Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/RjepV25Iyf6o3-tza2jfTyMD4Vo.roa
File: RjepV25Iyf6o3-tza2jfTyMD4Vo.roa (raw, json)
Hash identifier: p3KDh2ibe9Bl8grw5edPiJx0xTolCYJ8i3sWZfIicy0=
Subject key identifier: 46:37:A9:57:6E:48:C9:FE:A8:DF:EB:73:6B:68:DF:4F:23:03:E1:5A
Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial: 0192754385110D7CF0359C47FD1A64AADFC3
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/RjepV25Iyf6o3-tza2jfTyMD4Vo.roa
Signing time: Thu 10 Oct 2024 07:10:12 +0000
ROA not before: Thu 10 Oct 2024 07:10:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50564
IP address blocks: 45.131.28.0/22 maxlen: 22
45.131.28.0/24 maxlen: 24
45.131.29.0/24 maxlen: 24
45.131.30.0/24 maxlen: 24
45.131.31.0/24 maxlen: 24
94.158.252.0/22 maxlen: 22
94.158.252.0/24 maxlen: 24
94.158.255.0/24 maxlen: 24
185.44.24.0/22 maxlen: 22
185.44.24.0/24 maxlen: 24
185.44.25.0/24 maxlen: 24
185.44.26.0/24 maxlen: 24
185.44.27.0/24 maxlen: 24
185.95.124.0/22 maxlen: 22
185.95.124.0/24 maxlen: 24
185.95.125.0/24 maxlen: 24
185.95.126.0/24 maxlen: 24
185.95.127.0/24 maxlen: 24
185.104.236.0/22 maxlen: 22
185.104.236.0/24 maxlen: 24
185.104.237.0/24 maxlen: 24
185.104.238.0/24 maxlen: 24
185.104.239.0/24 maxlen: 24
185.143.136.0/22 maxlen: 22
185.143.136.0/24 maxlen: 24
185.143.137.0/24 maxlen: 24
185.143.138.0/24 maxlen: 24
185.143.139.0/24 maxlen: 24
185.182.124.0/22 maxlen: 22
185.182.124.0/24 maxlen: 24
185.182.125.0/24 maxlen: 24
185.182.126.0/24 maxlen: 24
185.182.127.0/24 maxlen: 24
185.184.0.0/22 maxlen: 23
185.184.0.0/23 maxlen: 23
185.184.0.0/24 maxlen: 24
185.184.1.0/24 maxlen: 24
185.184.2.0/24 maxlen: 24
185.184.3.0/24 maxlen: 24
185.208.20.0/22 maxlen: 22
185.208.20.0/24 maxlen: 24
185.208.21.0/24 maxlen: 24
185.208.22.0/24 maxlen: 24
185.208.23.0/24 maxlen: 24
185.213.48.0/22 maxlen: 22
185.213.48.0/24 maxlen: 24
185.213.49.0/24 maxlen: 24
185.213.50.0/24 maxlen: 24
185.213.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:75:43:85:11:0d:7c:f0:35:9c:47:fd:1a:64:aa:df:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Validity
Not Before: Oct 10 07:10:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4637a9576e48c9fea8dfeb736b68df4f2303e15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:93:c0:c2:45:f3:87:d0:6f:2c:7d:1d:71:
7f:d8:3e:69:c0:75:91:47:56:7c:f8:a2:99:1a:07:
eb:77:5f:a0:11:2e:33:8e:06:22:20:d4:62:7b:0c:
0b:e2:e3:c5:39:68:1e:b1:2b:dc:ae:1b:62:82:c3:
9a:47:37:c3:b8:ba:04:a7:23:4c:59:16:7e:3c:26:
68:85:e0:aa:f2:89:b9:90:d5:be:01:a9:26:ee:d6:
7e:ac:8a:d8:21:82:b6:19:73:96:8a:c2:b4:a0:c6:
52:fd:28:66:a0:09:bc:26:9a:fc:04:0e:5e:3c:ab:
75:07:6a:45:df:a0:33:7b:80:8c:4f:1d:a3:8e:27:
c6:2d:7a:b2:66:c1:5d:53:99:a3:34:4c:2d:c9:df:
3b:8b:fb:82:3b:51:ff:ad:35:44:5e:50:8a:5c:10:
fc:17:39:3e:bb:78:57:ca:d4:49:5f:88:c7:de:92:
d5:f8:14:ef:6a:32:9e:a8:c5:ab:af:18:6b:51:1c:
a7:89:84:49:91:8d:a5:48:89:15:7a:fe:30:40:be:
66:5a:94:f9:28:b1:14:bd:b0:fc:61:49:65:19:dd:
9c:a9:51:dd:90:4c:89:61:a5:bd:52:59:d5:eb:97:
10:59:5f:60:86:e9:f3:a3:e7:9d:07:e5:c8:e0:f4:
1d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:37:A9:57:6E:48:C9:FE:A8:DF:EB:73:6B:68:DF:4F:23:03:E1:5A
X509v3 Authority Key Identifier:
keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/RjepV25Iyf6o3-tza2jfTyMD4Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.28.0/22
94.158.252.0/22
185.44.24.0/22
185.95.124.0/22
185.104.236.0/22
185.143.136.0/22
185.182.124.0/22
185.184.0.0/22
185.208.20.0/22
185.213.48.0/22
Signature Algorithm: sha256WithRSAEncryption
29:06:02:b6:4a:20:e7:53:7e:ac:b2:60:85:04:38:ce:73:5f:
cd:da:95:e3:ab:a3:0a:6a:ec:49:12:32:3e:42:a7:04:68:15:
d1:b2:76:dc:16:c3:dd:62:9f:aa:ca:e9:9f:92:c6:6a:44:d8:
43:a6:d4:e3:57:4d:ed:d3:8e:56:10:92:16:25:e9:1a:57:75:
90:cc:c0:a8:15:2a:11:11:d8:dc:e6:8d:c5:34:fb:0e:68:13:
be:98:91:12:ee:51:e5:56:b0:05:27:32:69:fc:fb:62:35:1b:
b3:56:e3:09:1f:6f:b7:1a:b5:89:25:85:c6:2e:16:05:e2:e5:
c9:1e:e9:f2:b0:11:a5:9c:7e:82:57:4c:6b:eb:ce:d3:41:50:
50:0c:4c:cd:70:43:1f:ee:55:b1:2b:6e:84:3f:fa:ab:1e:c8:
da:a8:71:b7:9f:1f:d2:3a:5c:94:d8:c0:3b:84:49:65:01:bd:
a0:42:4a:76:2d:52:cf:fd:ad:19:43:eb:d4:71:80:74:f6:61:
cd:d1:47:75:46:53:22:13:c8:66:70:85:f3:8e:53:c1:e0:1e:
e8:61:06:02:eb:dc:7a:b0:ca:a6:ce:1f:ff:04:c2:9a:78:f1:
d5:1a:a5:17:07:f6:8d:3d:df:4f:11:f2:fa:42:ac:0a:b8:75:
8b:19:c8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:02 2024 by rpki-client on console-fra.rpki-client.org