Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/4TframMVc_SCxepgvO0QV1jqsTc.roa
File: 4TframMVc_SCxepgvO0QV1jqsTc.roa (raw, json)
Hash identifier: bvtBZMNh2mwscIkbkIkLNM8afHHfmMCUfinIqGQJ7uU=
Subject key identifier: E1:37:EB:6A:63:15:73:F4:82:C5:EA:60:BC:ED:10:57:58:EA:B1:37
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018CC801D1988FD53721D14B77C5A7C975CF
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/4TframMVc_SCxepgvO0QV1jqsTc.roa
Signing time: Tue 02 Jan 2024 02:30:11 +0000
ROA not before: Tue 02 Jan 2024 02:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 949
IP address blocks: 141.98.196.0/22 maxlen: 24
80.66.196.0/22 maxlen: 24
45.142.124.0/22 maxlen: 24
45.87.92.0/22 maxlen: 24
94.124.116.0/24 maxlen: 24
94.124.116.0/22 maxlen: 24
185.200.64.0/22 maxlen: 24
149.62.44.0/22 maxlen: 24
45.139.192.0/22 maxlen: 24
195.245.219.0/24 maxlen: 24
45.141.44.0/22 maxlen: 24
185.213.151.0/24 maxlen: 24
45.130.20.0/22 maxlen: 24
194.114.136.0/24 maxlen: 24
195.245.229.0/24 maxlen: 24
195.245.242.0/24 maxlen: 24
195.245.241.0/24 maxlen: 24
194.104.144.0/24 maxlen: 24
194.104.152.0/22 maxlen: 24
95.214.164.0/22 maxlen: 24
45.143.232.0/22 maxlen: 24
194.169.54.0/23 maxlen: 24
91.200.240.0/22 maxlen: 24
185.222.216.0/21 maxlen: 24
185.194.52.0/22 maxlen: 24
185.222.221.0/24 maxlen: 24
193.32.148.0/22 maxlen: 24
2a06:57c0::/29 maxlen: 48
2a07:fa00::/29 maxlen: 48
2a0d:7540::/29 maxlen: 48
2a0d:3640::/29 maxlen: 48
2a0c:ed40::/29 maxlen: 48
2a06:4fc0::/29 maxlen: 48
2a0d:4340::/29 maxlen: 48
2a0d:de80::/29 maxlen: 48
2a0e:6200::/29 maxlen: 48
2a0d:1fc0::/29 maxlen: 48
2a07:e900::/29 maxlen: 48
2a10:2600::/29 maxlen: 48
2a0d:4bc0::/29 maxlen: 48
2a12:9d00::/29 maxlen: 48
2a09:6::/32 maxlen: 48
2a07:46c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:d1:98:8f:d5:37:21:d1:4b:77:c5:a7:c9:75:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 2 02:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e137eb6a631573f482c5ea60bced105758eab137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:62:6d:a9:ac:67:37:a1:8a:98:09:2f:83:3e:
e7:54:22:82:52:ba:4c:67:ee:ea:86:7e:da:fe:89:
dc:41:5c:f3:f3:91:3d:3a:d3:34:11:bf:38:a6:5b:
10:b0:69:59:fd:92:67:ff:4b:26:f6:04:a5:2a:70:
80:66:3d:cc:17:eb:c9:8d:cc:0c:a6:50:8a:b4:9e:
57:04:5f:7e:25:58:57:3b:dd:40:79:43:91:89:11:
83:8e:5a:37:f5:5b:43:1d:9c:06:2a:42:9b:16:03:
dc:d2:2e:22:01:86:bd:35:99:af:c7:ad:bc:bb:ca:
80:24:11:80:0a:9c:32:d9:17:a5:8d:85:f7:39:b9:
8f:72:a9:b8:e6:4c:eb:59:cf:4d:a9:60:fe:e5:5a:
a6:c5:ea:f0:48:7a:b6:18:48:d3:bc:b0:11:0f:f8:
fe:59:57:64:91:c3:3b:c0:d1:65:fe:b6:d2:79:0c:
23:1a:b0:d0:a3:ee:e3:53:95:fd:f2:28:75:2c:7b:
ac:34:f5:74:4f:40:77:27:9d:0b:26:a4:06:2d:0a:
b7:e6:34:6e:4a:77:b4:31:b7:a5:3a:e1:3c:88:d1:
6a:3f:47:2e:3e:8d:0e:f2:a2:bb:cb:bd:88:7c:ae:
79:d0:44:33:40:92:98:a8:99:85:cb:15:ec:4d:c1:
46:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:37:EB:6A:63:15:73:F4:82:C5:EA:60:BC:ED:10:57:58:EA:B1:37
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/4TframMVc_SCxepgvO0QV1jqsTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.92.0/22
45.130.20.0/22
45.139.192.0/22
45.141.44.0/22
45.142.124.0/22
45.143.232.0/22
80.66.196.0/22
91.200.240.0/22
94.124.116.0/22
95.214.164.0/22
141.98.196.0/22
149.62.44.0/22
185.194.52.0/22
185.200.64.0/22
185.213.151.0/24
185.222.216.0/21
193.32.148.0/22
194.104.144.0/24
194.104.152.0/22
194.114.136.0/24
194.169.54.0/23
195.245.219.0/24
195.245.229.0/24
195.245.241.0-195.245.242.255
IPv6:
2a06:4fc0::/29
2a06:57c0::/29
2a07:46c0::/29
2a07:e900::/29
2a07:fa00::/29
2a09:6::/32
2a0c:ed40::/29
2a0d:1fc0::/29
2a0d:3640::/29
2a0d:4340::/29
2a0d:4bc0::/29
2a0d:7540::/29
2a0d:de80::/29
2a0e:6200::/29
2a10:2600::/29
2a12:9d00::/29
Signature Algorithm: sha256WithRSAEncryption
01:a9:91:e1:a1:53:25:1a:f6:61:d1:2b:6d:e4:39:d3:2c:00:
be:4d:68:f3:ca:d8:52:39:99:08:17:b7:e1:6c:f9:ba:29:f7:
1c:05:1e:92:1a:0a:40:ec:5c:cb:a5:ec:97:15:90:1e:ca:37:
07:fe:4e:2a:d3:cc:fd:e9:45:6c:f6:db:39:ea:c3:78:c6:ed:
db:3f:0c:0c:fc:a6:a6:b7:25:99:c0:ed:0f:aa:51:38:24:a1:
8f:14:d4:88:c7:7a:43:44:8d:90:59:0b:68:91:40:5d:bd:7a:
c9:8a:fe:15:7a:f6:49:ed:91:8e:43:0e:c8:01:83:c9:43:a3:
da:b5:ae:24:89:7f:18:f7:d9:38:bf:c2:a8:ca:06:b6:f4:95:
c1:c3:ab:4d:19:52:7d:17:a2:ab:9e:64:e0:88:9a:9d:6b:76:
52:26:38:5b:40:62:1f:de:76:e1:62:a7:8c:4d:2a:34:3d:17:
2d:8d:de:4f:36:ba:f0:a5:38:fe:e2:e7:a6:ac:15:ee:91:6a:
45:54:17:78:38:d1:e8:8b:c3:a3:25:3e:7e:f5:33:5f:51:a6:
1a:6f:75:8b:04:79:60:cd:43:ce:12:ea:16:e4:5b:cd:bc:0f:
b2:16:64:ac:9a:01:38:6c:36:a3:e5:dc:83:2c:21:b1:c5:80:
f4:14:c4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:55:50 2024 by rpki-client on console-ams.rpki-client.org