Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/y6HVPUeZ3vsJDSELJwsKDVFY7_0.roa
File: y6HVPUeZ3vsJDSELJwsKDVFY7_0.roa (raw, json)
Hash identifier: Wt/wgKGedGxw/iYJwvnR+A/wD9EAtJXcxPAXZEYmEEo=
Subject key identifier: CB:A1:D5:3D:47:99:DE:FB:09:0D:21:0B:27:0B:0A:0D:51:58:EF:FD
Certificate issuer: /CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
Certificate serial: 018CC6B7F2939A4DE1CB51B0835737F44340
Authority key identifier: C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/y6HVPUeZ3vsJDSELJwsKDVFY7_0.roa
Signing time: Mon 01 Jan 2024 20:29:53 +0000
ROA not before: Mon 01 Jan 2024 20:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3249
IP address blocks: 83.166.32.0/19 maxlen: 19
91.236.222.0/24 maxlen: 24
85.29.192.0/18 maxlen: 18
62.65.32.0/19 maxlen: 19
217.159.128.0/17 maxlen: 17
84.50.0.0/16 maxlen: 16
94.246.192.0/20 maxlen: 20
80.235.0.0/17 maxlen: 17
94.246.208.0/21 maxlen: 21
213.180.0.0/19 maxlen: 19
213.168.0.0/19 maxlen: 19
185.43.104.0/22 maxlen: 22
46.131.0.0/16 maxlen: 16
195.250.160.0/19 maxlen: 19
90.190.0.0/15 maxlen: 15
195.50.192.0/19 maxlen: 19
194.106.96.0/19 maxlen: 19
213.219.64.0/18 maxlen: 18
195.50.224.0/19 maxlen: 19
81.20.144.0/20 maxlen: 20
217.71.32.0/20 maxlen: 20
185.20.56.0/22 maxlen: 22
194.126.96.0/19 maxlen: 19
213.35.128.0/17 maxlen: 17
37.157.64.0/18 maxlen: 18
78.110.36.0/22 maxlen: 22
88.196.0.0/16 maxlen: 16
78.110.40.0/22 maxlen: 22
185.40.236.0/22 maxlen: 22
176.46.0.0/17 maxlen: 17
89.221.64.0/21 maxlen: 21
2001:7d0::/32 maxlen: 32
2a01:158::/32 maxlen: 32
2a00:16e0::/32 maxlen: 32
2a01:6da0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:f2:93:9a:4d:e1:cb:51:b0:83:57:37:f4:43:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
Validity
Not Before: Jan 1 20:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cba1d53d4799defb090d210b270b0a0d5158effd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:7a:6a:fb:c9:35:de:5e:da:05:40:9f:14:
5d:a8:81:df:2b:bc:c4:f6:51:a1:31:9c:a7:a3:17:
9b:91:d7:fe:c2:f9:4c:42:0d:75:a0:08:02:08:5b:
55:05:d8:b6:06:35:eb:95:25:18:d1:b4:44:5e:82:
65:90:41:1e:f9:ac:ff:ed:da:0f:9b:3b:36:30:4b:
fc:c8:b4:79:03:64:ad:c5:ca:bb:68:c8:81:d9:3d:
eb:fd:7c:23:c0:a2:5c:50:43:58:c8:35:59:df:53:
b1:a3:0f:00:39:c5:06:8c:15:fb:d7:84:41:d8:e2:
38:25:d3:4c:e7:c8:2f:e9:89:3e:1e:0f:2e:2a:34:
7a:79:f2:09:fa:8b:f6:81:92:dd:16:97:83:ba:88:
e2:37:b3:9d:d2:8a:e4:cf:4c:bb:81:a5:67:e9:4c:
3b:4d:06:94:32:7b:a9:7b:db:50:ab:64:d2:2e:be:
4c:46:fc:90:a1:37:df:d4:c5:d0:56:0f:21:a5:0e:
58:54:4f:6d:03:e5:31:1b:22:1a:1a:3f:b2:24:4d:
7a:21:33:60:9a:6e:ac:6c:7d:16:de:0e:40:a6:f0:
65:ff:d5:b0:cf:80:ff:9a:8d:3d:67:42:64:d6:ef:
63:36:6c:49:7c:1b:0b:44:88:2c:89:58:66:07:03:
03:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A1:D5:3D:47:99:DE:FB:09:0D:21:0B:27:0B:0A:0D:51:58:EF:FD
X509v3 Authority Key Identifier:
keyid:C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/y6HVPUeZ3vsJDSELJwsKDVFY7_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.64.0/18
46.131.0.0/16
62.65.32.0/19
78.110.36.0-78.110.43.255
80.235.0.0/17
81.20.144.0/20
83.166.32.0/19
84.50.0.0/16
85.29.192.0/18
88.196.0.0/16
89.221.64.0/21
90.190.0.0/15
91.236.222.0/24
94.246.192.0-94.246.215.255
176.46.0.0/17
185.20.56.0/22
185.40.236.0/22
185.43.104.0/22
194.106.96.0/19
194.126.96.0/19
195.50.192.0/18
195.250.160.0/19
213.35.128.0/17
213.168.0.0/19
213.180.0.0/19
213.219.64.0/18
217.71.32.0/20
217.159.128.0/17
IPv6:
2001:7d0::/32
2a00:16e0::/32
2a01:158::/32
2a01:6da0::/32
Signature Algorithm: sha256WithRSAEncryption
04:db:5b:13:31:6d:8a:ec:9b:14:c8:40:11:75:c7:75:24:ff:
3a:79:b6:6d:f5:2e:56:7b:2d:fc:14:e6:66:5a:99:af:da:44:
3d:c0:2d:50:de:2b:3b:b2:a8:e3:88:4a:94:8c:47:77:74:e5:
0f:20:2a:76:4f:b3:7c:a7:d3:ef:03:a5:be:3d:8f:71:78:7f:
16:5d:c7:4b:af:ab:6f:3e:33:2e:cf:2c:d7:a0:79:b2:08:60:
0e:13:34:81:08:b6:b6:67:af:ec:bd:cf:f9:ac:e9:a5:d1:ae:
cf:ae:f1:cd:a1:32:18:86:c9:00:9d:16:16:7b:14:87:38:59:
35:7f:f6:8e:51:86:dd:78:e3:8e:8e:14:49:a2:ea:88:7c:df:
1b:7c:45:73:2e:5f:94:a2:08:eb:44:1e:2f:c7:74:ef:dd:f0:
4f:a4:eb:92:e3:a3:00:71:b8:3d:63:8b:da:1e:4f:f3:58:d1:
49:a8:8a:96:84:0e:82:17:9f:fa:0f:df:37:e7:4d:70:0f:66:
50:c0:ef:9a:f8:e3:69:59:42:ed:73:e5:29:f5:c8:ca:86:ad:
2e:d3:7d:c0:5e:06:55:f4:f9:26:db:75:dc:6f:57:f8:f8:b0:
57:ba:e6:07:b6:02:23:5c:97:60:8a:3f:b3:6d:75:c0:58:73:
c3:03:2d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 05:48:37 2024 by rpki-client on console-fra.rpki-client.org