Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/s2NePIH4u2oLs3zqGouCdDQweJY.roa
File: s2NePIH4u2oLs3zqGouCdDQweJY.roa (raw, json)
Hash identifier: 91Pl+84T1IIsYt+jl/+GXq7IrPcL6Exj43lb+M2O8uE=
Subject key identifier: B3:63:5E:3C:81:F8:BB:6A:0B:B3:7C:EA:1A:8B:82:74:34:30:78:96
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 0190C538D4CFB719E8DB538C37E7A781AA8D
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/s2NePIH4u2oLs3zqGouCdDQweJY.roa
Signing time: Thu 18 Jul 2024 09:42:34 +0000
ROA not before: Thu 18 Jul 2024 09:42:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203020
IP address blocks: 5.154.174.0/24 maxlen: 24
45.10.192.0/24 maxlen: 32
45.10.193.0/24 maxlen: 32
45.95.24.0/22 maxlen: 32
45.144.88.0/22 maxlen: 24
45.149.28.0/22 maxlen: 24
45.153.157.0/24 maxlen: 24
45.153.158.0/23 maxlen: 32
45.156.224.0/22 maxlen: 32
80.246.30.0/24 maxlen: 32
86.105.183.0/24 maxlen: 32
87.239.255.0/24 maxlen: 32
89.35.249.0/24 maxlen: 32
89.40.24.0/24 maxlen: 32
89.44.205.0/24 maxlen: 32
91.228.216.0/24 maxlen: 24
94.46.206.0/24 maxlen: 32
103.204.222.0/23 maxlen: 32
185.36.254.0/24 maxlen: 32
185.96.162.0/24 maxlen: 32
185.108.104.0/24 maxlen: 32
185.108.105.0/24 maxlen: 32
185.147.140.0/22 maxlen: 32
185.152.36.0/22 maxlen: 32
185.152.248.0/22 maxlen: 32
185.153.151.0/24 maxlen: 32
185.160.44.0/22 maxlen: 32
185.166.84.0/24 maxlen: 32
185.184.228.0/24 maxlen: 32
185.188.61.0/24 maxlen: 24
185.201.188.0/24 maxlen: 24
185.217.64.0/22 maxlen: 22
185.242.217.0/24 maxlen: 24
188.119.154.0/24 maxlen: 32
193.36.89.0/24 maxlen: 32
195.47.194.0/24 maxlen: 32
2a01:4740::/32 maxlen: 32
2a05:28c0::/29 maxlen: 32
2a05:f4c0::/29 maxlen: 29
2a06:3040::/29 maxlen: 48
2a06:46c0::/29 maxlen: 32
2a06:4a00::/29 maxlen: 32
2a06:5000::/29 maxlen: 32
2a06:5700::/29 maxlen: 32
2a06:df80::/29 maxlen: 29
2a06:e480::/29 maxlen: 29
2a07:4780::/29 maxlen: 29
2a07:9c80::/29 maxlen: 29
2a07:f2c0::/29 maxlen: 29
2a0a:3080::/29 maxlen: 29
2a0b:3f40::/29 maxlen: 29
2a0c:d8c0::/29 maxlen: 29
2a0c:ec40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c5:38:d4:cf:b7:19:e8:db:53:8c:37:e7:a7:81:aa:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jul 18 09:42:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3635e3c81f8bb6a0bb37cea1a8b827434307896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9d:b5:8f:1d:a7:10:97:dc:b8:39:0b:0b:51:
d0:86:d4:44:26:5f:b8:3a:90:6c:b6:0b:83:6a:d1:
e0:05:46:6a:ab:09:08:40:42:0e:1a:1d:44:29:2a:
c7:25:22:5a:7e:a7:71:5f:16:88:bd:11:88:58:3c:
45:31:11:ce:d9:25:74:90:35:1b:95:dd:ab:23:46:
7d:a9:9d:28:4f:8b:16:f7:0f:d7:36:a8:95:4b:b5:
11:00:c0:6d:f3:0b:bc:b3:c3:6e:18:98:7f:df:28:
85:da:27:c2:33:79:2a:93:62:09:bc:52:9c:6d:28:
49:59:3e:de:af:62:f9:be:da:5b:36:9e:9e:0c:5a:
df:5f:30:4e:a3:d8:f3:5e:aa:48:56:80:7d:0e:25:
37:5f:b8:12:66:93:a2:8c:2d:f1:61:5c:1f:f0:45:
1e:a3:6d:64:57:db:42:ef:05:e8:94:ff:e4:17:50:
74:01:7c:aa:a1:a4:45:f0:c7:af:e1:c4:7c:1d:81:
8c:9c:d3:b4:99:00:07:22:2d:51:ed:38:dc:5a:32:
ad:2c:40:0c:04:e4:2b:9f:42:57:d6:1a:74:5b:cf:
49:f9:c9:be:d3:aa:e6:c2:88:91:8d:24:e2:6d:3a:
f7:ce:73:58:3c:4a:e9:d5:62:e4:53:10:4b:4c:1e:
64:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:63:5E:3C:81:F8:BB:6A:0B:B3:7C:EA:1A:8B:82:74:34:30:78:96
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/s2NePIH4u2oLs3zqGouCdDQweJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
45.10.192.0/23
45.95.24.0/22
45.144.88.0/22
45.149.28.0/22
45.153.157.0-45.153.159.255
45.156.224.0/22
80.246.30.0/24
86.105.183.0/24
87.239.255.0/24
89.35.249.0/24
89.40.24.0/24
89.44.205.0/24
91.228.216.0/24
94.46.206.0/24
103.204.222.0/23
185.36.254.0/24
185.96.162.0/24
185.108.104.0/23
185.147.140.0/22
185.152.36.0/22
185.152.248.0/22
185.153.151.0/24
185.160.44.0/22
185.166.84.0/24
185.184.228.0/24
185.188.61.0/24
185.201.188.0/24
185.217.64.0/22
185.242.217.0/24
188.119.154.0/24
193.36.89.0/24
195.47.194.0/24
IPv6:
2a01:4740::/32
2a05:28c0::/29
2a05:f4c0::/29
2a06:3040::/29
2a06:46c0::/29
2a06:4a00::/29
2a06:5000::/29
2a06:5700::/29
2a06:df80::/29
2a06:e480::/29
2a07:4780::/29
2a07:9c80::/29
2a07:f2c0::/29
2a0a:3080::/29
2a0b:3f40::/29
2a0c:d8c0::/29
2a0c:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
b9:b8:10:c2:3d:82:75:7e:87:0c:d7:cd:d1:c0:40:a0:b6:dc:
73:ec:1e:83:34:a7:95:db:a0:80:a4:03:2e:44:11:bb:04:cc:
02:a6:f5:62:12:c0:8a:1e:03:9c:82:be:ab:ff:2a:f7:d2:b8:
2a:f7:c2:27:9b:83:91:62:eb:22:67:82:2e:a9:79:40:ba:00:
21:74:8a:ee:33:09:7d:44:2c:56:73:c7:82:25:82:83:bf:58:
66:97:3a:be:8b:13:8b:03:bc:5f:56:7d:01:14:7a:ba:ad:92:
98:88:3e:aa:35:9a:8f:78:9b:7e:dd:70:de:b5:d6:dd:5e:1a:
b9:29:6c:11:27:04:2a:0a:34:9f:0c:9d:46:15:07:0a:a2:c8:
38:b0:5e:4b:c0:33:66:f2:24:68:5c:07:1e:78:f9:0e:3e:b1:
f6:67:fa:d9:6c:97:eb:bb:e0:82:7b:ed:d6:6e:83:c5:da:c4:
b3:4f:99:90:6f:68:1b:1e:fc:e8:d0:10:ea:ed:d1:b8:d0:77:
50:7c:0d:3a:22:d9:ec:4c:30:8a:58:9d:ce:df:df:8a:0a:64:
b1:78:98:ef:d9:0f:38:08:12:68:30:78:d2:53:b2:35:24:41:
2f:07:d6:52:b5:7a:01:5c:25:05:d3:1d:de:51:4a:2a:19:75:
c6:8b:28:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:58:27 2024 by rpki-client on console-ams.rpki-client.org