Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/2WsiQVAxKQIirSeHQ8GVjm41QMU.roa
File: 2WsiQVAxKQIirSeHQ8GVjm41QMU.roa (raw, json)
Hash identifier: MjHy4JfxjBuP4hNrbJi1F4h9oi7ekilj0Yq9fLT/O0I=
Subject key identifier: D9:6B:22:41:50:31:29:02:22:AD:27:87:43:C1:95:8E:6E:35:40:C5
Certificate issuer: /CN=52056867e4d2885e99b549ed6fb786330adf8f44
Certificate serial: 018CC424CB2834A6D9B3D0EF3B07A10B105F
Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/2WsiQVAxKQIirSeHQ8GVjm41QMU.roa
Signing time: Mon 01 Jan 2024 08:29:54 +0000
ROA not before: Mon 01 Jan 2024 08:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12990
IP address blocks: 213.180.128.0/21 maxlen: 21
195.88.186.0/24 maxlen: 24
213.180.138.0/23 maxlen: 23
213.180.137.0/24 maxlen: 24
213.180.136.0/24 maxlen: 24
195.88.187.0/24 maxlen: 24
213.180.142.0/23 maxlen: 23
213.180.141.0/24 maxlen: 24
213.180.140.0/24 maxlen: 24
213.180.144.0/23 maxlen: 23
213.180.152.0/24 maxlen: 24
213.180.151.0/24 maxlen: 24
213.180.150.0/24 maxlen: 24
213.180.148.0/23 maxlen: 23
213.180.146.0/23 maxlen: 23
213.180.154.0/24 maxlen: 24
213.180.153.0/24 maxlen: 24
141.105.16.0/21 maxlen: 21
185.104.64.0/24 maxlen: 24
37.26.160.0/21 maxlen: 21
2a02:c10::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:cb:28:34:a6:d9:b3:d0:ef:3b:07:a1:0b:10:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44
Validity
Not Before: Jan 1 08:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d96b22415031290222ad278743c1958e6e3540c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4c:a3:19:db:eb:9b:9a:cf:8b:68:ac:4e:b5:
a9:0b:a0:8f:86:1a:2a:a7:3c:18:b3:70:6b:13:b3:
6d:d4:59:4c:65:b7:4b:2a:58:24:ac:51:33:99:a7:
db:26:96:4a:20:76:5b:a5:74:84:46:ba:af:78:66:
0f:5e:9e:83:a9:d8:f6:71:6d:c2:47:97:a4:11:62:
83:69:dc:84:81:17:87:f8:d6:17:47:15:22:11:59:
61:42:c4:73:7d:ab:e6:f6:5b:9b:c2:1a:3d:98:e8:
78:70:cc:bf:33:00:25:05:17:90:51:1b:0f:6b:10:
0a:b8:91:e2:1d:ae:8d:a5:9a:ee:aa:1a:c6:24:a8:
15:37:7e:f1:91:91:27:84:cd:c4:d3:54:67:f2:10:
ad:eb:77:b8:9a:8a:d0:9d:c2:b4:0f:00:19:71:5a:
85:b3:47:2b:ba:0c:88:65:b3:bf:60:d2:fe:40:ba:
b9:de:c6:1b:b5:86:2c:3d:3a:66:c7:de:53:c9:9e:
8c:9a:64:f6:5b:02:e7:ff:2c:d1:e2:46:3d:f9:60:
c5:c7:21:4a:c9:51:7d:24:ce:79:f2:e3:a7:79:68:
48:41:e2:2a:9c:9b:ba:43:0a:d4:fa:99:5f:57:3e:
d0:79:95:b8:a4:7a:75:a4:33:11:45:74:d1:34:c4:
54:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6B:22:41:50:31:29:02:22:AD:27:87:43:C1:95:8E:6E:35:40:C5
X509v3 Authority Key Identifier:
keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/2WsiQVAxKQIirSeHQ8GVjm41QMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.160.0/21
141.105.16.0/21
185.104.64.0/24
195.88.186.0/23
213.180.128.0-213.180.154.255
IPv6:
2a02:c10::/32
Signature Algorithm: sha256WithRSAEncryption
90:36:6b:3f:93:f3:12:c1:e6:a8:c6:68:32:75:fa:ff:99:b4:
6d:c4:6a:4d:ff:dd:3f:88:ec:d5:16:b7:9e:48:ae:55:e3:1b:
3f:f7:fd:99:2c:53:29:f6:70:57:0f:49:3c:52:61:27:75:01:
f1:27:ea:8d:2d:a5:78:8e:be:7c:fb:f1:a9:7a:6d:21:b5:44:
bd:3a:21:c8:ca:9b:0c:15:01:ce:f5:47:09:93:de:ae:6f:f2:
64:0a:7b:a3:04:d4:65:2e:e7:bd:65:15:21:ce:a0:65:70:62:
df:ce:c3:ba:6e:e9:e1:b5:e8:05:73:06:94:0e:4a:b0:66:5c:
cd:fe:a9:1a:9d:95:2e:d2:eb:de:cb:76:c9:0c:86:e1:d4:85:
63:9d:17:91:43:13:99:e3:d4:db:03:e9:18:59:31:03:20:c6:
33:b6:17:9e:55:df:f1:b4:ea:b7:9b:ba:80:04:fb:c0:27:45:
78:39:fe:1a:b5:dd:d8:75:c8:90:ba:56:3c:19:27:e1:56:42:
ef:58:4a:77:d0:03:44:b5:70:6a:f4:6c:95:d4:d1:ea:ae:50:
d6:2a:77:a1:76:6f:4c:3a:c6:75:78:57:7b:7c:8d:94:ab:df:
aa:72:fc:44:0b:14:46:3b:cf:d6:14:22:15:9c:f1:03:ef:16:
91:80:26:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:12:31 2024 by rpki-client on console-ams.rpki-client.org