Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/4MQ8deWAa_7dcw6D9Dg5c4Xz2sI.roa
File: 4MQ8deWAa_7dcw6D9Dg5c4Xz2sI.roa (raw, json)
Hash identifier: pKUQe0WUpNH+5KvXaf2hyfwS+RNQKTHbnAHZzVyGFIs=
Subject key identifier: E0:C4:3C:75:E5:80:6B:FE:DD:73:0E:83:F4:38:39:73:85:F3:DA:C2
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018CC56E13E24749E80F932FF7BDFE140815
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/4MQ8deWAa_7dcw6D9Dg5c4Xz2sI.roa
Signing time: Mon 01 Jan 2024 14:29:34 +0000
ROA not before: Mon 01 Jan 2024 14:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200845
IP address blocks: 45.133.62.0/24 maxlen: 24
45.133.60.0/24 maxlen: 24
45.133.60.0/22 maxlen: 22
45.133.63.0/24 maxlen: 24
45.133.61.0/24 maxlen: 24
45.133.62.0/23 maxlen: 23
45.133.60.0/23 maxlen: 23
178.19.40.0/22 maxlen: 22
178.19.42.0/24 maxlen: 24
178.19.40.0/24 maxlen: 24
178.19.43.0/24 maxlen: 24
178.19.41.0/24 maxlen: 24
2.59.192.0/24 maxlen: 24
2.59.192.0/22 maxlen: 22
2.59.192.0/23 maxlen: 23
2.59.194.0/24 maxlen: 24
2.59.195.0/24 maxlen: 24
2.59.193.0/24 maxlen: 24
2.59.194.0/23 maxlen: 23
194.32.112.0/24 maxlen: 24
194.32.112.0/22 maxlen: 22
194.32.115.0/24 maxlen: 24
194.32.113.0/24 maxlen: 24
194.32.114.0/24 maxlen: 24
194.31.105.0/24 maxlen: 24
194.31.104.0/23 maxlen: 23
194.31.104.0/24 maxlen: 24
194.31.104.0/22 maxlen: 22
194.31.107.0/24 maxlen: 24
194.31.106.0/23 maxlen: 23
194.31.106.0/24 maxlen: 24
45.152.140.0/22 maxlen: 22
45.152.142.0/24 maxlen: 24
45.152.140.0/24 maxlen: 24
45.152.142.0/23 maxlen: 23
45.152.140.0/23 maxlen: 23
45.152.143.0/24 maxlen: 24
45.152.141.0/24 maxlen: 24
185.225.245.0/24 maxlen: 24
185.225.244.0/22 maxlen: 22
185.225.246.0/24 maxlen: 24
185.225.244.0/24 maxlen: 24
185.225.247.0/24 maxlen: 24
185.246.12.0/23 maxlen: 23
185.246.15.0/24 maxlen: 24
185.246.13.0/24 maxlen: 24
185.246.14.0/24 maxlen: 24
185.246.12.0/24 maxlen: 24
45.145.132.0/22 maxlen: 22
45.145.132.0/24 maxlen: 24
45.145.132.0/23 maxlen: 23
45.145.134.0/24 maxlen: 24
45.145.134.0/23 maxlen: 23
45.145.135.0/24 maxlen: 24
45.145.133.0/24 maxlen: 24
92.118.182.0/23 maxlen: 23
92.118.180.0/23 maxlen: 23
92.118.183.0/24 maxlen: 24
92.118.181.0/24 maxlen: 24
92.118.180.0/22 maxlen: 22
92.118.182.0/24 maxlen: 24
92.118.180.0/24 maxlen: 24
185.231.186.0/24 maxlen: 24
185.231.187.0/24 maxlen: 24
89.190.152.0/24 maxlen: 24
89.190.152.0/22 maxlen: 22
89.190.154.0/24 maxlen: 24
89.190.153.0/24 maxlen: 24
89.190.155.0/24 maxlen: 24
45.137.13.0/24 maxlen: 24
45.137.12.0/23 maxlen: 23
45.137.12.0/24 maxlen: 24
185.244.231.0/24 maxlen: 24
185.244.229.0/24 maxlen: 24
185.244.228.0/23 maxlen: 23
185.244.230.0/24 maxlen: 24
185.244.228.0/24 maxlen: 24
45.150.84.0/23 maxlen: 23
45.150.85.0/24 maxlen: 24
45.150.84.0/22 maxlen: 22
45.150.84.0/24 maxlen: 24
45.150.86.0/23 maxlen: 23
45.150.87.0/24 maxlen: 24
45.150.86.0/24 maxlen: 24
185.28.51.0/24 maxlen: 24
31.15.2.0/24 maxlen: 24
31.15.0.0/24 maxlen: 24
31.15.4.0/24 maxlen: 24
31.15.0.0/22 maxlen: 22
31.15.1.0/24 maxlen: 24
31.15.3.0/24 maxlen: 25
31.15.2.0/23 maxlen: 23
31.15.0.0/23 maxlen: 23
31.15.6.0/24 maxlen: 24
31.15.7.0/24 maxlen: 24
31.15.5.0/24 maxlen: 24
45.155.56.0/22 maxlen: 22
45.155.58.0/24 maxlen: 24
45.155.56.0/24 maxlen: 24
45.155.58.0/23 maxlen: 23
45.155.56.0/23 maxlen: 23
45.155.57.0/24 maxlen: 24
45.155.59.0/24 maxlen: 24
45.81.125.0/24 maxlen: 24
45.81.124.0/23 maxlen: 23
45.81.124.0/24 maxlen: 24
45.81.124.0/22 maxlen: 22
45.81.127.0/24 maxlen: 24
45.81.126.0/23 maxlen: 23
45.81.126.0/24 maxlen: 24
185.229.216.0/22 maxlen: 22
185.229.218.0/24 maxlen: 24
185.229.216.0/24 maxlen: 24
185.229.218.0/23 maxlen: 23
185.229.216.0/23 maxlen: 23
185.229.219.0/24 maxlen: 24
185.229.217.0/24 maxlen: 24
45.81.105.0/24 maxlen: 24
45.81.104.0/23 maxlen: 23
45.81.104.0/24 maxlen: 24
45.81.104.0/22 maxlen: 22
45.81.107.0/24 maxlen: 24
45.81.106.0/23 maxlen: 23
45.81.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:13:e2:47:49:e8:0f:93:2f:f7:bd:fe:14:08:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 14:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0c43c75e5806bfedd730e83f438397385f3dac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:21:7b:21:d0:cd:fd:b1:dc:03:b4:36:52:
e1:6e:b6:39:9b:9e:9f:9d:f8:bd:0e:f8:b0:78:8d:
12:d2:f6:26:5d:0f:ff:2e:08:84:ab:fe:29:cd:86:
c6:30:c4:9d:2b:20:fc:92:2a:10:32:02:8d:31:04:
09:0b:bb:05:eb:d4:be:92:9d:3c:e6:ac:8c:7a:c9:
8e:4a:ad:95:79:ba:53:9c:65:85:69:05:73:27:e4:
30:13:33:8a:d1:1f:eb:ff:73:95:0c:47:de:4b:17:
72:7c:3c:d8:77:3b:5e:54:29:fe:48:fe:f8:fc:67:
eb:d0:42:73:04:da:bf:5c:30:40:d2:10:be:8f:b6:
06:d7:9c:83:62:9e:c0:69:74:f9:12:96:62:aa:03:
7f:4e:6b:5c:8a:80:c4:f2:a3:64:1e:14:04:f7:32:
5d:27:10:35:49:eb:8b:0a:26:81:86:32:b0:f3:98:
13:f5:f6:35:da:ef:bc:1e:61:cb:13:bc:a6:63:be:
8a:dd:0f:cd:48:bc:7e:03:18:87:73:0b:19:c9:bf:
d5:2d:78:b6:52:b9:94:7e:15:f5:08:7c:f7:97:2f:
4e:fb:44:aa:fb:34:2f:f7:11:cc:b6:30:d1:54:f9:
3d:8c:a2:9d:d4:b0:4e:1a:45:3b:af:1a:a6:71:6d:
bf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C4:3C:75:E5:80:6B:FE:DD:73:0E:83:F4:38:39:73:85:F3:DA:C2
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/4MQ8deWAa_7dcw6D9Dg5c4Xz2sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.192.0/22
31.15.0.0/21
45.81.104.0/22
45.81.124.0/22
45.133.60.0/22
45.137.12.0/23
45.145.132.0/22
45.150.84.0/22
45.152.140.0/22
45.155.56.0/22
89.190.152.0/22
92.118.180.0/22
178.19.40.0/22
185.28.51.0/24
185.225.244.0/22
185.229.216.0/22
185.231.186.0/23
185.244.228.0/22
185.246.12.0/22
194.31.104.0/22
194.32.112.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:43:76:22:b3:b6:89:5e:e9:d1:ea:30:de:73:86:94:b0:0f:
62:65:c7:a2:2c:b1:3a:b9:91:1d:cb:52:74:53:0f:63:21:38:
d2:27:cb:6a:e2:db:7b:a7:ce:48:09:51:ba:23:d5:c3:37:50:
8f:11:56:e1:27:2c:8b:fb:96:db:a6:bb:68:bd:d1:b1:c9:80:
5c:95:c0:67:cd:c7:bb:e7:5d:50:ee:bf:41:8a:53:e7:71:6b:
2b:4f:07:e0:23:3b:c9:dd:70:ce:a4:ab:0c:4d:39:f5:29:8a:
5b:06:5b:cd:8d:1f:7a:53:80:93:07:0a:2e:12:44:8f:32:3e:
b6:cc:08:e3:73:4e:e2:4e:11:2d:71:e2:08:42:5f:05:9b:4c:
7e:75:09:ce:60:e2:61:55:75:28:4f:df:78:67:59:ea:16:56:
a6:87:06:15:90:fd:d0:62:ae:0d:cd:bf:c1:d9:a2:48:0f:29:
a3:1a:79:45:67:af:ca:01:cd:23:85:2a:8e:91:68:58:55:22:
72:06:c1:dc:a2:fb:14:11:10:51:eb:4a:35:8a:3f:73:a3:64:
5e:00:4a:0f:a6:79:dc:ab:ff:04:08:5e:b3:53:9b:1b:14:58:
b9:cb:bb:65:f8:4a:4c:c2:ba:88:ef:b5:0f:25:bc:1f:8a:cc:
ba:5a:7c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:08:25 2024 by rpki-client on console-ams.rpki-client.org