Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/HfJYhhvLg09t5VVyW7-bfiuEGdQ.roa
File: HfJYhhvLg09t5VVyW7-bfiuEGdQ.roa (raw, json)
Hash identifier: bxEZ7A05icxnyJj0GZJSZOfYFLLzeUkDj9tp5ewzPvQ=
Subject key identifier: 1D:F2:58:86:1B:CB:83:4F:6D:E5:55:72:5B:BF:9B:7E:2B:84:19:D4
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01907423C24BA0B8D95F615EF6E08090B4EB
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/HfJYhhvLg09t5VVyW7-bfiuEGdQ.roa
Signing time: Tue 02 Jul 2024 15:50:18 +0000
ROA not before: Tue 02 Jul 2024 15:50:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 31.41.38.0/24 maxlen: 24
31.41.39.0/24 maxlen: 24
45.11.25.0/24 maxlen: 24
45.133.219.0/24 maxlen: 24
45.137.52.0/24 maxlen: 24
45.137.55.0/24 maxlen: 24
45.137.188.0/24 maxlen: 24
45.137.191.0/24 maxlen: 24
45.139.28.0/24 maxlen: 24
45.139.29.0/24 maxlen: 24
45.139.31.0/24 maxlen: 24
45.140.171.0/24 maxlen: 24
45.145.2.0/24 maxlen: 24
45.145.90.0/24 maxlen: 24
45.145.161.0/24 maxlen: 24
45.149.80.0/24 maxlen: 24
45.149.81.0/24 maxlen: 24
45.149.82.0/24 maxlen: 24
45.149.134.0/24 maxlen: 24
45.150.62.0/24 maxlen: 24
45.150.63.0/24 maxlen: 24
45.152.227.0/24 maxlen: 24
77.83.4.0/24 maxlen: 24
77.83.5.0/24 maxlen: 24
77.83.6.0/24 maxlen: 24
77.83.7.0/24 maxlen: 24
185.179.198.0/24 maxlen: 24
194.156.95.0/24 maxlen: 24
195.245.111.0/24 maxlen: 24
213.139.192.0/24 maxlen: 24
213.139.193.0/24 maxlen: 24
213.139.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:74:23:c2:4b:a0:b8:d9:5f:61:5e:f6:e0:80:90:b4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jul 2 15:50:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1df258861bcb834f6de555725bbf9b7e2b8419d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:47:15:5c:49:21:80:2a:c7:48:2a:68:e7:0f:
b9:7a:9b:84:6b:7f:f9:da:9b:fe:3e:7f:e3:02:7f:
d3:14:08:ed:b5:32:19:8d:3f:53:a2:fe:6c:d9:dc:
ac:8a:44:a9:65:9d:5b:e8:37:f2:86:4f:6d:7c:a2:
87:08:c6:6f:65:26:66:e3:38:5a:64:c9:e5:50:13:
9b:8d:a8:67:88:c5:3e:64:35:42:77:0a:fe:17:40:
e6:06:de:88:5b:df:ab:11:a0:b7:ea:6e:11:24:03:
47:09:38:21:5d:0c:6e:5e:73:4c:a6:ec:30:ea:a4:
e1:dc:a6:d1:59:a2:6f:65:19:4f:9a:4c:ed:c9:92:
58:f0:35:3e:fa:22:cd:53:bb:51:83:5f:73:54:73:
2e:fc:78:4c:85:32:a4:74:76:70:e9:20:f8:67:c0:
cb:40:d9:f4:50:c3:89:fb:a9:db:87:75:2c:01:fc:
2f:39:ea:3a:0e:07:f1:be:6a:e0:27:17:33:30:1c:
de:7a:91:43:e3:d4:a3:3b:fe:a2:1e:75:75:6f:37:
47:ad:f1:93:04:67:da:b9:2c:78:83:9e:ff:4e:6a:
0f:be:db:27:ab:6d:25:64:3c:ee:b5:44:2e:13:e6:
69:b8:57:58:42:50:45:8a:c4:cd:41:0e:5d:cb:c5:
c0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F2:58:86:1B:CB:83:4F:6D:E5:55:72:5B:BF:9B:7E:2B:84:19:D4
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/HfJYhhvLg09t5VVyW7-bfiuEGdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.38.0/23
45.11.25.0/24
45.133.219.0/24
45.137.52.0/24
45.137.55.0/24
45.137.188.0/24
45.137.191.0/24
45.139.28.0/23
45.139.31.0/24
45.140.171.0/24
45.145.2.0/24
45.145.90.0/24
45.145.161.0/24
45.149.80.0-45.149.82.255
45.149.134.0/24
45.150.62.0/23
45.152.227.0/24
77.83.4.0/22
185.179.198.0/24
194.156.95.0/24
195.245.111.0/24
213.139.192.0/23
213.139.195.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:f1:92:a1:8b:53:a4:7a:1b:20:66:0b:8f:d1:55:ca:3a:cc:
38:93:16:19:b9:d4:f5:3f:b1:56:b3:8f:82:8e:7a:da:87:52:
8c:0d:cb:22:cb:1d:eb:db:76:c3:30:7a:43:86:9a:0f:dc:61:
0e:84:b9:05:a5:7f:4e:9e:2a:1a:32:af:e4:f6:d1:d3:29:40:
28:58:3c:06:df:89:76:f2:b2:67:6c:d0:6e:a8:c3:a5:3b:d8:
42:c3:8d:1c:44:b4:b7:28:94:8a:09:22:86:b0:6b:1c:71:c1:
34:20:2a:c0:f3:a0:a9:92:2f:de:92:1b:84:c3:a4:6e:14:33:
49:d7:e8:f4:96:61:4c:2a:fd:da:5a:39:6d:a4:6f:ee:70:17:
c2:3a:da:cc:90:05:d4:95:ec:ed:e3:2d:b9:a5:5e:8d:52:dd:
18:39:d4:1e:10:e8:2c:d6:c3:57:49:ae:68:d9:66:e9:53:42:
3b:61:7d:78:9c:87:a0:08:42:0a:c0:6a:b6:c7:9a:f3:20:82:
28:e5:47:d3:49:cf:8d:fc:0a:b6:03:d3:2c:3d:26:07:61:9e:
39:9c:5c:bb:79:98:b9:f6:c6:a8:c0:de:8e:6c:4d:bd:59:9c:
57:a5:d0:82:65:14:46:a0:9a:47:58:49:03:a2:43:69:61:d0:
42:ff:3a:3e
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgISAZB0I8JLoLjZX2Fe9uCAkLTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjQwNzAyMTU1MDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGYyNTg4NjFiY2I4MzRmNmRlNTU1NzI1YmJmOWI3ZTJiODQxOWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60cVXEkhgCrHSCpo5w+5epuEa3/5
2pv+Pn/jAn/TFAjttTIZjT9Tov5s2dysikSpZZ1b6Dfyhk9tfKKHCMZvZSZm4zha
ZMnlUBObjahniMU+ZDVCdwr+F0DmBt6IW9+rEaC36m4RJANHCTghXQxuXnNMpuww
6qTh3KbRWaJvZRlPmkztyZJY8DU++iLNU7tRg19zVHMu/HhMhTKkdHZw6SD4Z8DL
QNn0UMOJ+6nbh3UsAfwvOeo6DgfxvmrgJxczMBzeepFD49SjO/6iHnV1bzdHrfGT
BGfauSx4g57/TmoPvtsnq20lZDzutUQuE+ZpuFdYQlBFisTNQQ5dy8XAjQIDAQAB
o4ICmjCCApYwHQYDVR0OBBYEFB3yWIYby4NPbeVVclu/m34rhBnUMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvSGZKWWhodkxnMDl0NVZWeVc3LWJmaXVFR2RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDCBmQQCAAEwgZIDBAEf
KSYDBAAtCxkDBAAthdsDBAAtiTQDBAAtiTcDBAAtibwDBAAtib8DBAEtixwDBAAt
ix8DBAAtjKsDBAAtkQIDBAAtkVoDBAAtkaEwDAMEBC2VUAMEAC2VUgMEAC2VhgME
AS2WPgMEAC2Y4wMEAk1TBAMEALmzxgMEAMKcXwMEAMP1bwMEAdWLwAMEANWLwzAN
BgkqhkiG9w0BAQsFAAOCAQEAsvGSoYtTpHobIGYLj9FVyjrMOJMWGbnU9T+xVrOP
go562odSjA3LIssd69t2wzB6Q4aaD9xhDoS5BaV/Tp4qGjKv5PbR0ylAKFg8Bt+J
dvKyZ2zQbqjDpTvYQsONHES0tyiUigkihrBrHHHBNCAqwPOgqZIv3pIbhMOkbhQz
Sdfo9JZhTCr92lo5baRv7nAXwjrazJAF1JXs7eMtuaVejVLdGDnUHhDoLNbDV0mu
aNlm6VNCO2F9eJyHoAhCCsBqtsea8yCCKOVH00nPjfwKtgPTLD0mB2GeOZxcu3mY
ufbGqMDejmxNvVmcV6XQgmUURqCaR1hJA6JDaWHQQv86Pg==
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:22:07 2024 by rpki-client on console-ams.rpki-client.org