Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/4xLax9OsL5R3lImItcSpXXuz_b0.roa
File: 4xLax9OsL5R3lImItcSpXXuz_b0.roa (raw, json)
Hash identifier: lNKnHIzysluMT8pYwD3y6O6/g6BzCJKiJBkK2b44X9A=
Subject key identifier: E3:12:DA:C7:D3:AC:2F:94:77:94:89:88:B5:C4:A9:5D:7B:B3:FD:BD
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0193446C52BD914BDA6CDC5CA69073D6FADB
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/4xLax9OsL5R3lImItcSpXXuz_b0.roa
Signing time: Tue 19 Nov 2024 12:36:09 +0000
ROA not before: Tue 19 Nov 2024 12:36:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3214
IP address blocks: 45.11.45.0/24 maxlen: 24
45.13.198.0/24 maxlen: 24
45.13.199.0/24 maxlen: 24
45.80.188.0/22 maxlen: 24
45.82.76.0/22 maxlen: 32
45.89.232.0/22 maxlen: 32
45.90.210.0/24 maxlen: 24
45.92.157.0/24 maxlen: 24
45.94.40.0/22 maxlen: 32
45.128.208.0/22 maxlen: 32
45.129.8.0/22 maxlen: 32
45.130.20.0/22 maxlen: 24
45.130.20.0/24 maxlen: 24
45.130.21.0/24 maxlen: 24
45.130.22.0/24 maxlen: 24
45.130.23.0/24 maxlen: 24
45.131.152.0/22 maxlen: 24
45.134.168.0/22 maxlen: 24
45.139.192.0/22 maxlen: 24
45.143.232.0/22 maxlen: 24
45.143.233.0/24 maxlen: 24
45.143.234.0/24 maxlen: 24
45.143.235.0/24 maxlen: 24
45.147.48.0/24 maxlen: 32
45.147.49.0/24 maxlen: 32
45.153.244.0/22 maxlen: 24
62.133.32.0/22 maxlen: 24
62.133.32.0/24 maxlen: 24
62.133.33.0/24 maxlen: 24
62.133.35.0/24 maxlen: 24
78.142.192.0/22 maxlen: 24
78.142.193.0/24 maxlen: 32
78.142.195.0/24 maxlen: 32
78.142.228.0/22 maxlen: 24
79.143.140.0/22 maxlen: 24
80.66.196.0/22 maxlen: 24
88.214.20.0/22 maxlen: 24
88.218.192.0/22 maxlen: 32
91.200.241.0/24 maxlen: 24
92.60.40.0/23 maxlen: 23
92.60.40.0/24 maxlen: 24
92.60.41.0/24 maxlen: 24
92.60.42.0/24 maxlen: 24
94.124.116.0/22 maxlen: 24
95.214.164.0/22 maxlen: 24
109.94.168.0/22 maxlen: 24
109.94.168.0/24 maxlen: 32
141.98.196.0/22 maxlen: 24
147.78.176.0/22 maxlen: 24
147.78.176.0/24 maxlen: 24
147.78.177.0/24 maxlen: 24
147.78.178.0/24 maxlen: 24
147.78.179.0/24 maxlen: 24
147.78.240.0/24 maxlen: 24
147.78.241.0/24 maxlen: 24
149.62.44.0/22 maxlen: 24
176.113.68.0/22 maxlen: 32
185.49.32.0/22 maxlen: 24
185.64.79.0/24 maxlen: 24
185.184.220.0/24 maxlen: 32
185.184.222.0/24 maxlen: 24
185.194.52.0/22 maxlen: 24
185.200.64.0/22 maxlen: 24
185.207.152.0/22 maxlen: 32
185.213.148.0/22 maxlen: 24
185.213.148.0/24 maxlen: 24
185.213.149.0/24 maxlen: 24
185.213.151.0/24 maxlen: 24
185.222.216.0/21 maxlen: 24
185.222.216.0/22 maxlen: 24
185.222.220.0/24 maxlen: 24
185.248.84.0/22 maxlen: 24
185.254.73.0/24 maxlen: 24
185.254.74.0/24 maxlen: 24
185.254.75.0/24 maxlen: 24
185.255.52.0/22 maxlen: 24
185.255.53.0/24 maxlen: 24
185.255.55.0/24 maxlen: 24
193.111.30.0/23 maxlen: 24
193.111.90.0/23 maxlen: 24
193.177.220.0/22 maxlen: 24
193.187.116.0/22 maxlen: 32
194.36.24.0/24 maxlen: 24
194.36.25.0/24 maxlen: 24
194.36.27.0/24 maxlen: 32
194.36.222.0/23 maxlen: 24
194.104.152.0/22 maxlen: 24
194.124.213.0/24 maxlen: 24
194.124.216.0/24 maxlen: 24
194.124.227.0/24 maxlen: 24
194.124.228.0/24 maxlen: 24
194.169.54.0/23 maxlen: 24
194.169.54.0/24 maxlen: 24
194.169.180.0/23 maxlen: 24
195.245.219.0/24 maxlen: 24
195.245.241.0/24 maxlen: 24
195.245.242.0/24 maxlen: 24
213.232.112.0/22 maxlen: 24
2a03:d9c0::/29 maxlen: 128
2a03:d9c0:8000::/48 maxlen: 48
2a03:d9c0:c0de::/48 maxlen: 64
2a06:4fc0::/29 maxlen: 48
2a06:57c0::/29 maxlen: 48
2a07:e900::/29 maxlen: 48
2a07:fa00::/29 maxlen: 48
2a07:fe00::/29 maxlen: 48
2a09::/29 maxlen: 48
2a09:0:1::/48 maxlen: 48
2a09:0:2::/48 maxlen: 48
2a09:0:3::/48 maxlen: 48
2a09:0:4::/48 maxlen: 48
2a09:0:5::/48 maxlen: 48
2a09:0:6::/48 maxlen: 48
2a09:0:7::/48 maxlen: 48
2a09:0:8::/48 maxlen: 48
2a09:0:9::/48 maxlen: 48
2a09:0:11::/48 maxlen: 48
2a09:0:1337::/48 maxlen: 64
2a09:0:9000::/40 maxlen: 128
2a0b:4080::/32 maxlen: 48
2a0b:89c0::/29 maxlen: 48
2a0c:59c0::/29 maxlen: 48
2a0c:59c0:3000::/40 maxlen: 128
2a0c:ed40::/29 maxlen: 48
2a0d:1fc0::/29 maxlen: 48
2a0d:3640::/29 maxlen: 48
2a0d:4340::/29 maxlen: 48
2a0d:4bc0::/29 maxlen: 48
2a0d:7540::/29 maxlen: 48
2a0d:de80::/29 maxlen: 48
2a0e:6200::/29 maxlen: 48
2a10:480::/29 maxlen: 48
2a10:2600::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:44:6c:52:bd:91:4b:da:6c:dc:5c:a6:90:73:d6:fa:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Nov 19 12:36:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e312dac7d3ac2f9477948988b5c4a95d7bb3fdbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:b1:2b:7a:99:af:e2:ac:a1:1c:8c:80:bc:
6d:33:5b:81:03:40:de:4c:ce:77:bf:8d:3c:be:49:
3d:35:32:7e:60:7d:58:76:1d:0f:c9:f2:4f:e1:58:
0a:cf:23:5c:8e:80:14:17:81:c2:ab:5c:a4:cd:08:
8d:8c:1e:9e:09:5e:28:8c:5d:55:ec:26:85:c6:3f:
33:0b:89:50:2d:d7:9c:c4:e4:b7:13:fb:37:bf:d1:
1c:37:83:79:42:15:62:fa:38:31:5c:fc:62:22:d7:
9d:d5:95:60:bc:0b:09:34:17:8d:76:ed:1e:54:b1:
18:2b:61:e8:40:f4:d8:dd:a8:ca:61:f2:44:3f:a2:
e1:ed:ef:7c:1a:24:bd:93:f5:85:1d:4b:5e:18:86:
22:2b:cf:e7:a5:f6:71:3e:17:c2:3e:4d:f0:5d:54:
3f:3b:97:55:15:00:83:65:2f:71:c4:ef:c1:f9:6c:
6b:c5:8b:ca:54:95:be:95:49:cc:7d:1b:48:04:bc:
4f:3b:0d:67:a1:58:9a:ea:29:40:7a:27:d7:60:04:
2c:24:bf:32:18:c3:3d:98:fe:51:59:3c:09:64:34:
cd:1e:99:5b:82:4a:93:07:4b:f7:3b:d1:c4:7b:af:
ee:a7:9e:71:3a:6d:d3:11:ba:dd:3e:a5:5a:60:21:
03:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:12:DA:C7:D3:AC:2F:94:77:94:89:88:B5:C4:A9:5D:7B:B3:FD:BD
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/4xLax9OsL5R3lImItcSpXXuz_b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.45.0/24
45.13.198.0/23
45.80.188.0/22
45.82.76.0/22
45.89.232.0/22
45.90.210.0/24
45.92.157.0/24
45.94.40.0/22
45.128.208.0/22
45.129.8.0/22
45.130.20.0/22
45.131.152.0/22
45.134.168.0/22
45.139.192.0/22
45.143.232.0/22
45.147.48.0/23
45.153.244.0/22
62.133.32.0/22
78.142.192.0/22
78.142.228.0/22
79.143.140.0/22
80.66.196.0/22
88.214.20.0/22
88.218.192.0/22
91.200.241.0/24
92.60.40.0-92.60.42.255
94.124.116.0/22
95.214.164.0/22
109.94.168.0/22
141.98.196.0/22
147.78.176.0/22
147.78.240.0/23
149.62.44.0/22
176.113.68.0/22
185.49.32.0/22
185.64.79.0/24
185.184.220.0/24
185.184.222.0/24
185.194.52.0/22
185.200.64.0/22
185.207.152.0/22
185.213.148.0/22
185.222.216.0/21
185.248.84.0/22
185.254.73.0-185.254.75.255
185.255.52.0/22
193.111.30.0/23
193.111.90.0/23
193.177.220.0/22
193.187.116.0/22
194.36.24.0/23
194.36.27.0/24
194.36.222.0/23
194.104.152.0/22
194.124.213.0/24
194.124.216.0/24
194.124.227.0-194.124.228.255
194.169.54.0/23
194.169.180.0/23
195.245.219.0/24
195.245.241.0-195.245.242.255
213.232.112.0/22
IPv6:
2a03:d9c0::/29
2a06:4fc0::/29
2a06:57c0::/29
2a07:e900::/29
2a07:fa00::/29
2a07:fe00::/29
2a09::/29
2a0b:4080::/32
2a0b:89c0::/29
2a0c:59c0::/29
2a0c:ed40::/29
2a0d:1fc0::/29
2a0d:3640::/29
2a0d:4340::/29
2a0d:4bc0::/29
2a0d:7540::/29
2a0d:de80::/29
2a0e:6200::/29
2a10:480::/29
2a10:2600::/29
Signature Algorithm: sha256WithRSAEncryption
a4:b4:9f:d2:e5:3f:a0:02:5d:6a:f0:e6:e6:41:f4:da:f8:8a:
78:9a:c4:61:12:64:cc:cc:36:74:92:45:ca:36:b7:d0:6a:5b:
dc:7e:c7:93:26:c5:46:d3:6e:c1:cb:bb:46:61:83:51:c5:4b:
5f:3d:f5:57:c5:4e:c4:64:c5:01:f4:d4:0f:3b:23:9e:54:c8:
de:0a:8e:ab:74:72:f6:33:59:ce:6e:3f:ae:7f:63:ad:fb:12:
36:23:df:14:d8:c1:48:8e:b6:e4:e0:33:0a:9b:80:82:a3:2c:
3b:bf:32:0f:27:50:b5:5e:ae:23:20:18:6c:29:1c:08:a6:d5:
a9:f4:dc:2f:52:fe:24:55:89:61:36:a7:46:47:12:64:60:f2:
72:4e:02:f6:21:d6:9a:f4:3a:0e:bc:a9:cf:5c:cd:dd:0a:7d:
46:15:51:51:1b:42:7d:63:82:99:80:a6:00:f0:3c:a6:ad:b1:
88:9a:bc:d2:a6:bb:58:af:92:ac:8c:d0:81:c9:e8:ea:0d:90:
39:f0:ac:bb:7a:e8:be:8a:22:58:3c:f7:a9:f1:22:a3:e5:5e:
40:91:c3:48:80:e4:90:8e:28:c1:2e:43:4e:21:db:bb:47:b9:
a1:e2:8d:84:13:6c:6e:4e:39:2a:2a:89:ae:2d:98:69:28:82:
f2:64:5b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:29:03 2024 by rpki-client on console-fra.rpki-client.org