Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Va_KxoO2wNAtlpSzxwB_MYG-uW0.roa
File: Va_KxoO2wNAtlpSzxwB_MYG-uW0.roa (raw, json)
Hash identifier: 1YNksHXHiorhM4LbCN2MDC2aYosBvMJ3mopj9STMMXY=
Subject key identifier: 55:AF:CA:C6:83:B6:C0:D0:2D:96:94:B3:C7:00:7F:31:81:BE:B9:6D
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01924E0B7D731444C35B09735EC96C476042
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Va_KxoO2wNAtlpSzxwB_MYG-uW0.roa
Signing time: Wed 02 Oct 2024 16:23:48 +0000
ROA not before: Wed 02 Oct 2024 16:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 5.104.72.0/24 maxlen: 24
5.104.74.0/24 maxlen: 24
45.130.184.0/24 maxlen: 24
45.130.185.0/24 maxlen: 24
45.130.186.0/24 maxlen: 24
45.140.4.0/24 maxlen: 24
45.140.6.0/24 maxlen: 24
45.140.7.0/24 maxlen: 24
77.83.20.0/22 maxlen: 24
84.252.64.0/22 maxlen: 24
88.218.80.0/24 maxlen: 24
88.218.239.0/24 maxlen: 24
91.132.126.0/24 maxlen: 24
91.245.239.0/24 maxlen: 24
95.214.83.0/24 maxlen: 24
95.214.92.0/24 maxlen: 24
95.214.93.0/24 maxlen: 24
95.214.95.0/24 maxlen: 24
176.118.188.0/24 maxlen: 24
176.118.189.0/24 maxlen: 24
176.118.191.0/24 maxlen: 24
185.177.76.0/24 maxlen: 24
185.177.77.0/24 maxlen: 24
193.160.68.0/24 maxlen: 24
193.160.72.0/24 maxlen: 24
194.28.157.0/24 maxlen: 24
194.53.188.0/22 maxlen: 24
194.124.41.0/24 maxlen: 24
212.69.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4e:0b:7d:73:14:44:c3:5b:09:73:5e:c9:6c:47:60:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 2 16:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55afcac683b6c0d02d9694b3c7007f3181beb96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:e9:34:79:14:d2:66:99:92:de:c9:bf:98:
a3:02:9b:91:85:e1:26:9b:03:ca:52:e8:75:fd:83:
4e:64:48:09:8a:36:79:88:16:03:cb:08:59:85:f1:
54:bf:b7:34:6f:43:e5:f6:34:4f:13:dc:af:03:c0:
46:9e:c8:aa:10:42:85:01:fc:f6:b1:91:1b:da:88:
d4:5c:c8:c9:67:63:14:d7:5d:58:3d:af:31:a3:6e:
58:6c:0d:48:44:a6:60:06:a9:f4:44:b6:4f:bc:8c:
2f:8e:25:d4:c6:32:ce:f7:35:73:0f:0d:c0:07:0e:
82:eb:1b:4e:5b:8d:83:0b:84:42:1f:e6:43:da:9f:
38:56:c1:00:b3:91:ff:a1:ea:ea:52:6e:62:bb:0f:
a3:b4:e6:ca:ef:2f:49:2e:da:4d:3e:49:b6:dd:ce:
c3:6b:98:e2:d3:d9:4e:cd:f4:c2:f0:d8:63:ab:0b:
87:6c:b1:cd:16:eb:78:c1:c9:b3:74:73:3f:4f:e1:
73:65:b2:71:fd:b8:6e:59:13:ff:7e:77:11:fd:31:
4a:da:16:1b:14:39:24:bf:d0:db:cc:39:40:e0:78:
eb:50:a2:68:76:dc:a7:6c:ca:44:e1:71:12:f0:3d:
c5:9f:0e:01:1b:99:97:35:cb:d9:c3:15:83:8e:9b:
0a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AF:CA:C6:83:B6:C0:D0:2D:96:94:B3:C7:00:7F:31:81:BE:B9:6D
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Va_KxoO2wNAtlpSzxwB_MYG-uW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.72.0/24
5.104.74.0/24
45.130.184.0-45.130.186.255
45.140.4.0/24
45.140.6.0/23
77.83.20.0/22
84.252.64.0/22
88.218.80.0/24
88.218.239.0/24
91.132.126.0/24
91.245.239.0/24
95.214.83.0/24
95.214.92.0/23
95.214.95.0/24
176.118.188.0/23
176.118.191.0/24
185.177.76.0/23
193.160.68.0/24
193.160.72.0/24
194.28.157.0/24
194.53.188.0/22
194.124.41.0/24
212.69.135.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:90:ea:77:8c:8b:25:73:63:23:24:d0:68:b7:b4:1e:35:85:
fd:43:ff:35:13:05:7c:e5:a9:55:65:84:99:8c:f3:b1:11:93:
5d:81:71:2f:98:40:77:97:b2:f6:6a:29:a0:f7:f8:37:d7:6e:
aa:02:b7:da:35:6a:bb:9c:98:ec:d4:b8:34:e4:f1:be:84:00:
b3:74:b6:39:97:7b:c0:22:b3:e7:0e:2f:43:62:87:b2:40:b4:
23:9b:26:76:66:a7:6d:c9:32:78:bd:0c:11:6b:a1:6b:cf:49:
df:95:be:86:24:33:52:31:0d:3a:ab:9c:e7:94:67:cd:69:6a:
cb:19:c9:95:97:ae:44:2e:ef:16:0b:bf:b7:40:76:a0:8a:27:
bd:29:e0:c0:b8:f0:e4:e7:6c:41:31:64:4b:8e:fa:54:a6:49:
14:56:b3:58:8e:ad:df:dd:3d:a6:10:0f:17:52:c7:ee:9c:38:
87:be:fa:11:27:83:7c:a2:27:9c:cf:77:8c:e6:b4:2f:53:4c:
5e:9d:6b:14:bc:d1:2c:ef:91:b3:bf:ba:b3:d6:d4:74:5c:2c:
41:eb:3c:e3:4f:a6:ef:48:c1:9d:7b:f9:75:d5:bf:e1:cd:4f:
b6:37:2c:5f:bb:cd:a8:9c:68:02:fe:3d:dc:0d:c5:47:8f:37:
3c:f3:1e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:22:29 2024 by rpki-client on console-ams.rpki-client.org