Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/RBH5liC7ARSlQo3syaIrY9S4cEI.roa
File: RBH5liC7ARSlQo3syaIrY9S4cEI.roa (raw, json)
Hash identifier: Y4gCTNQxY7Fd/zUWq//1gDPBhV/yNBrWBtiEpktgdB0=
Subject key identifier: 44:11:F9:96:20:BB:01:14:A5:42:8D:EC:C9:A2:2B:63:D4:B8:70:42
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 01903BA82819608E2F4276F43468BE6361F4
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/RBH5liC7ARSlQo3syaIrY9S4cEI.roa
Signing time: Fri 21 Jun 2024 16:36:34 +0000
ROA not before: Fri 21 Jun 2024 16:36:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34659
IP address blocks: 5.104.192.0/21 maxlen: 24
37.32.56.0/21 maxlen: 24
77.247.104.0/22 maxlen: 24
83.136.160.0/21 maxlen: 25
85.31.168.0/22 maxlen: 24
178.21.176.0/21 maxlen: 24
178.22.0.0/21 maxlen: 24
185.3.196.0/22 maxlen: 24
185.45.228.0/22 maxlen: 24
185.83.236.0/22 maxlen: 24
185.96.156.0/22 maxlen: 24
185.153.96.0/22 maxlen: 24
185.185.4.0/22 maxlen: 24
185.185.8.0/22 maxlen: 24
192.166.204.0/22 maxlen: 24
193.36.52.0/22 maxlen: 24
194.104.16.0/22 maxlen: 24
194.169.176.0/22 maxlen: 24
194.180.116.0/22 maxlen: 24
213.41.240.0/21 maxlen: 24
2a00:1db8::/29 maxlen: 48
2a07:8580::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3b:a8:28:19:60:8e:2f:42:76:f4:34:68:be:63:61:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: Jun 21 16:36:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4411f99620bb0114a5428decc9a22b63d4b87042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bb:81:b1:2b:ac:a4:6e:57:25:b2:3f:26:6c:
b5:4c:36:b3:96:46:77:8c:2c:3f:82:31:8d:97:87:
84:5f:e2:2f:dd:6b:7f:ff:be:f0:e3:44:3c:e4:9e:
6b:58:1f:98:9a:3f:4c:9b:91:df:44:f0:55:e6:47:
b2:32:14:78:78:f6:7a:9f:f9:41:25:97:1d:de:a8:
c5:ef:cb:80:fe:fe:b9:22:d2:65:8d:f0:c5:60:3c:
1b:cb:5e:08:44:05:ae:5c:89:73:3e:8d:63:73:2d:
b9:b5:31:57:94:d3:93:85:71:df:59:45:37:26:04:
83:6b:96:aa:c5:c4:2a:3f:d9:36:5f:c9:29:03:4f:
cb:3f:c1:ad:3f:7e:32:bf:9f:8e:42:8b:81:a5:58:
eb:31:f8:31:d3:45:0a:5b:64:72:4e:c1:24:5a:78:
f2:f8:e3:7f:54:a9:c1:f8:1f:0b:77:08:d8:fa:8e:
dd:0b:26:a5:b1:24:26:56:68:cd:a8:3d:f6:30:48:
59:19:76:38:2a:5a:a2:35:3b:ed:8d:ef:98:1c:61:
c8:0c:f8:7f:8e:ae:3d:5a:45:d2:6c:63:b3:88:b6:
44:e3:4a:a9:d3:b2:e3:54:43:de:cd:a2:92:d6:a7:
02:c6:03:9c:a7:34:da:4a:cf:be:41:7e:a9:db:13:
95:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:11:F9:96:20:BB:01:14:A5:42:8D:EC:C9:A2:2B:63:D4:B8:70:42
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/RBH5liC7ARSlQo3syaIrY9S4cEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.192.0/21
37.32.56.0/21
77.247.104.0/22
83.136.160.0/21
85.31.168.0/22
178.21.176.0/21
178.22.0.0/21
185.3.196.0/22
185.45.228.0/22
185.83.236.0/22
185.96.156.0/22
185.153.96.0/22
185.185.4.0-185.185.11.255
192.166.204.0/22
193.36.52.0/22
194.104.16.0/22
194.169.176.0/22
194.180.116.0/22
213.41.240.0/21
IPv6:
2a00:1db8::/29
2a07:8580::/29
Signature Algorithm: sha256WithRSAEncryption
34:4a:cd:96:de:0d:00:3c:07:6f:68:30:f1:b1:d0:6b:be:37:
b3:10:5f:b7:af:c8:79:5d:c1:76:74:2b:87:4e:8c:f1:6c:74:
45:b9:ca:c0:98:e7:aa:65:9e:ed:39:06:69:3f:25:51:c9:e7:
8c:86:00:b9:61:25:07:da:45:d7:30:8e:e1:fe:19:7e:4d:ae:
c3:b7:2c:f3:f6:30:ce:b7:17:65:91:f1:e6:20:bc:07:c3:ea:
dc:2f:85:72:2d:aa:91:83:ad:9d:cf:3e:c0:72:e1:a9:b3:a0:
27:a2:a6:25:b2:52:61:c4:93:c8:a2:26:fa:aa:94:fa:75:36:
0d:8f:ea:e8:38:2d:d5:f1:29:db:43:94:31:99:ff:75:57:ce:
16:2e:cb:69:54:11:59:ff:49:a1:45:be:c8:e0:b7:d0:5a:03:
59:26:34:c0:28:52:6f:fc:82:af:19:04:3b:9d:d7:23:b9:23:
c9:c6:44:3c:70:31:7f:5b:26:3e:6a:9e:b6:03:71:7a:92:5f:
90:4c:f6:c8:dd:15:7b:c4:30:0d:4a:84:09:a4:52:d4:c5:e0:
67:a1:1d:13:e6:ac:4c:18:d2:9f:76:ea:9c:17:d6:e6:a4:ae:
49:9e:9d:f2:1b:86:83:e6:03:fb:f7:2f:4f:75:47:6e:d3:0c:
00:bf:25:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 16:49:26 2024 by rpki-client on console-fra.rpki-client.org