Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/_uvGzh8ejF-GEMArLmZAoZwby9I.roa
File: _uvGzh8ejF-GEMArLmZAoZwby9I.roa (raw, json)
Hash identifier: f2OaoBRcg50nfVBG7yu6b+t9wBD2ET7EYn5JauyAiAk=
Subject key identifier: FE:EB:C6:CE:1F:1E:8C:5F:86:10:C0:2B:2E:66:40:A1:9C:1B:CB:D2
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018ED3DB4760AAF4953A3B858DD0CAF0FC35
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/_uvGzh8ejF-GEMArLmZAoZwby9I.roa
Signing time: Fri 12 Apr 2024 19:49:06 +0000
ROA not before: Fri 12 Apr 2024 19:49:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47690
IP address blocks: 45.43.144.0/24 maxlen: 24
45.43.145.0/24 maxlen: 24
45.43.146.0/24 maxlen: 24
45.43.148.0/24 maxlen: 24
45.43.149.0/24 maxlen: 24
45.43.150.0/24 maxlen: 24
45.43.151.0/24 maxlen: 24
45.43.152.0/24 maxlen: 24
45.43.154.0/24 maxlen: 24
45.43.155.0/24 maxlen: 24
45.43.156.0/24 maxlen: 24
45.43.157.0/24 maxlen: 24
45.43.158.0/24 maxlen: 24
45.43.159.0/24 maxlen: 24
45.43.160.0/24 maxlen: 24
45.43.161.0/24 maxlen: 24
45.43.162.0/24 maxlen: 24
64.137.16.0/24 maxlen: 24
104.222.176.0/24 maxlen: 24
104.222.177.0/24 maxlen: 24
104.222.178.0/24 maxlen: 24
104.222.179.0/24 maxlen: 24
104.222.180.0/24 maxlen: 24
104.222.181.0/24 maxlen: 24
104.222.182.0/24 maxlen: 24
104.222.183.0/24 maxlen: 24
104.222.189.0/24 maxlen: 24
104.233.8.0/24 maxlen: 24
104.233.9.0/24 maxlen: 24
104.233.59.0/24 maxlen: 24
104.238.6.0/24 maxlen: 24
104.238.11.0/24 maxlen: 24
104.238.12.0/24 maxlen: 24
104.238.13.0/24 maxlen: 24
104.239.8.0/24 maxlen: 24
104.239.12.0/24 maxlen: 24
104.239.14.0/24 maxlen: 24
104.239.29.0/24 maxlen: 24
104.239.54.0/24 maxlen: 24
104.239.55.0/24 maxlen: 24
104.239.56.0/24 maxlen: 24
104.239.57.0/24 maxlen: 24
104.239.58.0/24 maxlen: 24
104.239.59.0/24 maxlen: 24
104.239.60.0/24 maxlen: 24
104.239.61.0/24 maxlen: 24
104.239.62.0/24 maxlen: 24
104.239.63.0/24 maxlen: 24
104.239.64.0/24 maxlen: 24
104.239.65.0/24 maxlen: 24
104.249.8.0/24 maxlen: 24
104.249.9.0/24 maxlen: 24
104.249.10.0/24 maxlen: 24
104.249.11.0/24 maxlen: 24
104.249.12.0/24 maxlen: 24
104.249.13.0/24 maxlen: 24
104.249.14.0/24 maxlen: 24
104.249.15.0/24 maxlen: 24
104.249.16.0/24 maxlen: 24
104.249.17.0/24 maxlen: 24
104.249.18.0/24 maxlen: 24
104.249.19.0/24 maxlen: 24
104.249.20.0/24 maxlen: 24
104.249.21.0/24 maxlen: 24
104.249.22.0/24 maxlen: 24
104.249.23.0/24 maxlen: 24
104.249.42.0/24 maxlen: 24
104.249.43.0/24 maxlen: 24
104.249.44.0/24 maxlen: 24
104.249.45.0/24 maxlen: 24
104.249.46.0/24 maxlen: 24
104.249.47.0/24 maxlen: 24
104.249.48.0/24 maxlen: 24
104.249.49.0/24 maxlen: 24
104.249.50.0/24 maxlen: 24
104.249.51.0/24 maxlen: 24
104.249.52.0/24 maxlen: 24
104.249.53.0/24 maxlen: 24
104.249.54.0/24 maxlen: 24
216.173.90.0/24 maxlen: 24
216.173.91.0/24 maxlen: 24
216.173.92.0/24 maxlen: 24
216.173.93.0/24 maxlen: 24
216.173.94.0/24 maxlen: 24
216.173.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d3:db:47:60:aa:f4:95:3a:3b:85:8d:d0:ca:f0:fc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 12 19:49:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=feebc6ce1f1e8c5f8610c02b2e6640a19c1bcbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8a:07:9a:6d:15:99:92:d1:63:59:38:e7:21:
09:fd:e8:21:62:73:42:96:0c:7e:8a:60:a1:43:a8:
14:84:47:1d:9a:5e:16:ab:fa:cd:3b:63:92:86:71:
11:74:b3:36:24:01:5c:d5:6c:e4:ee:a5:85:8f:1d:
2c:33:db:27:f8:a8:81:a6:21:14:ac:bd:ba:30:35:
e1:ed:b9:4c:b4:fb:ff:37:cb:fd:d3:f9:a0:e9:73:
6a:38:3a:11:d2:72:36:27:5e:25:f9:ad:fa:94:fc:
6c:39:89:cb:61:0f:79:24:ac:65:9e:58:b4:2b:13:
70:c8:97:13:f2:6e:4f:52:34:78:c9:dd:7b:ac:2d:
54:24:78:39:89:36:60:9c:70:18:27:b8:8f:d0:7e:
ae:94:98:3e:15:50:ab:d4:fd:78:b9:32:66:ca:47:
53:76:ac:27:02:cc:cc:a2:50:61:a5:c8:43:ef:d5:
03:9f:95:2a:cf:b4:cc:f0:10:f1:11:83:61:01:1a:
62:03:8b:60:69:8e:fc:b9:44:ae:e5:fd:c9:18:c4:
6d:de:1c:a0:97:a9:9b:d6:44:d2:d2:23:00:06:cd:
5e:bf:f8:7a:d2:2d:34:cc:e5:e2:04:22:93:c1:62:
df:f7:ee:62:d8:02:32:59:28:d3:05:df:00:1a:17:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EB:C6:CE:1F:1E:8C:5F:86:10:C0:2B:2E:66:40:A1:9C:1B:CB:D2
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/_uvGzh8ejF-GEMArLmZAoZwby9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.144.0-45.43.146.255
45.43.148.0-45.43.152.255
45.43.154.0-45.43.162.255
64.137.16.0/24
104.222.176.0/21
104.222.189.0/24
104.233.8.0/23
104.233.59.0/24
104.238.6.0/24
104.238.11.0-104.238.13.255
104.239.8.0/24
104.239.12.0/24
104.239.14.0/24
104.239.29.0/24
104.239.54.0-104.239.65.255
104.249.8.0-104.249.23.255
104.249.42.0-104.249.54.255
216.173.90.0-216.173.95.255
Signature Algorithm: sha256WithRSAEncryption
78:ea:e4:85:a8:1a:2a:d2:81:4e:9f:c6:99:cd:29:a7:14:e0:
a8:b3:e0:dd:a3:45:72:64:98:95:01:b3:45:e1:51:06:17:f9:
fc:f6:9e:eb:b4:f1:35:0b:fd:a1:42:72:6f:6e:40:cd:bf:9b:
e0:c0:70:50:1a:e3:79:0a:91:bc:81:81:0b:f1:46:da:17:15:
86:02:2b:d5:43:8b:13:14:6a:a7:c1:35:63:81:1a:dd:37:7d:
66:cf:8a:01:48:c2:e3:73:75:fa:ba:71:2d:bf:02:56:09:be:
bb:8a:82:d8:72:01:8f:8e:25:f2:68:35:f4:f9:f3:80:a1:cd:
69:9d:95:d0:e0:ae:91:8e:06:05:b5:33:29:37:44:92:8b:11:
42:72:ca:ec:d4:fb:65:e7:fa:ac:9e:53:ee:2b:b9:f7:93:f7:
3c:33:ce:0d:67:fb:c3:f8:69:1f:ac:6e:fc:d7:4c:36:42:2c:
03:ce:f3:1b:a3:d9:25:26:74:30:7f:ac:b1:f4:6c:c2:d5:9a:
bc:5f:65:ce:b4:49:a7:eb:8e:25:0d:0f:4b:dc:a6:03:ca:56:
bc:01:2b:ec:96:e5:ac:f3:35:fa:eb:8e:24:2f:8b:5f:b2:40:
18:c2:89:1a:b5:e1:ea:1f:b3:ac:23:1d:23:ff:bb:e2:5f:0b:
32:c2:0c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 14:02:23 2024 by rpki-client on console-ams.rpki-client.org