Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/wsyGDNri_u8T5Df_Q849pyoqk6g.roa
File: wsyGDNri_u8T5Df_Q849pyoqk6g.roa (raw, json)
Hash identifier: b7KRy5fhKH5ka1/6Fggxx8Hu7ZPGDVsXDyxceWQ2flU=
Subject key identifier: C2:CC:86:0C:DA:E2:FE:EF:13:E4:37:FF:43:CE:3D:A7:2A:2A:93:A8
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 018CC9BCDD28F9A2DF60A46021625F530D6F
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/wsyGDNri_u8T5Df_Q849pyoqk6g.roa
Signing time: Tue 02 Jan 2024 10:34:06 +0000
ROA not before: Tue 02 Jan 2024 10:34:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51468
IP address blocks: 91.221.196.0/23 maxlen: 23
193.202.110.0/24 maxlen: 24
104.37.32.0/21 maxlen: 21
195.206.121.0/24 maxlen: 24
185.164.12.0/22 maxlen: 22
185.10.10.0/24 maxlen: 24
77.111.240.0/22 maxlen: 22
185.10.11.0/24 maxlen: 24
91.198.169.0/24 maxlen: 24
185.10.8.0/23 maxlen: 23
195.47.247.0/24 maxlen: 24
46.30.208.0/21 maxlen: 21
2001:67c:28cc::/48 maxlen: 48
2a02:2350::/32 maxlen: 32
2a03:53c0::/32 maxlen: 32
2001:67c:3c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:dd:28:f9:a2:df:60:a4:60:21:62:5f:53:0d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: Jan 2 10:34:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2cc860cdae2feef13e437ff43ce3da72a2a93a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:35:65:f5:f2:c1:6e:8a:9b:72:dc:f2:58:1d:
08:8e:3e:81:34:de:dd:c9:07:93:1d:0b:f8:e8:59:
b8:65:4e:26:33:0a:70:36:c6:d8:8d:4f:0c:7c:7b:
be:fe:68:94:f5:13:90:dd:68:dc:a7:c0:f4:2a:55:
2d:df:ce:5e:d4:96:4b:9a:7b:5a:c7:13:e3:70:51:
eb:4e:a5:6e:2a:8e:d3:37:8d:fd:36:56:c0:15:7d:
0c:c4:8d:3c:d1:76:55:e5:ea:26:be:99:5e:ac:b0:
99:78:9b:cd:e9:21:de:61:d7:8c:c7:d1:c9:df:79:
76:c5:f0:9c:bd:f1:64:67:ba:10:15:d8:82:01:9d:
50:61:5c:ff:04:dc:d8:23:b5:86:36:48:7f:cd:7b:
89:69:7a:1f:38:a0:98:90:34:6c:ac:3d:5e:ec:02:
96:8d:c5:c1:f4:29:30:0b:b3:f9:9b:a8:cc:1c:43:
92:ee:06:64:ea:95:e7:4b:a2:b9:0b:ae:92:ac:2f:
cf:63:51:0c:73:11:03:e8:9f:c3:79:fb:86:46:41:
ed:99:e9:b4:3a:88:9b:d5:a5:43:99:7c:d5:8a:c5:
94:2b:24:a5:ef:cf:fa:e1:8d:04:5c:a0:cb:9e:5d:
ce:f5:ee:c0:b2:95:0b:9a:1e:18:8a:7e:3e:c1:54:
5f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CC:86:0C:DA:E2:FE:EF:13:E4:37:FF:43:CE:3D:A7:2A:2A:93:A8
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/wsyGDNri_u8T5Df_Q849pyoqk6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.208.0/21
77.111.240.0/22
91.198.169.0/24
91.221.196.0/23
104.37.32.0/21
185.10.8.0/22
185.164.12.0/22
193.202.110.0/24
195.47.247.0/24
195.206.121.0/24
IPv6:
2001:67c:3c0::/48
2001:67c:28cc::/48
2a02:2350::/32
2a03:53c0::/32
Signature Algorithm: sha256WithRSAEncryption
78:03:36:80:cf:ab:b7:37:70:6d:27:fb:b8:5c:4b:b9:54:1f:
a6:4d:d6:74:24:70:aa:c9:25:8c:5f:5f:b2:83:c3:6e:cd:c7:
53:50:7d:e6:98:d6:15:59:30:b5:04:59:43:91:90:1d:02:8f:
4a:19:9f:ea:bf:39:51:5e:45:e3:f3:43:23:6c:a1:b6:81:e1:
a5:bc:bc:15:67:7f:67:d3:80:f6:2d:ee:87:dc:68:b8:de:96:
9c:c5:01:da:8c:b6:1b:ad:d6:dd:9e:59:e2:5b:28:f8:eb:d5:
15:1f:fb:4c:63:1f:18:b5:67:e8:2b:96:f0:ef:28:ee:e6:e5:
3c:2b:5d:80:6e:45:2b:f6:27:35:6b:c4:3f:df:ff:bc:5a:73:
82:94:87:bd:fe:76:a1:dc:37:e5:17:b9:37:9f:bd:79:e1:2d:
0f:39:42:50:88:b9:11:41:ed:bd:05:eb:39:19:8a:11:f6:74:
99:ce:b0:0a:f3:61:f8:23:94:9e:1a:28:28:94:13:0c:ee:12:
29:90:13:6d:a2:11:ef:6b:73:cf:5a:c2:42:db:70:ac:ca:d7:
83:ba:f9:51:77:82:e5:28:9b:d5:c8:6c:d9:fb:83:e6:e0:eb:
bf:be:b5:b7:df:b6:bc:b2:ad:9d:22:49:cd:6d:e2:e2:01:fb:
f4:ff:10:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 03:27:22 2024 by rpki-client on console-fra.rpki-client.org