Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/0Pz098o1dS9yk2YskdZRGAl_cJI.roa
File: 0Pz098o1dS9yk2YskdZRGAl_cJI.roa (raw, json)
Hash identifier: N6lMXlPqoen0FCYPz+HwWNeR6ovFG/5LJoekUKmc9ok=
Subject key identifier: D0:FC:F4:F7:CA:35:75:2F:72:93:66:2C:91:D6:51:18:09:7F:70:92
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 018F57BFC577ACA6F0F67D22122837F68116
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/0Pz098o1dS9yk2YskdZRGAl_cJI.roa
Signing time: Wed 08 May 2024 10:28:56 +0000
ROA not before: Wed 08 May 2024 10:28:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207990
IP address blocks: 45.10.236.0/22 maxlen: 32
45.66.176.0/22 maxlen: 32
45.82.96.0/22 maxlen: 32
45.84.228.0/22 maxlen: 32
45.154.192.0/22 maxlen: 32
45.156.224.0/22 maxlen: 32
63.141.36.0/23 maxlen: 32
82.115.213.0/24 maxlen: 32
92.118.208.0/22 maxlen: 32
139.28.120.0/22 maxlen: 32
185.36.254.0/24 maxlen: 32
185.153.149.0/24 maxlen: 24
185.188.63.0/24 maxlen: 32
185.223.248.0/22 maxlen: 32
188.119.154.0/24 maxlen: 32
193.228.58.0/23 maxlen: 32
193.254.27.0/24 maxlen: 32
193.254.28.0/24 maxlen: 32
194.0.133.0/24 maxlen: 32
194.0.136.0/24 maxlen: 32
194.53.70.0/24 maxlen: 32
194.88.143.0/24 maxlen: 32
194.124.239.0/24 maxlen: 32
194.124.240.0/24 maxlen: 32
194.124.247.0/24 maxlen: 32
194.124.248.0/24 maxlen: 32
2a05:6700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:57:bf:c5:77:ac:a6:f0:f6:7d:22:12:28:37:f6:81:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: May 8 10:28:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0fcf4f7ca35752f7293662c91d65118097f7092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:c3:e8:bf:fd:61:f5:33:4a:ba:72:84:2f:
7a:2a:9c:9d:5e:ee:fd:8a:f6:df:ab:89:49:e2:38:
cd:fd:88:34:e4:13:4b:79:02:3c:00:a3:ec:ce:d4:
2b:66:08:68:88:74:56:cd:14:29:3a:3a:1b:82:8c:
85:4e:7e:ce:62:b2:a2:a7:3b:c1:07:c5:ec:db:5a:
c9:52:b3:cc:a7:d6:09:aa:40:5d:89:74:51:94:1e:
40:bf:e6:9a:4a:2f:92:88:69:ea:03:72:55:92:fa:
76:88:ab:0f:35:5e:0f:69:b0:92:08:63:3e:b3:34:
eb:0d:e4:ea:c2:8e:89:de:68:27:99:68:b8:65:22:
82:e2:cd:be:42:fb:a6:ed:5f:69:88:81:b9:ce:50:
36:26:b6:64:65:2b:fe:51:bd:e9:78:b5:5c:60:b9:
b3:06:b9:25:39:3a:c9:b0:ba:2d:12:1d:38:eb:91:
af:1c:89:c1:3a:52:c9:4c:c3:2d:30:68:39:5e:d9:
69:19:88:16:33:a1:76:1d:4c:74:ed:77:cb:15:df:
c6:02:a6:d8:72:25:aa:61:24:a7:57:39:59:18:52:
79:4e:83:0f:27:eb:19:12:5e:50:57:1b:83:77:9e:
db:16:14:0c:36:6c:22:d7:bb:5e:da:57:7a:df:20:
11:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FC:F4:F7:CA:35:75:2F:72:93:66:2C:91:D6:51:18:09:7F:70:92
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/0Pz098o1dS9yk2YskdZRGAl_cJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.236.0/22
45.66.176.0/22
45.82.96.0/22
45.84.228.0/22
45.154.192.0/22
45.156.224.0/22
63.141.36.0/23
82.115.213.0/24
92.118.208.0/22
139.28.120.0/22
185.36.254.0/24
185.153.149.0/24
185.188.63.0/24
185.223.248.0/22
188.119.154.0/24
193.228.58.0/23
193.254.27.0-193.254.28.255
194.0.133.0/24
194.0.136.0/24
194.53.70.0/24
194.88.143.0/24
194.124.239.0-194.124.240.255
194.124.247.0-194.124.248.255
IPv6:
2a05:6700::/29
Signature Algorithm: sha256WithRSAEncryption
14:51:af:2b:e1:5f:7f:bc:31:c0:2c:4d:cd:51:79:1b:86:c8:
46:2e:d3:f8:c0:5d:7f:af:d8:e1:e5:39:b9:3c:47:1b:e2:5b:
60:c6:a1:a2:c4:21:62:9c:33:f9:4a:f4:94:48:44:ef:f5:16:
89:4c:1a:c3:08:f0:c8:07:56:db:49:da:2a:e9:b7:76:8f:ff:
9d:dd:a7:24:9b:33:45:fe:af:1b:30:67:8c:e3:0f:7f:89:57:
8f:12:27:ea:46:26:23:4f:41:2b:ea:31:df:ca:00:93:68:be:
54:dc:36:8d:42:ff:87:d2:29:9c:76:fe:d2:9d:83:53:07:74:
b3:85:13:fd:18:cb:9a:76:c6:9a:9a:01:c9:6a:c5:fc:c7:08:
9b:72:d0:00:38:50:67:74:3d:56:00:9d:5d:e5:56:3b:21:51:
18:f9:a3:a3:c6:57:d3:8a:19:6e:e9:c0:26:ec:a7:01:67:91:
77:05:4f:4d:71:e4:dc:70:a8:d5:6d:e5:d9:38:d3:81:f5:3d:
81:52:0f:c8:d0:f0:93:f9:a5:46:c1:e3:df:77:e1:c9:eb:f9:
d1:e9:46:d5:a5:12:9d:0f:6d:83:92:93:01:ff:92:7c:a8:ea:
95:50:02:e1:47:85:39:e3:8e:ed:ec:b7:4d:49:81:e8:42:2d:
36:f7:d4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:39:23 2024 by rpki-client on console-ams.rpki-client.org