Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/j-kIw3IJxNpJ0fZJE-UzaQZKclw.roa
File: j-kIw3IJxNpJ0fZJE-UzaQZKclw.roa (raw, json)
Hash identifier: bK4o3Dkjphy9hpukx6XpmHk4HpotNu4a8DmYIVeYYNM=
Subject key identifier: 8F:E9:08:C3:72:09:C4:DA:49:D1:F6:49:13:E5:33:69:06:4A:72:5C
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018EEB2750CC38B3832FE7A18008D76D1A20
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/j-kIw3IJxNpJ0fZJE-UzaQZKclw.roa
Signing time: Wed 17 Apr 2024 08:23:26 +0000
ROA not before: Wed 17 Apr 2024 08:23:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.232.0/24 maxlen: 24
45.141.233.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.156.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.47.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.208.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.219.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:eb:27:50:cc:38:b3:83:2f:e7:a1:80:08:d7:6d:1a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Apr 17 08:23:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fe908c37209c4da49d1f64913e53369064a725c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:16:59:1a:bc:27:fa:5e:16:30:3d:91:5c:14:
71:90:cc:fc:f5:c3:e0:48:ea:64:fd:ca:2a:b8:f1:
4b:dc:40:73:6b:10:a3:d7:31:82:05:d6:3e:e8:4e:
f0:08:6d:1f:43:ed:3b:32:fd:fa:26:a7:bc:a3:38:
3d:f6:66:88:78:90:a7:98:1f:5e:62:c7:b6:f4:1e:
4b:42:22:b4:f8:5f:73:19:98:3e:70:aa:09:05:55:
14:8e:17:81:73:a6:53:77:0a:45:fe:fd:2d:5d:07:
d3:81:82:b8:f2:7d:d9:7d:71:68:77:88:75:00:f7:
28:f8:4b:e2:ab:a4:c7:aa:69:ce:d3:b1:5e:d5:45:
74:58:97:68:df:18:fd:61:25:b7:c4:d1:08:4b:42:
76:9d:9a:59:d6:7e:8a:ab:15:d8:dd:9e:c4:e9:c8:
80:a7:eb:8b:f8:c4:47:07:62:49:17:91:10:45:7e:
4c:d8:ba:a7:04:ea:e0:e5:0b:a1:7a:3e:0c:70:b1:
ca:01:08:62:60:8f:2b:95:eb:cf:b9:53:e1:ef:90:
53:95:a4:9e:13:38:51:eb:e1:19:6d:77:f8:91:b2:
03:b0:ba:72:3f:d0:31:14:4f:95:1f:5a:50:be:06:
d6:a3:d0:10:6f:80:f8:11:0e:32:8e:4d:ad:b1:db:
57:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E9:08:C3:72:09:C4:DA:49:D1:F6:49:13:E5:33:69:06:4A:72:5C
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/j-kIw3IJxNpJ0fZJE-UzaQZKclw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/22
78.159.128.0/23
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/21
91.92.33.0-91.92.35.255
91.92.40.0/21
91.92.49.0-91.92.53.255
93.152.206.0-93.152.227.255
93.152.230.0/24
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/23
185.96.255.0/24
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
75:e5:b5:18:7a:36:6f:13:01:52:5e:84:cb:51:dd:e2:ae:06:
70:1d:75:90:21:ee:b1:68:00:fe:dd:24:2f:f7:d5:17:ea:19:
88:9e:71:30:2d:cc:45:51:c7:79:54:44:64:14:9b:b6:ea:f7:
73:2d:8a:6d:93:14:c2:c8:e8:40:1f:28:19:9c:7a:ea:a8:7a:
b1:e4:c2:f7:70:47:19:81:d8:38:fd:6e:f5:52:33:d2:40:bb:
26:be:61:a7:87:06:de:84:71:1a:e4:de:97:b1:7a:8a:41:bc:
c1:b0:e6:2b:c9:76:a8:1f:8e:56:31:ff:39:21:67:47:f8:36:
fe:ed:ef:2f:8e:4b:be:38:6f:f0:25:b6:36:2d:e0:9f:09:75:
c4:1e:65:74:f5:1a:f8:48:58:64:4c:eb:7f:ef:62:e9:b9:f7:
aa:d8:79:58:10:bb:39:7b:20:d4:3a:f7:23:ac:ac:b4:61:51:
dc:4e:5c:a4:4a:15:26:9b:2c:99:6e:80:87:b4:e7:a0:65:9a:
74:01:dc:f6:03:61:f8:f9:de:0e:99:e8:f1:7c:54:95:2e:3a:
8d:e1:81:d7:47:30:a6:a3:da:d0:5c:bf:5d:41:09:90:e9:35:
e0:06:b7:4e:a6:f8:ea:24:66:73:7b:4c:97:9d:d4:ce:e1:b2:
04:ea:c7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 05:56:50 2024 by rpki-client on console-ams.rpki-client.org