Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/0l0uD742Xy3EglBmfPttzz_xZ30.roa
File: 0l0uD742Xy3EglBmfPttzz_xZ30.roa (raw, json)
Hash identifier: NLYBKtdEpsTPkA0Nw/doO3vsDHfkLkZsX/RprCkaPhM=
Subject key identifier: D2:5D:2E:0F:BE:36:5F:2D:C4:82:50:66:7C:FB:6D:CF:3F:F1:67:7D
Certificate issuer: /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial: 01924FA864104F24E05E34356EAEC6618A20
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/0l0uD742Xy3EglBmfPttzz_xZ30.roa
Signing time: Wed 02 Oct 2024 23:54:48 +0000
ROA not before: Wed 02 Oct 2024 23:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14593
IP address blocks: 87.251.24.0/21 maxlen: 24
91.102.180.0/22 maxlen: 24
145.224.64.0/18 maxlen: 24
145.224.64.0/21 maxlen: 24
145.224.72.0/21 maxlen: 24
145.224.80.0/21 maxlen: 24
145.224.88.0/22 maxlen: 24
145.224.92.0/23 maxlen: 24
145.224.94.0/23 maxlen: 24
145.224.96.0/21 maxlen: 24
145.224.108.0/22 maxlen: 24
145.224.124.0/22 maxlen: 24
162.43.192.0/22 maxlen: 24
169.155.224.0/19 maxlen: 24
176.116.124.0/23 maxlen: 24
188.92.248.0/21 maxlen: 24
188.95.144.0/23 maxlen: 24
209.198.128.0/19 maxlen: 24
212.105.128.0/19 maxlen: 24
216.128.0.0/19 maxlen: 24
217.65.136.0/21 maxlen: 24
217.65.136.0/22 maxlen: 24
217.142.16.0/20 maxlen: 24
2a0d:3340::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4f:a8:64:10:4f:24:e0:5e:34:35:6e:ae:c6:61:8a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Validity
Not Before: Oct 2 23:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d25d2e0fbe365f2dc48250667cfb6dcf3ff1677d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:61:e5:ce:8b:1d:4b:86:cb:63:52:91:57:
2c:00:1d:dd:40:62:5f:74:27:70:13:73:95:dd:0d:
c5:57:a7:2c:0b:b4:a8:73:11:e8:1f:ba:98:da:af:
93:e5:64:ce:90:23:cb:58:f4:af:cb:29:7b:10:4c:
64:75:c5:bc:b0:5f:17:67:a3:d6:65:54:da:43:2a:
8a:f5:e2:c9:27:bb:71:b8:3c:dd:d2:aa:c5:6f:70:
c6:e0:c5:54:aa:a1:60:04:91:a7:49:bc:8c:1b:81:
d5:17:e4:20:c8:26:7b:31:23:be:5a:7d:07:3f:e7:
05:ee:82:30:0c:31:17:9f:dc:55:4b:d5:7b:56:98:
55:aa:c3:94:d6:e2:22:0d:5e:ef:26:96:15:9c:c8:
93:af:d4:3f:7b:af:33:48:6f:18:dc:cc:ef:8c:b3:
1f:90:b1:03:a0:ec:05:dd:10:6a:6a:e2:65:44:df:
d8:73:ab:3e:99:c3:92:7c:a7:4e:27:b6:d5:6a:ec:
84:06:b7:8a:f1:59:a3:b1:b6:b8:0b:9e:2e:70:95:
d6:54:20:ff:a8:2a:3f:01:3a:b0:e3:7d:9e:d1:8b:
0d:b7:bb:ca:86:29:f2:52:22:31:74:42:fa:bc:78:
8b:51:96:ca:3f:c9:1e:f8:9a:50:a6:66:f0:17:95:
62:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5D:2E:0F:BE:36:5F:2D:C4:82:50:66:7C:FB:6D:CF:3F:F1:67:7D
X509v3 Authority Key Identifier:
keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/0l0uD742Xy3EglBmfPttzz_xZ30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.24.0/21
91.102.180.0/22
145.224.64.0/18
162.43.192.0/22
169.155.224.0/19
176.116.124.0/23
188.92.248.0/21
188.95.144.0/23
209.198.128.0/19
212.105.128.0/19
216.128.0.0/19
217.65.136.0/21
217.142.16.0/20
IPv6:
2a0d:3340::/29
Signature Algorithm: sha256WithRSAEncryption
a8:42:0f:c1:bb:4e:15:67:4d:e7:76:44:ae:1f:31:40:26:48:
1e:77:66:ac:ac:d8:02:6b:59:bc:cf:c3:59:f8:25:d4:70:dc:
29:b9:17:8e:ee:c3:3f:81:8e:94:71:f1:8c:e6:92:6d:7b:ee:
c6:ae:85:56:e0:c9:82:58:a1:19:fb:94:c2:b3:63:a3:35:f2:
e9:0d:66:fd:90:9f:44:70:bd:80:00:9f:af:97:b7:2b:e2:8a:
bc:61:d3:ba:46:66:ce:a2:59:d9:d0:eb:a6:db:ae:97:ba:6d:
b5:fb:43:ee:8b:89:9f:79:7e:69:73:8d:d1:c1:2e:57:53:8a:
a0:71:b2:6f:52:61:d0:7f:8b:85:7a:cd:36:57:a4:fd:db:00:
f1:b4:d8:64:44:cb:be:c3:94:88:b5:26:f5:a6:b0:f3:e9:2f:
c6:19:ee:6d:cc:2d:9f:8a:ce:c7:f8:d0:4f:0e:7e:9a:bf:88:
1a:cd:af:79:c7:5b:05:c1:99:7f:18:30:1d:46:9a:b1:86:73:
2e:84:1e:36:a5:21:02:52:6f:e9:41:4c:1d:e2:c2:85:68:5b:
35:f4:2d:ed:8b:00:80:83:a3:e3:39:c4:29:66:55:e0:bd:61:
47:cb:87:bc:80:79:c1:25:53:c9:8b:94:e3:48:90:78:1d:dd:
94:eb:ad:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:10:39 2024 by rpki-client on console-ams.rpki-client.org