Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/pTSDznJUNSrcesZ2ShMKRwPMAak.roa
File: pTSDznJUNSrcesZ2ShMKRwPMAak.roa (raw, json)
Hash identifier: hWzSDBugrrJwtt8qmT5eTRQ1no38gfFBR1r2uK8kaKY=
Subject key identifier: A5:34:83:CE:72:54:35:2A:DC:7A:C6:76:4A:13:0A:47:03:CC:01:A9
Certificate issuer: /CN=5336107179715609dca422bc07a098468c529452
Certificate serial: 01903087F5DFD37E19EBAFCA6F28FF4B401E
Authority key identifier: 53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/pTSDznJUNSrcesZ2ShMKRwPMAak.roa
Signing time: Wed 19 Jun 2024 12:45:34 +0000
ROA not before: Wed 19 Jun 2024 12:45:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43927
IP address blocks: 45.131.128.0/23 maxlen: 24
46.102.240.0/21 maxlen: 24
77.81.240.0/21 maxlen: 24
89.32.144.0/21 maxlen: 24
89.33.197.0/24 maxlen: 24
89.45.248.0/21 maxlen: 24
91.188.224.0/24 maxlen: 24
91.188.225.0/24 maxlen: 24
91.188.226.0/24 maxlen: 24
91.188.227.0/24 maxlen: 24
92.114.98.0/24 maxlen: 24
93.113.174.0/24 maxlen: 24
185.105.32.0/22 maxlen: 24
185.125.108.0/24 maxlen: 24
185.125.109.0/24 maxlen: 24
185.125.110.0/23 maxlen: 24
185.199.172.0/24 maxlen: 24
185.199.173.0/24 maxlen: 24
185.199.174.0/24 maxlen: 24
185.199.175.0/24 maxlen: 24
185.250.104.0/24 maxlen: 24
185.250.105.0/24 maxlen: 24
185.250.106.0/24 maxlen: 24
185.250.107.0/24 maxlen: 24
188.240.47.0/24 maxlen: 24
188.241.112.0/21 maxlen: 24
2a06:cd40:1::/48 maxlen: 48
2a06:cd40:2::/48 maxlen: 48
2a06:cd40:3::/48 maxlen: 48
2a06:cd40:4::/48 maxlen: 48
2a06:cd40:100::/48 maxlen: 48
2a06:cd40:101::/48 maxlen: 64
2a06:cd40:200::/48 maxlen: 48
2a06:cd40:300::/48 maxlen: 64
2a06:cd40:301::/48 maxlen: 64
2a06:cd40:400::/48 maxlen: 48
2a06:cd40:cafe::/48 maxlen: 48
2a06:cd40:caff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:30:87:f5:df:d3:7e:19:eb:af:ca:6f:28:ff:4b:40:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336107179715609dca422bc07a098468c529452
Validity
Not Before: Jun 19 12:45:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a53483ce7254352adc7ac6764a130a4703cc01a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ed:b8:da:75:68:82:ed:92:e1:fa:ec:74:6f:
ba:2c:fc:d1:b7:78:69:68:48:22:b2:e9:37:7e:1a:
e7:fa:32:e1:d7:de:bb:70:86:23:73:61:55:23:de:
6a:72:c2:b2:fd:e2:af:80:bb:8b:ec:fc:79:9f:6c:
16:4c:61:f6:51:1d:bd:ce:62:a4:fd:0b:4d:23:63:
f7:eb:ba:ab:42:7a:46:9f:74:f9:ec:ab:32:67:ee:
62:21:b3:c7:91:1a:9c:b1:8d:e0:e3:85:1b:f6:1b:
36:74:32:9c:99:90:13:7f:33:3c:7f:06:22:d1:d8:
ab:f3:33:75:1d:ae:1c:ba:1b:9f:34:89:3f:c7:e6:
30:0b:44:e4:cf:17:ed:02:e7:7c:4c:72:d6:9f:94:
d4:a5:32:25:16:fd:7f:f6:db:01:35:97:ce:70:1f:
fb:51:59:44:a0:91:b6:9f:48:24:67:1b:91:51:fa:
12:c1:4a:9d:6f:bc:91:ad:86:5f:ff:7b:c1:6d:d8:
1f:77:05:37:58:06:12:3f:ff:ad:aa:fd:58:ac:38:
8e:4d:51:6a:09:6c:ff:1e:32:83:52:a6:94:e7:5f:
0c:99:d6:d0:3c:09:e6:d3:30:ec:fe:f7:7d:d7:4a:
e0:98:f1:44:c3:2a:b4:4b:7b:5a:3e:d6:e8:5c:5d:
8a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:34:83:CE:72:54:35:2A:DC:7A:C6:76:4A:13:0A:47:03:CC:01:A9
X509v3 Authority Key Identifier:
keyid:53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/pTSDznJUNSrcesZ2ShMKRwPMAak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.128.0/23
46.102.240.0/21
77.81.240.0/21
89.32.144.0/21
89.33.197.0/24
89.45.248.0/21
91.188.224.0/22
92.114.98.0/24
93.113.174.0/24
185.105.32.0/22
185.125.108.0/22
185.199.172.0/22
185.250.104.0/22
188.240.47.0/24
188.241.112.0/21
IPv6:
2a06:cd40:1::-2a06:cd40:4:ffff:ffff:ffff:ffff:ffff
2a06:cd40:100::/47
2a06:cd40:200::/48
2a06:cd40:300::/47
2a06:cd40:400::/48
2a06:cd40:cafe::/47
Signature Algorithm: sha256WithRSAEncryption
3d:8b:48:1e:35:08:90:9d:0f:65:af:1a:b3:35:d3:8c:84:2f:
de:e0:31:cb:1e:b9:1b:ed:fd:4b:b9:d3:2b:7b:11:ac:b3:ff:
c1:3d:b9:50:3f:d9:62:62:2b:52:37:49:c9:34:b0:24:30:e0:
e9:0c:41:39:c3:e6:f4:44:64:d9:88:13:a9:2f:d3:ac:80:86:
8e:d9:5b:ad:54:af:d2:29:ca:fd:8b:a4:f3:97:78:61:6c:ba:
96:64:8d:8f:08:29:c5:c8:ce:cb:af:4d:7c:17:76:f6:33:1f:
aa:7e:4f:aa:37:70:d8:69:86:29:af:3c:09:54:77:cd:07:af:
36:ea:b1:93:cb:33:66:bd:00:8b:d0:a2:42:a2:6d:fc:9d:33:
05:c0:e8:60:f9:21:61:b5:9a:02:8c:2f:b0:48:67:5b:2c:cc:
4d:88:d7:81:80:09:55:fa:4d:5e:cf:1a:c7:70:3d:24:c1:c3:
e1:a1:cc:49:ff:8a:92:36:b6:2b:a3:39:0a:64:32:f6:1c:84:
d2:d2:5c:33:03:a1:ea:56:e7:c5:56:2b:24:b8:b7:0e:a4:9b:
9f:35:d7:79:b9:48:8d:0c:9f:df:35:90:0e:f7:93:bb:15:92:
9b:25:3f:5e:2c:18:a6:dd:e0:e2:b1:b3:8c:8e:43:72:5f:3e:
6d:cb:b0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:28:15 2024 by rpki-client on console-ams.rpki-client.org