Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/r-sshyP6ExzB0fUphFZPMu6VDa8.roa
File: r-sshyP6ExzB0fUphFZPMu6VDa8.roa (raw, json)
Hash identifier: ztycp6e8nahJyFCDEiZ5pnLdYAKy2fYOrSdCYtA1ltg=
Subject key identifier: AF:EB:2C:87:23:FA:13:1C:C1:D1:F5:29:84:56:4F:32:EE:95:0D:AF
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01927C45F3C719EC2E28CA245362587A8712
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/r-sshyP6ExzB0fUphFZPMu6VDa8.roa
Signing time: Fri 11 Oct 2024 15:50:11 +0000
ROA not before: Fri 11 Oct 2024 15:50:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64080
IP address blocks: 45.43.64.0/24 maxlen: 24
45.43.65.0/24 maxlen: 24
45.43.68.0/22 maxlen: 24
45.43.80.0/22 maxlen: 24
45.43.84.0/23 maxlen: 24
89.33.6.0/23 maxlen: 24
107.181.128.0/22 maxlen: 24
107.181.132.0/23 maxlen: 24
107.181.140.0/22 maxlen: 24
107.181.148.0/23 maxlen: 24
107.181.152.0/24 maxlen: 24
107.181.153.0/24 maxlen: 24
107.181.154.0/24 maxlen: 24
113.20.157.0/24 maxlen: 24
113.20.158.0/24 maxlen: 24
155.254.33.0/24 maxlen: 24
155.254.34.0/24 maxlen: 24
155.254.36.0/22 maxlen: 24
155.254.48.0/23 maxlen: 24
162.220.246.0/23 maxlen: 24
198.105.100.0/22 maxlen: 24
198.105.108.0/24 maxlen: 24
198.105.109.0/24 maxlen: 24
198.105.111.0/24 maxlen: 24
198.105.121.0/24 maxlen: 24
198.105.122.0/24 maxlen: 24
2a05:9f40:1f::/48 maxlen: 48
2a05:9f44:2a05::/48 maxlen: 48
2a05:9f46::/32 maxlen: 48
2a05:9f47::/32 maxlen: 48
2a07:9946::/32 maxlen: 48
2a07:9947::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7c:45:f3:c7:19:ec:2e:28:ca:24:53:62:58:7a:87:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Oct 11 15:50:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afeb2c8723fa131cc1d1f52984564f32ee950daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:70:6d:0f:63:56:11:a3:27:da:8a:56:3a:ef:
cd:71:17:24:c2:c6:53:b7:35:ea:5d:96:a9:78:10:
68:0c:d6:6e:c3:ad:f2:5f:ab:f0:d3:2c:7e:33:37:
76:8f:e1:26:de:15:d1:2f:b8:1e:7f:b0:6c:71:de:
7e:0a:20:73:8f:e4:cb:5a:46:01:a3:87:b2:65:7f:
85:e5:cb:57:4d:51:05:e6:fd:f0:c8:96:83:ea:f4:
f3:60:31:9a:50:d9:34:e8:a0:fb:c5:4b:48:22:91:
c5:66:a1:82:35:f5:2f:76:31:b6:c1:17:3f:09:80:
16:31:0e:99:fe:ea:13:8e:eb:92:f8:50:c9:1f:1c:
09:27:09:3f:43:09:c5:d4:1c:b2:19:ef:7f:ce:27:
ab:32:cb:5b:ab:f2:3e:3c:2e:3c:eb:09:c1:94:61:
81:52:65:0d:99:9b:16:7a:a3:2b:09:09:b5:d2:65:
db:6e:8f:17:e3:a7:3e:c0:94:4d:27:e6:04:88:fd:
f3:42:44:b1:72:96:1b:a4:34:fd:6b:f1:7a:c5:38:
14:17:4c:a6:9d:15:71:53:76:09:d5:5a:88:9e:96:
22:4d:d9:61:c3:53:a6:36:ae:fe:d4:ec:f8:11:95:
58:ce:db:21:70:80:53:66:35:6c:bf:fc:17:e6:13:
19:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EB:2C:87:23:FA:13:1C:C1:D1:F5:29:84:56:4F:32:EE:95:0D:AF
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/r-sshyP6ExzB0fUphFZPMu6VDa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.64.0/23
45.43.68.0/22
45.43.80.0-45.43.85.255
89.33.6.0/23
107.181.128.0-107.181.133.255
107.181.140.0/22
107.181.148.0/23
107.181.152.0-107.181.154.255
113.20.157.0-113.20.158.255
155.254.33.0-155.254.34.255
155.254.36.0/22
155.254.48.0/23
162.220.246.0/23
198.105.100.0/22
198.105.108.0/23
198.105.111.0/24
198.105.121.0-198.105.122.255
IPv6:
2a05:9f40:1f::/48
2a05:9f44:2a05::/48
2a05:9f46::/31
2a07:9946::/31
Signature Algorithm: sha256WithRSAEncryption
b7:74:ef:5a:20:32:67:7f:ea:ed:67:63:71:a6:2a:da:d4:b1:
27:d6:a1:96:eb:7f:95:d0:a6:cd:97:61:84:2a:e4:8d:df:28:
d8:d4:2c:be:bf:24:e9:36:5f:77:a7:3e:fe:39:f3:4d:6b:4d:
9c:46:7d:f3:6e:c8:85:48:17:12:d2:22:4f:3c:ac:4d:86:d8:
e2:5c:08:f1:81:a2:2a:d4:62:fa:10:2b:b8:d1:9f:7f:f3:56:
5d:41:78:f0:0a:45:2d:38:23:9c:8a:2c:77:83:45:bc:ed:b9:
90:32:f6:b1:08:a5:36:a5:5a:3a:b6:5b:50:6a:05:f3:a5:6a:
60:c6:1a:2f:28:a0:ae:30:cf:38:e8:14:3b:35:27:0c:d9:71:
a3:f8:41:64:48:6f:54:0a:bb:73:a9:d1:11:d6:eb:e8:01:e3:
71:d8:ec:0f:12:96:0e:1f:b7:0d:40:54:b6:3b:65:3c:ef:3b:
43:87:24:33:15:cb:42:db:0f:33:9b:5c:9b:fb:2e:cd:71:48:
c0:6e:ba:85:1e:0e:4d:39:81:72:5f:99:f7:49:d3:52:68:45:
3c:07:2e:ca:80:3a:7d:89:b7:55:fb:b2:55:c6:cb:1f:dc:33:
64:51:62:19:0e:71:5b:a2:de:17:dc:bb:37:63:55:46:c8:d5:
46:14:37:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:00:46 2024 by rpki-client on console-fra.rpki-client.org