Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Lp2wU-2_p02-fowkymKNoi5ss8A.roa
File: Lp2wU-2_p02-fowkymKNoi5ss8A.roa (raw, json)
Hash identifier: REuCLFljvfT+zm9+rpJErZlrBF1aViwlph/c54wtD5A=
Subject key identifier: 2E:9D:B0:53:ED:BF:A7:4D:BE:7E:8C:24:CA:62:8D:A2:2E:6C:B3:C0
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 0192D7AC29A0ABE15340DDB3251528135061
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Lp2wU-2_p02-fowkymKNoi5ss8A.roa
Signing time: Tue 29 Oct 2024 09:47:17 +0000
ROA not before: Tue 29 Oct 2024 09:47:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49100
IP address blocks: 5.202.0.0/16 maxlen: 24
5.202.16.0/23 maxlen: 23
5.202.22.0/23 maxlen: 23
5.202.57.0/24 maxlen: 24
5.202.76.0/24 maxlen: 24
5.202.82.0/24 maxlen: 24
5.202.100.0/24 maxlen: 24
5.202.110.0/24 maxlen: 24
5.202.166.0/23 maxlen: 23
5.202.208.0/20 maxlen: 20
5.202.240.0/21 maxlen: 21
77.237.160.0/19 maxlen: 19
85.9.64.0/18 maxlen: 18
85.9.68.0/24 maxlen: 24
85.9.76.0/24 maxlen: 24
91.209.242.0/24 maxlen: 24
95.215.160.0/22 maxlen: 22
109.125.160.0/19 maxlen: 19
109.125.160.0/23 maxlen: 23
109.125.162.0/23 maxlen: 23
109.125.164.0/23 maxlen: 23
109.125.168.0/21 maxlen: 21
109.125.176.0/22 maxlen: 22
109.125.182.0/23 maxlen: 23
109.125.184.0/22 maxlen: 22
109.125.187.0/24 maxlen: 24
109.125.188.0/24 maxlen: 24
109.125.189.0/24 maxlen: 24
109.125.190.0/24 maxlen: 24
109.125.191.0/24 maxlen: 24
109.232.5.0/24 maxlen: 24
109.232.6.0/24 maxlen: 24
109.232.7.0/24 maxlen: 24
185.72.24.0/22 maxlen: 22
185.72.27.0/24 maxlen: 24
185.83.88.0/24 maxlen: 24
185.83.89.0/24 maxlen: 24
185.83.90.0/23 maxlen: 23
185.103.128.0/22 maxlen: 22
185.125.244.0/22 maxlen: 22
185.125.248.0/21 maxlen: 21
185.125.255.0/24 maxlen: 24
185.126.0.0/20 maxlen: 20
185.126.16.0/22 maxlen: 22
185.126.16.0/23 maxlen: 23
185.126.40.0/22 maxlen: 22
185.131.28.0/22 maxlen: 22
185.131.30.0/23 maxlen: 23
185.155.8.0/21 maxlen: 21
185.169.20.0/22 maxlen: 22
185.169.36.0/22 maxlen: 22
185.169.37.0/24 maxlen: 24
185.177.232.0/22 maxlen: 22
185.180.52.0/22 maxlen: 22
188.253.32.0/19 maxlen: 24
188.253.64.0/19 maxlen: 24
193.32.80.0/23 maxlen: 23
194.33.122.0/23 maxlen: 23
2001:4c88::/32 maxlen: 32
2a02:cd80::/29 maxlen: 29
2a07:8f00::/29 maxlen: 29
2a07:8f40::/29 maxlen: 29
2a0a:4e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:ac:29:a0:ab:e1:53:40:dd:b3:25:15:28:13:50:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Oct 29 09:47:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e9db053edbfa74dbe7e8c24ca628da22e6cb3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e4:0e:f9:ca:40:89:7b:98:e1:f9:f8:c3:e3:
7e:b6:15:1a:12:a5:73:4e:93:bf:4a:2b:8e:a4:24:
a9:44:bf:1a:be:2b:a2:4c:54:b2:bf:33:18:59:ac:
7e:33:4c:93:bb:1e:50:16:6e:b2:39:b3:85:fe:66:
78:b8:5b:c8:37:68:57:db:4a:40:b3:3a:46:17:c4:
d6:76:96:b8:8b:a5:8a:0d:b2:c5:2c:f4:51:70:6a:
46:85:7a:c9:ed:7c:a9:e8:d3:61:3b:08:c3:0a:53:
14:a9:21:53:25:80:33:3a:f6:2d:13:ad:eb:2a:4d:
bc:f5:81:2b:f6:f4:38:88:e9:b3:57:9f:5b:5e:7c:
3b:ea:30:18:6e:7a:c5:4a:b9:9f:2b:a1:88:90:67:
ed:f6:89:c6:15:3d:87:5a:54:cf:90:fe:8b:35:5b:
78:50:97:7e:99:59:fc:55:0b:fb:6d:9b:ba:6c:7e:
ae:15:31:0b:ae:c5:41:b7:0d:88:72:b0:65:14:21:
c9:df:b3:4f:c6:41:86:72:18:1d:51:0f:be:03:f2:
aa:93:fe:c0:74:e0:94:2f:39:98:ae:59:b3:ac:08:
1f:f3:0f:f6:b2:b0:41:72:b5:ba:be:6b:75:64:8c:
43:f2:53:49:66:1f:a3:7e:23:81:33:da:ce:ad:e0:
7a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9D:B0:53:ED:BF:A7:4D:BE:7E:8C:24:CA:62:8D:A2:2E:6C:B3:C0
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Lp2wU-2_p02-fowkymKNoi5ss8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.0.0/16
77.237.160.0/19
85.9.64.0/18
91.209.242.0/24
95.215.160.0/22
109.125.160.0/19
109.232.5.0-109.232.7.255
185.72.24.0/22
185.83.88.0/22
185.103.128.0/22
185.125.244.0-185.126.19.255
185.126.40.0/22
185.131.28.0/22
185.155.8.0/21
185.169.20.0/22
185.169.36.0/22
185.177.232.0/22
185.180.52.0/22
188.253.32.0-188.253.95.255
193.32.80.0/23
194.33.122.0/23
IPv6:
2001:4c88::/32
2a02:cd80::/29
2a07:8f00::/29
2a07:8f40::/29
2a0a:4e00::/29
Signature Algorithm: sha256WithRSAEncryption
b7:81:da:d6:da:0f:b3:a7:2a:dd:fc:87:23:dd:07:7a:68:a7:
4f:b0:ad:79:f4:5d:b2:6e:f7:de:44:fe:9f:9f:2b:9c:76:99:
f8:79:08:16:6c:49:93:72:9b:17:73:3e:7c:72:05:94:2f:91:
4c:ca:2c:ff:a0:8b:f2:3c:51:4a:e8:aa:e3:87:6d:59:4b:c9:
01:83:91:65:89:2f:03:74:db:bb:5e:32:75:7a:b8:10:50:5f:
e2:30:66:a7:52:c5:b0:ea:93:f2:eb:50:62:40:8f:87:10:50:
ef:26:0f:59:75:bc:aa:58:0b:a6:f4:b4:d3:bd:f8:d5:59:d7:
c6:bf:d8:d4:0c:99:61:78:3a:50:cd:90:a7:f0:c0:75:30:9a:
b6:43:af:db:b6:6c:b0:3f:98:5c:8a:00:c0:81:c8:05:df:46:
52:29:0a:8f:40:02:e7:5f:6b:a2:2d:d2:15:c6:e2:05:0b:37:
64:20:55:8a:19:33:ef:cb:20:93:fc:82:93:09:56:a7:33:ec:
13:f8:1a:b8:65:51:72:8b:2b:47:91:83:44:e3:d6:7f:0f:00:
d9:32:0e:b4:fb:6a:94:73:30:70:b6:a1:86:1d:12:b3:ed:b8:
8f:fc:50:5c:91:0f:dc:70:2c:62:0d:50:56:87:f8:b1:5d:2f:
4e:29:08:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:04:31 2024 by rpki-client on console-fra.rpki-client.org