Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/pSWmZARSQfR22EYYsQ5AAMBR8JE.roa
File: pSWmZARSQfR22EYYsQ5AAMBR8JE.roa (raw, json)
Hash identifier: e/TkOcw5vn4JBk56r5hmvxp3mb5lZtEPv2Hg/NuO678=
Subject key identifier: A5:25:A6:64:04:52:41:F4:76:D8:46:18:B1:0E:40:00:C0:51:F0:91
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 019052DA44E4D2EA60EEC58CC3F3B14F1E80
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/pSWmZARSQfR22EYYsQ5AAMBR8JE.roa
Signing time: Wed 26 Jun 2024 04:42:34 +0000
ROA not before: Wed 26 Jun 2024 04:42:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60095
IP address blocks: 46.191.156.0/22 maxlen: 22
46.191.156.0/23 maxlen: 23
46.191.156.0/24 maxlen: 24
46.191.157.0/24 maxlen: 24
46.191.158.0/23 maxlen: 23
46.191.158.0/24 maxlen: 24
46.191.159.0/24 maxlen: 24
93.157.252.0/22 maxlen: 22
93.157.252.0/23 maxlen: 23
93.157.252.0/24 maxlen: 24
93.157.253.0/24 maxlen: 24
93.157.254.0/23 maxlen: 23
93.157.254.0/24 maxlen: 24
93.157.255.0/24 maxlen: 24
136.169.212.0/22 maxlen: 22
136.169.212.0/23 maxlen: 23
136.169.212.0/24 maxlen: 24
136.169.213.0/24 maxlen: 24
136.169.214.0/23 maxlen: 23
136.169.214.0/24 maxlen: 24
136.169.215.0/24 maxlen: 24
185.44.8.0/22 maxlen: 22
185.44.8.0/23 maxlen: 23
185.44.8.0/24 maxlen: 24
185.44.9.0/24 maxlen: 24
185.44.10.0/23 maxlen: 23
185.44.10.0/24 maxlen: 24
185.44.11.0/24 maxlen: 24
2a02:1c8:a::/48 maxlen: 48
2a02:1c8:40::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:52:da:44:e4:d2:ea:60:ee:c5:8c:c3:f3:b1:4f:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jun 26 04:42:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a525a664045241f476d84618b10e4000c051f091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:79:bb:bc:53:f1:ef:65:02:45:eb:76:d5:
dd:75:a1:66:ef:05:b2:74:80:3a:5a:f8:f9:5d:8c:
da:9d:ff:ff:a0:e9:f0:b7:1a:0c:15:04:83:39:ca:
2d:fc:8c:88:4b:d8:dd:a0:27:2a:b1:52:3b:9b:7d:
2b:74:59:8a:de:dc:00:6b:12:76:e5:1b:5c:28:e6:
d4:73:1c:25:cd:ac:ab:2e:cb:54:2b:74:2b:10:cc:
27:4f:07:dc:58:7e:8b:50:ff:ad:15:11:7d:a7:c6:
cc:91:8f:42:78:24:23:64:b7:b3:8d:57:4f:a7:eb:
12:d8:10:5e:00:23:07:26:a9:62:53:b0:d8:70:a4:
22:d3:d7:6c:95:48:1e:fa:f5:23:7f:30:64:6d:75:
cc:42:99:20:00:10:51:1e:ea:79:c7:8b:3c:0f:71:
c8:c3:13:b2:fc:4d:ba:1f:81:54:91:3b:9d:f7:e4:
8d:70:f0:60:38:64:52:5b:b8:37:bb:8f:c8:d6:7e:
64:2f:9d:a9:95:26:81:d5:44:82:14:76:17:6a:1e:
f6:15:f2:61:c6:77:51:89:c0:e8:52:b5:09:73:70:
8f:e3:9b:a9:0b:b0:25:6b:2e:69:b3:26:47:86:d7:
13:5a:fc:2c:da:ac:ba:47:8f:a8:dd:45:f5:61:c3:
99:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:25:A6:64:04:52:41:F4:76:D8:46:18:B1:0E:40:00:C0:51:F0:91
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/pSWmZARSQfR22EYYsQ5AAMBR8JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.156.0/22
93.157.252.0/22
136.169.212.0/22
185.44.8.0/22
IPv6:
2a02:1c8:a::/48
2a02:1c8:40::/44
Signature Algorithm: sha256WithRSAEncryption
01:0f:13:67:0b:9e:f9:7b:f6:19:74:df:ef:64:9d:89:8b:71:
64:6b:03:ec:87:60:6f:3c:4b:18:f3:2a:fd:66:15:b0:64:0f:
ba:7c:b6:c1:cf:ba:ad:b7:d1:c2:dc:20:4b:91:c3:57:62:42:
24:a2:27:52:d6:47:78:18:3a:c5:db:8a:d1:3c:04:1c:07:d4:
d5:88:a0:51:7e:a4:dd:fc:1a:94:67:3f:97:ee:22:0c:66:6a:
7d:82:57:bd:d6:e7:6e:57:7d:53:26:f6:e4:fa:c7:63:17:c4:
4a:0f:db:d8:0f:44:b0:7f:0f:3f:85:fb:ce:3b:7f:dc:1e:a3:
04:5a:d5:12:68:88:b3:0c:ab:6b:01:eb:94:26:83:00:b7:73:
5b:64:37:61:4d:bf:e0:f3:49:9d:f1:37:75:31:c1:02:07:fe:
fa:ee:51:5f:4c:19:32:39:59:4b:e9:31:f0:ba:91:79:6d:d8:
88:86:0d:69:57:c8:6e:dc:96:de:9b:08:f9:46:bf:19:31:ed:
14:8d:a0:62:31:a0:28:92:e7:53:b9:e0:55:0b:ec:91:4d:49:
ba:01:21:9c:d7:7e:14:b8:da:71:d2:e4:fc:d5:c5:26:b3:64:
4f:c9:db:26:79:c9:42:5c:33:f7:e1:b8:8c:85:dd:3e:26:fb:
a6:42:b3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:21:30 2024 by rpki-client on console-fra.rpki-client.org