
37.98.235.0/24 maxlen: 24
37.98.236.0/22 maxlen: 24
37.98.236.0/23 maxlen: 23
37.98.236.0/24 maxlen: 24
37.98.237.0/24 maxlen: 24
37.98.238.0/23 maxlen: 23
37.98.238.0/24 maxlen: 24
37.98.239.0/24 maxlen: 24
136.242.128.0/17 maxlen: 17
138.12.128.0/17 maxlen: 17
148.139.0.0/16 maxlen: 16
148.139.0.0/24 maxlen: 24
148.139.1.0/24 maxlen: 24
148.139.2.0/24 maxlen: 24
148.139.3.0/24 maxlen: 24
148.139.4.0/22 maxlen: 24
148.139.8.0/22 maxlen: 24
148.139.12.0/22 maxlen: 24
148.139.16.0/22 maxlen: 24
148.139.28.0/24 maxlen: 24
148.139.29.0/24 maxlen: 24
148.139.30.0/24 maxlen: 24
148.139.32.0/20 maxlen: 24
148.139.48.0/20 maxlen: 24
148.139.64.0/20 maxlen: 24
148.139.80.0/20 maxlen: 24
148.139.96.0/22 maxlen: 24
148.139.100.0/22 maxlen: 24
148.139.104.0/24 maxlen: 24
148.139.105.0/24 maxlen: 24
148.139.108.0/22 maxlen: 24
148.139.112.0/22 maxlen: 24
148.139.116.0/22 maxlen: 24
148.139.120.0/22 maxlen: 24
148.139.124.0/24 maxlen: 24
148.139.125.0/24 maxlen: 24
148.139.136.0/22 maxlen: 24
148.139.140.0/24 maxlen: 24
148.139.142.0/24 maxlen: 24
148.139.143.0/24 maxlen: 24
148.139.144.0/22 maxlen: 24
148.139.144.0/24 maxlen: 24
148.139.148.0/22 maxlen: 24
148.139.152.0/22 maxlen: 24
148.139.156.0/22 maxlen: 24
148.139.160.0/20 maxlen: 24
148.139.176.0/20 maxlen: 24
148.139.192.0/24 maxlen: 24
148.139.193.0/24 maxlen: 24
157.5.128.0/17 maxlen: 17
157.70.0.0/17 maxlen: 17
163.120.128.0/17 maxlen: 17
165.171.0.0/17 maxlen: 17
2a04:37c0::/29 maxlen: 48
2a04:37c0:3110::/48 maxlen: 48
2a04:37c0:3120::/48 maxlen: 48
2a04:37c0:3510::/48 maxlen: 48
2a04:37c0:3520::/48 maxlen: 48
2a04:37c0:3910::/48 maxlen: 48
2a04:37c0:3920::/48 maxlen: 48
2a04:37c0:4110::/48 maxlen: 48
2a04:37c0:4120::/48 maxlen: 48
2a04:37c0:4410::/48 maxlen: 48
2a04:37c0:4420::/48 maxlen: 48
2a04:37c0:4430::/48 maxlen: 48
2a04:37c0:4910::/48 maxlen: 48
2a04:37c0:4920::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:90:cd:16:22:87:2a:99:69:7d:61:72:bf:9f:eb:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Sep 11 14:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13d7903c2df88b89738e2f92b25d084f7ba29d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:06:e1:1e:2b:3a:64:a4:6f:3b:b5:1a:b3:
9f:86:82:4b:e9:0a:41:5a:dc:25:82:f7:91:c5:74:
81:22:74:2b:7d:39:42:11:5f:1a:e4:98:3c:4f:96:
58:dc:72:e1:a4:49:e7:cb:31:3a:28:49:04:ec:57:
4c:ec:c6:03:04:68:20:e5:46:c6:22:51:19:7e:d8:
aa:fd:e6:14:27:94:f6:12:a2:5c:5f:0b:47:59:f4:
f2:c9:ff:06:c7:33:40:47:96:0a:74:71:d2:b8:af:
7a:44:d0:b5:e0:4a:7d:1c:98:f5:1c:dd:e2:93:74:
b4:ec:35:33:33:fc:7d:fd:25:3e:0e:85:9c:4d:ab:
96:d1:b3:59:78:36:d7:5e:9f:a2:5c:a9:c4:e1:6e:
9d:f0:77:5e:5f:4b:66:46:8f:fb:4e:07:60:bc:cb:
87:df:4a:9b:db:bd:f7:d2:df:08:cc:83:74:30:7a:
09:97:f9:67:27:3f:24:fe:54:d5:7a:5c:1c:95:c9:
57:68:07:fc:b9:66:a5:86:05:88:4b:59:15:18:84:
8b:80:cb:b0:9e:14:9b:98:14:1e:aa:78:9d:91:cf:
b2:9e:2b:7d:ed:4b:0b:7a:c3:60:42:36:86:c7:13:
ec:22:eb:30:a2:6e:d2:37:d0:d7:bd:18:a6:ed:ae:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D7:90:3C:2D:F8:8B:89:73:8E:2F:92:B2:5D:08:4F:7B:A2:9D:76
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/E9eQPC34i4lzji-Ssl0IT3uinXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.232.0/21
136.242.128.0/17
138.12.128.0/17
148.139.0.0/16
157.5.128.0/17
157.70.0.0/17
163.120.128.0/17
165.171.0.0/17
IPv6:
2a04:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
74:8d:26:4c:16:d7:23:88:2c:07:1b:4b:4d:ea:d6:08:9a:fd:
f9:35:f0:93:e0:84:00:3f:22:36:9b:e3:d9:3e:32:4c:d5:b1:
a2:07:1d:4c:f9:95:c3:fc:c6:5c:93:0f:60:dc:df:87:4e:5b:
10:a5:3b:c1:2a:f3:cc:b1:fc:db:4a:8b:df:43:01:36:57:2b:
51:fb:ea:2e:2f:bd:c2:11:a3:bd:6b:01:98:ff:8c:9f:1b:01:
32:79:e8:13:26:ff:0a:cc:06:d7:d1:f8:cd:48:70:32:15:7d:
f9:07:ac:76:fb:62:f1:09:17:ae:78:2a:98:a4:4d:6f:39:a2:
3d:cf:87:98:5c:b0:10:41:4a:5f:a1:d1:ae:e9:31:f7:26:a1:
3a:43:66:67:30:ae:df:e9:a3:f1:3c:51:10:b5:b7:d9:2c:df:
20:e3:77:45:ac:53:a4:a0:6f:f9:e8:b6:b1:f2:aa:dc:44:7c:
cb:d5:00:78:ea:d7:b9:cb:d7:25:2f:e1:ed:b7:2d:4a:23:c0:
22:17:d4:69:a1:db:67:60:a3:32:af:c2:38:26:e3:e0:b7:53:
02:83:15:28:b3:e7:f8:e4:a8:28:96:ff:61:c7:ad:58:18:c4:
1a:60:9f:23:38:36:cc:c2:a0:cb:b8:d4:7e:03:16:1d:4b:1b:
ae:01:a2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:16:00 2024 by rpki-client on console-fra.rpki-client.org