Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/4EK9UPCK9CcYcBvOMGljhSqaJiU.roa
File: 4EK9UPCK9CcYcBvOMGljhSqaJiU.roa (raw, json)
Hash identifier: tnLkKJIv0yabt8QRrYylZKk2UHFyepNQuyCh4MjBIWY=
Subject key identifier: E0:42:BD:50:F0:8A:F4:27:18:70:1B:CE:30:69:63:85:2A:9A:26:25
Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial: 01929A2AEB72023DC2EFF1FE886981D9BA4A
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/4EK9UPCK9CcYcBvOMGljhSqaJiU.roa
Signing time: Thu 17 Oct 2024 11:09:16 +0000
ROA not before: Thu 17 Oct 2024 11:09:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8473
IP address blocks: 5.150.192.0/18 maxlen: 18
37.123.128.0/18 maxlen: 18
46.59.0.0/17 maxlen: 17
62.63.192.0/18 maxlen: 18
79.136.0.0/17 maxlen: 17
81.170.128.0/17 maxlen: 17
82.196.96.0/19 maxlen: 19
85.24.128.0/17 maxlen: 17
91.132.176.0/22 maxlen: 22
94.254.0.0/17 maxlen: 17
98.128.0.0/16 maxlen: 16
109.228.128.0/18 maxlen: 18
176.10.128.0/17 maxlen: 17
178.174.128.0/17 maxlen: 17
185.9.60.0/22 maxlen: 22
185.57.4.0/22 maxlen: 22
185.90.176.0/22 maxlen: 22
195.178.160.0/19 maxlen: 19
212.85.64.0/19 maxlen: 19
212.116.64.0/19 maxlen: 19
213.80.96.0/19 maxlen: 19
213.80.120.0/24 maxlen: 24
213.80.125.0/24 maxlen: 24
213.136.32.0/19 maxlen: 19
213.164.192.0/19 maxlen: 19
217.27.160.0/19 maxlen: 19
217.27.164.0/23 maxlen: 23
217.31.160.0/19 maxlen: 19
2001:9b0::/29 maxlen: 29
2001:9b0::/32 maxlen: 32
2001:9b2::/34 maxlen: 34
2001:9b2:4000::/34 maxlen: 34
2a02:508::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9a:2a:eb:72:02:3d:c2:ef:f1:fe:88:69:81:d9:ba:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Validity
Not Before: Oct 17 11:09:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e042bd50f08af42718701bce306963852a9a2625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:48:fc:43:fb:ad:8c:81:78:47:f8:fd:11:
93:21:0e:fe:e1:bc:c7:d7:35:24:46:b2:fd:da:18:
5c:a4:bc:23:00:ac:b1:9a:90:81:3f:95:32:5a:7a:
5b:d7:b1:6c:af:2c:39:98:99:89:45:2d:77:e1:6f:
b9:71:a8:03:b6:3e:2f:cb:2d:be:9d:d1:a0:c9:6d:
58:67:30:ca:24:19:32:2d:2d:be:b5:b4:8b:76:6e:
2f:98:91:d1:c8:18:15:8d:b7:a0:1b:3f:c8:c1:12:
34:c6:ea:45:15:4b:4b:6b:96:98:67:a1:66:94:0c:
56:7c:c0:f6:db:59:51:b9:69:cf:e0:0d:4d:3f:c5:
6d:16:d8:17:7c:6f:90:7d:4e:eb:bc:00:27:21:5a:
94:af:54:e2:21:91:f6:c2:88:12:42:33:69:ca:36:
11:70:04:b0:cb:e5:b2:32:d9:4e:ab:92:21:6e:a1:
8a:ef:ee:63:c7:e4:fb:a0:08:b9:1d:2d:2b:b8:34:
77:bb:5c:55:31:ec:96:b6:a9:25:c0:22:81:06:11:
4f:83:79:7a:5b:2b:09:25:74:d2:f3:73:2c:ee:be:
31:87:55:6e:84:7d:7a:cf:3c:a9:a1:d5:75:bc:33:
ba:1d:ea:71:db:1b:dd:3a:ea:12:a4:80:b5:b0:0d:
c9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:42:BD:50:F0:8A:F4:27:18:70:1B:CE:30:69:63:85:2A:9A:26:25
X509v3 Authority Key Identifier:
keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/4EK9UPCK9CcYcBvOMGljhSqaJiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.150.192.0/18
37.123.128.0/18
46.59.0.0/17
62.63.192.0/18
79.136.0.0/17
81.170.128.0/17
82.196.96.0/19
85.24.128.0/17
91.132.176.0/22
94.254.0.0/17
98.128.0.0/16
109.228.128.0/18
176.10.128.0/17
178.174.128.0/17
185.9.60.0/22
185.57.4.0/22
185.90.176.0/22
195.178.160.0/19
212.85.64.0/19
212.116.64.0/19
213.80.96.0/19
213.136.32.0/19
213.164.192.0/19
217.27.160.0/19
217.31.160.0/19
IPv6:
2001:9b0::/29
2a02:508::/29
Signature Algorithm: sha256WithRSAEncryption
a0:af:f7:44:33:8f:51:3b:0d:b7:8a:81:4d:06:52:f8:5c:06:
f4:51:be:ef:ca:05:06:ba:2e:fd:0c:49:46:3f:07:f7:25:91:
38:35:23:e0:26:df:e4:9f:06:b3:7b:07:1b:b6:d7:17:98:3e:
49:66:e1:8f:b2:1f:31:ff:76:7a:3b:be:1c:ca:98:73:51:7d:
35:45:bd:e4:b3:6b:36:61:2c:a9:d4:5e:8a:8c:52:fe:3a:49:
8d:9b:ba:61:3a:43:e9:03:d9:0c:5b:7c:41:b8:95:72:f3:f2:
c4:fc:9c:59:65:c9:09:75:06:e2:c0:15:f0:19:cb:9e:54:37:
fe:9e:af:cb:97:d7:f0:38:df:da:05:27:1d:3e:e2:80:86:74:
9f:ff:13:86:fb:fa:46:2e:7a:5e:ca:32:b7:aa:0d:55:5b:9b:
b9:5e:0c:0b:9f:80:45:a7:c9:9d:73:30:1c:9a:fb:dc:3e:9f:
70:ff:45:e0:58:3d:82:6d:76:4e:98:ba:af:a0:16:4a:18:8d:
2c:9b:c3:fa:ce:83:32:ec:eb:c1:f6:98:24:95:40:1d:73:5e:
0a:60:03:06:0c:cc:45:e6:1d:5d:aa:8f:e3:8b:74:52:1c:97:
73:7d:73:eb:84:94:d3:fa:72:3b:b3:9e:5b:fa:87:99:68:3e:
83:c8:0e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:32:16 2024 by rpki-client on console-ams.rpki-client.org