Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Ek98iAB6Q305fjLTm7Fm9ghw6QE.roa
File: Ek98iAB6Q305fjLTm7Fm9ghw6QE.roa (raw, json)
Hash identifier: bNV9EuoJnkufSrCKwuMZUQ9AtI3FOMb94ccuofjAHRA=
Subject key identifier: 12:4F:7C:88:00:7A:43:7D:39:7E:32:D3:9B:B1:66:F6:08:70:E9:01
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018E2C851B1655136F12FEB729C0FC513DD7
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Ek98iAB6Q305fjLTm7Fm9ghw6QE.roa
Signing time: Mon 11 Mar 2024 07:58:24 +0000
ROA not before: Mon 11 Mar 2024 07:58:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 45.83.188.0/22 maxlen: 24
45.87.20.0/24 maxlen: 24
45.87.22.0/24 maxlen: 24
45.88.120.0/24 maxlen: 24
45.88.122.0/24 maxlen: 24
45.129.232.0/22 maxlen: 24
45.130.143.0/24 maxlen: 24
45.133.252.0/24 maxlen: 24
45.133.254.0/24 maxlen: 24
45.143.192.0/24 maxlen: 24
45.143.194.0/24 maxlen: 24
45.146.52.0/24 maxlen: 24
45.148.24.0/24 maxlen: 24
45.149.0.0/24 maxlen: 24
45.150.92.0/24 maxlen: 24
45.150.94.0/24 maxlen: 24
45.154.136.0/24 maxlen: 24
45.154.139.0/24 maxlen: 24
45.157.96.0/22 maxlen: 24
45.157.113.0/24 maxlen: 24
45.157.114.0/23 maxlen: 24
45.159.244.0/22 maxlen: 24
89.36.36.0/24 maxlen: 24
89.38.38.0/24 maxlen: 24
89.46.46.0/24 maxlen: 24
89.251.1.0/24 maxlen: 24
89.251.3.0/24 maxlen: 24
136.144.16.0/24 maxlen: 24
136.144.18.0/24 maxlen: 24
136.144.24.0/24 maxlen: 24
136.144.26.0/23 maxlen: 24
136.144.32.0/24 maxlen: 24
136.144.34.0/24 maxlen: 24
185.51.193.0/24 maxlen: 24
185.51.194.0/23 maxlen: 23
185.114.60.0/22 maxlen: 22
185.227.32.0/24 maxlen: 24
185.243.244.0/24 maxlen: 24
185.243.246.0/24 maxlen: 24
188.208.38.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2c:85:1b:16:55:13:6f:12:fe:b7:29:c0:fc:51:3d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Mar 11 07:58:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=124f7c88007a437d397e32d39bb166f60870e901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:02:5b:b8:20:2c:5b:1a:4e:8e:67:c5:32:da:
a4:54:4e:1e:72:d2:60:f5:7b:f7:92:af:59:ad:f4:
1a:75:7f:f6:44:59:73:d9:0c:3a:32:75:5d:4b:ef:
e6:6f:a9:15:00:6b:26:f5:f4:b6:63:39:91:8b:68:
21:bf:b0:c7:e4:de:c3:3d:90:1e:4a:31:68:0c:9e:
a0:71:aa:0f:9d:86:e9:f7:4f:b2:ef:5f:85:6c:6c:
ae:43:d9:8c:11:cf:f8:2b:4d:d6:12:29:4c:e5:40:
c7:10:34:c4:f5:1b:53:d3:1f:89:bd:08:4b:71:17:
6f:4a:97:84:dd:da:52:0d:78:f9:3d:81:58:e8:c5:
7a:f6:ba:12:00:3d:f5:a4:42:e8:90:b1:cc:8a:f1:
5f:a8:35:24:d4:5f:fa:3e:f4:c3:c6:b8:9f:0a:02:
1d:ab:0a:6b:77:67:7e:22:10:5e:cc:29:62:53:7d:
58:b4:2c:3b:50:c4:c4:0e:e2:be:0d:a8:22:f8:f7:
59:5f:67:56:e5:b4:f7:fe:1c:3f:9c:b4:68:15:f6:
f8:9c:47:45:03:98:f8:ec:10:07:8a:8b:20:72:cf:
74:f5:82:e5:08:0f:dc:73:45:72:71:f3:1f:d6:71:
f7:52:0a:d4:6e:74:b7:d0:e4:d8:d8:11:80:2a:06:
36:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4F:7C:88:00:7A:43:7D:39:7E:32:D3:9B:B1:66:F6:08:70:E9:01
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Ek98iAB6Q305fjLTm7Fm9ghw6QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.188.0/22
45.87.20.0/24
45.87.22.0/24
45.88.120.0/24
45.88.122.0/24
45.129.232.0/22
45.130.143.0/24
45.133.252.0/24
45.133.254.0/24
45.143.192.0/24
45.143.194.0/24
45.146.52.0/24
45.148.24.0/24
45.149.0.0/24
45.150.92.0/24
45.150.94.0/24
45.154.136.0/24
45.154.139.0/24
45.157.96.0/22
45.157.113.0-45.157.115.255
45.159.244.0/22
89.36.36.0/24
89.38.38.0/24
89.46.46.0/24
89.251.1.0/24
89.251.3.0/24
136.144.16.0/24
136.144.18.0/24
136.144.24.0/24
136.144.26.0/23
136.144.32.0/24
136.144.34.0/24
185.51.193.0-185.51.195.255
185.114.60.0/22
185.227.32.0/24
185.243.244.0/24
185.243.246.0/24
188.208.38.0/23
Signature Algorithm: sha256WithRSAEncryption
76:70:c5:e8:56:80:9b:c2:ad:ab:d0:91:77:e5:9a:76:f5:60:
33:f4:79:f4:81:61:94:8b:04:e0:09:11:11:b2:0a:9d:75:6d:
f5:61:62:db:fd:3a:87:5f:9e:ae:30:fb:63:cc:df:38:10:38:
b6:f8:a9:54:78:06:59:41:bf:00:43:53:ac:05:9a:24:4a:ed:
6e:fe:95:9e:fe:d4:97:84:70:e2:43:b0:9c:f7:e4:b2:21:e2:
89:a4:76:36:ce:9a:6a:8a:e9:64:80:28:92:33:f7:5d:5c:02:
76:d6:bd:ce:c1:2b:53:8f:54:12:ec:b8:4c:52:1a:37:0b:1c:
d8:20:80:60:f4:94:56:f6:94:df:7d:97:c3:29:34:9f:76:56:
74:8b:0b:40:df:55:e3:d5:dd:3b:a2:31:95:94:ba:b7:ec:35:
b1:65:89:50:70:e2:4f:69:c4:ca:63:d8:ef:cb:ca:0f:31:9b:
45:d4:2b:1c:00:55:87:20:22:96:99:2c:5a:e0:a8:36:fd:76:
e5:87:52:77:28:0a:35:9c:fb:26:00:f4:f3:4d:b9:5d:29:9a:
de:c0:e8:9e:81:69:12:e0:09:ac:79:94:89:0c:04:09:12:81:
65:bf:33:b0:2a:c3:5c:77:5b:16:bb:14:ca:87:bf:67:3e:b2:
49:e6:f7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 11:30:58 2024 by rpki-client on console-ams.rpki-client.org