Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-Qz2RwTh4YZwL-YwvaxgJVlXJC8.roa
File: 1-Qz2RwTh4YZwL-YwvaxgJVlXJC8.roa (raw, json)
Hash identifier: lIbRJC1f9aX6M+q2gIB9gpeOxnMfH24UeiDY6iSsAkE=
Subject key identifier: F9:0C:F6:47:04:E1:E1:86:70:2F:E6:30:BD:AC:60:25:59:57:24:2F
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018DAEB2FBDDB24A5FC6702B057B95450B58
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-Qz2RwTh4YZwL-YwvaxgJVlXJC8.roa
Signing time: Thu 15 Feb 2024 21:36:21 +0000
ROA not before: Thu 15 Feb 2024 21:36:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6233
IP address blocks: 45.11.45.0/24 maxlen: 24
45.13.196.0/22 maxlen: 24
45.13.196.0/24 maxlen: 24
45.13.197.0/24 maxlen: 24
45.87.164.0/22 maxlen: 24
45.87.164.0/24 maxlen: 24
45.130.20.0/22 maxlen: 24
45.139.193.0/24 maxlen: 24
45.143.232.0/22 maxlen: 24
45.143.233.0/24 maxlen: 24
45.143.234.0/24 maxlen: 24
45.143.235.0/24 maxlen: 24
45.153.244.0/22 maxlen: 24
62.3.15.0/24 maxlen: 24
79.143.140.0/22 maxlen: 24
80.66.196.0/24 maxlen: 24
94.124.116.0/22 maxlen: 24
94.124.119.0/24 maxlen: 24
141.98.196.0/22 maxlen: 24
146.19.116.0/24 maxlen: 24
185.184.222.0/24 maxlen: 24
185.194.52.0/22 maxlen: 24
185.200.64.0/22 maxlen: 24
185.222.216.0/21 maxlen: 24
185.248.87.0/24 maxlen: 24
193.163.19.0/24 maxlen: 24
194.36.24.0/24 maxlen: 24
194.36.242.0/24 maxlen: 24
194.104.152.0/22 maxlen: 24
194.169.54.0/23 maxlen: 24
194.169.54.0/24 maxlen: 24
195.245.219.0/24 maxlen: 24
195.245.241.0/24 maxlen: 24
195.245.242.0/24 maxlen: 24
2a09::/48 maxlen: 48
2a0d:c7c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ae:b2:fb:dd:b2:4a:5f:c6:70:2b:05:7b:95:45:0b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Feb 15 21:36:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f90cf64704e1e186702fe630bdac60255957242f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:ba:14:d6:87:43:0e:eb:f6:ac:29:08:56:
29:80:77:99:5d:3b:9f:f5:64:52:96:68:a0:68:3a:
1e:27:65:0d:01:07:73:94:51:a0:03:81:f0:71:7c:
6c:e3:c4:c7:d7:21:f5:64:f9:a9:0c:cc:7f:82:a5:
87:34:f0:92:f4:2d:4b:0f:82:9e:7f:bc:c1:f0:1e:
0d:ee:0b:69:53:29:23:a0:85:72:15:34:7b:46:40:
9a:9e:aa:54:67:80:95:8d:fb:d7:a7:21:0b:c8:6f:
b3:44:46:6a:66:56:7f:4a:14:17:2a:f9:84:c4:8f:
85:ad:15:6e:cf:52:94:05:3e:28:52:5d:c3:d0:43:
46:b3:29:23:26:16:f1:83:85:66:a5:66:86:55:49:
85:4e:5b:64:21:9f:a3:74:90:9a:d8:e4:4b:b2:1b:
9e:dd:b9:cd:77:24:04:60:26:a6:f2:16:8a:a6:06:
fc:16:7e:6c:46:36:97:19:c9:de:50:95:eb:39:9d:
2e:45:9f:08:10:24:25:93:f5:8a:c5:b3:92:8a:b9:
bf:20:23:1d:b4:12:e9:6d:de:5f:3e:f6:76:b2:75:
6a:b0:c3:06:63:21:af:53:b9:87:bc:3a:ef:b8:b4:
1f:13:45:4b:37:e4:05:74:f9:d9:7b:91:5c:9e:78:
fb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0C:F6:47:04:E1:E1:86:70:2F:E6:30:BD:AC:60:25:59:57:24:2F
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-Qz2RwTh4YZwL-YwvaxgJVlXJC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.45.0/24
45.13.196.0/22
45.87.164.0/22
45.130.20.0/22
45.139.193.0/24
45.143.232.0/22
45.153.244.0/22
62.3.15.0/24
79.143.140.0/22
80.66.196.0/24
94.124.116.0/22
141.98.196.0/22
146.19.116.0/24
185.184.222.0/24
185.194.52.0/22
185.200.64.0/22
185.222.216.0/21
185.248.87.0/24
193.163.19.0/24
194.36.24.0/24
194.36.242.0/24
194.104.152.0/22
194.169.54.0/23
195.245.219.0/24
195.245.241.0-195.245.242.255
IPv6:
2a09::/48
2a0d:c7c0::/32
Signature Algorithm: sha256WithRSAEncryption
4c:64:34:c6:a7:8d:2c:6f:7d:31:af:f9:28:3c:96:e6:82:1f:
60:79:2c:5d:65:49:cc:40:ab:0f:02:a3:c6:03:2b:b1:bd:71:
f8:6b:17:ff:db:7b:45:14:df:2b:02:78:89:7a:0e:11:51:a4:
aa:ba:82:64:34:e9:39:cf:73:c2:27:e7:1c:a7:5b:27:af:e1:
be:ef:ae:1d:e6:52:51:5b:fd:ca:7b:55:3e:a4:72:21:4e:02:
f8:2e:14:51:7a:08:96:1c:f0:47:05:d9:90:fa:26:81:2d:35:
af:1c:e7:cf:47:2b:3a:96:db:8d:09:48:68:13:45:44:62:f4:
27:e1:c4:db:29:a9:90:f6:c8:fc:99:cf:a3:68:dd:ed:6f:a7:
9f:3e:34:f5:25:7f:7e:d6:a1:a6:62:98:f3:fe:25:58:ec:be:
a5:be:41:a7:b1:81:4e:72:36:df:d8:d5:20:f5:56:c1:97:fe:
25:9c:fe:3f:c7:91:6f:0c:f9:cd:4a:6d:df:13:37:2e:fd:ac:
6f:c6:b1:c7:1f:ba:9f:e7:6a:76:8c:27:e7:99:f4:a6:b3:4b:
4c:00:f1:f2:51:80:9f:d3:34:e7:40:76:49:33:21:48:49:4c:
89:5c:c7:57:43:df:4a:d1:16:97:2d:5a:cc:17:e2:7b:c4:e5:
0f:91:8e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 15:40:31 2024 by rpki-client on console-fra.rpki-client.org