Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/rWUqy7jfJFcjU3TxhJHlQKYUFb8.roa
File: rWUqy7jfJFcjU3TxhJHlQKYUFb8.roa (raw, json)
Hash identifier: SKwskfbmduceaxOXMsXnmoo5kIc/u0uk+hwSLIqGRac=
Subject key identifier: AD:65:2A:CB:B8:DF:24:57:23:53:74:F1:84:91:E5:40:A6:14:15:BF
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 0192AF9E408D6B05CF8CDC5719EC3ADA6D56
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/rWUqy7jfJFcjU3TxhJHlQKYUFb8.roa
Signing time: Mon 21 Oct 2024 15:07:16 +0000
ROA not before: Mon 21 Oct 2024 15:07:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48716
IP address blocks: 77.240.38.0/23 maxlen: 24
77.243.80.0/23 maxlen: 24
78.40.108.0/23 maxlen: 24
82.115.40.0/22 maxlen: 24
85.202.194.0/23 maxlen: 24
89.219.32.0/22 maxlen: 24
91.147.92.0/22 maxlen: 22
91.147.92.0/24 maxlen: 24
91.147.93.0/24 maxlen: 24
91.147.94.0/24 maxlen: 24
91.147.95.0/24 maxlen: 24
91.147.104.0/22 maxlen: 24
91.201.214.0/23 maxlen: 24
91.215.136.0/22 maxlen: 24
91.215.136.0/24 maxlen: 24
91.215.137.0/24 maxlen: 32
91.215.139.0/24 maxlen: 32
94.247.128.0/21 maxlen: 24
109.233.108.0/22 maxlen: 32
185.4.180.0/22 maxlen: 24
185.22.64.0/22 maxlen: 24
185.35.222.0/23 maxlen: 24
185.102.72.0/22 maxlen: 24
185.146.0.0/22 maxlen: 24
194.32.140.0/22 maxlen: 24
194.39.64.0/22 maxlen: 24
194.39.64.0/23 maxlen: 24
194.39.66.0/24 maxlen: 24
194.39.67.0/24 maxlen: 24
194.110.54.0/23 maxlen: 24
195.49.209.0/24 maxlen: 24
195.49.210.0/23 maxlen: 23
195.49.210.0/24 maxlen: 24
195.49.211.0/24 maxlen: 24
195.49.212.0/22 maxlen: 22
195.49.212.0/24 maxlen: 24
195.49.213.0/24 maxlen: 24
195.49.214.0/24 maxlen: 24
195.49.215.0/24 maxlen: 24
195.93.152.0/23 maxlen: 24
195.210.46.0/23 maxlen: 24
2a00:5da0::/36 maxlen: 48
2a00:5da0:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:9e:40:8d:6b:05:cf:8c:dc:57:19:ec:3a:da:6d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Oct 21 15:07:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad652acbb8df2457235374f18491e540a61415bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:09:77:ad:94:2e:73:0e:fd:f7:dd:f9:69:
de:af:b9:49:ca:31:db:62:79:3f:6c:31:8c:0a:89:
a6:16:9b:3d:0f:1a:71:45:ba:95:21:4c:c7:31:c9:
89:4c:0f:78:1d:0b:b3:66:97:26:53:5b:6c:52:c3:
5d:de:00:a0:2e:57:72:41:7b:48:71:90:a7:65:d1:
e6:5d:ce:c3:9d:82:96:d1:5f:21:1c:0b:49:16:f5:
62:81:97:53:21:3c:3d:98:ef:a7:57:88:e1:8e:ac:
bd:da:b4:31:94:42:d4:53:ef:65:07:ef:2f:a3:31:
1d:14:a8:38:a8:d2:7c:a3:f2:19:2b:6d:6f:c0:17:
76:fa:86:08:6d:64:af:3e:3a:6e:6d:bb:60:a3:4a:
5b:2f:50:01:db:a3:a0:e4:bb:af:25:38:30:13:77:
0c:1d:eb:90:6f:7b:1e:e7:ea:6d:2a:32:02:d1:95:
c0:8d:04:87:fe:db:33:18:d6:5b:3c:7c:aa:79:49:
ff:98:f3:27:66:ad:c5:de:c1:29:f3:99:ed:3d:d3:
1a:a0:fe:d4:f6:35:aa:79:0d:60:45:ce:e5:43:46:
21:da:34:f2:48:20:e1:7a:3d:24:00:e0:93:99:ac:
3e:3d:ab:ca:20:5b:49:38:c0:7d:11:fe:e7:46:6c:
2f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:65:2A:CB:B8:DF:24:57:23:53:74:F1:84:91:E5:40:A6:14:15:BF
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/rWUqy7jfJFcjU3TxhJHlQKYUFb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.38.0/23
77.243.80.0/23
78.40.108.0/23
82.115.40.0/22
85.202.194.0/23
89.219.32.0/22
91.147.92.0/22
91.147.104.0/22
91.201.214.0/23
91.215.136.0/22
94.247.128.0/21
109.233.108.0/22
185.4.180.0/22
185.22.64.0/22
185.35.222.0/23
185.102.72.0/22
185.146.0.0/22
194.32.140.0/22
194.39.64.0/22
194.110.54.0/23
195.49.209.0-195.49.215.255
195.93.152.0/23
195.210.46.0/23
IPv6:
2a00:5da0::/35
Signature Algorithm: sha256WithRSAEncryption
19:cb:34:2a:50:47:69:be:49:47:a2:b8:d4:7b:ba:1f:c6:3c:
46:42:00:17:60:f4:fe:8e:8a:b7:9e:9a:3a:26:a5:9e:f7:31:
82:ea:9b:c3:e6:fa:b8:ef:ce:ea:ff:aa:4c:65:22:64:f7:e6:
06:4d:c8:33:aa:30:9d:78:e8:b9:4e:22:27:1a:7f:eb:d2:99:
40:bf:10:ad:87:a6:a5:c2:72:a0:21:34:86:b0:ad:a8:cc:d0:
eb:a5:44:c7:e5:8b:1b:5a:54:57:83:00:e1:f3:09:94:c9:89:
c0:25:ea:22:28:93:44:2d:65:29:ac:25:ae:e6:6f:16:dd:75:
52:b6:e2:10:b3:83:47:0a:5a:34:a7:77:75:c5:3a:fd:ea:b9:
9a:68:76:87:4b:42:13:f5:12:7b:9f:28:9d:60:ec:42:c6:1b:
2a:a8:8b:1e:3f:90:d7:e2:44:94:06:35:94:ee:d6:db:e6:c6:
c3:74:48:54:b2:f7:0d:05:9e:53:6b:56:66:02:45:72:ac:8a:
eb:76:f9:47:e8:c0:e4:77:ed:3e:bb:30:b2:3c:2c:51:f5:d2:
64:5d:a0:df:b9:72:74:a6:7f:89:fc:c2:d4:b2:40:5c:ab:ea:
09:6f:6f:c3:e6:09:8f:d0:20:d2:46:7b:89:6d:a0:32:38:11:
ac:7f:3f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:00:21 2024 by rpki-client on console-ams.rpki-client.org