Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/17A0a9iplp4yCXjLKhLdUG2sykY.roa
File: 17A0a9iplp4yCXjLKhLdUG2sykY.roa (raw, json)
Hash identifier: nm2ySevsZTpUujNyDHqEmCzChwmoeRg+UKtjLbLCFpI=
Subject key identifier: D7:B0:34:6B:D8:A9:96:9E:32:09:78:CB:2A:12:DD:50:6D:AC:CA:46
Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial: 01928D417C8176F0C5864AB7933538900A56
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/17A0a9iplp4yCXjLKhLdUG2sykY.roa
Signing time: Mon 14 Oct 2024 22:58:51 +0000
ROA not before: Mon 14 Oct 2024 22:58:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213122
IP address blocks: 5.252.165.0/24 maxlen: 24
5.252.166.0/24 maxlen: 24
5.252.167.0/24 maxlen: 24
31.216.59.0/24 maxlen: 24
45.87.60.0/24 maxlen: 24
45.87.61.0/24 maxlen: 24
45.87.62.0/24 maxlen: 24
45.87.63.0/24 maxlen: 24
45.130.152.0/24 maxlen: 24
45.130.153.0/24 maxlen: 24
45.130.154.0/24 maxlen: 24
45.130.155.0/24 maxlen: 24
45.143.144.0/24 maxlen: 24
45.143.145.0/24 maxlen: 24
45.143.146.0/24 maxlen: 24
45.143.147.0/24 maxlen: 24
89.36.230.0/24 maxlen: 24
89.37.100.0/24 maxlen: 24
89.46.43.0/24 maxlen: 24
103.104.248.0/24 maxlen: 24
103.104.249.0/24 maxlen: 24
103.104.250.0/24 maxlen: 24
103.104.251.0/24 maxlen: 24
103.202.52.0/24 maxlen: 24
103.202.53.0/24 maxlen: 24
103.202.54.0/24 maxlen: 24
103.202.55.0/24 maxlen: 24
185.162.74.0/24 maxlen: 24
185.162.75.0/24 maxlen: 24
188.210.236.0/24 maxlen: 24
194.49.68.0/24 maxlen: 24
194.49.69.0/24 maxlen: 24
194.49.78.0/24 maxlen: 24
194.49.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8d:41:7c:81:76:f0:c5:86:4a:b7:93:35:38:90:0a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Validity
Not Before: Oct 14 22:58:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7b0346bd8a9969e320978cb2a12dd506dacca46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:ad:ec:ca:ae:ed:f7:97:61:3b:e3:f2:2e:
de:11:dc:5c:97:ce:db:a0:ec:a2:90:c2:c4:ec:8e:
d5:60:9e:35:08:66:65:f1:2d:7f:6e:8e:82:84:a2:
8d:98:49:52:89:e8:71:fe:05:82:ae:1f:42:1a:f2:
c5:8a:5b:99:0f:4c:f9:1e:9a:5f:55:e9:d8:ed:1b:
32:34:70:e4:96:08:b5:3c:72:ab:23:a9:7d:00:e7:
c8:95:c3:c2:bd:03:dd:35:cf:1e:0b:0d:a0:49:ee:
d0:ba:a8:ec:88:50:7d:05:bd:b7:90:5a:3d:59:49:
bc:59:09:53:d7:61:f5:60:dd:cb:e8:56:3e:1b:30:
d7:73:0c:6d:70:3f:0e:4b:07:cf:57:98:a8:a4:41:
df:73:79:1b:48:3e:07:2b:a6:df:de:a1:c8:3f:30:
0a:b4:e1:ec:66:c1:df:07:09:90:26:a8:df:54:37:
e3:c6:24:3a:b4:71:d4:14:59:4b:1e:08:11:ed:d2:
9d:ce:6c:bf:ce:cd:6e:2c:88:27:3d:d4:45:8d:71:
d6:da:e8:91:d0:22:3c:23:14:6c:1b:a3:4a:35:33:
9a:d6:34:4b:68:25:6f:79:5b:7c:58:7f:c9:bd:f2:
d5:1e:2a:91:6c:b3:12:34:42:23:10:aa:19:2c:af:
96:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B0:34:6B:D8:A9:96:9E:32:09:78:CB:2A:12:DD:50:6D:AC:CA:46
X509v3 Authority Key Identifier:
keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/17A0a9iplp4yCXjLKhLdUG2sykY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.165.0-5.252.167.255
31.216.59.0/24
45.87.60.0/22
45.130.152.0/22
45.143.144.0/22
89.36.230.0/24
89.37.100.0/24
89.46.43.0/24
103.104.248.0/22
103.202.52.0/22
185.162.74.0/23
188.210.236.0/24
194.49.68.0/23
194.49.78.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:ff:77:50:c5:be:ac:85:e1:b6:4d:5c:ab:38:f2:8a:a8:57:
e5:21:91:11:fb:aa:64:53:80:29:72:a5:57:3c:69:95:0f:fb:
5b:05:2e:32:2b:52:07:7a:14:e6:ae:5b:e8:d8:dc:57:c1:f3:
a8:60:c9:af:84:6f:80:e4:aa:33:37:ba:aa:bb:e7:82:c0:a9:
59:b2:eb:1c:c3:b5:2e:dd:84:68:29:56:af:76:2f:92:1d:42:
b7:ac:2e:ac:57:15:af:a1:03:59:b7:19:f5:36:8f:3d:10:66:
27:28:f4:83:63:bd:90:18:2f:7c:d8:00:11:dc:3b:88:72:59:
f4:fe:8e:c2:ab:96:96:eb:0d:ad:f4:0a:42:94:8a:c4:64:4d:
89:41:dd:cf:30:00:96:fa:2d:0e:d0:1b:1c:0f:ca:47:9f:16:
57:96:27:dd:a4:da:40:17:78:7b:74:c3:f0:e2:b9:c7:e7:e8:
ce:7f:ef:76:77:cd:e8:fc:b9:28:b7:68:62:10:57:85:bb:0f:
28:9d:22:0e:33:25:07:cc:59:de:d2:f0:6f:e1:1e:48:cb:98:
cd:da:ec:c0:9f:9a:0f:e6:59:39:12:01:54:87:b8:c2:43:70:
42:8d:70:a1:e2:e9:4d:30:d0:57:2d:2b:65:83:e4:e8:84:da:
3f:81:39:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:32 2024 by rpki-client on console-fra.rpki-client.org