Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Y-6jxPWiR5ni_avkEf519NR4Eb4.roa
File: Y-6jxPWiR5ni_avkEf519NR4Eb4.roa (raw, json)
Hash identifier: 8MddGF1DjY0MQkHuR34ib/+oi6I6G5EcSksQzhPKk0Y=
Subject key identifier: 63:EE:A3:C4:F5:A2:47:99:E2:FD:AB:E4:11:FE:75:F4:D4:78:11:BE
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018F0940218767F2CC66AEC5B51BD9474902
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Y-6jxPWiR5ni_avkEf519NR4Eb4.roa
Signing time: Tue 23 Apr 2024 04:39:08 +0000
ROA not before: Tue 23 Apr 2024 04:39:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212552
IP address blocks: 45.146.241.0/24 maxlen: 24
46.249.98.0/23 maxlen: 24
46.249.100.0/22 maxlen: 24
46.249.111.0/24 maxlen: 24
82.115.13.0/24 maxlen: 24
82.115.16.0/24 maxlen: 24
82.115.17.0/24 maxlen: 24
82.115.18.0/24 maxlen: 24
82.115.19.0/24 maxlen: 24
82.115.20.0/23 maxlen: 24
82.115.24.0/22 maxlen: 24
89.251.8.0/23 maxlen: 24
103.75.196.0/22 maxlen: 24
185.80.196.0/24 maxlen: 24
185.215.244.0/23 maxlen: 24
193.36.84.0/23 maxlen: 24
202.133.88.0/24 maxlen: 24
202.133.89.0/24 maxlen: 24
212.90.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:09:40:21:87:67:f2:cc:66:ae:c5:b5:1b:d9:47:49:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 23 04:39:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63eea3c4f5a24799e2fdabe411fe75f4d47811be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:fe:71:81:37:cd:d3:75:ad:67:b9:ae:28:
8d:4c:4a:8c:cd:d2:17:4c:b9:68:68:c3:04:46:bf:
0c:03:dc:f9:1f:c7:bf:c0:ca:6e:c7:f1:77:86:77:
d6:b6:11:26:ba:ba:ba:2d:c1:66:1a:11:1e:cc:3d:
5e:cd:f7:1d:bd:c6:2f:8a:3f:89:83:4b:49:a1:cd:
32:4f:cc:87:30:ef:df:d2:a6:03:75:e9:bb:fe:19:
b3:4d:a8:40:f2:8d:62:8e:a9:c7:b2:4d:8c:2e:a0:
e2:81:c3:03:ee:b5:bb:f2:07:22:27:04:f5:70:78:
49:7d:ca:6e:52:6e:f3:f6:ef:32:ac:55:6c:0a:37:
3a:25:2e:8e:0b:f6:24:af:99:f0:dd:da:a6:ce:12:
fc:00:c3:49:6c:b0:98:57:30:9e:56:80:7b:3b:cc:
d5:df:b7:0f:bf:27:76:d1:47:df:d7:e1:08:ef:ee:
0b:a7:d9:4f:a3:7d:61:50:f2:eb:93:36:46:79:29:
f8:bc:c3:9f:22:96:37:c2:50:01:0e:10:1e:cc:b1:
59:01:bd:94:f9:af:ef:ff:51:12:27:42:a5:a6:7b:
1b:4c:9e:4e:27:4f:30:92:f3:09:a9:14:c5:98:4f:
7a:98:6c:ec:f4:22:48:c1:74:83:d1:c4:25:83:08:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EE:A3:C4:F5:A2:47:99:E2:FD:AB:E4:11:FE:75:F4:D4:78:11:BE
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Y-6jxPWiR5ni_avkEf519NR4Eb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.241.0/24
46.249.98.0-46.249.103.255
46.249.111.0/24
82.115.13.0/24
82.115.16.0-82.115.21.255
82.115.24.0/22
89.251.8.0/23
103.75.196.0/22
185.80.196.0/24
185.215.244.0/23
193.36.84.0/23
202.133.88.0/23
212.90.102.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:df:67:51:3b:33:aa:a7:24:b0:37:01:a9:cf:90:80:ac:4c:
02:38:be:d5:b1:d3:03:15:e4:63:9f:4d:88:dd:ed:6a:33:f9:
ee:1e:26:6d:0d:b4:4b:70:0f:44:ce:3d:3c:40:59:6c:52:59:
58:b9:19:41:28:e1:41:85:aa:34:ed:23:ae:ea:f7:99:fb:8e:
5d:3a:32:cc:26:91:43:5a:99:8e:ec:68:6c:53:55:c3:29:a5:
f2:aa:e8:dd:fb:99:a8:95:e6:4f:23:5f:46:5c:28:4a:52:e5:
99:8a:39:de:88:ba:92:71:2e:74:11:d4:06:a8:ab:08:5b:03:
3c:1f:db:ec:24:9b:d9:a2:f9:ef:d5:3f:df:08:ea:55:31:10:
a7:34:08:a7:19:c5:a9:7d:8c:75:88:aa:78:2e:84:19:82:93:
85:24:38:36:c9:4c:dc:6e:60:50:de:12:cc:e4:2f:d1:05:d6:
f9:1e:2f:98:bd:75:9d:ae:a7:c6:27:df:7f:38:0d:25:5a:e4:
27:64:94:2c:c4:4a:e0:10:ca:a0:57:2b:41:73:d6:50:f2:75:
b7:6b:65:4d:3c:cc:db:61:4e:88:ac:23:7b:39:ce:ca:17:2d:
05:58:25:30:62:45:a5:8c:8f:cd:b6:1b:7f:75:1d:7a:62:41:
15:1e:42:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:48:00 2024 by rpki-client on console-fra.rpki-client.org