Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/Wj2-_iDAhkduQISv-VCMD8nweHg.roa
File: Wj2-_iDAhkduQISv-VCMD8nweHg.roa (raw, json)
Hash identifier: fvPAm2Fk64jThTSImjR8fGN9k80rMq6JXvOkUr/DrvY=
Subject key identifier: 5A:3D:BE:FE:20:C0:86:47:6E:40:84:AF:F9:50:8C:0F:C9:F0:78:78
Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89
Certificate serial: 019053F35548E00E7233ACF7F2ECF67118D1
Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/Wj2-_iDAhkduQISv-VCMD8nweHg.roa
Signing time: Wed 26 Jun 2024 09:49:34 +0000
ROA not before: Wed 26 Jun 2024 09:49:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8953
IP address blocks: 37.156.224.0/24 maxlen: 24
37.251.208.0/20 maxlen: 24
62.217.192.0/18 maxlen: 24
86.106.83.0/24 maxlen: 24
89.37.97.0/24 maxlen: 24
89.39.71.0/24 maxlen: 24
89.39.81.0/24 maxlen: 24
89.42.27.0/24 maxlen: 24
92.82.176.0/20 maxlen: 20
92.114.38.0/24 maxlen: 24
92.114.82.0/24 maxlen: 24
93.113.56.0/24 maxlen: 24
93.115.244.0/23 maxlen: 24
93.122.128.0/17 maxlen: 24
109.166.128.0/17 maxlen: 24
109.166.212.0/24 maxlen: 24
128.127.112.0/20 maxlen: 24
185.53.196.0/22 maxlen: 24
185.133.64.0/24 maxlen: 24
2a02:a58::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 22:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:f3:55:48:e0:0e:72:33:ac:f7:f2:ec:f6:71:18:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89
Validity
Not Before: Jun 26 09:49:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a3dbefe20c086476e4084aff9508c0fc9f07878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:fd:21:15:e2:25:00:60:08:46:43:da:d6:
59:31:aa:83:9e:76:f3:6d:94:1a:e4:7e:7f:de:49:
92:8f:6b:8a:6d:80:ce:3c:7a:62:87:64:1a:ec:b3:
ff:8c:57:99:1a:3f:5b:27:b6:2d:c5:7f:1c:12:62:
ab:fd:5b:5d:dc:7d:8e:3a:cd:55:e9:fa:9c:1f:4b:
9f:09:62:eb:db:a5:75:08:3b:31:90:0f:39:b8:2c:
31:ee:93:79:50:fb:e9:53:d2:7c:12:14:f8:e1:b1:
9b:3f:e8:c0:e5:de:9a:17:99:e6:7d:0f:43:39:1c:
81:0e:2e:c9:6d:a6:93:bc:c8:57:53:0d:28:0a:2e:
d3:40:d1:51:01:5f:a1:cb:57:51:85:81:c3:24:c2:
7f:68:2f:03:ce:cd:07:59:85:86:5e:91:ba:1f:72:
99:d6:42:07:11:d4:b3:01:57:63:85:3e:66:a6:6e:
09:30:e3:95:5d:ed:50:52:ba:af:6f:3d:71:84:06:
d5:2f:e1:38:77:c9:ec:ec:4b:0b:fc:db:f3:c1:35:
4e:26:93:90:91:40:04:26:b0:50:7f:f5:1a:b9:08:
ce:f7:28:e6:a1:2b:23:3d:fe:5a:25:d1:a9:1c:1c:
c1:5e:7f:45:78:a3:df:86:f9:31:29:50:28:c4:a1:
c5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3D:BE:FE:20:C0:86:47:6E:40:84:AF:F9:50:8C:0F:C9:F0:78:78
X509v3 Authority Key Identifier:
keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/Wj2-_iDAhkduQISv-VCMD8nweHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.224.0/24
37.251.208.0/20
62.217.192.0/18
86.106.83.0/24
89.37.97.0/24
89.39.71.0/24
89.39.81.0/24
89.42.27.0/24
92.82.176.0/20
92.114.38.0/24
92.114.82.0/24
93.113.56.0/24
93.115.244.0/23
93.122.128.0/17
109.166.128.0/17
128.127.112.0/20
185.53.196.0/22
185.133.64.0/24
IPv6:
2a02:a58::/32
Signature Algorithm: sha256WithRSAEncryption
1c:86:2b:58:c4:0d:78:12:20:ec:d5:43:a2:45:9f:03:50:a6:
40:7f:33:09:37:88:09:1f:84:8f:22:64:26:2e:0f:2c:7e:a1:
0b:6a:64:2a:31:40:77:d7:54:47:59:8c:84:93:49:2f:60:0a:
13:d4:20:91:30:51:51:5d:06:8d:25:2f:d6:ee:7a:53:ab:2b:
bc:67:5c:be:66:0f:ab:d3:44:5b:c8:3b:3c:4b:dc:8f:9b:aa:
44:17:41:21:87:93:ae:98:54:8f:44:c6:5b:0a:c5:c2:44:73:
90:c5:1a:77:0e:8c:76:f8:81:62:cf:5f:c9:b0:c6:da:67:37:
31:21:e8:77:e8:a7:7e:30:41:af:cd:0d:0d:4b:af:16:62:9e:
c8:51:d1:1c:eb:cd:ec:66:2c:6d:bc:be:21:45:89:38:e2:72:
f1:cb:b1:2a:c5:a1:c0:da:de:77:53:6e:84:81:d5:f8:3b:05:
10:06:1b:79:c0:76:bf:55:62:83:46:e1:77:36:fe:60:ec:42:
cb:45:5a:3c:ac:61:33:ec:78:dc:35:27:f2:85:65:6d:0e:5a:
4c:6b:20:e4:44:74:7c:24:8c:a1:5a:29:35:7f:e8:8f:72:96:
a1:b4:07:74:8c:67:56:60:c4:87:21:53:da:29:b2:b1:64:33:
5e:b0:57:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 01:23:43 2024 by rpki-client on console-ams.rpki-client.org