Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/AhvHRucLhLn9aro1zYu9y0sjr-Y.roa
File: AhvHRucLhLn9aro1zYu9y0sjr-Y.roa (raw, json)
Hash identifier: psjd3dirJxebuO21K00slRxqsAx29wKDTS3vgbTYa4s=
Subject key identifier: 02:1B:C7:46:E7:0B:84:B9:FD:6A:BA:35:CD:8B:BD:CB:4B:23:AF:E6
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019076E4B60C116CF91791301A78FD357CCC
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/AhvHRucLhLn9aro1zYu9y0sjr-Y.roa
Signing time: Wed 03 Jul 2024 04:40:18 +0000
ROA not before: Wed 03 Jul 2024 04:40:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206092
IP address blocks: 45.86.200.0/24 maxlen: 24
45.86.202.0/24 maxlen: 24
45.92.229.0/24 maxlen: 24
45.146.54.0/24 maxlen: 24
45.154.137.0/24 maxlen: 24
45.154.138.0/24 maxlen: 24
45.157.112.0/24 maxlen: 24
89.251.0.0/24 maxlen: 24
136.144.17.0/24 maxlen: 24
136.144.19.0/24 maxlen: 24
136.144.33.0/24 maxlen: 24
136.144.42.0/24 maxlen: 24
193.36.224.0/24 maxlen: 24
193.36.225.0/24 maxlen: 24
193.37.32.0/24 maxlen: 24
193.37.33.0/24 maxlen: 24
193.176.211.0/24 maxlen: 24
194.5.48.0/24 maxlen: 24
194.5.53.0/24 maxlen: 24
194.34.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:76:e4:b6:0c:11:6c:f9:17:91:30:1a:78:fd:35:7c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 3 04:40:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=021bc746e70b84b9fd6aba35cd8bbdcb4b23afe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:23:63:84:0a:aa:e6:53:7a:4f:84:ef:6a:be:
b2:ea:fd:1c:cc:6d:8f:56:ba:34:d7:fb:16:9e:39:
87:f9:ca:11:04:09:78:dd:ec:54:2f:b3:44:f1:47:
35:34:a7:52:1a:6f:ef:e4:0b:26:33:d6:fd:3c:ca:
0e:11:b8:2c:d2:3e:2a:1d:e5:d9:b4:3f:f0:dc:d0:
b1:b9:24:b6:e0:7a:ba:8a:d4:22:b0:b0:a7:90:96:
a4:c4:ed:58:dc:c6:a8:80:f2:b7:72:9d:38:3f:6f:
9a:13:0c:22:1e:95:a8:27:04:99:d1:8d:51:2e:47:
be:a3:b1:48:01:63:82:d8:94:56:11:bc:9f:70:9c:
19:52:a1:fe:23:30:ad:50:5b:c4:19:0e:90:c4:fa:
85:8b:4a:85:f4:25:85:50:c8:20:4a:dd:65:d3:06:
11:3d:81:a8:9a:19:7b:33:b1:2b:9f:8a:aa:a5:aa:
0c:fb:d1:f8:c6:77:5f:f1:be:96:d8:01:a9:fb:15:
5f:66:20:92:76:5f:3e:2e:a3:3c:9c:d6:14:8e:cb:
3a:8c:2c:85:3a:8e:24:42:0e:0d:6e:ae:ba:1c:99:
71:b3:0d:45:a1:73:8d:6c:9f:7b:69:14:a7:1d:12:
8e:09:70:36:56:95:c3:d3:11:5b:e0:3d:9e:24:57:
0c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1B:C7:46:E7:0B:84:B9:FD:6A:BA:35:CD:8B:BD:CB:4B:23:AF:E6
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/AhvHRucLhLn9aro1zYu9y0sjr-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.200.0/24
45.86.202.0/24
45.92.229.0/24
45.146.54.0/24
45.154.137.0-45.154.138.255
45.157.112.0/24
89.251.0.0/24
136.144.17.0/24
136.144.19.0/24
136.144.33.0/24
136.144.42.0/24
193.36.224.0/23
193.37.32.0/23
193.176.211.0/24
194.5.48.0/24
194.5.53.0/24
194.34.173.0/24
Signature Algorithm: sha256WithRSAEncryption
83:15:d2:55:cc:fb:31:4d:6e:de:35:9e:7e:db:6a:b8:91:0c:
19:43:c2:26:37:e3:ca:cd:f7:ce:65:a6:12:24:b9:2b:d5:7c:
57:de:99:3b:7c:eb:ed:de:4a:56:1a:ac:2c:16:94:6d:4f:21:
f0:f8:3e:57:5c:53:28:b1:ea:c8:5a:fd:d4:75:df:a3:e6:4c:
00:0a:9b:09:da:80:bb:c8:ea:6f:c5:9f:c8:4a:88:cf:4b:68:
ff:e3:ac:17:cb:3c:b1:c6:3f:3f:7f:e5:2a:ea:12:e6:25:5a:
3a:71:c4:2a:8a:90:04:d4:7b:e2:2e:30:74:d8:9e:98:65:90:
34:45:f3:da:ee:77:3f:fc:4c:94:f4:48:5f:f3:f8:55:f1:be:
6b:8c:25:fb:1d:b8:97:a0:c1:fa:b0:48:87:31:20:40:80:b6:
a9:29:89:22:85:77:5e:ac:f2:18:fd:0a:67:37:80:d2:a8:6e:
2b:bd:9c:46:cc:55:1e:57:d9:d7:c9:13:ae:40:16:95:a0:a2:
83:c2:5e:1e:09:8c:20:58:6b:a1:51:61:7d:74:f9:30:5c:d5:
ba:f6:c9:bf:a5:bb:59:12:01:09:76:59:a8:af:30:2e:19:b7:
08:4b:02:97:3f:cf:be:45:cc:9c:27:85:44:37:63:7c:ee:9f:
68:fe:a6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:26:28 2024 by rpki-client on console-ams.rpki-client.org