Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/1-8OURVm6rJJcndA1QYKsIAKe-_E.roa
File: 1-8OURVm6rJJcndA1QYKsIAKe-_E.roa (raw, json)
Hash identifier: vk5pAf/yH0RxDpSQ75K9AbuR9hs64CWGW0GbSghYkh0=
Subject key identifier: FB:C3:94:45:59:BA:AC:92:5C:9D:D0:35:41:82:AC:20:02:9E:FB:F1
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 018CC794F69ED3ADA169AE2C89E8EEDE1A12
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/1-8OURVm6rJJcndA1QYKsIAKe-_E.roa
Signing time: Tue 02 Jan 2024 00:31:17 +0000
ROA not before: Tue 02 Jan 2024 00:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42003
IP address blocks: 77.42.240.0/21 maxlen: 21
94.187.40.0/21 maxlen: 21
94.187.48.0/21 maxlen: 21
94.187.56.0/21 maxlen: 21
94.187.64.0/21 maxlen: 21
94.187.72.0/21 maxlen: 21
94.187.80.0/21 maxlen: 21
77.42.128.0/19 maxlen: 19
94.187.88.0/21 maxlen: 21
94.187.0.0/24 maxlen: 24
94.187.1.0/24 maxlen: 24
94.187.2.0/24 maxlen: 24
94.187.3.0/24 maxlen: 24
94.187.0.0/21 maxlen: 21
94.187.4.0/24 maxlen: 24
94.187.11.0/24 maxlen: 24
94.187.6.0/24 maxlen: 24
94.187.7.0/24 maxlen: 24
94.187.8.0/24 maxlen: 24
94.187.9.0/24 maxlen: 24
94.187.10.0/24 maxlen: 24
94.187.16.0/21 maxlen: 21
94.187.24.0/21 maxlen: 21
94.187.32.0/21 maxlen: 21
77.42.192.0/19 maxlen: 19
77.42.224.0/21 maxlen: 21
77.42.232.0/21 maxlen: 21
94.187.95.0/24 maxlen: 24
94.187.96.0/21 maxlen: 21
94.187.104.0/21 maxlen: 21
94.187.112.0/21 maxlen: 21
94.187.120.0/21 maxlen: 21
77.42.160.0/19 maxlen: 19
178.135.200.0/21 maxlen: 21
178.135.208.0/21 maxlen: 21
178.135.216.0/21 maxlen: 21
178.135.224.0/21 maxlen: 21
178.135.232.0/21 maxlen: 21
178.135.240.0/21 maxlen: 21
178.135.248.0/21 maxlen: 21
178.135.152.0/21 maxlen: 21
178.135.160.0/21 maxlen: 21
178.135.168.0/21 maxlen: 21
178.135.176.0/21 maxlen: 21
178.135.184.0/21 maxlen: 21
178.135.192.0/21 maxlen: 21
178.135.0.0/24 maxlen: 24
178.135.1.0/24 maxlen: 24
178.135.2.0/24 maxlen: 24
178.135.3.0/24 maxlen: 24
178.135.6.0/24 maxlen: 24
178.135.7.0/24 maxlen: 24
178.135.8.0/24 maxlen: 24
178.135.9.0/24 maxlen: 24
178.135.10.0/24 maxlen: 24
178.135.11.0/24 maxlen: 24
178.135.16.0/21 maxlen: 21
178.135.24.0/21 maxlen: 21
178.135.32.0/21 maxlen: 21
178.135.96.0/21 maxlen: 21
178.135.95.0/24 maxlen: 24
178.135.104.0/21 maxlen: 21
178.135.112.0/21 maxlen: 21
178.135.120.0/21 maxlen: 21
178.135.128.0/21 maxlen: 21
178.135.136.0/21 maxlen: 21
178.135.144.0/21 maxlen: 21
178.135.40.0/21 maxlen: 21
178.135.48.0/21 maxlen: 21
178.135.56.0/21 maxlen: 21
178.135.64.0/21 maxlen: 21
178.135.72.0/21 maxlen: 21
178.135.80.0/21 maxlen: 21
178.135.88.0/21 maxlen: 21
2a00:6920:f000::/40 maxlen: 40
2a00:6920:e100::/40 maxlen: 40
2a00:6920:e000::/40 maxlen: 40
2a00:6920:d000::/40 maxlen: 40
2a00:6920:e1c0::/42 maxlen: 42
2a00:6920:e180::/42 maxlen: 42
2a00:6920:e140::/42 maxlen: 42
2a00:6920:e100::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:f6:9e:d3:ad:a1:69:ae:2c:89:e8:ee:de:1a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: Jan 2 00:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbc3944559baac925c9dd0354182ac20029efbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:58:a5:23:4b:b3:e5:9c:17:bc:a7:8e:fc:
39:85:4b:94:5f:d7:d3:d5:67:1f:db:ce:2a:b2:6f:
72:7b:12:75:9f:5f:0c:df:f9:71:0d:51:24:e7:13:
05:b0:d9:62:ee:4a:f6:fc:2c:1d:5b:7e:fe:6b:bc:
f9:8a:2e:a6:29:5a:a6:cb:e1:f4:36:0d:1c:c6:98:
86:7d:24:6a:ba:f7:7c:cd:01:36:c6:9e:c3:c2:1c:
39:e7:93:98:ae:78:7f:09:7a:52:d7:27:9b:6c:9b:
91:32:ab:d0:3d:f5:46:6b:52:a9:38:c3:04:b3:d4:
01:d5:02:73:89:55:9d:a6:00:37:8e:f9:d8:df:92:
93:90:a6:03:1e:29:36:1f:88:78:65:30:ad:14:53:
6c:1c:e0:12:1b:40:f7:6c:0e:03:80:13:d8:85:be:
8d:f0:3d:d8:3b:d7:42:a1:38:88:27:d5:e3:9c:6e:
c9:1f:a8:df:06:4f:86:04:52:9a:6f:71:d1:c4:27:
05:05:29:ed:fd:0a:a4:cb:e0:69:ff:8c:77:68:92:
77:e4:62:ea:cd:3e:8d:8b:17:4a:8a:26:c0:0c:10:
82:85:ef:f5:71:e2:1d:7c:2f:20:9b:eb:a6:83:fd:
aa:dc:d5:3f:c1:c4:f6:c1:c1:ac:01:99:3e:97:3e:
70:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C3:94:45:59:BA:AC:92:5C:9D:D0:35:41:82:AC:20:02:9E:FB:F1
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/1-8OURVm6rJJcndA1QYKsIAKe-_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.42.128.0-77.42.247.255
94.187.0.0-94.187.11.255
94.187.16.0-94.187.127.255
178.135.0.0/22
178.135.6.0-178.135.11.255
178.135.16.0-178.135.255.255
IPv6:
2a00:6920:d000::/40
2a00:6920:e000::/39
2a00:6920:f000::/40
Signature Algorithm: sha256WithRSAEncryption
91:f0:d3:64:d5:c1:03:8e:22:8a:f3:b5:b6:9b:24:c8:e7:05:
ec:8f:05:80:ea:cf:96:58:47:4e:f6:f8:e8:e9:be:24:4f:f9:
36:1f:39:b6:ad:e0:40:a3:9c:78:4d:1b:7f:14:0f:77:f4:2d:
87:c5:65:9d:58:51:d9:4a:5a:d6:e3:b5:5f:ef:56:9c:10:c9:
3a:2d:0d:4d:00:2e:23:bc:f3:9f:30:78:ed:59:ab:2f:16:7d:
ab:30:3c:10:34:9c:28:07:aa:5a:30:ba:a6:a1:87:93:32:53:
e0:ce:9a:81:21:70:59:08:9f:29:02:7d:58:5f:a4:d8:ea:33:
71:6a:d8:50:07:e5:64:7a:e7:62:12:dc:ba:e9:3c:23:8f:d8:
34:d7:47:2d:da:58:7e:71:20:86:53:65:d7:12:12:8f:90:0c:
6e:a1:e6:c2:c7:26:c1:e4:66:94:9c:e1:ed:23:da:e2:dd:d0:
de:1a:79:23:32:15:04:9a:3f:f1:36:94:fb:41:7c:21:b1:24:
67:c2:d0:27:f1:dc:5d:b1:c5:27:14:fa:51:45:27:46:7d:00:
f1:61:c1:b9:e8:64:69:d5:ef:10:5f:ee:9a:fd:f7:53:01:ce:
e3:dd:4f:1b:8f:9d:a8:85:17:a8:99:ee:af:aa:23:fe:94:c2:
74:3b:93:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:51:41 2024 by rpki-client on console-fra.rpki-client.org