Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/61IzDXcDQNDDcf82xfy2nXI7oFY.roa
File: 61IzDXcDQNDDcf82xfy2nXI7oFY.roa (raw, json)
Hash identifier: HiDh5SPvLwwPk4MWxRrI3CqkVbG9Da8384Tw8nSTOQ0=
Subject key identifier: EB:52:33:0D:77:03:40:D0:C3:71:FF:36:C5:FC:B6:9D:72:3B:A0:56
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 018F4C5AEAE7609558E6213907F147A0AB67
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/61IzDXcDQNDDcf82xfy2nXI7oFY.roa
Signing time: Mon 06 May 2024 05:22:57 +0000
ROA not before: Mon 06 May 2024 05:22:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63119
IP address blocks: 23.92.116.0/24 maxlen: 24
23.92.117.0/24 maxlen: 24
23.92.118.0/24 maxlen: 24
23.92.119.0/24 maxlen: 24
23.92.120.0/24 maxlen: 24
23.92.121.0/24 maxlen: 24
23.92.122.0/24 maxlen: 24
23.92.123.0/24 maxlen: 24
23.92.124.0/24 maxlen: 24
23.92.125.0/24 maxlen: 24
104.160.1.0/24 maxlen: 24
104.160.3.0/24 maxlen: 24
104.160.7.0/24 maxlen: 24
104.160.9.0/24 maxlen: 24
104.160.11.0/24 maxlen: 24
104.160.14.0/24 maxlen: 24
104.160.15.0/24 maxlen: 24
104.160.28.0/22 maxlen: 22
104.160.28.0/24 maxlen: 24
104.160.29.0/24 maxlen: 24
104.160.30.0/24 maxlen: 24
104.160.31.0/24 maxlen: 24
107.150.66.0/24 maxlen: 24
107.150.68.0/24 maxlen: 24
107.150.72.0/24 maxlen: 24
107.150.73.0/24 maxlen: 24
107.150.74.0/24 maxlen: 24
107.150.76.0/22 maxlen: 22
107.150.76.0/24 maxlen: 24
107.150.77.0/24 maxlen: 24
107.150.78.0/24 maxlen: 24
107.150.79.0/24 maxlen: 24
107.150.81.0/24 maxlen: 24
107.150.82.0/23 maxlen: 23
107.150.83.0/24 maxlen: 24
107.150.84.0/22 maxlen: 22
107.150.84.0/24 maxlen: 24
107.150.85.0/24 maxlen: 24
107.150.86.0/24 maxlen: 24
107.150.87.0/24 maxlen: 24
158.222.0.0/24 maxlen: 24
158.222.1.0/24 maxlen: 24
158.222.2.0/24 maxlen: 24
158.222.4.0/24 maxlen: 24
158.222.6.0/24 maxlen: 24
158.222.8.0/24 maxlen: 24
158.222.9.0/24 maxlen: 24
158.222.10.0/24 maxlen: 24
158.222.11.0/24 maxlen: 24
158.222.12.0/24 maxlen: 24
158.222.13.0/24 maxlen: 24
158.222.14.0/24 maxlen: 24
158.222.15.0/24 maxlen: 24
192.40.90.0/24 maxlen: 24
192.40.91.0/24 maxlen: 24
192.40.92.0/23 maxlen: 23
192.40.92.0/24 maxlen: 24
192.40.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 22:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4c:5a:ea:e7:60:95:58:e6:21:39:07:f1:47:a0:ab:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: May 6 05:22:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb52330d770340d0c371ff36c5fcb69d723ba056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c5:44:28:ea:64:b3:5d:27:16:3f:0f:39:20:
55:08:91:d3:1b:d7:7c:1a:40:fc:f1:bd:b5:d2:6e:
5b:9c:da:56:2e:79:79:e7:bf:eb:00:bc:19:7c:d2:
c9:c2:c8:e1:31:77:d8:9c:c8:8b:90:b8:96:0a:13:
55:15:73:ef:67:ea:cb:f1:1b:fb:0a:3f:36:34:a9:
d1:33:00:1c:3c:4d:78:38:5a:e5:f8:cb:4d:1b:7c:
e3:8d:17:4f:ed:aa:1f:4b:d9:fd:1e:43:f6:73:c9:
85:55:e7:03:53:3c:de:cd:3e:aa:52:d9:91:9f:5c:
d6:e5:73:e9:04:82:90:3b:54:b4:34:a7:41:28:07:
55:f0:67:15:75:75:a1:60:6b:37:65:f5:d9:87:93:
84:74:55:3b:5b:63:66:c6:50:af:16:4b:e6:f5:02:
6c:e9:cc:bc:10:36:72:1d:d4:c3:3b:1b:b0:6e:24:
97:34:12:b6:fd:c3:cf:63:46:bd:1b:dc:10:d9:33:
b7:66:b5:d4:39:a0:7c:7e:b7:f5:45:1d:6c:09:ea:
4f:dc:f5:45:a7:88:93:ce:12:46:ac:e7:64:ae:ef:
be:d7:72:91:2c:46:8f:be:cd:20:e0:71:bb:98:56:
47:36:22:4c:cb:74:f6:bb:b0:37:7b:d7:ca:98:d7:
f0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:52:33:0D:77:03:40:D0:C3:71:FF:36:C5:FC:B6:9D:72:3B:A0:56
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/61IzDXcDQNDDcf82xfy2nXI7oFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.92.116.0-23.92.125.255
104.160.1.0/24
104.160.3.0/24
104.160.7.0/24
104.160.9.0/24
104.160.11.0/24
104.160.14.0/23
104.160.28.0/22
107.150.66.0/24
107.150.68.0/24
107.150.72.0-107.150.74.255
107.150.76.0/22
107.150.81.0-107.150.87.255
158.222.0.0-158.222.2.255
158.222.4.0/24
158.222.6.0/24
158.222.8.0/21
192.40.90.0-192.40.93.255
Signature Algorithm: sha256WithRSAEncryption
57:5a:a5:72:ce:5f:a1:a1:2a:9c:b6:9f:11:63:4a:8d:de:90:
b2:7d:1d:7a:a9:78:9b:e8:96:d5:db:6b:fd:e3:c7:91:4e:3c:
11:b3:42:98:b3:4e:5a:b3:36:a5:52:b0:f3:09:cb:3e:49:96:
3c:01:da:d9:8e:19:07:e4:20:e9:e1:ec:1a:ed:52:75:b7:34:
dc:e4:c9:e1:65:bd:13:32:29:79:0a:62:68:75:67:c4:95:4f:
65:15:72:79:01:4a:5b:dd:56:c5:c4:5f:42:ec:8f:07:e9:a5:
27:08:f0:45:1b:da:8f:af:10:96:20:20:29:b2:ab:07:3a:11:
40:2e:fb:57:66:21:26:6a:2b:e1:a0:bf:27:c6:86:20:56:ea:
e8:93:3e:41:82:67:a3:e9:97:f8:45:81:2a:d5:5d:d6:ce:88:
9f:e8:11:c7:4d:1a:7f:98:6e:89:95:cf:75:bf:93:98:75:97:
c2:9a:83:66:2a:45:77:ee:8d:f5:4c:45:d5:2c:a1:c9:66:68:
37:5a:99:2e:7c:66:02:c4:d9:69:8d:c6:ea:06:6e:c7:cd:59:
45:29:03:3a:86:f7:b9:45:1b:7d:da:02:89:b1:34:2c:d7:9b:
f2:93:c8:24:4b:44:3e:7b:52:2a:3f:c9:9a:a0:5a:cf:9e:80:
32:7c:2c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 07:27:28 2024 by rpki-client on console-ams.rpki-client.org