Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/1HEfowRsgqO7IbhAc32I68ARwT0.roa
File: 1HEfowRsgqO7IbhAc32I68ARwT0.roa (raw, json)
Hash identifier: OcMuFFdRy2zPMh04kow5lf0ixONFk1ss31TkMJXojBI=
Subject key identifier: D4:71:1F:A3:04:6C:82:A3:BB:21:B8:40:73:7D:88:EB:C0:11:C1:3D
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 018CC72743EF58709BBCFAF24E86851FB4E0
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/1HEfowRsgqO7IbhAc32I68ARwT0.roa
Signing time: Mon 01 Jan 2024 22:31:28 +0000
ROA not before: Mon 01 Jan 2024 22:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48359
IP address blocks: 185.221.192.0/24 maxlen: 24
185.221.192.0/22 maxlen: 22
185.221.194.0/24 maxlen: 24
185.221.193.0/24 maxlen: 24
185.221.195.0/24 maxlen: 24
195.191.44.0/24 maxlen: 24
195.191.45.0/24 maxlen: 24
185.121.58.0/24 maxlen: 24
185.121.57.0/24 maxlen: 24
185.121.56.0/22 maxlen: 22
185.121.56.0/24 maxlen: 24
185.121.59.0/24 maxlen: 24
195.8.112.0/24 maxlen: 24
195.8.110.0/24 maxlen: 24
195.8.114.0/24 maxlen: 24
185.238.44.0/24 maxlen: 24
185.238.47.0/24 maxlen: 24
185.238.46.0/24 maxlen: 24
185.238.45.0/24 maxlen: 24
195.191.23.0/24 maxlen: 24
195.191.22.0/24 maxlen: 24
185.137.61.0/24 maxlen: 24
185.137.60.0/22 maxlen: 24
185.142.95.0/24 maxlen: 24
185.142.92.0/22 maxlen: 22
185.142.92.0/24 maxlen: 24
193.246.200.0/24 maxlen: 24
185.142.94.0/24 maxlen: 24
185.142.93.0/24 maxlen: 24
193.246.201.0/24 maxlen: 24
185.142.124.0/24 maxlen: 24
185.142.124.0/22 maxlen: 22
185.142.125.0/24 maxlen: 24
185.142.127.0/24 maxlen: 24
185.142.126.0/24 maxlen: 24
195.8.102.0/24 maxlen: 24
195.230.97.0/24 maxlen: 24
195.230.105.0/24 maxlen: 24
91.213.151.0/24 maxlen: 24
195.230.107.0/24 maxlen: 24
91.213.157.0/24 maxlen: 24
185.82.64.0/24 maxlen: 24
185.82.64.0/22 maxlen: 22
195.230.124.0/24 maxlen: 24
185.82.66.0/24 maxlen: 24
185.82.67.0/24 maxlen: 24
185.82.65.0/24 maxlen: 24
91.213.172.0/24 maxlen: 24
91.213.167.0/24 maxlen: 24
185.47.51.0/24 maxlen: 24
185.47.48.0/24 maxlen: 24
185.47.48.0/23 maxlen: 23
185.47.50.0/23 maxlen: 23
185.47.50.0/24 maxlen: 24
185.47.49.0/24 maxlen: 24
45.155.192.0/24 maxlen: 24
193.246.175.0/24 maxlen: 24
193.246.174.0/24 maxlen: 24
45.155.195.0/24 maxlen: 24
45.155.193.0/24 maxlen: 24
45.155.194.0/24 maxlen: 24
185.125.22.0/24 maxlen: 24
185.125.21.0/24 maxlen: 24
185.125.23.0/24 maxlen: 24
185.125.20.0/24 maxlen: 24
185.212.192.0/24 maxlen: 24
185.212.193.0/24 maxlen: 24
185.212.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:43:ef:58:70:9b:bc:fa:f2:4e:86:85:1f:b4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Jan 1 22:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4711fa3046c82a3bb21b840737d88ebc011c13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:23:2d:51:47:d8:26:64:e3:5e:14:56:70:ef:
7e:79:6f:67:6d:b8:ac:25:47:cf:e1:27:e4:39:7c:
d4:bd:6e:a9:0f:1a:f0:45:6a:44:6d:71:25:73:a5:
4c:7a:d0:91:9c:4a:73:69:48:a7:63:f0:05:aa:63:
1e:06:b5:6c:f8:62:61:50:1b:9c:63:37:b2:6a:77:
59:aa:1e:c7:47:70:9a:ef:d2:35:29:22:65:d6:a0:
a5:32:3f:c6:e2:35:c8:2c:7f:0e:c2:60:f8:04:5f:
a0:06:42:5f:e5:ee:77:e4:c2:27:2c:a9:c0:a2:11:
ca:3c:05:f5:ac:9c:a4:36:b4:d6:83:a2:b7:12:0f:
7f:ca:6e:21:90:9e:0b:e0:51:5b:8d:43:c4:cf:8a:
6f:77:8c:08:ba:f3:8f:b1:02:d5:fa:f0:bd:7a:56:
f8:ac:d5:32:4d:06:9c:4e:0d:16:fe:e3:e2:8f:60:
62:fc:0e:0f:8b:12:d6:a1:13:1c:0d:14:c1:f9:f2:
f9:22:e3:82:95:43:5e:2a:06:14:f1:10:24:8d:24:
88:f4:cf:26:48:9c:85:88:3e:3e:7b:8b:89:ce:ad:
fc:a0:a4:8e:50:a8:d7:a8:ec:05:15:13:34:44:d5:
9b:27:fc:ee:87:e2:9b:04:ff:92:dd:01:fd:9e:75:
2f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:71:1F:A3:04:6C:82:A3:BB:21:B8:40:73:7D:88:EB:C0:11:C1:3D
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/1HEfowRsgqO7IbhAc32I68ARwT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.192.0/22
91.213.151.0/24
91.213.157.0/24
91.213.167.0/24
91.213.172.0/24
185.47.48.0/22
185.82.64.0/22
185.121.56.0/22
185.125.20.0/22
185.137.60.0/22
185.142.92.0/22
185.142.124.0/22
185.212.192.0/23
185.212.195.0/24
185.221.192.0/22
185.238.44.0/22
193.246.174.0/23
193.246.200.0/23
195.8.102.0/24
195.8.110.0/24
195.8.112.0/24
195.8.114.0/24
195.191.22.0/23
195.191.44.0/23
195.230.97.0/24
195.230.105.0/24
195.230.107.0/24
195.230.124.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a7:85:5f:a6:87:44:67:b0:36:83:ee:2b:61:58:2d:25:94:
8f:08:1b:39:a3:8f:3e:46:50:d6:d4:4d:52:04:8a:37:be:e6:
48:a3:e1:de:75:08:99:d5:f1:4e:7b:01:99:c9:52:9f:d7:8a:
c6:fc:c2:cd:6c:23:40:a3:cf:4d:d2:21:1f:73:ba:11:4a:a6:
81:87:10:c3:5a:1a:a0:4c:aa:c4:e9:f4:a7:50:21:fc:5d:3c:
e8:6e:61:ee:e4:b2:92:38:b3:f2:e0:06:e2:b0:81:e8:97:38:
12:c2:d3:be:f3:2e:0e:e4:f7:c6:e7:31:9e:53:26:d0:a1:e1:
db:15:e9:6d:2f:b4:31:18:2a:a8:fb:5a:9c:ec:d9:be:d9:c6:
18:25:12:12:3b:a2:87:7a:cf:e7:c8:26:62:4c:59:f4:d1:07:
f4:e3:5c:1c:52:7e:dd:1d:7d:17:49:8e:17:38:19:ff:31:42:
a6:c1:ec:dc:b0:06:e2:1b:1e:8f:45:69:4a:cd:97:2c:f6:3c:
4b:07:64:d4:df:3d:c6:85:d9:2a:7d:10:e2:04:99:52:81:c3:
57:cb:71:c1:08:f5:be:9f:40:4f:49:01:6e:a6:b7:c3:25:a7:
3b:6d:71:53:d8:7f:cc:32:df:60:db:f3:de:93:3e:a5:36:87:
c7:14:82:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:03:26 2024 by rpki-client on console-fra.rpki-client.org