Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/taWWEUdHrFiauP2blDydugVkR4c.roa
File: taWWEUdHrFiauP2blDydugVkR4c.roa (raw, json)
Hash identifier: +aq4pU5f8J6UY3PzOArjj0cvjod/OmRIdIe2lqqkIps=
Subject key identifier: B5:A5:96:11:47:47:AC:58:9A:B8:FD:9B:94:3C:9D:BA:05:64:47:87
Certificate issuer: /CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Certificate serial: 018CC8019342931B92E7166D710A51A19E76
Authority key identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/taWWEUdHrFiauP2blDydugVkR4c.roa
Signing time: Tue 02 Jan 2024 02:29:55 +0000
ROA not before: Tue 02 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44143
IP address blocks: 188.120.112.0/22 maxlen: 22
37.19.104.0/21 maxlen: 21
188.120.118.0/24 maxlen: 24
188.120.117.0/24 maxlen: 24
37.19.104.0/22 maxlen: 22
188.120.116.0/22 maxlen: 22
188.120.116.0/24 maxlen: 24
188.120.113.0/24 maxlen: 24
188.120.112.0/21 maxlen: 21
37.19.110.0/24 maxlen: 24
37.19.108.0/23 maxlen: 23
37.19.107.0/24 maxlen: 24
188.120.119.0/24 maxlen: 24
95.86.48.0/21 maxlen: 21
185.37.24.0/24 maxlen: 24
185.37.24.0/22 maxlen: 22
185.37.27.0/24 maxlen: 24
185.37.26.0/24 maxlen: 24
185.37.25.0/24 maxlen: 24
188.120.96.0/24 maxlen: 24
188.120.96.0/20 maxlen: 20
188.120.96.0/21 maxlen: 21
188.120.98.0/24 maxlen: 24
188.120.97.0/24 maxlen: 24
188.120.104.0/21 maxlen: 21
188.120.103.0/24 maxlen: 24
188.120.102.0/24 maxlen: 24
188.120.101.0/24 maxlen: 24
188.120.100.0/24 maxlen: 24
188.120.99.0/24 maxlen: 24
77.243.16.0/21 maxlen: 21
77.243.16.0/24 maxlen: 24
77.243.16.0/20 maxlen: 20
77.243.24.0/22 maxlen: 22
77.243.23.0/24 maxlen: 24
77.243.22.0/24 maxlen: 24
77.243.20.0/23 maxlen: 23
77.243.20.0/22 maxlen: 22
77.243.20.0/24 maxlen: 24
77.243.19.0/24 maxlen: 24
77.243.31.0/24 maxlen: 24
77.243.30.0/24 maxlen: 24
77.243.29.0/24 maxlen: 24
77.243.28.0/22 maxlen: 22
77.243.28.0/24 maxlen: 24
2a00:61c0::/32 maxlen: 32
2a00:61c0::/29 maxlen: 29
2a00:61c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 04:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:93:42:93:1b:92:e7:16:6d:71:0a:51:a1:9e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Validity
Not Before: Jan 2 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5a596114747ac589ab8fd9b943c9dba05644787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:39:33:ed:b8:09:c1:64:ca:d8:e2:de:72:
17:86:d5:e7:81:0c:92:40:03:cc:f2:06:d4:a3:14:
ad:e1:cc:2c:39:b0:b4:4b:08:37:30:5a:93:49:fe:
a4:b5:d7:68:25:32:91:72:3e:95:32:89:81:c7:6f:
e4:66:27:9b:80:72:0b:95:b6:5c:b5:71:eb:18:c9:
47:be:43:9e:54:99:bc:a8:5e:5f:3d:ab:38:a2:16:
6c:07:65:ed:90:62:1c:49:0d:fa:9a:b8:3a:29:2d:
1c:28:6c:b0:54:80:cb:b2:45:4b:40:11:10:8a:71:
b0:4e:26:d7:7e:0e:9a:4c:31:6a:d3:41:b8:91:a1:
63:66:4d:ed:bc:90:4a:7a:86:75:6c:da:b3:9c:46:
e3:67:cd:0e:8b:1e:0f:c0:33:1d:6d:fb:ae:e8:29:
2b:f9:37:29:8e:e2:cd:0f:b9:9c:43:74:2b:ab:f9:
f4:8e:9e:b4:a6:22:eb:ed:5d:90:2c:a2:48:80:e5:
bc:59:90:72:ba:e2:21:a8:54:d3:b3:f8:8e:43:98:
d0:b8:f8:03:3a:d1:bd:50:50:67:23:cb:c1:7e:f9:
60:c5:e5:e9:75:12:f1:ce:e4:2e:69:d9:4e:7f:65:
5c:70:61:18:c3:89:f2:07:48:b9:2e:80:c5:ca:0d:
0a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A5:96:11:47:47:AC:58:9A:B8:FD:9B:94:3C:9D:BA:05:64:47:87
X509v3 Authority Key Identifier:
keyid:6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/taWWEUdHrFiauP2blDydugVkR4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.104.0/21
77.243.16.0/20
95.86.48.0/21
185.37.24.0/22
188.120.96.0-188.120.119.255
IPv6:
2a00:61c0::/29
Signature Algorithm: sha256WithRSAEncryption
bd:09:33:c0:bd:a5:79:7e:32:b3:69:96:34:f4:84:0c:88:a2:
a8:bd:b1:9d:70:f7:15:94:cd:af:50:f6:f1:b5:cc:d6:77:73:
ff:2b:7b:e0:f7:29:60:a5:65:eb:e1:7b:59:3c:b9:ea:51:bf:
c7:29:3f:e8:5d:df:58:f4:dd:6e:88:0b:06:1a:91:5a:0e:cb:
6e:fc:67:50:77:e5:aa:8d:ce:cf:2b:ed:56:99:3c:3a:0a:6d:
1f:97:ea:0d:2c:71:b3:7c:f4:ab:36:4c:df:ab:97:aa:24:dd:
9f:dd:cc:72:6d:ff:ba:58:c9:62:dc:72:8d:c3:c6:04:c2:34:
9c:dc:21:03:4f:20:4b:9e:36:c1:39:f4:48:6e:fb:14:a8:d7:
44:ae:2b:30:92:ee:21:c5:cb:d4:ae:75:c0:4b:a8:d7:d4:02:
c1:30:7a:28:25:fe:98:77:16:31:21:8f:5d:a2:91:31:0e:e3:
d5:dd:cc:6b:14:57:7f:af:d4:5b:ff:df:7c:7e:9c:c8:48:8e:
be:e6:95:40:aa:f4:30:97:b9:c3:ef:5d:4a:14:0d:71:b5:fa:
a8:28:4a:37:fd:42:2a:ce:f6:cc:3f:07:f4:c0:b6:82:42:8c:
2f:eb:b0:f7:a0:7d:1a:de:72:7b:76:df:db:1a:69:46:64:37:
5d:9b:10:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 10:24:36 2024 by rpki-client on console-fra.rpki-client.org