Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dw2phuGwwpn5bs13_vmz6ozcngM.roa
File: dw2phuGwwpn5bs13_vmz6ozcngM.roa (raw, json)
Hash identifier: VRwJadkohAc2ZpFjFt2ARvASOl5CQE9HkeMTGdJ9pzA=
Subject key identifier: 77:0D:A9:86:E1:B0:C2:99:F9:6E:CD:77:FE:F9:B3:EA:8C:DC:9E:03
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018DA63007572456BA9229CA8336B8CF777E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dw2phuGwwpn5bs13_vmz6ozcngM.roa
Signing time: Wed 14 Feb 2024 05:56:21 +0000
ROA not before: Wed 14 Feb 2024 05:56:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201021
IP address blocks: 62.76.224.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
194.87.66.0/24 maxlen: 24
194.87.67.0/24 maxlen: 24
194.87.81.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.32.0/24 maxlen: 24
195.58.60.0/24 maxlen: 24
212.192.5.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
212.193.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a6:30:07:57:24:56:ba:92:29:ca:83:36:b8:cf:77:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 14 05:56:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=770da986e1b0c299f96ecd77fef9b3ea8cdc9e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:30:4b:1a:e3:2c:3b:c1:91:f7:d2:91:d2:f5:
82:c0:66:90:90:fa:25:5a:77:73:98:e0:1f:29:bf:
47:a7:8d:08:36:ef:59:d1:53:7c:18:ad:3d:4f:48:
85:90:f1:76:3b:a5:8d:1c:7d:5b:52:15:3b:58:1d:
cd:a5:b8:d0:9b:66:1d:5f:25:cc:59:29:49:45:32:
e3:e2:39:7b:90:90:82:70:76:16:59:86:e8:3f:5f:
85:78:81:ee:7a:5a:72:59:64:a6:54:22:c6:68:30:
00:64:55:d8:c0:45:7a:68:89:6e:a7:d3:9e:42:43:
b1:87:ae:7e:ea:5e:5a:7f:81:d6:73:05:22:a2:51:
68:98:13:9c:5b:ef:ea:8d:9c:88:b1:5d:3b:0d:c5:
1d:3f:1a:f0:c9:b8:35:9d:d9:cd:15:45:9f:97:e8:
36:dc:2b:a0:1f:41:c3:2d:84:4a:3f:04:9f:08:bb:
e6:00:2c:23:91:79:cf:eb:5e:51:3a:78:9e:63:0c:
05:0a:11:3d:3c:4d:75:c0:cc:99:69:c9:e3:e1:cc:
77:48:d5:b9:1c:03:5a:ac:3d:f2:cf:43:6f:ec:59:
85:fe:89:32:7e:42:37:23:73:a1:b9:f2:00:e0:c0:
22:42:b6:f9:87:01:6c:93:b2:42:2f:30:01:dc:c9:
c1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0D:A9:86:E1:B0:C2:99:F9:6E:CD:77:FE:F9:B3:EA:8C:DC:9E:03
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dw2phuGwwpn5bs13_vmz6ozcngM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.224.0/24
193.124.95.0/24
193.124.200.0/24
193.124.202.0/24
194.87.66.0/23
194.87.81.0/24
194.87.149.0/24
194.87.170.0/24
194.87.172.0/24
194.135.18.0/24
194.135.32.0/24
195.58.60.0/24
212.192.5.0/24
212.192.244.0/24
212.193.12.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:65:cc:d9:9b:f2:8e:f0:52:48:22:82:a3:d7:85:73:1c:24:
0e:29:74:a6:f5:a2:28:91:da:7d:56:dd:45:fc:f5:45:4e:f0:
98:c3:be:c8:4e:af:1f:12:f5:5b:13:ef:f8:a5:d4:91:c5:94:
ab:1e:4e:86:b5:6b:67:ad:e6:f7:58:5f:2f:07:89:f6:2f:83:
bc:29:25:82:14:84:f8:c5:e8:b9:13:f5:c0:47:96:06:53:2f:
10:47:c0:29:01:d3:9f:52:98:28:91:69:f9:87:9e:b7:7f:53:
21:0c:2a:e6:d4:e8:6a:c2:c9:df:83:dc:f2:0e:a0:bf:83:68:
ce:2f:a4:0f:f4:b8:aa:0e:b5:c5:bf:a4:f2:c5:15:89:45:48:
99:12:c6:48:8f:c0:e2:52:9a:9b:07:f4:03:9f:ff:2c:8b:35:
29:2d:fc:18:38:49:44:9f:de:a0:c6:60:71:bb:9c:91:77:42:
d2:a1:1f:f8:ec:95:9e:f0:d3:72:9c:91:2a:30:14:4f:29:1b:
d1:ec:38:a7:51:db:e4:82:3b:6e:d6:2e:17:6e:87:a1:52:c0:
4a:00:45:51:2b:ff:44:4d:6f:5a:cf:01:3b:86:5c:b1:15:6f:
21:6e:2c:9e:aa:fb:15:af:17:fa:67:17:9d:94:8c:c7:47:19:
ef:ca:8d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:00:27 2024 by rpki-client on console-ams.rpki-client.org