Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/0hhUEXLXQwJqtqAPWv5Xv08glWw.roa
File: 0hhUEXLXQwJqtqAPWv5Xv08glWw.roa (raw, json)
Hash identifier: hOLTdwNeY3DDOeN1r7dOOpZyGiHGd8PlqClAmkwHUnY=
Subject key identifier: D2:18:54:11:72:D7:43:02:6A:B6:A0:0F:5A:FE:57:BF:4F:20:95:6C
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0191C305CC4A367D6F22141F9A8946C589BD
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/0hhUEXLXQwJqtqAPWv5Xv08glWw.roa
Signing time: Thu 05 Sep 2024 16:30:22 +0000
ROA not before: Thu 05 Sep 2024 16:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 2.56.112.0/24 maxlen: 24
2.56.113.0/24 maxlen: 24
5.183.128.0/24 maxlen: 24
31.222.248.0/24 maxlen: 24
45.132.48.0/24 maxlen: 24
45.157.136.0/24 maxlen: 24
62.68.83.0/24 maxlen: 24
62.68.86.0/24 maxlen: 24
62.68.87.0/24 maxlen: 24
62.204.36.0/24 maxlen: 24
62.204.57.0/24 maxlen: 24
62.233.35.0/24 maxlen: 24
62.233.45.0/24 maxlen: 24
62.233.49.0/24 maxlen: 24
62.233.56.0/24 maxlen: 24
62.233.60.0/24 maxlen: 24
80.68.145.0/24 maxlen: 24
80.68.158.0/24 maxlen: 24
80.91.209.0/24 maxlen: 24
80.91.210.0/24 maxlen: 24
91.213.117.0/24 maxlen: 24
91.226.247.0/24 maxlen: 24
91.242.225.0/24 maxlen: 24
91.242.227.0/24 maxlen: 24
91.242.236.0/24 maxlen: 24
91.242.238.0/24 maxlen: 24
93.177.104.0/24 maxlen: 24
93.177.105.0/24 maxlen: 24
93.177.107.0/24 maxlen: 24
94.143.226.0/24 maxlen: 24
94.158.191.0/24 maxlen: 24
130.193.79.0/24 maxlen: 24
130.255.169.0/24 maxlen: 24
146.19.108.0/24 maxlen: 24
146.19.137.0/24 maxlen: 24
146.19.148.0/24 maxlen: 24
146.19.150.0/24 maxlen: 24
146.19.152.0/24 maxlen: 24
146.19.185.0/24 maxlen: 24
146.19.187.0/24 maxlen: 24
146.19.190.0/24 maxlen: 24
146.19.194.0/24 maxlen: 24
176.56.37.0/24 maxlen: 24
176.56.38.0/24 maxlen: 24
178.211.140.0/24 maxlen: 24
185.122.206.0/24 maxlen: 24
185.198.153.0/24 maxlen: 24
185.218.1.0/24 maxlen: 24
185.232.47.0/24 maxlen: 24
193.3.22.0/24 maxlen: 24
193.141.53.0/24 maxlen: 24
193.239.209.0/24 maxlen: 24
194.26.216.0/24 maxlen: 24
194.26.221.0/24 maxlen: 24
194.32.243.0/24 maxlen: 24
195.64.106.0/24 maxlen: 24
195.64.109.0/24 maxlen: 24
195.64.110.0/24 maxlen: 24
195.64.112.0/24 maxlen: 24
195.64.114.0/24 maxlen: 24
195.64.117.0/24 maxlen: 24
195.93.249.0/24 maxlen: 24
195.96.136.0/24 maxlen: 24
195.96.146.0/24 maxlen: 24
195.96.148.0/24 maxlen: 24
195.96.155.0/24 maxlen: 24
195.96.157.0/24 maxlen: 24
212.18.96.0/24 maxlen: 24
212.18.103.0/24 maxlen: 24
212.52.5.0/24 maxlen: 24
217.114.32.0/24 maxlen: 24
217.119.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c3:05:cc:4a:36:7d:6f:22:14:1f:9a:89:46:c5:89:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Sep 5 16:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d218541172d743026ab6a00f5afe57bf4f20956c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:0a:22:18:84:5e:cd:ea:a7:32:c0:e0:cd:
1a:5e:6e:db:8a:bc:30:06:e2:7d:5b:41:10:71:ed:
99:30:6d:a2:e2:67:e7:8d:e4:49:b7:af:2e:48:63:
05:27:26:d1:8d:17:b4:13:da:02:3c:d1:a1:71:19:
61:5c:d6:cc:0b:1a:5c:3b:64:54:c8:7e:f0:27:10:
7b:74:6d:31:7e:e1:30:15:77:22:2b:94:f8:d0:54:
00:dc:06:64:b1:8d:1e:46:d8:57:07:2b:c9:94:54:
d2:18:c8:60:45:74:f5:a4:ed:d7:93:d9:1e:c8:07:
67:fe:10:67:74:61:e4:d3:62:cd:11:72:b9:bd:de:
ec:20:bd:a8:c9:93:ad:d7:0a:48:39:06:af:1b:82:
96:1e:33:21:b6:2e:42:4c:1a:ed:38:db:9b:4c:39:
56:39:74:08:20:b2:b7:b7:71:a7:3b:96:71:22:8a:
f9:fd:56:cd:2e:3f:37:54:d5:1a:d9:d3:e4:75:f3:
69:7d:44:4f:79:c5:8d:77:eb:68:4c:5f:57:95:5d:
d7:0e:cd:43:91:46:f6:a9:f1:48:b1:ce:2d:7c:ef:
d3:c7:4a:ee:ea:40:60:1f:76:f2:93:97:74:9a:42:
3f:25:ac:6c:24:26:2b:16:5c:53:4a:bf:14:6d:b6:
d0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:18:54:11:72:D7:43:02:6A:B6:A0:0F:5A:FE:57:BF:4F:20:95:6C
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/0hhUEXLXQwJqtqAPWv5Xv08glWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.112.0/23
5.183.128.0/24
31.222.248.0/24
45.132.48.0/24
45.157.136.0/24
62.68.83.0/24
62.68.86.0/23
62.204.36.0/24
62.204.57.0/24
62.233.35.0/24
62.233.45.0/24
62.233.49.0/24
62.233.56.0/24
62.233.60.0/24
80.68.145.0/24
80.68.158.0/24
80.91.209.0-80.91.210.255
91.213.117.0/24
91.226.247.0/24
91.242.225.0/24
91.242.227.0/24
91.242.236.0/24
91.242.238.0/24
93.177.104.0/23
93.177.107.0/24
94.143.226.0/24
94.158.191.0/24
130.193.79.0/24
130.255.169.0/24
146.19.108.0/24
146.19.137.0/24
146.19.148.0/24
146.19.150.0/24
146.19.152.0/24
146.19.185.0/24
146.19.187.0/24
146.19.190.0/24
146.19.194.0/24
176.56.37.0-176.56.38.255
178.211.140.0/24
185.122.206.0/24
185.198.153.0/24
185.218.1.0/24
185.232.47.0/24
193.3.22.0/24
193.141.53.0/24
193.239.209.0/24
194.26.216.0/24
194.26.221.0/24
194.32.243.0/24
195.64.106.0/24
195.64.109.0-195.64.110.255
195.64.112.0/24
195.64.114.0/24
195.64.117.0/24
195.93.249.0/24
195.96.136.0/24
195.96.146.0/24
195.96.148.0/24
195.96.155.0/24
195.96.157.0/24
212.18.96.0/24
212.18.103.0/24
212.52.5.0/24
217.114.32.0/24
217.119.130.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f5:53:6e:ee:65:42:da:8c:cf:14:32:bb:9a:81:40:58:c2:
b4:8d:da:ff:77:bf:42:f9:e5:21:39:b0:23:8b:30:eb:75:9c:
06:9c:e3:b3:8d:d9:f7:b4:08:da:1b:a7:3f:df:c5:37:c8:ea:
3f:6e:26:c6:fd:a7:fe:36:26:89:6b:ad:2e:75:4b:c5:34:bd:
15:22:e8:e4:56:ba:c6:8e:78:83:20:21:f4:07:19:0c:52:fd:
42:75:89:ce:39:4a:3d:cd:b9:82:9c:e9:02:dc:a2:9b:a2:80:
e9:77:7a:cb:a9:51:5e:75:86:f6:a1:57:c1:7b:9f:cd:ba:21:
67:40:bf:6e:2f:5f:a3:f0:ed:e4:08:57:35:51:65:7c:a2:6f:
fd:64:cf:28:9a:0e:2d:47:61:1f:8f:b6:39:d7:2e:c3:07:2d:
91:f5:bd:1b:4c:54:37:93:8e:62:ae:bf:09:aa:f8:7f:f1:8d:
3c:b6:05:b7:3d:3e:bd:05:57:b9:07:5b:99:9c:08:30:df:23:
81:e4:30:e9:98:50:14:b6:f8:f0:70:4a:fa:bf:7f:6d:57:f0:
30:93:ca:22:2e:91:bc:47:c4:96:0d:95:d8:ab:9a:c7:ac:7e:
84:c7:66:49:db:bf:73:7d:a9:5f:91:69:53:1e:d5:9c:38:fa:
9a:db:75:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:43:17 2024 by rpki-client on console-fra.rpki-client.org