Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/sE5CSHyVGLQwNhaRMwLILbVF7yc.roa
File: sE5CSHyVGLQwNhaRMwLILbVF7yc.roa (raw, json)
Hash identifier: HJaNOWnt9i/f15n97WeEIOgjoDQVFdAjPkyhrYbbuwY=
Subject key identifier: B0:4E:42:48:7C:95:18:B4:30:36:16:91:33:02:C8:2D:B5:45:EF:27
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0192E6A27D953477CA0EAD6A8F072A11E089
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/sE5CSHyVGLQwNhaRMwLILbVF7yc.roa
Signing time: Fri 01 Nov 2024 07:31:01 +0000
ROA not before: Fri 01 Nov 2024 07:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.232.0/24 maxlen: 24
45.141.233.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.153.0/24 maxlen: 24
78.159.154.0/24 maxlen: 24
78.159.155.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.219.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e6:a2:7d:95:34:77:ca:0e:ad:6a:8f:07:2a:11:e0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Nov 1 07:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b04e42487c9518b4303616913302c82db545ef27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:6c:f3:da:6a:76:2b:ec:fb:dc:a0:85:ef:
39:fb:1c:73:5f:3a:c7:dc:7b:21:4f:0a:a3:51:87:
91:f1:88:9c:40:6b:65:70:65:cb:a9:ec:23:ca:b7:
eb:ec:6c:6f:a9:7e:bb:31:39:af:2d:01:c8:64:01:
7a:4f:06:f7:44:c5:08:1c:a5:cf:d3:4d:d8:89:c3:
a3:c9:a2:d3:20:4c:91:4a:2a:be:17:b0:75:ac:9a:
31:63:58:28:fb:61:56:23:6f:d8:6a:84:1a:ae:65:
9e:60:8a:2c:38:cf:3d:bb:0c:19:d0:e9:91:1a:cc:
8f:56:e4:82:35:c4:cf:49:8e:ce:5e:50:f1:1f:b7:
3f:52:22:da:94:0c:46:8a:f9:b2:1d:38:97:00:96:
22:f9:b7:48:9c:f0:86:89:a2:e4:0b:1f:81:71:3c:
37:9c:a1:c6:b8:ea:6c:37:a3:08:63:25:2d:9b:7e:
ab:18:4a:20:03:53:51:dc:91:d1:09:c1:97:39:76:
3a:42:a0:63:5b:91:a4:3d:5a:f1:79:1e:0f:fa:f6:
73:7f:ee:09:d8:71:9e:e8:c5:af:cf:5a:7b:fc:86:
23:25:08:6f:69:46:04:74:01:6c:62:7c:30:4b:4f:
66:10:81:68:dc:b7:80:01:7d:09:2d:f4:1b:5a:1c:
7b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4E:42:48:7C:95:18:B4:30:36:16:91:33:02:C8:2D:B5:45:EF:27
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/sE5CSHyVGLQwNhaRMwLILbVF7yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/22
78.159.128.0/23
78.159.131.0/24
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/21
91.92.33.0-91.92.35.255
91.92.40.0-91.92.46.255
91.92.49.0-91.92.53.255
93.152.206.0/23
93.152.209.0-93.152.211.255
93.152.213.0-93.152.227.255
93.152.230.0/24
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/23
185.96.255.0/24
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:18:20:cf:59:d8:26:c3:14:d3:0a:10:ef:ef:8a:d9:ad:40:
40:9e:2a:b6:b5:51:64:b5:bb:5b:49:58:f4:7a:5d:a9:8b:9e:
d9:9d:1a:b6:3d:dc:9e:c8:a1:10:e4:74:85:6c:7a:81:86:b9:
08:fe:48:c6:51:39:52:a2:68:6c:e2:0d:ba:0e:f9:19:5b:f7:
5d:85:05:cc:ec:a7:e2:8d:7a:ea:7d:da:61:d2:6a:9b:36:0e:
e0:d3:55:f9:51:43:69:92:2b:15:3e:89:f7:84:cc:c3:69:1b:
18:60:92:f0:23:dc:01:8f:42:92:b7:35:e7:17:31:72:d1:17:
9e:8c:8d:9b:32:88:40:24:41:f7:cf:0d:3d:18:63:73:99:7d:
95:bf:de:17:ee:03:af:47:54:2d:9f:ee:69:f4:b4:d8:2d:60:
b4:88:05:cd:19:bd:75:cf:3f:8e:3d:7f:ef:58:ed:10:f9:2f:
ed:83:cb:87:12:68:86:59:0b:94:64:6b:6c:b1:de:36:40:e7:
17:c6:9b:99:85:b6:97:8f:dd:14:11:a4:c3:14:f7:e9:8d:65:
92:df:41:9c:38:0c:a2:90:d2:6e:2a:2b:d7:ac:e6:89:e9:ac:
f0:5a:d1:b8:cf:7d:eb:2a:84:de:b7:43:ee:83:b0:37:53:3a:
f0:cf:e9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:09:06 2024 by rpki-client on console-ams.rpki-client.org