Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/lxRk5e73B6Xif1-IgTW-cX6RunI.roa
File: lxRk5e73B6Xif1-IgTW-cX6RunI.roa (raw, json)
Hash identifier: Y2ZOYdEGvNxaULgUTM3lHpXz6L5/zqxOhML0jz3jAcU=
Subject key identifier: 97:14:64:E5:EE:F7:07:A5:E2:7F:5F:88:81:35:BE:71:7E:91:BA:72
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018EBD6BA6B82A3A1023F29185B8D6809F06
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/lxRk5e73B6Xif1-IgTW-cX6RunI.roa
Signing time: Mon 08 Apr 2024 11:15:32 +0000
ROA not before: Mon 08 Apr 2024 11:15:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205647
IP address blocks: 31.56.0.0/18 maxlen: 18
31.56.64.0/19 maxlen: 19
31.56.96.0/20 maxlen: 20
31.56.116.0/24 maxlen: 24
31.59.12.0/22 maxlen: 22
85.15.48.0/24 maxlen: 24
85.15.49.0/24 maxlen: 24
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.41.0/24 maxlen: 24
94.182.48.0/24 maxlen: 24
94.182.56.0/22 maxlen: 22
94.182.60.0/22 maxlen: 22
94.182.64.0/18 maxlen: 18
94.182.64.0/20 maxlen: 20
94.182.72.0/21 maxlen: 21
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.96.0/20 maxlen: 20
94.182.97.192/28 maxlen: 28
94.182.112.0/20 maxlen: 20
94.182.114.0/23 maxlen: 23
94.182.116.0/22 maxlen: 22
94.182.120.0/21 maxlen: 21
94.182.128.0/18 maxlen: 18
94.182.128.0/20 maxlen: 20
94.182.144.0/20 maxlen: 20
94.182.160.0/20 maxlen: 20
94.182.176.0/20 maxlen: 20
94.182.192.0/18 maxlen: 18
94.182.204.0/22 maxlen: 22
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.217.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
94.182.232.0/23 maxlen: 23
94.182.234.0/23 maxlen: 23
94.182.238.0/24 maxlen: 24
94.182.240.0/23 maxlen: 23
94.182.244.0/22 maxlen: 22
94.182.244.0/23 maxlen: 23
94.182.248.0/22 maxlen: 22
94.182.248.0/23 maxlen: 23
94.182.252.0/24 maxlen: 24
94.182.254.0/24 maxlen: 24
94.183.0.0/18 maxlen: 18
94.183.64.0/18 maxlen: 18
94.183.128.0/18 maxlen: 18
94.183.192.0/18 maxlen: 18
151.240.80.0/21 maxlen: 21
151.240.168.0/22 maxlen: 22
151.240.192.0/21 maxlen: 21
151.240.240.0/21 maxlen: 21
151.240.240.0/23 maxlen: 23
151.240.242.0/23 maxlen: 23
151.240.244.0/23 maxlen: 23
151.241.216.0/23 maxlen: 23
151.241.218.0/23 maxlen: 23
151.241.220.0/22 maxlen: 22
151.241.224.0/21 maxlen: 21
151.242.0.0/21 maxlen: 21
151.242.8.0/22 maxlen: 22
151.244.48.0/21 maxlen: 21
151.244.48.0/22 maxlen: 22
151.244.52.0/22 maxlen: 22
151.244.56.0/21 maxlen: 21
151.244.64.0/21 maxlen: 21
151.244.72.0/22 maxlen: 22
151.244.76.0/22 maxlen: 22
151.244.80.0/21 maxlen: 21
151.244.88.0/21 maxlen: 21
151.244.96.0/23 maxlen: 23
151.244.98.0/23 maxlen: 23
151.244.100.0/23 maxlen: 23
151.244.102.0/23 maxlen: 23
151.244.104.0/23 maxlen: 23
151.244.106.0/23 maxlen: 23
151.244.108.0/23 maxlen: 23
151.244.110.0/23 maxlen: 23
151.244.112.0/23 maxlen: 23
151.244.114.0/23 maxlen: 23
151.244.116.0/23 maxlen: 23
151.244.118.0/23 maxlen: 23
151.244.120.0/23 maxlen: 23
151.244.122.0/23 maxlen: 23
151.244.124.0/23 maxlen: 23
151.244.126.0/23 maxlen: 23
151.244.128.0/22 maxlen: 22
151.244.132.0/22 maxlen: 22
151.244.136.0/22 maxlen: 22
151.244.140.0/22 maxlen: 22
151.244.144.0/22 maxlen: 22
151.244.148.0/22 maxlen: 22
151.244.152.0/22 maxlen: 22
151.244.156.0/22 maxlen: 22
151.244.160.0/22 maxlen: 22
151.244.164.0/22 maxlen: 22
151.244.168.0/22 maxlen: 22
151.244.172.0/22 maxlen: 22
151.244.176.0/22 maxlen: 22
151.244.180.0/22 maxlen: 22
151.244.184.0/22 maxlen: 22
151.244.188.0/22 maxlen: 22
151.244.192.0/22 maxlen: 22
151.244.196.0/22 maxlen: 22
151.244.200.0/22 maxlen: 22
151.244.204.0/22 maxlen: 22
151.244.208.0/22 maxlen: 22
151.244.212.0/22 maxlen: 22
151.244.216.0/23 maxlen: 23
151.244.218.0/23 maxlen: 23
151.244.220.0/23 maxlen: 23
151.244.222.0/23 maxlen: 23
151.244.224.0/23 maxlen: 23
151.244.226.0/23 maxlen: 23
151.246.0.0/18 maxlen: 18
151.246.64.0/18 maxlen: 18
151.246.128.0/18 maxlen: 18
151.246.192.0/18 maxlen: 18
151.246.248.0/22 maxlen: 22
151.247.0.0/20 maxlen: 20
151.247.16.0/22 maxlen: 22
151.247.214.0/23 maxlen: 23
151.247.216.0/21 maxlen: 21
151.247.224.0/22 maxlen: 22
151.247.228.0/22 maxlen: 22
151.247.232.0/22 maxlen: 22
151.247.236.0/22 maxlen: 22
151.247.236.0/24 maxlen: 24
151.247.237.0/24 maxlen: 24
151.247.238.0/23 maxlen: 23
151.247.240.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
217.60.188.0/22 maxlen: 22
217.60.192.0/22 maxlen: 22
217.60.196.0/22 maxlen: 22
217.60.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:6b:a6:b8:2a:3a:10:23:f2:91:85:b8:d6:80:9f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Apr 8 11:15:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=971464e5eef707a5e27f5f888135be717e91ba72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5b:d2:5e:a0:03:32:8e:ef:31:66:ec:f3:67:
a5:39:94:0e:ca:b7:71:79:46:84:7c:1b:a9:c4:8b:
1b:c8:e9:37:87:a9:e5:85:5d:bb:12:9b:41:68:3a:
1f:39:c0:a2:df:cb:3e:e7:69:1b:05:6f:d5:42:7b:
52:ff:a6:5f:df:07:75:82:dc:33:dd:3e:10:13:11:
74:f7:da:20:1e:93:52:50:89:e6:b2:47:21:24:e1:
26:2a:8d:20:c0:0f:d7:f4:22:0f:cf:01:5d:53:26:
4a:e3:a5:20:86:f4:b9:ef:b1:b9:d9:c9:db:90:f8:
9d:5a:03:a9:cf:56:f0:ce:c6:45:09:8b:71:0e:7f:
bf:00:db:42:d7:c9:23:c0:c5:06:bd:59:a4:2f:4c:
9e:c2:44:83:d2:e4:03:cd:e7:00:a1:04:9a:47:27:
59:01:9b:fd:a1:b5:51:b3:15:03:db:c2:aa:61:a5:
fe:7f:34:65:f9:32:ad:14:2b:d0:68:c3:e4:4e:47:
e0:4a:c4:5d:f3:8a:e8:e5:5f:94:29:58:bb:c6:59:
95:f6:82:03:b5:9d:2a:3f:9b:58:be:b5:d3:e5:dc:
ee:ef:84:f1:92:60:21:e1:e9:62:e9:ce:3b:31:25:
a7:2c:36:9c:64:43:d1:b0:e7:80:ae:2b:c8:3f:5c:
85:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:14:64:E5:EE:F7:07:A5:E2:7F:5F:88:81:35:BE:71:7E:91:BA:72
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/lxRk5e73B6Xif1-IgTW-cX6RunI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0-31.56.111.255
31.56.116.0/24
31.59.12.0/22
85.15.48.0/23
94.182.0.0/15
151.240.80.0/21
151.240.168.0/22
151.240.192.0/21
151.240.240.0/21
151.241.216.0-151.241.231.255
151.242.0.0-151.242.11.255
151.244.48.0-151.244.227.255
151.246.0.0-151.247.19.255
151.247.214.0-151.247.241.255
151.247.248.0/22
217.60.188.0-217.60.203.255
Signature Algorithm: sha256WithRSAEncryption
77:45:06:74:cf:e1:1c:ac:98:50:01:50:e4:39:32:bd:ac:10:
f5:af:6b:24:cf:b2:da:b9:d3:51:24:74:e5:24:16:61:29:44:
3b:57:a6:aa:41:61:b1:e5:c5:21:b4:e0:e4:79:e1:c5:50:2d:
7e:a1:67:31:7c:72:94:db:5b:58:49:3d:f5:da:25:61:11:3c:
04:e5:e2:3f:05:b0:c1:a6:e4:b4:f3:12:de:63:67:2d:2c:7b:
c2:96:c0:41:9a:03:57:1c:0b:b6:e5:b4:ed:9c:a9:a9:04:e3:
12:e9:41:8c:49:0f:e9:ed:c3:da:1e:ee:35:6a:84:be:c0:85:
14:7b:e7:b3:ec:35:f6:4d:f4:d1:19:1b:be:3c:7a:50:61:a6:
59:f9:2a:13:bc:7c:c0:8f:19:63:f4:b4:8a:a4:0a:4d:56:6c:
54:37:de:23:81:a3:a3:af:23:1a:f9:82:bb:a4:ac:c1:30:96:
a1:a0:5e:2f:d4:9b:3a:05:8a:d0:81:bd:61:0d:bd:bb:fa:6d:
cf:18:55:43:cb:fd:52:58:21:71:d1:44:69:ae:a2:cf:3a:e6:
56:e5:ef:ff:dd:33:c0:48:f3:0c:59:c9:3c:49:52:0c:6a:5e:
35:b2:34:30:48:96:8e:3a:3d:ef:82:48:58:74:bc:8b:9c:86:
8b:f6:2d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:45:04 2024 by rpki-client on console-ams.rpki-client.org