Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/ryJSPDeslyedvBwo6ZklqbxoYSM.roa
File: ryJSPDeslyedvBwo6ZklqbxoYSM.roa (raw, json)
Hash identifier: ugIBpE7wI9gjV0ZFfdllBuX9iCT3RNx/SwJUkev7H3M=
Subject key identifier: AF:22:52:3C:37:AC:97:27:9D:BC:1C:28:E9:99:25:A9:BC:68:61:23
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 018CC2DB3583B2D4C52F65CD875266F22B9C
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/ryJSPDeslyedvBwo6ZklqbxoYSM.roa
Signing time: Mon 01 Jan 2024 02:29:55 +0000
ROA not before: Mon 01 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200370
IP address blocks: 45.8.163.0/24 maxlen: 24
45.8.160.0/22 maxlen: 22
45.8.160.0/24 maxlen: 24
45.8.161.0/24 maxlen: 24
45.8.162.0/24 maxlen: 24
193.56.107.0/24 maxlen: 24
193.56.118.0/24 maxlen: 24
194.60.210.0/23 maxlen: 23
194.60.208.0/22 maxlen: 22
194.60.210.0/24 maxlen: 24
194.60.211.0/24 maxlen: 24
194.60.208.0/23 maxlen: 23
194.60.208.0/24 maxlen: 24
194.60.209.0/24 maxlen: 24
193.56.59.0/24 maxlen: 24
193.56.61.0/24 maxlen: 24
2a05:cac0::/29 maxlen: 29
2a12:93c0::/29 maxlen: 29
2a0f:51c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:35:83:b2:d4:c5:2f:65:cd:87:52:66:f2:2b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Jan 1 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af22523c37ac97279dbc1c28e99925a9bc686123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:35:81:e6:24:ee:42:0a:42:04:9a:62:05:e7:
09:b4:a7:12:d8:d8:e1:1a:c2:2a:26:16:49:54:b2:
a9:ff:91:b3:35:3d:94:bc:13:06:4c:ad:9c:67:f2:
35:d6:2b:51:9c:79:00:4b:b8:c3:00:65:ad:77:16:
38:89:4b:ee:0a:da:6d:44:71:fc:4e:22:5b:b7:4f:
6d:0b:9f:6e:42:16:29:90:8b:07:63:c2:72:0e:4c:
cd:ee:eb:7f:4e:4e:e3:3a:e7:c4:d5:63:26:93:d4:
84:ff:9e:ba:76:bc:59:70:c3:dc:af:ee:dd:5c:54:
df:4d:f6:e7:ff:97:ed:7e:5f:56:5c:ee:f6:f9:02:
d8:01:66:ec:33:9c:22:a4:46:f1:72:1a:5c:89:4f:
e4:28:30:4f:1a:79:b4:3c:7b:90:28:f6:a0:c2:e4:
3d:fc:7d:8a:f3:9c:e3:f3:01:4b:5b:3f:12:91:0d:
08:9f:c2:4d:fa:2a:df:df:9c:49:a1:b0:32:15:8f:
93:4f:72:c1:f7:5b:58:30:c6:3f:28:d1:2e:04:3e:
b5:86:0e:1c:fb:62:b6:e2:ff:ef:d5:ce:2a:e1:43:
27:93:b5:31:8d:b7:68:54:8c:44:50:3d:5f:cc:03:
ba:df:9d:d2:2e:b3:a3:c2:b8:3e:27:9f:8b:69:d6:
3a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:22:52:3C:37:AC:97:27:9D:BC:1C:28:E9:99:25:A9:BC:68:61:23
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/ryJSPDeslyedvBwo6ZklqbxoYSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.160.0/22
193.56.59.0/24
193.56.61.0/24
193.56.107.0/24
193.56.118.0/24
194.60.208.0/22
IPv6:
2a05:cac0::/29
2a0f:51c0::/29
2a12:93c0::/29
Signature Algorithm: sha256WithRSAEncryption
22:a9:3a:07:f0:30:b4:aa:dd:61:b0:5d:61:2c:fe:fd:cf:0c:
97:69:91:dd:a4:d6:68:9b:5f:38:5e:15:f3:91:44:f2:f0:85:
ec:e0:f0:32:47:98:c2:5f:5f:1a:bf:dc:91:d1:d1:93:0e:dc:
c8:b0:3e:9d:ba:14:39:9d:21:e2:89:13:dd:94:ce:b5:a6:2c:
bf:fa:49:13:16:9b:c9:07:e2:1b:f3:4e:99:7b:aa:41:af:11:
aa:95:9a:77:4a:fb:a8:c6:fe:69:e1:af:f2:78:bb:bc:a3:d9:
15:c2:a3:ae:46:47:26:78:39:e1:8b:b0:2a:de:27:67:e6:45:
de:d7:60:b0:57:3f:b5:db:46:2c:53:e9:e1:48:fa:e0:a4:f6:
14:0f:b6:88:d9:e3:3d:1d:6f:b2:89:50:82:79:3f:29:a5:2e:
63:ae:02:b6:27:9c:1d:90:69:6c:43:3e:78:93:8e:ca:00:d0:
dd:c5:14:c6:de:b3:a4:77:96:f4:86:1b:08:7d:c4:2b:6d:5e:
dd:7a:eb:01:47:29:be:13:9c:60:a1:36:35:e3:22:72:5c:25:
6e:46:d2:59:b6:39:94:64:9c:c1:13:83:29:9f:a5:d9:7c:02:
68:a5:4f:7e:b6:21:51:c5:e8:34:b7:e8:0c:1b:9e:eb:e7:96:
eb:19:67:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:14:20 2024 by rpki-client on console-ams.rpki-client.org