Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/OlAmWyDsDtHwy4WOhM_NLXVZB3w.roa
File: OlAmWyDsDtHwy4WOhM_NLXVZB3w.roa (raw, json)
Hash identifier: hGB6d2QqMO8JA7Df/J4ucFzv3ltmNhmeTcMCiCbtXf8=
Subject key identifier: 3A:50:26:5B:20:EC:0E:D1:F0:CB:85:8E:84:CF:CD:2D:75:59:07:7C
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018ECBEE77E9F02E9EA3287BEF60ED713E89
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/OlAmWyDsDtHwy4WOhM_NLXVZB3w.roa
Signing time: Thu 11 Apr 2024 06:53:06 +0000
ROA not before: Thu 11 Apr 2024 06:53:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25490
IP address blocks: 62.183.0.0/19 maxlen: 19
62.183.32.0/20 maxlen: 20
62.183.48.0/23 maxlen: 23
62.183.50.0/24 maxlen: 24
62.183.52.0/22 maxlen: 22
62.183.56.0/22 maxlen: 22
62.183.60.0/22 maxlen: 22
62.183.64.0/21 maxlen: 21
62.183.64.0/24 maxlen: 24
62.183.72.0/22 maxlen: 22
62.183.88.0/22 maxlen: 22
62.183.96.0/22 maxlen: 22
83.239.0.0/18 maxlen: 18
83.239.0.0/20 maxlen: 20
83.239.16.0/20 maxlen: 20
83.239.32.0/19 maxlen: 19
83.239.32.0/21 maxlen: 21
83.239.40.0/22 maxlen: 22
83.239.48.0/20 maxlen: 20
83.239.64.0/19 maxlen: 19
83.239.96.0/20 maxlen: 20
83.239.200.0/21 maxlen: 24
83.239.224.0/20 maxlen: 20
83.239.240.0/22 maxlen: 22
83.239.244.0/22 maxlen: 22
85.172.0.0/19 maxlen: 19
85.172.32.0/19 maxlen: 19
85.172.64.0/21 maxlen: 21
85.172.72.0/22 maxlen: 22
85.172.79.0/24 maxlen: 24
85.172.82.0/23 maxlen: 23
85.172.84.0/22 maxlen: 22
85.172.96.0/20 maxlen: 20
85.172.160.0/21 maxlen: 21
85.173.4.0/22 maxlen: 22
85.173.144.0/20 maxlen: 20
85.174.128.0/18 maxlen: 18
85.174.143.0/24 maxlen: 24
85.174.224.0/20 maxlen: 20
85.174.240.0/20 maxlen: 20
85.175.0.0/16 maxlen: 23
85.175.0.0/19 maxlen: 19
85.175.32.0/21 maxlen: 21
85.175.46.0/24 maxlen: 24
85.175.62.0/23 maxlen: 23
85.175.65.0/24 maxlen: 24
85.175.66.0/23 maxlen: 23
85.175.71.0/24 maxlen: 24
85.175.72.0/22 maxlen: 22
85.175.82.0/23 maxlen: 23
85.175.91.0/24 maxlen: 24
85.175.96.0/22 maxlen: 22
85.175.100.0/23 maxlen: 23
85.175.152.0/23 maxlen: 23
85.175.170.0/23 maxlen: 23
85.175.192.0/20 maxlen: 20
85.175.216.0/22 maxlen: 22
85.175.226.0/23 maxlen: 23
85.175.236.0/24 maxlen: 24
94.233.144.0/21 maxlen: 21
94.233.160.0/20 maxlen: 20
109.172.72.0/24 maxlen: 24
2a02:8040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cb:ee:77:e9:f0:2e:9e:a3:28:7b:ef:60:ed:71:3e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 11 06:53:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a50265b20ec0ed1f0cb858e84cfcd2d7559077c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ac:6a:4c:6d:5e:37:71:60:27:f2:40:d3:62:
bf:82:fd:c7:ec:58:e4:6d:84:04:a7:a6:f1:74:0d:
a4:67:17:98:ab:72:8a:4f:dc:32:b1:4d:a1:12:32:
8c:20:f1:a5:7c:e2:c4:1b:ad:cd:12:6e:27:b4:cb:
cc:a5:5f:09:34:85:aa:6a:28:6d:c6:ff:24:3a:f9:
4d:a0:c9:8d:07:5e:40:e9:6b:6b:d3:fa:70:c2:8b:
1b:46:66:4f:67:33:ad:9b:9d:e3:ae:04:b9:c6:ef:
7b:ab:45:2e:fb:bb:26:a6:47:0d:f9:ad:97:ef:e1:
c9:a2:9f:4f:75:59:66:75:bb:eb:de:44:5a:2d:3a:
8f:4f:7d:c7:3d:fc:a2:db:5c:f0:73:62:5c:1c:08:
f9:4b:68:c7:fb:ff:24:01:46:7f:51:d1:1e:dc:62:
fe:b8:c8:f7:4c:db:f1:a4:4d:0f:4f:a9:2e:4d:91:
9b:79:cc:cf:30:99:96:5d:88:bb:09:9f:c2:7e:c4:
01:e8:60:91:59:f5:90:a5:e7:95:d5:2a:b2:57:a0:
bd:7c:b8:6f:29:3b:5e:6c:6c:a8:81:f3:9a:b9:82:
84:12:5b:f3:6b:ad:8e:67:6d:2a:38:bb:d7:46:ba:
a2:3a:b4:30:2a:69:cc:a8:6a:4f:9e:2f:40:2a:da:
94:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:50:26:5B:20:EC:0E:D1:F0:CB:85:8E:84:CF:CD:2D:75:59:07:7C
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/OlAmWyDsDtHwy4WOhM_NLXVZB3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.183.0.0-62.183.50.255
62.183.52.0-62.183.75.255
62.183.88.0/22
62.183.96.0/22
83.239.0.0-83.239.111.255
83.239.200.0/21
83.239.224.0-83.239.247.255
85.172.0.0-85.172.75.255
85.172.79.0/24
85.172.82.0-85.172.87.255
85.172.96.0/20
85.172.160.0/21
85.173.4.0/22
85.173.144.0/20
85.174.128.0/18
85.174.224.0-85.175.255.255
94.233.144.0/21
94.233.160.0/20
109.172.72.0/24
IPv6:
2a02:8040::/32
Signature Algorithm: sha256WithRSAEncryption
7c:48:b1:e4:53:d4:f2:64:b5:7b:cc:af:63:49:f1:78:30:08:
34:5b:88:8f:5d:f5:db:0c:a7:44:66:bd:a9:7e:8a:d2:56:e2:
86:c9:9e:8a:f0:e7:42:5f:36:1c:c4:cf:40:e4:28:d7:4e:80:
bb:68:f2:1c:2e:bd:4f:ba:21:d8:93:44:22:77:72:51:9d:22:
87:da:a0:1a:0c:89:99:bc:00:c7:da:e1:94:6e:06:fb:0a:5b:
fa:76:5e:dc:fd:56:23:dd:55:16:e5:9f:54:a3:5e:dd:02:7b:
45:6e:ca:e3:9f:1a:f2:fb:4e:ac:ca:0e:3f:a9:64:ca:2c:46:
1c:bb:29:b5:46:c2:42:57:39:da:d3:06:1f:32:f3:46:21:a1:
a2:ac:b7:24:3c:ec:0a:9d:0e:43:e3:49:32:92:5f:a4:ab:48:
65:14:d1:9d:fe:a4:32:25:9f:e7:bd:29:f9:af:ae:99:ef:b8:
1f:96:bc:f6:15:3a:1c:a5:15:74:8b:5c:76:25:b3:5e:38:d0:
d0:53:42:38:66:bd:14:a4:e0:c7:99:3e:2b:73:91:7c:65:c4:
3f:56:bb:34:f3:c5:5f:28:f8:a8:00:2f:b5:b5:82:5a:11:f7:
3f:d3:7a:6a:e6:b1:f6:50:19:6b:57:24:f1:e4:19:05:35:1e:
91:fe:47:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:49:03 2024 by rpki-client on console-fra.rpki-client.org