Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/K0IxHICNOe7bKSQhVHGjdsBvy5E.roa
File: K0IxHICNOe7bKSQhVHGjdsBvy5E.roa (raw, json)
Hash identifier: zW7/NLDRCzcLHtQOD07ItB27kGa0KjD85xlVuJdpShM=
Subject key identifier: 2B:42:31:1C:80:8D:39:EE:DB:29:24:21:54:71:A3:76:C0:6F:CB:91
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0193499AEDF2FDCFE70478E1B6C7A9AEA251
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/K0IxHICNOe7bKSQhVHGjdsBvy5E.roa
Signing time: Wed 20 Nov 2024 12:45:10 +0000
ROA not before: Wed 20 Nov 2024 12:45:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212552
IP address blocks: 43.225.90.0/24 maxlen: 24
45.146.241.0/24 maxlen: 24
46.249.98.0/23 maxlen: 24
46.249.100.0/22 maxlen: 24
46.249.111.0/24 maxlen: 24
82.115.8.0/24 maxlen: 24
82.115.13.0/24 maxlen: 24
82.115.16.0/24 maxlen: 24
82.115.17.0/24 maxlen: 24
82.115.18.0/24 maxlen: 24
82.115.19.0/24 maxlen: 24
82.115.20.0/23 maxlen: 24
82.115.24.0/22 maxlen: 24
89.251.8.0/23 maxlen: 24
103.75.196.0/22 maxlen: 24
185.80.196.0/24 maxlen: 24
185.215.244.0/23 maxlen: 24
193.36.84.0/23 maxlen: 24
202.133.88.0/24 maxlen: 24
202.133.89.0/24 maxlen: 24
202.133.90.0/24 maxlen: 24
202.133.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:49:9a:ed:f2:fd:cf:e7:04:78:e1:b6:c7:a9:ae:a2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Nov 20 12:45:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b42311c808d39eedb2924215471a376c06fcb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:e9:55:49:90:59:c4:64:c1:a8:7a:79:57:
9c:11:38:41:bf:64:d2:e8:97:8b:f0:e5:32:37:37:
22:a9:db:f5:ff:d6:57:c1:14:97:dc:41:ce:9c:be:
58:27:95:12:6a:95:7f:85:2e:49:0b:23:3b:75:e3:
14:5c:ba:5c:06:f7:5a:6c:a7:67:9d:02:7d:d7:28:
68:a4:57:c3:32:68:f6:cc:ed:ee:5c:38:da:6c:eb:
3a:df:96:9c:72:a3:0f:d6:6e:9a:81:b1:44:36:bf:
15:53:87:f4:79:40:36:45:34:5b:98:5e:24:09:4c:
f5:74:14:c7:04:25:92:08:50:90:ed:5e:35:64:ba:
1f:75:7d:6e:5c:a2:d9:d0:72:f7:11:6d:3c:74:7a:
f0:a6:b8:ac:c1:ab:28:c3:a9:62:27:1c:87:97:3b:
7c:38:f5:77:46:99:62:1a:a0:4d:00:c8:75:e0:ec:
30:b8:0a:9f:ea:90:5e:55:d2:dc:a9:ef:47:fb:81:
a1:3b:6d:f2:da:e8:84:0a:29:6f:ef:7a:f9:44:4a:
10:14:cb:b6:7a:0e:6b:09:36:11:77:82:02:3a:64:
37:47:f9:cd:83:42:52:7a:87:5d:70:57:ca:a5:42:
b8:18:ec:d8:8f:5f:de:25:24:ad:45:f9:c7:8a:04:
eb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:42:31:1C:80:8D:39:EE:DB:29:24:21:54:71:A3:76:C0:6F:CB:91
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/K0IxHICNOe7bKSQhVHGjdsBvy5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.225.90.0/24
45.146.241.0/24
46.249.98.0-46.249.103.255
46.249.111.0/24
82.115.8.0/24
82.115.13.0/24
82.115.16.0-82.115.21.255
82.115.24.0/22
89.251.8.0/23
103.75.196.0/22
185.80.196.0/24
185.215.244.0/23
193.36.84.0/23
202.133.88.0/22
Signature Algorithm: sha256WithRSAEncryption
01:c5:85:ec:c5:45:d4:20:d3:9e:bd:be:dc:b7:b9:a7:3c:33:
ed:f3:8a:4f:d9:f0:c5:af:8c:cd:d3:13:8b:af:c6:a6:ed:49:
08:c8:e0:0e:33:08:5a:3f:94:08:33:d2:75:99:f1:cb:f3:56:
fc:72:5a:e2:94:18:ed:dc:cc:0e:e0:d5:fa:0c:9b:d7:c5:b2:
d8:b3:91:d9:10:ec:52:fd:74:18:70:b3:46:51:6b:4e:97:c7:
8c:3c:0d:a5:97:e0:86:cb:8f:20:da:f6:df:85:e7:c9:19:a2:
9d:c6:6a:f3:22:a4:09:44:73:d1:4a:51:11:91:c5:e5:19:a0:
69:cb:4f:2a:a6:8b:08:9a:f5:95:55:92:61:12:cb:ea:7f:e8:
c6:73:4e:e9:26:3c:f4:ad:0c:e0:cd:53:24:5f:40:c8:29:9d:
45:61:47:63:8c:17:41:4c:8e:10:19:4f:be:8f:a7:87:4b:be:
92:f1:86:45:3f:49:6e:a1:b1:f3:e2:c6:cc:2e:ef:98:25:fe:
44:7c:51:de:8e:58:27:96:13:b4:35:bb:f5:90:b6:fd:b4:06:
87:58:d3:09:e4:a4:bc:39:d0:ac:8e:23:d1:54:6e:13:43:91:
dd:27:62:9a:58:7e:e9:42:8b:e8:9c:a5:b1:66:c9:7b:b1:59:
e8:50:4b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:15:21 2024 by rpki-client on console-ams.rpki-client.org