Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/vqW-p6kmtyWR3gycZz1B81jsHoA.roa
File: vqW-p6kmtyWR3gycZz1B81jsHoA.roa (raw, json)
Hash identifier: L3OxeXilY7HnNPmP36lQ/sDlDlZ3Hz0HmCOoIABoVzE=
Subject key identifier: BE:A5:BE:A7:A9:26:B7:25:91:DE:0C:9C:67:3D:41:F3:58:EC:1E:80
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 0192954F40961FF5DD884469440B9BC6B3AB
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/vqW-p6kmtyWR3gycZz1B81jsHoA.roa
Signing time: Wed 16 Oct 2024 12:30:51 +0000
ROA not before: Wed 16 Oct 2024 12:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62068
IP address blocks: 5.182.208.0/22 maxlen: 24
45.14.224.0/22 maxlen: 24
45.87.40.0/22 maxlen: 24
62.68.71.0/24 maxlen: 24
91.226.227.0/24 maxlen: 24
91.230.49.0/24 maxlen: 24
146.19.248.0/24 maxlen: 24
185.224.128.0/22 maxlen: 24
185.244.36.0/22 maxlen: 24
2a0d:2400::/29 maxlen: 39
2a0d:2780::/29 maxlen: 32
2a0e:16c0::/29 maxlen: 29
2a0e:1740::/29 maxlen: 29
2a0e:2000::/29 maxlen: 29
2a11:b240::/29 maxlen: 32
2a12:a8c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:95:4f:40:96:1f:f5:dd:88:44:69:44:0b:9b:c6:b3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Oct 16 12:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bea5bea7a926b72591de0c9c673d41f358ec1e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:28:5f:49:fb:2e:bd:9c:a0:6e:fa:6f:69:
86:b6:eb:95:16:49:fb:88:8d:dd:1f:61:a8:b6:f6:
48:01:9d:bf:24:c2:5b:3f:35:ef:9b:7b:a3:de:7b:
46:f7:4e:4d:26:da:97:b3:71:f2:75:7a:40:f1:4e:
a0:3a:ef:34:97:4f:46:d9:86:82:4f:19:84:7c:fe:
4a:2c:01:94:ed:79:2a:59:49:77:32:ed:7f:21:c9:
82:a8:88:ca:8f:f9:22:96:f5:8b:f7:d1:5e:57:37:
3d:c7:3f:99:83:4b:ea:bf:c9:65:fc:36:ad:40:50:
cd:1c:43:32:9b:ea:9f:26:d7:14:ee:45:e9:14:95:
e9:e7:1a:5f:f1:52:7e:c7:15:46:4c:77:46:a6:90:
76:44:b6:e9:ca:14:6c:3b:c3:89:04:ee:a6:e3:89:
41:4d:39:99:11:27:eb:b9:96:63:e5:26:f7:0d:e4:
99:e9:f6:fa:88:ae:cc:a1:97:d0:85:ad:54:32:d6:
c5:c0:4a:ac:e7:c0:f3:2e:69:b1:1d:93:0b:54:30:
d4:63:3e:48:2d:25:6e:48:af:f5:3f:a7:ff:f8:b7:
bd:37:8d:8b:70:cb:79:df:d2:98:b4:df:21:d6:3c:
57:ed:46:9d:37:15:f4:b8:63:57:28:e6:d3:98:d4:
6d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A5:BE:A7:A9:26:B7:25:91:DE:0C:9C:67:3D:41:F3:58:EC:1E:80
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/vqW-p6kmtyWR3gycZz1B81jsHoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.208.0/22
45.14.224.0/22
45.87.40.0/22
62.68.71.0/24
91.226.227.0/24
91.230.49.0/24
146.19.248.0/24
185.224.128.0/22
185.244.36.0/22
IPv6:
2a0d:2400::/29
2a0d:2780::/29
2a0e:16c0::/29
2a0e:1740::/29
2a0e:2000::/29
2a11:b240::/29
2a12:a8c0::/29
Signature Algorithm: sha256WithRSAEncryption
81:46:1e:31:6d:10:70:2f:db:82:44:f2:41:6a:7f:b1:8c:40:
54:9f:d9:4b:fb:4a:55:02:58:dd:93:d1:51:ec:56:5c:28:3a:
d6:38:d4:ef:a3:55:1c:81:9a:f5:98:3b:5c:c4:c8:61:d2:ba:
90:87:eb:2b:8f:47:f3:8c:85:b8:24:d9:45:b8:fb:47:3e:98:
70:9f:0d:ff:8d:aa:48:a4:ff:f2:03:8b:02:69:ff:27:18:00:
d5:6a:a8:c3:c9:12:6d:3d:fa:8b:96:8d:9f:32:48:c7:5f:e6:
2c:5c:f4:35:9f:cc:44:f7:80:3e:7d:2e:c2:ca:ab:18:0a:f0:
dd:58:5c:c6:b0:e2:55:fc:45:80:91:cb:ea:63:4f:69:0d:c4:
c4:85:00:9e:aa:e9:e2:ba:37:63:3c:39:c8:1e:e6:b8:41:da:
21:78:28:d2:28:ea:d7:a6:e6:b7:ce:ff:7a:03:34:33:a1:9b:
7c:2d:fa:ff:60:bd:59:ef:4b:63:9d:82:d1:4b:d1:89:38:77:
00:c4:e2:6c:7b:ec:93:62:53:3a:9b:55:4f:d8:4f:fe:f1:e5:
e3:76:be:06:07:a6:c1:6c:67:35:c0:84:86:da:9b:50:59:92:
51:39:1c:cb:2b:b5:62:83:79:4e:bd:88:7c:7a:5f:aa:81:f7:
20:59:1b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:25:31 2024 by rpki-client on console-fra.rpki-client.org