Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/AN3eSsshC8reC0HljJv-SrCYj6Q.roa
File: AN3eSsshC8reC0HljJv-SrCYj6Q.roa (raw, json)
Hash identifier: NgmLek1kFPrRKcQt+8bx9tjsFejeUUMgsL3xEzqdHok=
Subject key identifier: 00:DD:DE:4A:CB:21:0B:CA:DE:0B:41:E5:8C:9B:FE:4A:B0:98:8F:A4
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B733A4C45122545A117E9F91155A76
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/AN3eSsshC8reC0HljJv-SrCYj6Q.roa
Signing time: Mon 01 Jan 2024 06:30:12 +0000
ROA not before: Mon 01 Jan 2024 06:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25454
IP address blocks: 92.181.67.0/24 maxlen: 24
92.181.66.0/24 maxlen: 24
92.181.70.0/23 maxlen: 23
92.181.69.0/24 maxlen: 24
92.181.65.0/24 maxlen: 24
92.181.68.0/24 maxlen: 24
92.181.75.0/24 maxlen: 24
92.181.74.0/24 maxlen: 24
92.181.78.0/23 maxlen: 23
92.181.76.0/23 maxlen: 23
92.181.72.0/23 maxlen: 23
92.181.82.0/23 maxlen: 23
92.181.84.0/23 maxlen: 23
92.181.80.0/23 maxlen: 23
92.181.86.0/23 maxlen: 23
92.181.90.0/23 maxlen: 23
92.181.89.0/24 maxlen: 24
92.181.88.0/24 maxlen: 24
92.181.96.0/23 maxlen: 23
92.181.92.0/23 maxlen: 23
92.181.98.0/23 maxlen: 23
92.181.94.0/23 maxlen: 23
92.181.100.0/23 maxlen: 23
92.181.14.0/23 maxlen: 23
92.181.16.0/23 maxlen: 23
92.181.12.0/23 maxlen: 23
92.181.23.0/24 maxlen: 24
92.181.18.0/23 maxlen: 23
92.181.22.0/24 maxlen: 24
92.181.24.0/23 maxlen: 23
92.181.20.0/23 maxlen: 23
92.181.30.0/23 maxlen: 23
92.181.26.0/23 maxlen: 23
92.181.28.0/23 maxlen: 23
92.181.38.0/24 maxlen: 24
92.181.34.0/23 maxlen: 23
92.181.32.0/23 maxlen: 23
92.181.36.0/23 maxlen: 23
92.181.39.0/24 maxlen: 24
92.181.42.0/24 maxlen: 24
92.181.40.0/23 maxlen: 23
92.181.50.0/23 maxlen: 23
92.181.48.0/23 maxlen: 23
92.181.58.0/23 maxlen: 23
92.181.54.0/23 maxlen: 23
92.181.56.0/23 maxlen: 23
92.181.52.0/23 maxlen: 23
92.181.62.0/23 maxlen: 23
92.181.64.0/24 maxlen: 24
92.181.60.0/23 maxlen: 23
92.181.2.0/23 maxlen: 23
92.181.1.0/24 maxlen: 24
92.181.4.0/23 maxlen: 23
92.181.0.0/24 maxlen: 24
92.181.6.0/23 maxlen: 23
92.181.10.0/23 maxlen: 23
92.181.8.0/23 maxlen: 23
2a01:c8c0::/28 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:33:a4:c4:51:22:54:5a:11:7e:9f:91:15:5a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00ddde4acb210bcade0b41e58c9bfe4ab0988fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e0:c7:38:b5:1e:f1:37:fc:60:84:98:f1:ef:
ad:b4:76:81:b8:b3:11:33:d3:23:b4:c2:47:10:0f:
39:4d:db:ac:4d:f0:4a:47:20:89:5b:22:63:d1:91:
5d:2e:f5:f9:c2:a5:df:2f:90:c8:4c:47:94:8f:8d:
94:cf:e7:03:d2:43:72:5b:8c:c2:40:25:39:51:19:
cf:52:01:f0:be:36:43:c3:9d:34:d9:3d:b6:fb:bc:
ad:6a:21:6a:d4:f4:63:57:af:48:80:37:32:8c:b6:
99:a8:4f:43:92:d4:66:4d:23:3b:d4:06:4d:f8:f6:
b5:00:03:c3:fe:8d:45:79:b8:e1:ac:bd:2b:ec:d6:
6a:6c:b4:29:17:ac:20:f1:64:1e:b8:e7:23:cd:01:
8c:a0:2d:d4:d3:15:c8:b8:aa:12:6c:b3:b1:c2:f8:
49:79:2e:45:80:35:74:0a:99:dd:43:6c:10:bc:a3:
67:10:37:7a:73:fa:93:6b:87:c2:70:f6:aa:8a:19:
35:31:a8:b3:f4:26:77:fa:f0:5e:aa:b0:9b:77:c8:
83:29:6b:f5:56:7c:3f:05:5a:3f:16:bd:ab:56:4f:
14:49:94:58:ec:d9:e7:01:4c:39:eb:d8:40:c6:ad:
87:f0:8b:de:14:79:3a:6f:51:0a:3f:1a:cc:84:44:
6a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DD:DE:4A:CB:21:0B:CA:DE:0B:41:E5:8C:9B:FE:4A:B0:98:8F:A4
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/AN3eSsshC8reC0HljJv-SrCYj6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.181.0.0-92.181.42.255
92.181.48.0-92.181.101.255
IPv6:
2a01:c8c0::/28
Signature Algorithm: sha256WithRSAEncryption
22:3a:7d:76:3b:3b:0d:c4:95:d9:ef:4b:35:c6:c5:da:66:01:
74:53:2f:4f:4f:39:e5:b5:a5:21:c2:30:1a:a4:14:e4:02:e9:
1d:77:db:2b:9f:f6:3c:d1:e2:49:a2:6e:c9:66:dc:98:30:81:
85:89:fb:d7:5c:47:2b:03:82:34:7c:dc:94:b2:f6:eb:43:30:
0e:26:0a:68:b0:f0:26:c3:a7:fa:37:b0:ce:80:9b:14:99:33:
07:68:10:f4:a5:7a:43:6d:b6:9c:80:df:6b:89:77:23:ef:f3:
b7:8f:52:52:a8:1d:ed:81:f9:56:54:67:5a:f6:3a:c3:68:ce:
23:87:02:e0:5c:bb:a7:de:4b:48:90:dd:0b:df:86:a8:82:43:
d4:dd:fe:f7:85:2e:7e:f5:cf:ad:a6:08:ce:92:63:88:f9:6a:
f1:6b:c2:54:27:59:d0:a0:59:b7:d9:42:f1:10:b9:f3:3b:ea:
5e:8e:34:db:aa:bb:ec:fc:78:96:be:18:4e:0a:b9:0a:81:67:
20:54:42:13:6a:0c:50:d4:f6:96:03:27:79:f4:73:69:e7:34:
07:93:c1:79:ef:19:ef:31:0c:97:78:01:12:6b:d3:eb:4d:13:
59:79:85:2c:20:25:51:60:e6:73:dd:ef:25:34:d8:0d:50:7b:
5d:dc:78:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:32:58 2024 by rpki-client on console-ams.rpki-client.org