Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/YiYxeZ-kXN71hSJr9bo7azD27b8.roa
File: YiYxeZ-kXN71hSJr9bo7azD27b8.roa (raw, json)
Hash identifier: z0naVi8M0zqqDkmdT3ejLgI645AEXOCp/3QtrsnvKCw=
Subject key identifier: 62:26:31:79:9F:A4:5C:DE:F5:85:22:6B:F5:BA:3B:6B:30:F6:ED:BF
Certificate issuer: /CN=292d120970515846360ea223e9a0e6a3c3896934
Certificate serial: 018CC86F17BD465E4027786A07ABFA4A22EC
Authority key identifier: 29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/YiYxeZ-kXN71hSJr9bo7azD27b8.roa
Signing time: Tue 02 Jan 2024 04:29:32 +0000
ROA not before: Tue 02 Jan 2024 04:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56550
IP address blocks: 89.34.161.0/24 maxlen: 24
89.33.133.0/24 maxlen: 24
89.36.228.0/24 maxlen: 24
86.105.177.0/24 maxlen: 24
95.142.208.0/21 maxlen: 21
185.8.24.0/22 maxlen: 22
93.117.152.0/23 maxlen: 23
93.117.172.0/23 maxlen: 23
185.163.172.0/22 maxlen: 22
31.177.40.0/21 maxlen: 21
89.42.25.0/24 maxlen: 24
46.102.188.0/23 maxlen: 23
109.230.212.0/24 maxlen: 24
31.14.28.0/24 maxlen: 24
89.32.168.0/23 maxlen: 23
94.177.127.0/24 maxlen: 24
85.204.119.0/24 maxlen: 24
89.32.186.0/23 maxlen: 23
93.115.62.0/23 maxlen: 23
31.214.153.0/24 maxlen: 24
188.241.154.0/24 maxlen: 24
85.204.147.0/24 maxlen: 24
128.0.123.0/24 maxlen: 24
128.0.122.0/23 maxlen: 23
128.0.124.0/22 maxlen: 22
185.157.52.0/22 maxlen: 22
2a03:1140::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:17:bd:46:5e:40:27:78:6a:07:ab:fa:4a:22:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d120970515846360ea223e9a0e6a3c3896934
Validity
Not Before: Jan 2 04:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=622631799fa45cdef585226bf5ba3b6b30f6edbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e5:b8:4b:6e:67:94:3b:24:70:ba:1f:f7:fb:
52:b1:cb:8c:d5:ca:87:06:c0:18:f9:3c:7e:e7:2e:
84:55:b0:30:84:55:a7:bb:4c:2f:c2:32:5c:13:2c:
2b:94:cf:ba:19:76:6a:ef:ad:a3:b9:dd:8f:da:b9:
b3:48:d3:c0:0c:90:29:04:48:d0:ec:f5:01:68:74:
80:5b:43:99:58:6e:ed:b2:74:a3:d0:c3:5a:ab:e6:
74:3c:29:ad:02:1e:93:67:8b:92:1b:fd:a4:f9:3f:
7e:43:61:19:21:8e:f5:4a:32:ac:84:9b:ab:b9:b3:
85:01:4e:89:36:c3:d3:f4:82:6c:90:d2:b1:e3:2d:
49:1f:a8:1e:9b:34:3f:37:83:5f:b7:bb:0c:b6:49:
2d:8c:d7:1d:a3:cf:72:ea:d7:ef:93:2e:c4:05:ab:
5b:0c:1f:ed:89:ae:c5:35:2d:31:1f:69:da:6f:db:
0a:ae:89:7e:af:b5:cc:ef:cc:1e:6b:42:57:60:86:
a8:05:c4:f6:e4:88:f9:b8:36:67:e4:5f:e4:e5:42:
6e:3d:9c:4a:da:e2:45:fd:07:2e:a0:0b:de:d1:a5:
57:65:e2:55:c4:f3:c9:9f:ce:ab:98:f8:3b:aa:91:
ea:3b:7c:32:e7:9d:29:ae:7d:e6:0c:c7:46:98:ae:
90:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:26:31:79:9F:A4:5C:DE:F5:85:22:6B:F5:BA:3B:6B:30:F6:ED:BF
X509v3 Authority Key Identifier:
keyid:29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/YiYxeZ-kXN71hSJr9bo7azD27b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.28.0/24
31.177.40.0/21
31.214.153.0/24
46.102.188.0/23
85.204.119.0/24
85.204.147.0/24
86.105.177.0/24
89.32.168.0/23
89.32.186.0/23
89.33.133.0/24
89.34.161.0/24
89.36.228.0/24
89.42.25.0/24
93.115.62.0/23
93.117.152.0/23
93.117.172.0/23
94.177.127.0/24
95.142.208.0/21
109.230.212.0/24
128.0.122.0-128.0.127.255
185.8.24.0/22
185.157.52.0/22
185.163.172.0/22
188.241.154.0/24
IPv6:
2a03:1140::/32
Signature Algorithm: sha256WithRSAEncryption
38:6d:f8:bc:46:0e:65:fb:a1:0c:93:c0:e4:00:b6:6f:88:d9:
e6:f7:63:1c:28:74:74:07:91:da:49:a4:87:99:03:1b:a6:18:
58:77:0f:75:a4:1c:c4:bb:fb:e1:fd:7c:55:eb:84:ca:bf:b4:
50:cd:bb:e0:54:fc:f2:58:db:4e:69:97:5f:96:a7:96:43:eb:
c4:d0:92:8b:d2:7e:41:48:02:3a:07:0c:59:f8:86:17:52:f7:
f3:a8:d8:31:a4:e5:c6:b0:6d:3b:73:76:31:c5:5e:8a:b2:c6:
39:8f:08:3c:d6:6e:05:7b:82:5d:b6:06:4e:64:0d:4e:58:7b:
7a:d2:9b:4d:d4:9b:73:16:f3:b6:b6:fe:b0:c3:dc:1f:44:50:
4c:17:6c:0c:77:b2:dc:5d:db:ac:ca:d6:91:f5:cd:1e:db:16:
75:b5:45:98:11:e7:48:cc:3c:e1:6b:5e:fa:c9:5f:5e:01:17:
54:cc:ea:5a:25:2c:8d:f0:3c:d9:e2:32:8b:31:69:0e:d3:90:
3a:a6:a4:40:35:c3:07:7d:95:23:15:23:00:a7:45:b7:d5:b1:
a5:7a:c7:58:e1:70:47:77:a6:d1:10:f6:65:e9:a5:04:59:ee:
f9:c0:c3:e3:1c:d7:71:bc:ea:b8:f5:c1:2e:74:e9:2e:90:12:
fd:b3:f8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:48:37 2024 by rpki-client on console-ams.rpki-client.org