Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/w-EQq7Ku4GQ6SZW0WeW4lU63GX8.roa
File: w-EQq7Ku4GQ6SZW0WeW4lU63GX8.roa (raw, json)
Hash identifier: VeAuIFMCOpHaRNh+ZNjidk3u6U2OfSiuDIAyLBxlMDw=
Subject key identifier: C3:E1:10:AB:B2:AE:E0:64:3A:49:95:B4:59:E5:B8:95:4E:B7:19:7F
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01922249194D86FB041C3290CC52E436127C
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/w-EQq7Ku4GQ6SZW0WeW4lU63GX8.roa
Signing time: Tue 24 Sep 2024 04:27:48 +0000
ROA not before: Tue 24 Sep 2024 04:27:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25515
IP address blocks: 77.51.0.0/16 maxlen: 16
77.51.176.0/21 maxlen: 21
77.51.184.0/21 maxlen: 21
77.51.192.0/21 maxlen: 21
77.51.200.0/21 maxlen: 21
77.51.208.0/21 maxlen: 21
77.51.216.0/21 maxlen: 21
77.51.224.0/21 maxlen: 21
85.94.0.0/19 maxlen: 19
89.109.192.0/18 maxlen: 18
90.154.120.0/21 maxlen: 21
91.188.223.0/24 maxlen: 24
95.72.0.0/15 maxlen: 15
146.19.98.0/24 maxlen: 24
185.141.236.0/23 maxlen: 23
185.202.109.0/24 maxlen: 24
193.3.188.0/24 maxlen: 24
213.140.224.0/19 maxlen: 19
217.107.96.0/21 maxlen: 21
217.107.104.0/23 maxlen: 23
2a00:56c0:40d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:22:49:19:4d:86:fb:04:1c:32:90:cc:52:e4:36:12:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Sep 24 04:27:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3e110abb2aee0643a4995b459e5b8954eb7197f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:00:5e:d6:62:8b:37:80:27:15:df:ea:53:a0:
e0:ca:98:c5:d8:1b:df:8a:dd:c1:12:b7:9b:c9:35:
a1:a7:97:d9:74:1d:7d:2e:19:eb:e5:d1:6f:a8:9f:
af:67:c4:78:07:ea:1e:51:26:84:eb:22:8b:92:5a:
fe:8d:ff:e4:b4:94:c8:d7:a9:ca:7b:f5:5d:8f:82:
c7:35:43:7c:82:ec:25:9f:64:11:09:54:f6:4d:28:
20:44:f0:04:77:04:3f:57:ad:ae:bc:83:b6:7e:86:
b8:80:83:d5:af:38:74:23:80:a5:4d:53:5f:8f:ff:
df:e2:b1:06:3a:1e:51:96:dd:e5:d1:89:f0:18:a4:
9b:11:55:b0:e5:e8:7c:0c:a3:10:b3:0c:e4:67:45:
71:13:a2:55:25:e9:3d:8b:a6:4a:fe:b0:e3:13:db:
39:4c:6a:a3:56:19:fb:cd:a2:e1:92:dc:dd:d9:46:
e7:41:15:c1:69:31:a9:65:1e:a1:23:e4:89:d4:6e:
c7:9f:ea:43:17:a3:29:05:38:e7:b6:c8:ac:8c:73:
0f:12:13:85:8f:cb:1b:7c:10:eb:76:b1:7e:8b:db:
e8:cd:45:ca:85:07:27:31:b0:85:74:48:20:01:94:
31:f6:07:ae:ed:b2:96:d8:77:1f:92:e3:20:9b:a2:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E1:10:AB:B2:AE:E0:64:3A:49:95:B4:59:E5:B8:95:4E:B7:19:7F
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/w-EQq7Ku4GQ6SZW0WeW4lU63GX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.51.0.0/16
85.94.0.0/19
89.109.192.0/18
90.154.120.0/21
91.188.223.0/24
95.72.0.0/15
146.19.98.0/24
185.141.236.0/23
185.202.109.0/24
193.3.188.0/24
213.140.224.0/19
217.107.96.0-217.107.105.255
IPv6:
2a00:56c0:40d::/48
Signature Algorithm: sha256WithRSAEncryption
25:ac:20:fc:4e:aa:e0:61:a5:0b:f8:0d:6f:4d:3f:49:93:d0:
51:20:f9:5c:4b:1c:cc:16:dc:7c:c3:ed:5a:e0:f1:03:af:2b:
96:19:ca:c6:ee:c3:a7:7c:37:f1:c8:c9:87:68:1b:af:7b:c6:
c1:0d:71:6a:76:d3:11:ce:9f:52:1d:fa:c6:c0:60:ab:a0:68:
9d:f0:39:95:cb:9b:bb:dc:51:b1:11:6d:fa:4f:5d:d3:9a:34:
3a:18:90:b3:59:55:45:91:03:9f:34:90:df:af:f8:63:43:9f:
9b:1f:81:b5:a7:68:e6:3c:91:d9:a8:99:60:47:d3:4d:ba:b5:
de:e4:f0:c6:9e:b4:55:f1:79:1c:76:7c:e2:20:3c:e2:81:b1:
24:77:eb:31:30:24:6f:9b:2c:48:c9:b7:e9:85:05:11:4c:1c:
3a:9b:75:2f:d2:02:c1:1f:12:f5:81:e2:55:86:2f:03:bb:81:
d5:86:50:fb:7d:33:39:f8:f5:61:13:c9:a8:df:94:e3:f8:42:
35:cf:ea:3c:22:05:65:54:d4:80:2c:d0:10:b7:e4:4f:58:ce:
55:25:95:0d:90:7b:ec:72:46:37:85:61:6e:9f:1b:a9:5b:04:
1a:7e:56:35:67:a8:c7:c7:46:37:f8:7f:96:35:47:45:66:25:
7e:c1:50:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:04:56 2024 by rpki-client on console-fra.rpki-client.org