Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/E9Y_jjP7-Bpa-DN4KUkM1O1-has.roa
File: E9Y_jjP7-Bpa-DN4KUkM1O1-has.roa (raw, json)
Hash identifier: Utk8Qxvdnk4qE90aD2/F1uVEsWkIE0ZRCuFXmxwsjnk=
Subject key identifier: 13:D6:3F:8E:33:FB:F8:1A:5A:F8:33:78:29:49:0C:D4:ED:7E:85:AB
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019006836C4DF600F7252B226222A2816D4F
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/E9Y_jjP7-Bpa-DN4KUkM1O1-has.roa
Signing time: Tue 11 Jun 2024 08:56:34 +0000
ROA not before: Tue 11 Jun 2024 08:56:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.232.0/24 maxlen: 24
45.141.233.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.153.0/24 maxlen: 24
78.159.154.0/24 maxlen: 24
78.159.155.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.208.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.219.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:83:6c:4d:f6:00:f7:25:2b:22:62:22:a2:81:6d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 11 08:56:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13d63f8e33fbf81a5af8337829490cd4ed7e85ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:a2:c4:23:5f:c7:74:fe:a7:bf:2b:c1:2a:
9d:f8:50:52:8b:80:0b:b0:3b:d8:58:66:90:59:0b:
b0:e5:45:e4:3f:7d:a8:06:23:e0:cb:77:93:5a:31:
4b:9d:42:3f:d1:81:ae:e9:75:8b:83:05:8f:e7:56:
5e:55:9c:1f:62:1b:35:d0:52:7a:6a:66:4b:5e:af:
b8:da:39:2d:b7:70:40:26:7c:22:64:ce:41:08:ef:
ef:82:25:b3:8c:8f:f4:30:fa:48:cc:bf:11:51:5d:
da:4e:16:db:2b:a2:fc:81:c8:41:18:4e:9d:75:f2:
ee:6a:fa:f8:a9:8a:94:90:8a:c6:d4:e1:91:a9:79:
f9:04:2b:ed:93:94:07:9c:d9:d1:cb:89:23:70:79:
3e:af:20:7e:a0:a1:9c:03:40:09:9e:00:ab:51:e5:
53:29:55:f8:09:91:79:c9:cf:b5:33:63:35:15:dc:
5c:e1:bf:ac:aa:f8:1c:ea:47:94:7f:f5:9e:1e:fb:
99:92:93:bc:f2:30:ba:5a:30:52:de:1b:7b:ea:97:
b2:c1:fd:a2:41:ee:e2:ea:d7:38:9f:63:78:c9:00:
54:a7:d4:82:82:86:e7:bc:74:a3:87:27:54:26:47:
43:8d:68:28:e9:d0:8f:52:6a:91:76:23:92:77:05:
7b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D6:3F:8E:33:FB:F8:1A:5A:F8:33:78:29:49:0C:D4:ED:7E:85:AB
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/E9Y_jjP7-Bpa-DN4KUkM1O1-has.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/22
78.159.128.0/23
78.159.131.0/24
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/21
91.92.33.0-91.92.35.255
91.92.40.0-91.92.46.255
91.92.49.0-91.92.53.255
93.152.206.0-93.152.227.255
93.152.230.0/24
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/23
185.96.255.0/24
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:0b:9b:fc:21:11:a8:b4:1d:53:ff:53:f4:ee:0b:ae:5e:6c:
ae:e7:69:01:51:ca:92:62:d4:34:5b:be:4e:25:0e:11:21:53:
f9:e3:b5:d7:d6:db:d4:d9:1b:17:4b:be:13:c9:9e:3f:93:8b:
c3:99:f2:7d:32:dc:27:b8:fa:36:b8:d0:09:c8:f8:b3:7a:0a:
bd:90:2d:3e:59:52:6d:c5:01:a9:43:40:0c:67:11:2b:35:7c:
04:43:56:5a:52:bb:a0:73:1b:42:ab:d8:a6:64:fa:b8:00:95:
ac:9a:f4:16:1e:f3:9b:aa:45:2f:a2:81:5c:41:2d:70:ba:05:
d7:59:2e:d2:b9:5b:8f:b1:0e:05:40:1a:f0:3c:be:57:60:33:
77:73:8d:63:2f:64:3b:2e:c1:ef:e2:b9:17:25:65:03:ee:d1:
39:32:cd:c5:d1:de:b5:67:ab:f8:94:64:f7:55:4e:fe:e6:7c:
61:52:31:0c:b8:81:26:f5:30:eb:0e:6b:de:01:e1:cc:f7:58:
7f:1e:d2:e9:d0:b4:a9:72:8a:36:1c:72:e1:74:d0:5c:74:fa:
17:48:d6:93:43:77:40:30:77:6d:20:49:28:87:f0:d3:2e:8e:
14:65:1c:75:d6:b4:98:59:7d:54:16:6a:e1:7e:1a:9d:54:a0:
18:f3:46:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 17:16:30 2024 by rpki-client on console-fra.rpki-client.org