Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/wGiT8a21mpAds8SUNk65BgGOuOI.roa
File: wGiT8a21mpAds8SUNk65BgGOuOI.roa (raw, json)
Hash identifier: S16Ri1MAGLbF5ZyUNRkhPODHhVWr6wLwlxgGeIQ02IA=
Subject key identifier: C0:68:93:F1:AD:B5:9A:90:1D:B3:C4:94:36:4E:B9:06:01:8E:B8:E2
Certificate issuer: /CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Certificate serial: 018CC64B89EB78DD95E76F49B04F563783CF
Authority key identifier: 56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/wGiT8a21mpAds8SUNk65BgGOuOI.roa
Signing time: Mon 01 Jan 2024 18:31:28 +0000
ROA not before: Mon 01 Jan 2024 18:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33182
IP address blocks: 185.38.44.0/22 maxlen: 22
109.73.160.0/24 maxlen: 24
109.73.164.0/24 maxlen: 24
109.73.163.0/24 maxlen: 24
109.73.162.0/24 maxlen: 24
109.73.161.0/24 maxlen: 24
109.73.166.0/24 maxlen: 24
109.73.165.0/24 maxlen: 24
109.73.171.0/24 maxlen: 24
109.73.170.0/24 maxlen: 24
109.73.169.0/24 maxlen: 24
109.73.168.0/24 maxlen: 24
109.73.172.0/24 maxlen: 24
109.73.167.0/24 maxlen: 24
109.73.174.0/24 maxlen: 24
109.73.173.0/24 maxlen: 24
109.73.175.0/24 maxlen: 24
212.18.224.0/20 maxlen: 20
212.18.230.0/24 maxlen: 24
212.18.232.0/24 maxlen: 24
212.18.235.0/24 maxlen: 24
212.18.234.0/24 maxlen: 24
212.18.234.0/23 maxlen: 23
212.18.237.0/24 maxlen: 24
86.111.176.0/22 maxlen: 22
86.111.176.0/20 maxlen: 20
86.111.182.0/23 maxlen: 23
86.111.180.0/23 maxlen: 23
86.111.184.0/21 maxlen: 21
2a04:840:10::/44 maxlen: 44
2a04:840::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:89:eb:78:dd:95:e7:6f:49:b0:4f:56:37:83:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Validity
Not Before: Jan 1 18:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c06893f1adb59a901db3c494364eb906018eb8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:f0:de:72:9b:67:d0:c6:b1:79:a5:a7:2e:
ac:a1:09:71:11:28:27:78:c0:cc:92:d0:a5:a1:da:
3b:54:23:66:62:4b:a6:aa:b5:70:e2:b0:e4:96:b5:
e8:e2:e6:5c:96:14:91:4b:ce:8c:ac:0f:37:a0:d2:
fc:4c:20:39:90:51:f0:86:a4:77:75:a6:21:34:f6:
56:ea:3a:46:99:60:4f:7c:32:fd:2e:9c:e5:06:15:
00:48:92:c6:fb:ae:cb:35:f1:c9:86:13:0e:d6:6f:
93:c5:72:ea:db:0b:07:7e:05:ad:61:22:70:65:f0:
49:57:6e:9b:19:16:13:70:c6:bb:8d:80:a1:4f:54:
e3:fb:c7:48:d2:ab:8a:02:0a:13:ed:15:1d:2d:00:
1d:05:bd:c3:df:ff:41:47:15:3f:03:7b:5c:82:86:
91:85:26:33:e5:f9:01:ec:44:d5:b1:72:20:5b:a8:
ce:c0:2e:cd:a4:11:d9:a9:91:48:60:02:65:a4:16:
05:73:be:c9:18:54:38:61:dd:3c:b4:31:d6:48:a4:
fb:c9:b0:19:93:16:32:78:5a:4f:94:c5:aa:1a:ea:
7b:3a:ed:92:e3:f8:91:49:57:b4:df:0e:12:77:06:
65:a7:40:60:9d:6b:28:eb:e6:87:59:18:62:62:9e:
47:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:68:93:F1:AD:B5:9A:90:1D:B3:C4:94:36:4E:B9:06:01:8E:B8:E2
X509v3 Authority Key Identifier:
keyid:56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/wGiT8a21mpAds8SUNk65BgGOuOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.176.0/20
109.73.160.0/20
185.38.44.0/22
212.18.224.0/20
IPv6:
2a04:840::/43
Signature Algorithm: sha256WithRSAEncryption
32:a0:2e:6d:17:56:fd:95:70:a5:8a:6f:24:38:b9:f8:85:10:
47:d5:c8:d1:bd:f4:d6:d5:e5:8b:e4:58:88:90:f4:81:73:b7:
0c:9f:4b:ff:a2:f7:41:ea:ba:dc:c2:68:fe:f6:08:af:85:d2:
bc:7c:ec:aa:03:85:69:7f:45:b8:89:fc:c2:b0:95:c5:84:6e:
8a:8c:61:91:30:4c:c1:d5:2e:48:37:fa:f9:d5:cb:35:49:0a:
08:f8:ae:a4:eb:ad:ca:52:aa:b4:1d:fe:03:89:f7:11:ba:e5:
58:35:44:43:9f:d7:6e:2d:cd:8a:90:b7:19:dd:78:00:d3:19:
c2:2e:49:af:9c:11:ea:34:a0:81:7d:ee:46:89:62:75:31:5f:
da:29:0a:b1:fe:87:5d:24:5a:b8:15:79:de:3f:b5:6c:c1:b3:
f2:87:59:e2:50:6b:26:39:39:ae:eb:7d:3a:70:c1:3e:d6:98:
de:b4:21:aa:ba:d5:8a:67:01:6e:58:e8:0a:a1:18:cb:61:b2:
44:10:ea:69:bc:56:64:82:e1:64:94:08:b2:dd:48:a2:07:46:
9e:6f:25:e7:5b:f3:f4:88:32:c9:f8:1d:4f:15:bb:a2:93:65:
46:cf:e6:ff:c2:60:ea:7f:63:28:4f:cb:b1:95:56:b1:3f:e3:
c0:3d:1d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:25 2024 by rpki-client on console-fra.rpki-client.org