Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/Drjk_0sG4X3N5Nm6DurcfL9KkJg.roa
File: Drjk_0sG4X3N5Nm6DurcfL9KkJg.roa (raw, json)
Hash identifier: 9up+fWwdtI9WnyLOhz0QE9gQE9qj/dJPMcSTzmTrhaU=
Subject key identifier: 0E:B8:E4:FF:4B:06:E1:7D:CD:E4:D9:BA:0E:EA:DC:7C:BF:4A:90:98
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 01914C019CBF995978D6B73392BF0314F7A4
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/Drjk_0sG4X3N5Nm6DurcfL9KkJg.roa
Signing time: Tue 13 Aug 2024 13:50:59 +0000
ROA not before: Tue 13 Aug 2024 13:50:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8437
IP address blocks: 46.57.0.0/17 maxlen: 17
46.57.72.0/22 maxlen: 22
46.57.80.0/21 maxlen: 21
46.57.88.0/21 maxlen: 21
46.57.96.0/21 maxlen: 21
46.57.104.0/22 maxlen: 22
46.57.112.0/21 maxlen: 21
46.57.120.0/22 maxlen: 22
46.57.124.0/22 maxlen: 22
62.116.0.0/19 maxlen: 19
62.116.64.0/18 maxlen: 18
62.218.0.0/16 maxlen: 16
62.218.4.0/24 maxlen: 24
62.218.52.0/24 maxlen: 24
62.218.100.0/24 maxlen: 24
62.218.164.0/24 maxlen: 24
62.218.165.0/24 maxlen: 24
62.218.168.0/24 maxlen: 24
62.218.169.0/24 maxlen: 24
62.218.174.0/24 maxlen: 24
62.218.175.0/24 maxlen: 24
62.218.205.0/24 maxlen: 24
77.118.0.0/16 maxlen: 16
77.118.14.0/24 maxlen: 24
77.118.17.0/24 maxlen: 24
77.118.32.0/21 maxlen: 21
77.118.48.0/21 maxlen: 21
77.118.56.0/21 maxlen: 21
77.118.104.0/22 maxlen: 22
77.118.108.0/22 maxlen: 22
77.118.112.0/20 maxlen: 20
77.118.128.0/21 maxlen: 21
77.118.136.0/21 maxlen: 21
77.118.160.0/20 maxlen: 20
77.118.176.0/20 maxlen: 20
77.118.192.0/20 maxlen: 20
77.118.208.0/20 maxlen: 20
77.118.224.0/21 maxlen: 21
77.118.232.0/21 maxlen: 21
77.118.240.0/20 maxlen: 20
77.119.32.0/19 maxlen: 19
77.119.64.0/18 maxlen: 18
77.119.80.0/21 maxlen: 21
77.119.88.0/21 maxlen: 21
77.119.96.0/22 maxlen: 22
77.119.112.0/22 maxlen: 22
78.142.128.0/18 maxlen: 18
81.189.0.0/16 maxlen: 16
81.189.212.0/22 maxlen: 22
81.189.212.0/24 maxlen: 24
81.189.213.0/24 maxlen: 24
81.189.214.0/24 maxlen: 24
81.189.215.0/24 maxlen: 24
86.59.0.0/17 maxlen: 17
91.186.128.0/19 maxlen: 19
178.114.0.0/16 maxlen: 16
178.114.92.0/22 maxlen: 22
178.114.96.0/20 maxlen: 20
178.114.112.0/20 maxlen: 20
178.114.128.0/21 maxlen: 21
178.114.144.0/21 maxlen: 21
178.114.152.0/21 maxlen: 21
178.114.160.0/20 maxlen: 20
178.114.176.0/20 maxlen: 20
178.114.192.0/21 maxlen: 21
178.114.208.0/21 maxlen: 21
178.114.216.0/21 maxlen: 21
178.114.224.0/20 maxlen: 20
178.114.240.0/20 maxlen: 20
178.115.96.0/19 maxlen: 19
178.115.96.0/24 maxlen: 24
178.115.98.0/24 maxlen: 24
188.118.192.0/18 maxlen: 18
195.70.224.0/19 maxlen: 19
195.96.0.0/19 maxlen: 19
195.248.32.0/19 maxlen: 19
212.27.64.0/18 maxlen: 18
212.152.128.0/17 maxlen: 17
213.90.0.0/17 maxlen: 17
213.129.224.0/19 maxlen: 19
213.235.192.0/18 maxlen: 18
213.235.196.0/24 maxlen: 24
213.235.234.0/24 maxlen: 24
2001:858::/32 maxlen: 32
2001:858:40::/45 maxlen: 45
2001:938::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4c:01:9c:bf:99:59:78:d6:b7:33:92:bf:03:14:f7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Aug 13 13:50:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0eb8e4ff4b06e17dcde4d9ba0eeadc7cbf4a9098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:c6:40:8c:77:b6:4f:e5:da:08:7e:38:64:
f5:09:58:38:6c:40:e5:98:8b:b8:c2:cf:cf:e9:3e:
ef:dc:5d:e9:00:5f:9b:62:67:b8:68:c7:e2:00:78:
9d:34:69:8a:54:50:9a:45:47:71:6b:04:2e:21:36:
20:60:47:64:fb:38:50:41:67:73:d9:a4:6d:a9:c7:
78:f4:e8:93:c0:89:67:2d:54:a3:4c:03:86:91:e6:
1e:d4:36:5f:20:aa:2d:da:e5:e2:84:2d:7b:eb:03:
94:1f:e7:c6:45:0f:52:64:72:63:c8:fa:69:38:e4:
db:9a:fd:63:e4:2d:38:7f:92:aa:1c:79:41:14:ff:
16:16:f0:f8:11:e3:9a:f0:7f:45:14:e2:a2:62:aa:
f1:36:16:e6:d5:0b:17:98:08:3c:eb:bd:a2:f4:0f:
7b:4a:be:51:40:3c:8e:9e:ea:3d:9e:3b:05:68:81:
10:f7:5a:9c:6e:8d:aa:17:69:e1:ba:dd:0c:8c:50:
47:39:4c:3c:46:bb:d6:d9:da:e9:fe:f8:bd:b6:fa:
3e:77:8e:5c:b6:6c:7b:e6:aa:b8:e5:7f:fe:1d:5e:
48:04:f1:89:3d:89:09:a9:11:25:a3:e0:ca:50:36:
7f:d7:41:f2:49:38:98:31:6a:02:e2:04:2a:a4:d7:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B8:E4:FF:4B:06:E1:7D:CD:E4:D9:BA:0E:EA:DC:7C:BF:4A:90:98
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/Drjk_0sG4X3N5Nm6DurcfL9KkJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.57.0.0/17
62.116.0.0/19
62.116.64.0/18
62.218.0.0/16
77.118.0.0/16
77.119.32.0-77.119.127.255
78.142.128.0/18
81.189.0.0/16
86.59.0.0/17
91.186.128.0/19
178.114.0.0/16
178.115.96.0/19
188.118.192.0/18
195.70.224.0/19
195.96.0.0/19
195.248.32.0/19
212.27.64.0/18
212.152.128.0/17
213.90.0.0/17
213.129.224.0/19
213.235.192.0/18
IPv6:
2001:858::/32
2001:938::/32
Signature Algorithm: sha256WithRSAEncryption
02:5c:5b:60:3c:68:8e:cf:78:b1:f0:5a:ac:02:a4:94:78:63:
66:0f:45:09:d4:61:4a:e5:8d:55:fb:1d:ce:0b:b1:73:c2:75:
52:61:86:c1:49:7d:a3:97:cc:69:7f:ee:6e:90:8b:49:3f:01:
bb:59:1d:f2:f5:52:64:77:61:6d:27:8e:ba:44:95:a2:b9:46:
69:2e:d8:93:13:41:5a:c0:52:dc:84:64:a0:be:04:4a:30:db:
0d:5e:19:73:83:6e:40:0c:4d:e0:60:c2:40:1f:73:6e:61:c4:
e4:db:8e:54:5d:a8:73:7d:1a:7e:48:f9:c0:af:bd:34:85:40:
26:13:a3:97:74:ff:1b:50:52:7e:77:1f:13:a6:c9:1e:8b:d9:
4b:67:3a:d8:60:e1:d8:73:6c:65:8b:ce:cc:74:12:41:c0:e4:
9b:7b:38:c3:26:2d:d1:a7:1f:ed:10:76:87:7c:18:6f:1c:70:
e8:f4:d0:85:99:57:88:a0:d4:08:2a:cf:28:3c:99:65:2d:cb:
f5:1a:a3:91:6d:73:11:fe:a9:e0:fc:77:a9:73:cd:9e:ef:be:
71:86:6a:7b:dd:b7:89:f7:2a:21:af:d5:1f:f2:5f:e1:3f:ea:
10:13:9b:38:bd:68:9a:45:fc:c2:8a:d2:b8:ab:74:86:a9:00:
9b:8d:6e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:26:00 2024 by rpki-client on console-ams.rpki-client.org