Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/cvK5FFTidStSixlJvFR7st02vto.roa
File: cvK5FFTidStSixlJvFR7st02vto.roa (raw, json)
Hash identifier: m4iCWmdgSydUK80dymgIeZm7z2lOmrvmrowSR4YkFFQ=
Subject key identifier: 72:F2:B9:14:54:E2:75:2B:52:8B:19:49:BC:54:7B:B2:DD:36:BE:DA
Certificate issuer: /CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Certificate serial: 018CCA2980FE7B5C515DA0918525E02097D8
Authority key identifier: 50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/cvK5FFTidStSixlJvFR7st02vto.roa
Signing time: Tue 02 Jan 2024 12:32:46 +0000
ROA not before: Tue 02 Jan 2024 12:32:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208905
IP address blocks: 147.235.40.0/24 maxlen: 24
147.235.49.0/24 maxlen: 24
147.235.50.0/23 maxlen: 24
147.235.46.0/23 maxlen: 24
147.235.45.0/24 maxlen: 24
147.235.61.0/24 maxlen: 24
147.235.60.0/23 maxlen: 23
147.235.60.0/22 maxlen: 22
147.235.62.0/24 maxlen: 24
147.235.62.0/23 maxlen: 23
147.235.60.0/24 maxlen: 24
147.235.63.0/24 maxlen: 24
147.235.76.0/22 maxlen: 22
147.235.78.0/23 maxlen: 23
147.235.77.0/24 maxlen: 24
147.235.78.0/24 maxlen: 24
147.235.74.0/23 maxlen: 23
147.235.74.0/24 maxlen: 24
147.235.75.0/24 maxlen: 24
147.235.76.0/24 maxlen: 24
147.235.73.0/24 maxlen: 24
147.235.72.0/23 maxlen: 23
147.235.72.0/24 maxlen: 24
147.235.72.0/22 maxlen: 22
147.235.76.0/23 maxlen: 23
147.235.80.0/24 maxlen: 24
147.235.79.0/24 maxlen: 24
147.235.26.0/23 maxlen: 24
147.235.25.0/24 maxlen: 24
147.235.36.0/24 maxlen: 24
147.235.152.0/23 maxlen: 24
147.235.154.0/24 maxlen: 24
147.235.180.0/23 maxlen: 24
147.235.94.0/23 maxlen: 23
147.235.94.0/24 maxlen: 24
147.235.95.0/24 maxlen: 24
147.235.93.0/24 maxlen: 24
147.235.254.0/23 maxlen: 24
147.235.224.0/23 maxlen: 24
147.235.232.0/23 maxlen: 24
147.235.234.0/24 maxlen: 24
147.235.240.0/23 maxlen: 24
147.235.248.0/23 maxlen: 24
185.130.84.0/22 maxlen: 22
2a06:c702::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:80:fe:7b:5c:51:5d:a0:91:85:25:e0:20:97:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Validity
Not Before: Jan 2 12:32:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72f2b91454e2752b528b1949bc547bb2dd36beda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1e:07:b6:c7:38:e7:87:05:b3:8a:29:ad:42:
22:79:31:67:ef:16:b5:43:90:a8:ee:eb:bb:18:03:
12:05:8d:32:8d:60:ae:17:8a:cd:94:1e:5f:a6:b4:
ac:b4:d7:89:bc:b1:e4:9f:38:8a:6f:0e:c8:3b:bc:
8b:88:4f:81:2f:1a:83:aa:c7:c0:b6:dc:d4:c8:25:
82:02:ad:7d:26:9d:5a:a8:9c:f0:c8:00:9d:ed:a9:
c6:70:2b:33:4d:f9:1d:7d:78:ab:52:5f:8a:58:77:
d6:f2:89:ba:bb:43:26:40:9c:de:b2:8c:71:0f:a8:
53:c3:ab:e8:69:34:15:7b:f8:0c:51:15:eb:98:40:
f8:55:f8:02:19:4b:1d:25:0f:06:c9:b3:52:8e:55:
41:3a:a9:9d:31:49:50:03:a4:65:d5:87:8e:17:68:
91:02:d6:48:6d:bf:fb:f6:d9:b9:3b:e1:40:8c:60:
cc:c8:6b:07:aa:dd:3b:f6:13:95:a9:37:a3:bc:99:
12:2d:be:9f:0c:f7:f9:35:b1:ba:00:1d:76:50:7a:
9d:37:90:71:42:0b:00:c4:a0:93:16:53:9e:31:92:
3d:c8:6e:d5:95:87:11:2b:2f:37:20:95:61:f0:03:
bb:94:c9:69:a3:74:ca:8f:73:08:92:48:72:27:14:
5b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F2:B9:14:54:E2:75:2B:52:8B:19:49:BC:54:7B:B2:DD:36:BE:DA
X509v3 Authority Key Identifier:
keyid:50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/cvK5FFTidStSixlJvFR7st02vto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.235.25.0-147.235.27.255
147.235.36.0/24
147.235.40.0/24
147.235.45.0-147.235.47.255
147.235.49.0-147.235.51.255
147.235.60.0/22
147.235.72.0-147.235.80.255
147.235.93.0-147.235.95.255
147.235.152.0-147.235.154.255
147.235.180.0/23
147.235.224.0/23
147.235.232.0-147.235.234.255
147.235.240.0/23
147.235.248.0/23
147.235.254.0/23
185.130.84.0/22
IPv6:
2a06:c702::/48
Signature Algorithm: sha256WithRSAEncryption
65:c0:3b:cc:64:78:e9:a1:df:3d:45:47:30:65:94:55:eb:18:
8d:bc:99:81:f9:da:5c:a8:dc:ee:bc:a7:23:0f:99:16:dd:5a:
98:92:27:b0:ee:4c:81:ea:ce:d9:2b:62:63:24:32:4d:fe:04:
0d:52:05:4a:27:94:cf:94:62:02:d5:26:ba:d8:fd:4b:73:9a:
73:a5:2a:38:b4:aa:fb:bd:bb:8a:b9:f9:0c:01:16:2f:3f:d8:
0d:ee:24:45:4a:ca:cc:91:5e:30:05:2e:05:d7:d0:3f:43:6c:
bf:75:f2:2e:81:c0:33:ca:cf:2c:fb:99:4b:e6:dd:80:06:3f:
17:ce:58:27:0e:88:c7:1d:77:13:2c:56:ac:fc:dc:ca:1f:aa:
1d:e3:b8:9b:60:99:9c:a5:b3:44:d5:ab:86:64:43:4e:5e:49:
57:94:5e:eb:b2:56:8d:99:a1:aa:93:84:d1:fa:bc:16:ce:6a:
8a:5a:9c:d8:9c:9d:88:fd:14:62:5a:c0:15:a6:54:91:ea:a3:
05:a1:fb:49:f5:61:82:f8:f6:43:0b:74:b9:ee:e3:87:05:83:
83:e9:9e:87:f3:82:6f:54:9c:0b:d7:7d:6d:9f:ae:0b:c8:23:
c8:27:62:8a:13:c9:f7:b0:92:3d:bf:62:79:08:f8:17:d3:01:
42:21:8d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:22:06 2024 by rpki-client on console-ams.rpki-client.org