Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/rDUJJwQTp10msnyxTM7qFFaP5Dg.roa
File: rDUJJwQTp10msnyxTM7qFFaP5Dg.roa (raw, json)
Hash identifier: OGAdNtvpSlQiN9dwAIoLVR9XCCOViXto/goGKMmVA/Y=
Subject key identifier: AC:35:09:27:04:13:A7:5D:26:B2:7C:B1:4C:CE:EA:14:56:8F:E4:38
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018CC6B7B7A52B854C02E6E16C88C67470AB
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/rDUJJwQTp10msnyxTM7qFFaP5Dg.roa
Signing time: Mon 01 Jan 2024 20:29:38 +0000
ROA not before: Mon 01 Jan 2024 20:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 45.149.80.0/24 maxlen: 24
45.149.82.0/24 maxlen: 24
45.149.81.0/24 maxlen: 24
195.245.111.0/24 maxlen: 24
185.179.198.0/24 maxlen: 24
45.140.171.0/24 maxlen: 24
45.11.25.0/24 maxlen: 24
45.139.29.0/24 maxlen: 24
45.139.28.0/24 maxlen: 24
45.139.31.0/24 maxlen: 24
213.139.192.0/24 maxlen: 24
213.139.195.0/24 maxlen: 24
213.139.193.0/24 maxlen: 24
45.149.134.0/24 maxlen: 24
45.152.227.0/24 maxlen: 24
45.137.188.0/24 maxlen: 24
45.137.191.0/24 maxlen: 24
194.156.95.0/24 maxlen: 24
45.150.63.0/24 maxlen: 24
45.150.62.0/24 maxlen: 24
45.145.2.0/24 maxlen: 24
45.145.161.0/24 maxlen: 24
45.133.219.0/24 maxlen: 24
45.137.52.0/24 maxlen: 24
45.137.55.0/24 maxlen: 24
77.83.4.0/24 maxlen: 24
77.83.7.0/24 maxlen: 24
77.83.6.0/24 maxlen: 24
77.83.5.0/24 maxlen: 24
45.145.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:b7:a5:2b:85:4c:02:e6:e1:6c:88:c6:74:70:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 20:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac3509270413a75d26b27cb14cceea14568fe438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:16:83:4f:30:fa:1e:1d:50:f7:9a:73:a5:42:
f9:38:76:fc:b4:b8:67:13:11:b4:b8:df:48:a0:50:
42:43:ce:8b:0c:a3:2c:29:32:66:41:c6:3e:4b:18:
9b:89:43:7c:a3:e0:23:e8:70:2a:e2:9b:62:f8:d6:
6a:60:30:40:21:ac:0b:22:d8:d3:5c:37:ff:55:90:
06:8f:5e:4c:bb:44:eb:48:75:53:6a:00:e2:be:55:
71:83:ed:71:a8:fc:4c:98:f2:eb:ff:9a:7f:f7:e4:
85:1b:1d:a6:bd:7d:67:08:a8:65:b5:33:61:07:42:
4e:55:e2:e8:cd:b2:25:16:7c:62:a0:5b:f5:52:7d:
66:d1:1e:2f:e4:0e:40:f3:97:5f:0d:99:5f:c3:4c:
7a:5d:c9:9d:f9:e8:49:07:a8:0e:df:f2:56:8b:4d:
22:46:d4:af:56:99:5a:47:83:50:a0:11:e0:67:b7:
64:c5:ba:d9:b0:62:c2:74:93:4e:1b:49:a0:e0:3e:
5e:87:ec:00:5e:4a:f3:f3:f4:c8:3a:eb:f5:6f:c0:
d1:af:d0:38:4a:4d:b7:b6:45:b4:1d:ad:de:03:8f:
f1:60:0e:9d:cc:ff:11:f5:78:56:43:a7:a3:bc:4d:
52:34:f8:07:b5:7b:56:a3:75:6b:96:16:13:cc:9c:
69:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:35:09:27:04:13:A7:5D:26:B2:7C:B1:4C:CE:EA:14:56:8F:E4:38
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/rDUJJwQTp10msnyxTM7qFFaP5Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.25.0/24
45.133.219.0/24
45.137.52.0/24
45.137.55.0/24
45.137.188.0/24
45.137.191.0/24
45.139.28.0/23
45.139.31.0/24
45.140.171.0/24
45.145.2.0/24
45.145.90.0/24
45.145.161.0/24
45.149.80.0-45.149.82.255
45.149.134.0/24
45.150.62.0/23
45.152.227.0/24
77.83.4.0/22
185.179.198.0/24
194.156.95.0/24
195.245.111.0/24
213.139.192.0/23
213.139.195.0/24
Signature Algorithm: sha256WithRSAEncryption
68:3d:c4:5b:42:ba:88:10:3f:94:84:ee:b4:bf:22:e1:66:2e:
6f:d5:ef:dd:8e:81:6b:3c:f1:f1:6f:73:56:40:22:23:ab:b9:
6e:23:1d:a3:ee:a3:88:2a:29:77:08:ad:e9:2e:6b:4c:74:c3:
fd:bf:ac:68:f6:52:dc:75:95:15:73:28:ec:ea:c4:66:61:7f:
db:1f:00:df:0f:5a:d2:cd:4c:dd:8f:45:93:fd:bb:c6:93:48:
df:8a:5e:f8:0b:a3:f0:28:b4:a9:70:3c:46:53:b5:77:ee:2b:
bc:cc:54:2d:7f:37:5b:7b:26:4b:ff:ba:9e:e0:51:e2:7d:60:
3a:f5:fb:b1:15:82:8d:ad:dd:93:80:2c:70:2a:0e:10:52:27:
7f:b0:b9:85:f1:01:ee:c0:ba:9a:68:72:b4:3f:36:b0:db:d3:
b9:f9:66:8a:14:15:f9:51:06:ea:71:c4:f2:ba:97:a9:1c:aa:
b1:53:9e:ca:f6:c7:ed:da:6c:4c:e1:fe:86:04:b2:8d:a0:13:
fb:b4:70:40:33:cb:74:2c:5b:9d:8d:55:1d:08:1f:f4:e9:d8:
e8:83:ff:e9:0e:2b:97:72:61:27:b9:f3:b6:57:86:6d:d2:71:
25:7d:47:54:ae:a4:4c:6d:07:d3:68:a4:5d:15:fc:2e:ab:ca:
5b:8e:0c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 23:30:30 2024 by rpki-client on console-ams.rpki-client.org