Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/0heJYBg_UJC-339eX1MJZRZg3LQ.roa
File: 0heJYBg_UJC-339eX1MJZRZg3LQ.roa (raw, json)
Hash identifier: rZfWvfCsnUFNRjnCMxYLKud+0lwTCIIJvWQNluhppbQ=
Subject key identifier: D2:17:89:60:18:3F:50:90:BE:DF:7F:5E:5F:53:09:65:16:60:DC:B4
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 018F062E9C057587DB56A9908C9DF28E3C8B
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/0heJYBg_UJC-339eX1MJZRZg3LQ.roa
Signing time: Mon 22 Apr 2024 14:21:08 +0000
ROA not before: Mon 22 Apr 2024 14:21:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42003
IP address blocks: 77.42.128.0/19 maxlen: 19
77.42.160.0/19 maxlen: 19
77.42.192.0/19 maxlen: 19
77.42.224.0/21 maxlen: 21
77.42.232.0/21 maxlen: 21
77.42.240.0/21 maxlen: 21
94.187.0.0/21 maxlen: 21
94.187.0.0/24 maxlen: 24
94.187.1.0/24 maxlen: 24
94.187.2.0/24 maxlen: 24
94.187.3.0/24 maxlen: 24
94.187.4.0/24 maxlen: 24
94.187.6.0/24 maxlen: 24
94.187.7.0/24 maxlen: 24
94.187.8.0/24 maxlen: 24
94.187.9.0/24 maxlen: 24
94.187.10.0/24 maxlen: 24
94.187.11.0/24 maxlen: 24
94.187.16.0/21 maxlen: 21
94.187.24.0/21 maxlen: 21
94.187.32.0/21 maxlen: 21
94.187.40.0/21 maxlen: 21
94.187.48.0/21 maxlen: 21
94.187.56.0/21 maxlen: 21
94.187.64.0/21 maxlen: 21
94.187.72.0/21 maxlen: 21
94.187.80.0/21 maxlen: 21
94.187.88.0/21 maxlen: 21
94.187.95.0/24 maxlen: 24
94.187.96.0/21 maxlen: 21
94.187.104.0/21 maxlen: 21
94.187.112.0/21 maxlen: 21
94.187.120.0/21 maxlen: 21
178.135.0.0/24 maxlen: 24
178.135.1.0/24 maxlen: 24
178.135.2.0/24 maxlen: 24
178.135.3.0/24 maxlen: 24
178.135.6.0/24 maxlen: 24
178.135.7.0/24 maxlen: 24
178.135.8.0/21 maxlen: 21
178.135.8.0/24 maxlen: 24
178.135.9.0/24 maxlen: 24
178.135.10.0/24 maxlen: 24
178.135.11.0/24 maxlen: 24
178.135.16.0/21 maxlen: 21
178.135.24.0/21 maxlen: 21
178.135.32.0/21 maxlen: 21
178.135.40.0/21 maxlen: 21
178.135.48.0/21 maxlen: 21
178.135.56.0/21 maxlen: 21
178.135.64.0/21 maxlen: 21
178.135.72.0/21 maxlen: 21
178.135.80.0/21 maxlen: 21
178.135.88.0/21 maxlen: 21
178.135.95.0/24 maxlen: 24
178.135.96.0/21 maxlen: 21
178.135.104.0/21 maxlen: 21
178.135.112.0/21 maxlen: 21
178.135.120.0/21 maxlen: 21
178.135.128.0/21 maxlen: 21
178.135.136.0/21 maxlen: 21
178.135.144.0/21 maxlen: 21
178.135.152.0/21 maxlen: 21
178.135.160.0/21 maxlen: 21
178.135.168.0/21 maxlen: 21
178.135.176.0/21 maxlen: 21
178.135.184.0/21 maxlen: 21
178.135.192.0/21 maxlen: 21
178.135.200.0/21 maxlen: 21
178.135.208.0/21 maxlen: 21
178.135.216.0/21 maxlen: 21
178.135.224.0/21 maxlen: 21
178.135.232.0/21 maxlen: 21
178.135.240.0/21 maxlen: 21
178.135.248.0/21 maxlen: 21
2a00:6920:d000::/40 maxlen: 40
2a00:6920:e000::/40 maxlen: 40
2a00:6920:e100::/40 maxlen: 40
2a00:6920:e100::/42 maxlen: 42
2a00:6920:e140::/42 maxlen: 42
2a00:6920:e180::/42 maxlen: 42
2a00:6920:e1c0::/42 maxlen: 42
2a00:6920:f000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:06:2e:9c:05:75:87:db:56:a9:90:8c:9d:f2:8e:3c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: Apr 22 14:21:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2178960183f5090bedf7f5e5f5309651660dcb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4b:53:14:a7:76:c2:2d:d9:2d:00:c3:f7:fc:
01:f6:36:f4:44:59:43:f3:fa:bc:0e:9c:46:1f:48:
c9:7b:3d:d3:7d:aa:6a:dc:cb:09:d7:54:6d:5b:43:
47:12:66:85:18:47:6e:ba:83:bf:71:a3:98:19:3c:
45:bc:c5:71:9b:b8:f1:5d:c1:e1:08:d0:4c:5a:a9:
ba:29:be:69:f6:0a:86:5a:4c:d3:b6:d8:5f:e4:c0:
63:b8:b4:21:20:31:98:2b:82:5e:4c:20:c2:91:e2:
19:30:f6:27:cf:9b:5a:a7:1b:6a:b4:e5:e6:85:a7:
6e:2d:14:03:29:6f:6b:fd:8a:11:d0:2b:eb:46:df:
2b:43:1e:da:3b:0d:ff:be:17:7c:fd:cc:38:0b:55:
27:aa:2c:bf:f9:0f:7b:3d:fa:35:45:05:28:62:b4:
4e:ad:f6:90:33:0b:50:60:6a:3c:39:e6:c2:7d:d3:
5b:fc:19:f2:8d:13:b9:39:cc:fb:00:77:b1:be:dd:
29:04:a3:e9:e2:17:a4:22:c1:b4:26:5c:13:68:b2:
32:5c:05:16:f4:f0:6b:a8:ca:b2:ac:c7:f9:ed:53:
55:55:f4:fd:87:d5:cb:67:a3:3c:05:b1:2e:25:ca:
e6:60:61:a9:b2:dd:08:bb:11:f2:b0:ef:ec:87:04:
ca:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:17:89:60:18:3F:50:90:BE:DF:7F:5E:5F:53:09:65:16:60:DC:B4
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/0heJYBg_UJC-339eX1MJZRZg3LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.42.128.0-77.42.247.255
94.187.0.0-94.187.11.255
94.187.16.0-94.187.127.255
178.135.0.0/22
178.135.6.0-178.135.255.255
IPv6:
2a00:6920:d000::/40
2a00:6920:e000::/39
2a00:6920:f000::/40
Signature Algorithm: sha256WithRSAEncryption
87:26:0f:81:75:45:9a:94:97:20:40:5d:c9:44:ad:dc:86:1f:
65:d1:7e:77:21:4b:8b:1c:f4:31:00:17:96:d5:4a:00:55:fb:
f2:dc:26:0f:83:b1:93:37:56:5e:37:dd:be:ea:12:01:79:2c:
34:57:94:d8:e2:35:cf:3a:82:a2:c2:94:79:05:0e:e9:ea:06:
e5:24:58:1b:0a:10:1b:0d:32:71:44:32:35:67:ea:a1:99:3c:
05:11:4a:c8:e4:51:6c:2a:83:8c:d2:d1:a6:f0:99:87:15:09:
21:de:f0:20:73:43:9b:c8:2a:2f:46:13:14:0a:e9:15:67:0f:
f7:72:b8:ae:29:d3:30:61:c7:db:fc:e5:16:be:61:f0:65:51:
cb:de:64:f3:a6:97:15:a5:ad:af:72:6d:2f:48:c5:d4:b9:cd:
45:d9:c7:57:64:6c:9e:db:b1:7d:fb:86:4e:a8:d1:f0:8b:cf:
ac:06:d1:f4:2f:6e:d3:5a:1d:a0:c1:f2:0d:f4:e9:50:a5:58:
e3:b3:59:2b:e0:93:50:e5:eb:c8:c7:a6:ae:dc:2d:8c:88:a1:
42:f0:b8:0e:03:19:38:a9:74:b4:e8:44:1a:e1:3c:a3:54:e6:
88:67:71:41:9c:a6:c4:b1:bd:cc:3c:df:3f:f6:55:5d:cb:5c:
b8:33:54:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:21:22 2024 by rpki-client on console-ams.rpki-client.org