Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/NRtaJxtlUrYvn16Akl4xZ_QqhZs.roa
File: NRtaJxtlUrYvn16Akl4xZ_QqhZs.roa (raw, json)
Hash identifier: V+yXsGJFMHuUpU/aRgprH338556sRiRNgw+VmBb7KzQ=
Subject key identifier: 35:1B:5A:27:1B:65:52:B6:2F:9F:5E:80:92:5E:31:67:F4:2A:85:9B
Certificate issuer: /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Certificate serial: 018CCA2A399FB12CBA19FA62269D89EF8808
Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/NRtaJxtlUrYvn16Akl4xZ_QqhZs.roa
Signing time: Tue 02 Jan 2024 12:33:34 +0000
ROA not before: Tue 02 Jan 2024 12:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15598
IP address blocks: 62.146.192.0/22 maxlen: 22
62.146.188.0/22 maxlen: 22
62.146.196.0/22 maxlen: 22
62.146.204.0/22 maxlen: 22
62.146.200.0/22 maxlen: 22
62.146.212.0/22 maxlen: 22
62.146.208.0/22 maxlen: 22
62.146.216.0/22 maxlen: 22
62.146.220.0/22 maxlen: 22
62.146.240.0/22 maxlen: 22
62.146.136.0/22 maxlen: 22
62.146.144.0/22 maxlen: 22
212.112.224.0/19 maxlen: 19
62.146.140.0/22 maxlen: 22
62.146.152.0/22 maxlen: 22
62.146.148.0/22 maxlen: 22
62.146.156.0/22 maxlen: 22
62.146.164.0/22 maxlen: 22
62.146.160.0/22 maxlen: 22
62.146.184.0/22 maxlen: 22
62.146.252.0/22 maxlen: 22
62.146.248.0/22 maxlen: 22
62.146.4.0/22 maxlen: 22
62.146.0.0/22 maxlen: 22
62.146.8.0/22 maxlen: 22
62.146.12.0/22 maxlen: 22
62.146.17.0/24 maxlen: 24
62.146.16.0/22 maxlen: 22
62.146.24.0/22 maxlen: 22
62.146.20.0/22 maxlen: 22
62.146.84.0/22 maxlen: 22
62.146.80.0/22 maxlen: 22
62.146.88.0/22 maxlen: 22
62.146.96.0/22 maxlen: 22
62.146.92.0/22 maxlen: 22
62.146.104.0/22 maxlen: 22
62.146.100.0/22 maxlen: 22
62.146.112.0/22 maxlen: 22
62.146.108.0/22 maxlen: 22
62.146.116.0/22 maxlen: 22
62.146.124.0/22 maxlen: 22
62.146.120.0/22 maxlen: 22
62.146.132.0/22 maxlen: 22
62.146.128.0/22 maxlen: 22
62.146.28.0/22 maxlen: 22
62.146.36.0/22 maxlen: 22
62.146.32.0/22 maxlen: 22
62.146.44.0/22 maxlen: 22
62.146.40.0/22 maxlen: 22
62.146.48.0/22 maxlen: 22
62.146.56.0/22 maxlen: 22
62.146.52.0/22 maxlen: 22
62.146.64.0/22 maxlen: 22
62.146.60.0/22 maxlen: 22
62.146.68.0/22 maxlen: 22
62.146.76.0/22 maxlen: 22
62.146.72.0/22 maxlen: 22
81.17.104.0/22 maxlen: 22
81.17.112.0/22 maxlen: 22
81.17.108.0/22 maxlen: 22
81.17.116.0/22 maxlen: 22
80.190.136.0/21 maxlen: 21
80.190.144.0/21 maxlen: 21
80.190.152.0/21 maxlen: 21
80.190.160.0/21 maxlen: 21
80.190.168.0/21 maxlen: 21
80.190.176.0/21 maxlen: 21
80.190.184.0/21 maxlen: 21
80.190.88.0/21 maxlen: 21
80.190.96.0/21 maxlen: 21
80.190.104.0/21 maxlen: 21
80.190.112.0/21 maxlen: 21
80.190.120.0/21 maxlen: 21
80.190.128.0/21 maxlen: 21
80.190.240.0/21 maxlen: 21
80.190.248.0/21 maxlen: 21
80.190.192.0/21 maxlen: 21
212.123.96.0/19 maxlen: 19
80.190.200.0/21 maxlen: 21
80.190.208.0/21 maxlen: 21
80.190.216.0/21 maxlen: 21
80.190.224.0/21 maxlen: 21
80.190.232.0/21 maxlen: 21
82.149.68.0/22 maxlen: 22
82.149.84.0/22 maxlen: 22
82.149.88.0/22 maxlen: 22
82.149.92.0/22 maxlen: 22
82.149.64.0/22 maxlen: 22
80.190.32.0/21 maxlen: 21
80.190.40.0/21 maxlen: 21
80.190.48.0/21 maxlen: 21
80.190.56.0/21 maxlen: 21
80.190.64.0/21 maxlen: 21
80.190.0.0/21 maxlen: 21
80.190.8.0/21 maxlen: 21
80.190.16.0/21 maxlen: 21
80.190.24.0/21 maxlen: 21
2a01:138::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:39:9f:b1:2c:ba:19:fa:62:26:9d:89:ef:88:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Validity
Not Before: Jan 2 12:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=351b5a271b6552b62f9f5e80925e3167f42a859b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:97:a9:cb:e7:2d:01:43:ef:15:b2:89:40:99:
7f:ba:b2:d8:5f:a3:2d:77:69:1d:3f:04:8b:51:f3:
e1:ad:1e:28:da:51:b6:27:8e:11:96:87:b9:16:e0:
d1:52:02:8a:91:1d:f3:c9:17:af:70:20:33:82:a2:
d3:10:bc:fd:96:ae:b3:f4:54:4a:f3:f7:29:fd:1e:
22:2e:cf:b6:9a:83:70:31:50:a8:ff:46:37:c1:3a:
45:be:ab:91:b9:ba:1f:86:98:c5:04:3c:6b:76:94:
0d:d2:1d:b8:29:7f:be:fc:a1:4c:b3:2d:ef:2f:cb:
ce:67:b7:97:de:02:2d:00:99:2e:17:25:0f:25:14:
23:dd:55:bb:ae:b6:96:cf:7f:03:74:cd:9e:3a:0e:
07:da:47:36:fb:56:4f:a9:51:fa:a1:54:b9:3b:3d:
6e:7e:de:e5:64:b2:46:17:f0:fb:14:c1:ba:eb:8a:
b0:3d:aa:d6:68:85:00:e4:df:8b:f0:ca:ed:4d:d8:
65:61:6a:61:29:c9:a4:04:62:57:67:83:0b:f4:19:
24:b2:52:59:a5:fa:bb:93:a6:82:a3:00:ee:0e:30:
e5:c5:47:67:40:4f:23:be:64:07:00:e1:67:b3:ef:
b8:5c:46:1e:c5:44:21:a3:77:72:8e:cf:18:de:b2:
b2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1B:5A:27:1B:65:52:B6:2F:9F:5E:80:92:5E:31:67:F4:2A:85:9B
X509v3 Authority Key Identifier:
keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/NRtaJxtlUrYvn16Akl4xZ_QqhZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.146.0.0-62.146.167.255
62.146.184.0-62.146.223.255
62.146.240.0/22
62.146.248.0/21
80.190.0.0-80.190.71.255
80.190.88.0-80.190.255.255
81.17.104.0-81.17.119.255
82.149.64.0/21
82.149.84.0-82.149.95.255
212.112.224.0/19
212.123.96.0/19
IPv6:
2a01:138::/32
Signature Algorithm: sha256WithRSAEncryption
73:5c:87:56:1b:97:38:da:e8:3d:92:94:45:b5:c3:a8:d2:3f:
64:b5:88:37:52:c5:a7:15:78:e2:b3:68:96:dc:2f:b7:8e:e8:
53:36:b4:ed:4a:22:38:fd:28:60:5f:14:06:89:11:b7:4d:e9:
14:15:19:c5:d6:bc:f4:62:f2:3c:db:74:5a:14:2b:6a:e3:32:
2e:84:91:eb:d1:26:17:11:f7:a0:a9:23:1a:22:a6:98:65:66:
67:f4:f0:92:ab:05:95:38:9e:29:4e:37:b2:9f:86:26:74:fa:
f8:13:d8:35:e7:2a:c0:43:31:ee:e5:25:48:6b:7d:c3:08:82:
8c:25:95:54:80:e3:76:18:8b:b0:d6:7b:5a:2b:c2:14:63:1a:
44:f1:7f:f0:56:53:33:b9:a6:34:e1:c8:c1:87:53:ea:ba:c7:
f8:9d:c3:e3:10:78:5d:dc:e2:14:70:38:88:b1:74:8e:fc:c0:
5e:4a:c8:92:70:48:67:8d:4a:3c:6d:f8:c8:01:c6:e1:83:8f:
5f:10:b4:0e:e2:ae:1c:c0:6b:5d:ce:3a:96:a7:f1:a4:fc:d3:
73:b6:88:94:0b:e0:41:47:3b:7f:6e:b4:8a:a2:11:b4:b1:2b:
27:b6:89:5d:51:25:29:bf:1d:26:c2:d4:c0:ab:d4:f8:3d:0b:
6c:40:47:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:48:09 2024 by rpki-client on console-ams.rpki-client.org