Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/xgLQQo0PkwidZXDS8lVtdfsCVps.roa
File: xgLQQo0PkwidZXDS8lVtdfsCVps.roa (raw, json)
Hash identifier: P29mkBM83FbxRTNqjXyshz6hM3VFVvfzu3aQrsQ0ARA=
Subject key identifier: C6:02:D0:42:8D:0F:93:08:9D:65:70:D2:F2:55:6D:75:FB:02:56:9B
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 018CC794ED866F97F6A26D25A137E6DF5125
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/xgLQQo0PkwidZXDS8lVtdfsCVps.roa
Signing time: Tue 02 Jan 2024 00:31:15 +0000
ROA not before: Tue 02 Jan 2024 00:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51765
IP address blocks: 94.154.113.0/24 maxlen: 24
193.31.126.0/24 maxlen: 24
46.253.131.0/24 maxlen: 24
88.218.45.0/24 maxlen: 24
88.218.47.0/24 maxlen: 24
178.20.28.0/22 maxlen: 24
212.18.113.0/24 maxlen: 24
193.163.89.0/24 maxlen: 24
212.18.127.0/24 maxlen: 24
194.99.24.0/24 maxlen: 24
194.99.26.0/24 maxlen: 24
83.97.116.0/22 maxlen: 24
185.212.115.0/24 maxlen: 24
91.246.51.0/24 maxlen: 24
185.202.108.0/24 maxlen: 24
62.204.49.0/24 maxlen: 24
193.163.92.0/24 maxlen: 24
91.247.163.0/24 maxlen: 24
176.126.104.0/24 maxlen: 24
37.72.141.0/24 maxlen: 24
193.151.189.0/24 maxlen: 24
193.151.191.0/24 maxlen: 24
193.151.190.0/24 maxlen: 24
194.70.234.0/24 maxlen: 24
146.19.39.0/24 maxlen: 24
146.19.44.0/24 maxlen: 24
45.159.22.0/24 maxlen: 24
45.159.21.0/24 maxlen: 24
193.163.207.0/24 maxlen: 24
77.83.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:ed:86:6f:97:f6:a2:6d:25:a1:37:e6:df:51:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 00:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c602d0428d0f93089d6570d2f2556d75fb02569b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c3:78:dc:74:66:14:1c:44:ac:04:a0:6a:09:
7e:59:47:ce:2f:0b:98:52:43:82:87:92:8f:87:b4:
35:5c:e9:72:fe:ad:96:60:44:67:e9:de:b4:4c:1e:
33:d1:be:6d:b5:46:8f:ab:a4:12:8c:b0:84:80:b7:
e3:8e:fc:94:8b:5c:ca:3f:e4:9e:9c:ad:48:fb:b7:
2a:c4:88:01:10:fa:56:0a:30:10:ae:73:51:7a:f5:
1e:73:c1:b8:1f:7d:24:b8:88:29:88:41:c1:0e:f8:
d3:be:41:03:23:0f:a1:ef:32:53:3c:09:0b:47:c2:
80:fe:86:6f:9e:6a:eb:30:ef:0b:5d:7b:77:17:7a:
1a:3b:aa:98:c0:93:b0:8c:04:da:8a:4b:d2:a1:b1:
36:a7:7b:56:69:67:ab:bf:88:66:75:54:93:24:cf:
5a:e1:80:4f:3e:c7:1a:a7:d9:d4:0e:02:6d:82:a3:
69:f1:bc:e6:f4:ca:78:04:d4:b9:b8:e2:72:5d:34:
2e:46:4f:fb:c0:84:c6:d5:c4:0f:42:bb:08:09:b2:
8f:09:ed:f7:40:d6:6a:87:81:6c:e7:7a:ee:4b:e7:
f3:7d:e5:0d:85:59:da:c0:f1:14:71:cc:db:dd:eb:
6d:49:7d:76:a0:ff:04:b5:79:76:88:48:b9:83:40:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:02:D0:42:8D:0F:93:08:9D:65:70:D2:F2:55:6D:75:FB:02:56:9B
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/xgLQQo0PkwidZXDS8lVtdfsCVps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.141.0/24
45.159.21.0-45.159.22.255
46.253.131.0/24
62.204.49.0/24
77.83.24.0/22
83.97.116.0/22
88.218.45.0/24
88.218.47.0/24
91.246.51.0/24
91.247.163.0/24
94.154.113.0/24
146.19.39.0/24
146.19.44.0/24
176.126.104.0/24
178.20.28.0/22
185.202.108.0/24
185.212.115.0/24
193.31.126.0/24
193.151.189.0-193.151.191.255
193.163.89.0/24
193.163.92.0/24
193.163.207.0/24
194.70.234.0/24
194.99.24.0/24
194.99.26.0/24
212.18.113.0/24
212.18.127.0/24
Signature Algorithm: sha256WithRSAEncryption
79:87:2d:81:9a:49:03:53:18:c7:c8:99:c5:fd:cf:ee:28:8e:
99:e1:17:a0:b2:8f:1d:49:2f:37:7f:dc:85:81:6d:52:6f:46:
52:86:35:2c:a1:60:b4:8b:a0:ba:3e:9f:23:4c:7d:ab:52:76:
06:d0:09:ad:f4:41:f9:9d:f1:df:bb:05:60:53:c9:46:90:bd:
4a:59:9d:a6:0d:de:ff:77:fe:3f:08:f7:64:1b:df:ef:73:03:
53:ce:b3:fd:9a:67:8c:17:03:90:35:06:f6:77:7f:1f:71:b9:
46:25:e4:8b:c0:f0:a2:ae:fd:a1:57:37:6f:21:27:2d:1a:90:
75:2b:45:85:3d:ad:66:85:9d:53:c8:62:50:c1:5a:44:a7:63:
a1:8b:d2:25:88:c9:63:a2:c4:29:18:4a:a1:05:21:12:9e:52:
0c:d7:e6:5a:2a:0e:0a:b1:98:a7:f9:bc:1e:c5:a0:32:f1:1c:
e0:30:85:97:82:96:74:49:56:38:23:f4:7b:9f:55:b1:17:7d:
d0:06:5b:0b:ce:ce:e7:f5:6d:08:a0:30:a6:92:81:d3:9b:bd:
4e:e9:ac:89:f1:90:95:a6:3d:ca:5d:32:78:d6:ec:64:ab:1f:
cf:4a:52:4b:28:aa:93:ee:fc:0a:1c:b3:37:f5:c2:f0:02:b1:
90:5d:61:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:50:26 2024 by rpki-client on console-ams.rpki-client.org