Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/SLZ7-qihqL4z_SmgYOCziC5P8Do.roa
File: SLZ7-qihqL4z_SmgYOCziC5P8Do.roa (raw, json)
Hash identifier: 9XVJTFiMgeCDFK4SOrE9WEjUnjqbiXfJ8PTpCBfb8xg=
Subject key identifier: 48:B6:7B:FA:A8:A1:A8:BE:33:FD:29:A0:60:E0:B3:88:2E:4F:F0:3A
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 018CC794F0FD2FD1FD9347ABF55DB85E14DF
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/SLZ7-qihqL4z_SmgYOCziC5P8Do.roa
Signing time: Tue 02 Jan 2024 00:31:16 +0000
ROA not before: Tue 02 Jan 2024 00:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 88.218.80.0/24 maxlen: 24
194.124.41.0/24 maxlen: 24
176.118.189.0/24 maxlen: 24
176.118.188.0/24 maxlen: 24
176.118.191.0/24 maxlen: 24
45.130.184.0/24 maxlen: 24
45.130.185.0/24 maxlen: 24
45.130.186.0/24 maxlen: 24
194.53.188.0/22 maxlen: 24
5.104.74.0/24 maxlen: 24
5.104.72.0/24 maxlen: 24
88.218.239.0/24 maxlen: 24
194.28.157.0/24 maxlen: 24
84.252.64.0/22 maxlen: 24
45.140.4.0/24 maxlen: 24
45.140.7.0/24 maxlen: 24
45.140.6.0/24 maxlen: 24
193.160.68.0/24 maxlen: 24
193.160.72.0/24 maxlen: 24
91.245.239.0/24 maxlen: 24
95.214.83.0/24 maxlen: 24
185.177.76.0/24 maxlen: 24
185.177.77.0/24 maxlen: 24
95.214.92.0/24 maxlen: 24
95.214.95.0/24 maxlen: 24
95.214.93.0/24 maxlen: 24
212.69.135.0/24 maxlen: 24
77.83.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 23:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:f0:fd:2f:d1:fd:93:47:ab:f5:5d:b8:5e:14:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 00:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48b67bfaa8a1a8be33fd29a060e0b3882e4ff03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:44:e0:99:8b:5f:38:52:c3:4b:3f:d2:1c:11:
80:ec:45:04:f2:e1:5b:f1:fd:fb:32:31:c8:27:5c:
bc:91:3c:5f:ae:36:c0:b9:b7:17:82:7c:bb:61:b3:
77:6e:d5:28:fb:e3:02:e7:13:98:5d:20:0c:03:bf:
60:ff:5f:41:d6:24:57:1f:ff:ea:f3:ab:73:da:1c:
b4:64:04:c1:6c:e6:d4:1d:68:56:00:b5:f5:83:00:
6b:67:a3:c8:02:4b:42:87:0f:e3:49:80:ee:38:e1:
28:b1:54:47:da:a1:e9:25:67:de:40:9a:4d:f3:b5:
4e:42:5f:b4:41:c1:24:27:73:bf:4f:d8:fb:df:5e:
f2:ac:8f:48:a1:68:c5:7d:fe:7c:4f:06:a7:26:e7:
71:33:ad:de:14:6c:df:3c:dc:5b:7b:4b:04:60:a7:
75:a3:f8:25:87:61:7b:13:57:59:2c:2e:6f:00:aa:
e1:51:2e:05:7e:0d:ce:6a:c4:75:48:35:af:c1:3b:
11:50:98:9a:68:8c:53:e2:88:7e:f9:42:65:0a:e3:
72:c4:a1:49:c1:23:b9:47:82:90:b0:31:7d:48:6a:
78:4a:3b:f4:a6:e4:da:65:ed:ba:ce:90:4c:14:44:
2d:1e:86:11:02:17:03:17:4f:71:1e:3b:34:7a:e5:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B6:7B:FA:A8:A1:A8:BE:33:FD:29:A0:60:E0:B3:88:2E:4F:F0:3A
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/SLZ7-qihqL4z_SmgYOCziC5P8Do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.72.0/24
5.104.74.0/24
45.130.184.0-45.130.186.255
45.140.4.0/24
45.140.6.0/23
77.83.20.0/22
84.252.64.0/22
88.218.80.0/24
88.218.239.0/24
91.245.239.0/24
95.214.83.0/24
95.214.92.0/23
95.214.95.0/24
176.118.188.0/23
176.118.191.0/24
185.177.76.0/23
193.160.68.0/24
193.160.72.0/24
194.28.157.0/24
194.53.188.0/22
194.124.41.0/24
212.69.135.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a8:f4:79:23:c1:7a:f2:79:df:64:2f:9b:3e:7b:c2:df:50:
99:04:d0:90:5d:6b:5f:b2:85:db:f4:c4:e7:20:0f:5d:f3:b5:
70:9c:63:3c:67:a0:f4:1c:ca:71:16:90:a9:aa:ae:dc:03:de:
a3:99:1b:f9:1e:70:7f:6e:fc:2d:40:6d:92:6b:72:66:37:4b:
46:46:d2:3d:c4:90:54:a2:72:a5:77:ab:59:56:06:21:63:f4:
fc:c3:6f:10:9d:9e:03:4d:6a:db:19:e3:42:dc:bc:c4:f7:ef:
d7:f2:d6:5c:a3:06:42:b4:b1:d8:62:e1:ed:b0:9d:6d:3e:65:
10:69:d0:a8:93:f7:da:e6:5e:f0:88:cc:9f:3e:04:58:5d:20:
ea:93:3c:9c:00:0a:aa:f3:45:15:06:72:52:7d:70:12:15:9e:
bc:c6:cf:5a:9c:b0:86:41:a9:e8:cf:75:bb:d2:6f:d0:81:d0:
6a:0c:86:82:18:a6:9b:62:68:40:c4:26:ec:b6:a0:75:6d:87:
fa:dc:74:44:a8:83:2a:c4:ef:4a:05:ec:a2:09:ad:0f:e5:88:
8f:e1:00:e9:fe:00:fd:4a:e9:a0:03:2f:bf:2a:b5:a3:b2:ed:
71:ce:34:ab:73:56:2f:15:04:a9:be:8f:b5:53:e8:29:ef:8b:
3e:62:65:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 06:01:54 2024 by rpki-client on console-ams.rpki-client.org