Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ymY_1vl-nMvu7jgHy6fRaCQ5Pno.roa
File: ymY_1vl-nMvu7jgHy6fRaCQ5Pno.roa (raw, json)
Hash identifier: cvi/5ARwaKJWc2Uvw9lLqUGe8nrzx/aUSXVEXexRSJA=
Subject key identifier: CA:66:3F:D6:F9:7E:9C:CB:EE:EE:38:07:CB:A7:D1:68:24:39:3E:7A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019422203CA7E3D534EA8DD1A46C4C797B7B
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ymY_1vl-nMvu7jgHy6fRaCQ5Pno.roa
Signing time: Wed 01 Jan 2025 13:48:45 +0000
ROA not before: Wed 01 Jan 2025 13:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 2.58.148.0/22 maxlen: 24
45.91.149.0/24 maxlen: 24
45.135.187.0/24 maxlen: 24
45.143.53.0/24 maxlen: 24
45.145.44.0/23 maxlen: 24
45.145.47.0/24 maxlen: 24
62.197.144.0/24 maxlen: 24
62.197.147.0/24 maxlen: 24
62.197.148.0/24 maxlen: 24
62.197.150.0/24 maxlen: 24
62.197.151.0/24 maxlen: 24
62.197.152.0/24 maxlen: 24
62.197.159.0/24 maxlen: 24
84.247.25.0/24 maxlen: 24
84.247.26.0/24 maxlen: 24
89.33.84.0/24 maxlen: 24
89.36.22.0/24 maxlen: 24
89.37.62.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
89.43.199.0/24 maxlen: 24
92.62.121.0/24 maxlen: 24
93.115.254.0/24 maxlen: 24
93.115.255.0/24 maxlen: 24
94.103.249.0/24 maxlen: 24
94.103.250.0/24 maxlen: 24
185.121.121.0/24 maxlen: 24
185.121.122.0/24 maxlen: 24
185.121.123.0/24 maxlen: 24
185.184.134.0/24 maxlen: 24
185.205.190.0/24 maxlen: 24
185.239.241.0/24 maxlen: 24
185.239.243.0/24 maxlen: 24
185.244.137.0/24 maxlen: 24
185.245.5.0/24 maxlen: 24
188.212.132.0/24 maxlen: 24
188.240.68.0/24 maxlen: 24
188.240.74.0/24 maxlen: 24
193.19.108.0/24 maxlen: 24
193.218.32.0/24 maxlen: 24
193.239.164.0/23 maxlen: 24
194.169.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3c:a7:e3:d5:34:ea:8d:d1:a4:6c:4c:79:7b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca663fd6f97e9ccbeeee3807cba7d16824393e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:de:95:2d:a8:4e:9a:b4:2c:9e:1d:d2:73:
1b:0a:a1:f4:3e:a9:34:8d:3f:26:97:ec:33:5e:e1:
24:80:5e:17:d7:01:83:0f:8a:44:b9:94:a6:82:8d:
fa:89:c8:86:71:81:0d:c7:50:4c:e8:01:f2:a4:92:
cc:4c:4a:e1:1c:bd:d2:98:c0:36:08:b2:3a:68:81:
69:8f:ea:00:51:d4:96:b2:09:af:1d:b2:f5:82:97:
fc:24:2b:d2:06:49:b8:f8:82:28:91:be:c2:ca:cd:
01:d1:99:71:a0:a1:85:af:ee:75:0f:21:88:ca:d2:
bc:98:99:82:0b:d7:cb:3e:1d:94:f9:de:e3:d9:ff:
69:d2:0e:a9:24:c8:0f:c3:5b:fe:85:46:a9:11:32:
1c:3c:62:3e:65:df:35:11:db:3a:68:0f:b3:d7:8b:
1f:99:4b:25:ba:93:64:93:23:e3:a1:5c:ce:28:bd:
b6:0b:89:72:44:f5:02:1f:9c:d1:04:05:1b:21:67:
cb:92:fe:e5:4c:44:2d:39:ea:5d:03:41:59:82:ab:
b8:40:28:f4:af:ef:1e:00:65:16:ef:58:81:fd:cb:
71:57:1a:3b:cf:c1:69:d8:39:35:6c:e0:cf:c0:8b:
5c:b9:9e:37:ce:f3:7f:2c:7d:47:88:ab:a3:c3:d7:
23:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:66:3F:D6:F9:7E:9C:CB:EE:EE:38:07:CB:A7:D1:68:24:39:3E:7A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ymY_1vl-nMvu7jgHy6fRaCQ5Pno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.148.0/22
45.91.149.0/24
45.135.187.0/24
45.143.53.0/24
45.145.44.0/23
45.145.47.0/24
62.197.144.0/24
62.197.147.0-62.197.148.255
62.197.150.0-62.197.152.255
62.197.159.0/24
84.247.25.0-84.247.26.255
89.33.84.0/24
89.36.22.0/24
89.37.62.0/23
89.43.199.0/24
92.62.121.0/24
93.115.254.0/23
94.103.249.0-94.103.250.255
185.121.121.0-185.121.123.255
185.184.134.0/24
185.205.190.0/24
185.239.241.0/24
185.239.243.0/24
185.244.137.0/24
185.245.5.0/24
188.212.132.0/24
188.240.68.0/24
188.240.74.0/24
193.19.108.0/24
193.218.32.0/24
193.239.164.0/23
194.169.169.0/24
Signature Algorithm: sha256WithRSAEncryption
82:ff:e6:b6:96:70:55:08:a5:7f:fb:51:f6:23:48:65:36:5a:
cb:5d:ee:ad:7d:3a:58:bf:23:9f:64:a4:49:6b:66:08:16:3b:
2d:c1:00:85:6e:4e:8f:46:2e:80:8d:25:6b:d7:28:ba:4d:c9:
07:97:d6:0c:61:91:7c:f4:f1:4c:91:0c:0b:77:52:0b:c4:df:
23:74:ad:c3:5c:d6:1e:a3:d0:11:e6:59:1c:87:dd:80:c9:fa:
45:86:59:3f:bf:02:37:70:3e:de:71:f0:a0:1d:67:5c:4e:36:
5e:ea:2e:cf:6a:93:21:54:bd:1f:90:79:62:9e:0a:69:17:47:
f3:62:5c:67:d7:11:71:4b:c5:01:d5:21:dc:36:cd:08:ed:fc:
10:70:40:91:40:bb:85:94:2d:4c:da:88:80:7f:0d:38:ef:14:
34:00:c0:ab:d7:36:11:b2:9d:5e:73:97:53:b8:c7:d8:6c:5d:
1f:f7:5d:9d:d9:5d:23:ba:83:23:b2:96:e0:31:e6:7f:d0:2d:
bd:dd:48:b6:de:74:ee:f7:84:17:f8:f1:da:31:b7:86:7d:b7:
2b:d9:ab:44:4f:8c:cd:0a:05:d9:e8:e1:07:e4:22:8b:28:2a:
15:b4:64:22:b8:92:9f:7e:f8:96:16:89:b9:08:4e:e2:92:e8:
6f:dd:a1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:44:58 2025 by rpki-client