Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/1UHTBXlFImkVb5eCtPXEG0bOrXA.roa
File: 1UHTBXlFImkVb5eCtPXEG0bOrXA.roa (raw, json)
Hash identifier: F2ulgZXM73RR23PxMugEsRMoJtCQ66E7BJlrBMgFzUg=
Subject key identifier: D5:41:D3:05:79:45:22:69:15:6F:97:82:B4:F5:C4:1B:46:CE:AD:70
Certificate issuer: /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial: 018E306146D95A2C6BF7C9F999A72FBA26B0
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/1UHTBXlFImkVb5eCtPXEG0bOrXA.roa
Signing time: Tue 12 Mar 2024 01:57:45 +0000
ROA not before: Tue 12 Mar 2024 01:57:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14593
IP address blocks: 87.251.24.0/21 maxlen: 24
91.102.180.0/22 maxlen: 24
145.224.64.0/18 maxlen: 24
145.224.64.0/21 maxlen: 24
145.224.72.0/21 maxlen: 24
145.224.80.0/21 maxlen: 24
145.224.88.0/22 maxlen: 24
145.224.92.0/23 maxlen: 24
145.224.94.0/23 maxlen: 24
145.224.96.0/21 maxlen: 24
145.224.108.0/22 maxlen: 24
145.224.124.0/22 maxlen: 24
162.43.192.0/22 maxlen: 24
169.155.224.0/19 maxlen: 24
176.116.124.0/23 maxlen: 24
188.92.248.0/21 maxlen: 24
188.95.144.0/23 maxlen: 24
209.198.128.0/19 maxlen: 24
216.128.0.0/19 maxlen: 24
217.65.136.0/21 maxlen: 24
217.65.136.0/22 maxlen: 24
2a0d:3340::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:30:61:46:d9:5a:2c:6b:f7:c9:f9:99:a7:2f:ba:26:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Validity
Not Before: Mar 12 01:57:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d541d30579452269156f9782b4f5c41b46cead70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:81:f7:7b:27:ed:6f:71:54:ba:7e:32:e2:86:
56:1f:4e:e6:bf:0d:ac:6b:7c:36:4d:0f:94:0a:29:
2f:e1:c4:21:70:ef:49:86:d3:66:82:01:3e:8a:0a:
23:ab:22:8d:25:e1:39:b4:28:f2:24:09:59:0a:31:
cc:0d:1a:41:5d:6d:15:c0:78:2d:2b:5d:74:33:90:
2f:8d:d5:a5:67:53:33:2a:62:90:16:9a:52:cf:be:
7d:fc:f4:66:17:de:9c:77:e1:d3:73:40:44:b3:89:
e9:b1:97:c8:c1:d3:4c:62:2d:a1:59:48:f4:f0:30:
a7:9e:a0:7e:ae:6a:03:43:36:e2:f1:b9:8d:b3:c9:
7b:02:45:65:2a:6c:1b:f6:db:64:7f:3e:45:88:dd:
06:e0:16:65:1c:3a:9c:d0:62:35:bb:e0:a7:22:34:
99:b5:5a:59:cb:a9:04:79:cb:4f:c6:e7:6d:7f:48:
57:c8:6e:16:da:26:1a:15:e0:ca:07:3d:e7:9b:33:
05:d6:a6:60:f1:65:bb:09:b8:83:10:79:0f:37:7e:
63:7e:a0:68:bb:21:01:e6:cc:04:9c:6a:5e:42:e0:
11:f4:b5:c5:db:d5:4b:b4:94:23:f1:99:5c:77:61:
99:6b:4c:f2:19:ea:95:83:71:4c:84:cf:63:4e:69:
94:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:41:D3:05:79:45:22:69:15:6F:97:82:B4:F5:C4:1B:46:CE:AD:70
X509v3 Authority Key Identifier:
keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/1UHTBXlFImkVb5eCtPXEG0bOrXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.24.0/21
91.102.180.0/22
145.224.64.0/18
162.43.192.0/22
169.155.224.0/19
176.116.124.0/23
188.92.248.0/21
188.95.144.0/23
209.198.128.0/19
216.128.0.0/19
217.65.136.0/21
IPv6:
2a0d:3340::/29
Signature Algorithm: sha256WithRSAEncryption
27:08:cb:c6:27:4c:5c:42:38:a8:a3:0c:07:c9:92:bc:d3:59:
d6:5c:55:ba:e8:2d:de:77:3a:38:5b:f6:47:40:cd:e2:bf:05:
f5:4a:c8:d0:9c:f7:96:eb:31:7c:ec:c9:6f:a5:73:54:fd:24:
dc:ca:be:52:24:bf:1d:c7:57:37:69:0d:13:aa:52:5d:ee:24:
f7:ea:c7:4d:0c:1b:1c:a1:a3:40:a6:17:77:f8:4e:94:25:d4:
98:da:ba:8e:21:8c:20:e3:c5:63:fd:1f:4f:0b:ca:20:cd:27:
9c:ef:55:85:56:bb:85:57:8c:e1:00:ea:a5:f0:b9:39:bf:4d:
d7:f7:9e:21:98:fa:83:70:19:b0:b1:8d:b1:27:41:20:05:4c:
1a:1b:ec:3f:90:69:f0:c0:b0:df:2d:5b:dc:fe:cd:ec:37:cd:
9f:43:70:12:7e:b7:7f:37:86:5a:93:bc:d5:da:06:2b:4c:af:
87:0d:0b:e7:90:d2:0d:4c:a5:ed:21:b5:fa:8d:22:61:5b:15:
dd:e2:93:ba:0e:88:95:fc:1f:28:ca:41:3a:0f:47:1c:21:19:
4a:83:d6:b0:9b:92:dc:1c:fe:86:e8:36:40:f8:28:78:af:17:
1b:31:fe:24:61:78:43:31:4c:a0:5a:09:ab:9a:5b:db:37:11:
e5:82:85:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 11:07:34 2024 by rpki-client on console-ams.rpki-client.org