Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/exOTydkwAp9SDeJLr0iypTvgWho.roa
File: exOTydkwAp9SDeJLr0iypTvgWho.roa (raw, json)
Hash identifier: MXqng491I5qx0v3hXfso96hyA3iz3HDnK6B10nHdbZk=
Subject key identifier: 7B:13:93:C9:D9:30:02:9F:52:0D:E2:4B:AF:48:B2:A5:3B:E0:5A:1A
Certificate issuer: /CN=595b243a7233e571c3c173eb8249111906326019
Certificate serial: 018CC6B77B79478611B028F01AC00CD665A6
Authority key identifier: 59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/exOTydkwAp9SDeJLr0iypTvgWho.roa
Signing time: Mon 01 Jan 2024 20:29:22 +0000
ROA not before: Mon 01 Jan 2024 20:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39824
IP address blocks: 79.134.37.0/24 maxlen: 24
79.134.36.0/24 maxlen: 24
79.134.32.0/22 maxlen: 24
79.134.38.0/23 maxlen: 24
79.134.44.0/22 maxlen: 24
79.134.42.0/23 maxlen: 24
79.134.41.0/24 maxlen: 24
79.134.40.0/24 maxlen: 24
46.36.132.0/22 maxlen: 24
46.36.130.0/23 maxlen: 24
46.36.128.0/23 maxlen: 24
46.36.136.0/22 maxlen: 24
46.36.144.0/23 maxlen: 24
46.36.140.0/22 maxlen: 24
46.36.146.0/23 maxlen: 24
46.36.152.0/22 maxlen: 24
46.36.148.0/22 maxlen: 24
46.36.159.0/24 maxlen: 24
46.36.158.0/24 maxlen: 24
46.36.156.0/23 maxlen: 24
185.103.170.0/23 maxlen: 24
185.103.168.0/23 maxlen: 24
185.103.179.0/24 maxlen: 24
185.103.178.0/24 maxlen: 24
185.103.177.0/24 maxlen: 24
185.103.176.0/24 maxlen: 24
185.103.184.0/23 maxlen: 24
185.103.186.0/23 maxlen: 24
185.100.224.0/22 maxlen: 24
62.84.36.0/22 maxlen: 24
62.84.32.0/22 maxlen: 24
62.84.42.0/23 maxlen: 24
62.84.40.0/23 maxlen: 24
62.84.44.0/23 maxlen: 24
62.84.48.0/20 maxlen: 24
62.84.46.0/23 maxlen: 24
109.239.32.0/21 maxlen: 24
185.106.158.0/23 maxlen: 24
185.106.156.0/23 maxlen: 24
81.88.144.0/21 maxlen: 24
81.88.152.0/22 maxlen: 24
81.88.156.0/22 maxlen: 24
212.45.82.0/23 maxlen: 24
212.45.80.0/23 maxlen: 24
212.45.85.0/24 maxlen: 24
212.45.84.0/24 maxlen: 24
212.45.88.0/22 maxlen: 24
212.45.86.0/23 maxlen: 24
212.45.94.0/23 maxlen: 24
212.45.92.0/23 maxlen: 24
185.102.118.0/24 maxlen: 24
185.102.117.0/24 maxlen: 24
185.102.116.0/24 maxlen: 24
185.102.119.0/24 maxlen: 24
185.102.128.0/22 maxlen: 24
80.249.138.0/23 maxlen: 24
80.249.137.0/24 maxlen: 24
80.249.142.0/23 maxlen: 24
80.249.140.0/23 maxlen: 24
80.249.152.0/21 maxlen: 24
213.232.196.0/23 maxlen: 24
213.232.201.0/24 maxlen: 24
109.239.40.0/22 maxlen: 24
109.239.44.0/22 maxlen: 24
185.98.88.0/22 maxlen: 24
213.232.218.0/23 maxlen: 24
213.232.220.0/22 maxlen: 24
213.232.224.0/24 maxlen: 24
213.232.230.0/23 maxlen: 24
213.232.242.0/23 maxlen: 24
213.232.246.0/23 maxlen: 24
213.232.244.0/24 maxlen: 24
185.98.76.0/22 maxlen: 24
2a06:1a00::/29 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:7b:79:47:86:11:b0:28:f0:1a:c0:0c:d6:65:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b243a7233e571c3c173eb8249111906326019
Validity
Not Before: Jan 1 20:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b1393c9d930029f520de24baf48b2a53be05a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f5:98:95:9a:a4:ac:6a:61:b7:33:c3:91:75:
26:22:ef:e9:84:92:6d:5d:a5:87:c7:a0:8f:4d:b2:
36:b1:52:86:b9:59:60:3c:01:2b:3c:be:22:64:25:
53:1a:d1:0f:d6:65:fc:df:d9:55:ca:1f:ee:c4:fd:
cd:c6:33:26:e6:ef:dd:aa:60:9f:4d:23:af:f2:3c:
6e:54:2b:b1:0c:e2:5f:9d:c3:3b:de:af:ea:c2:76:
36:4e:22:27:c5:a6:03:35:44:db:86:29:64:88:b5:
db:ec:7d:17:e5:ed:03:49:cb:e5:9b:bb:66:ca:e5:
0b:a2:43:c6:0d:b7:2f:01:81:85:62:ba:4a:ca:8b:
4c:2f:bf:b8:76:9a:4f:dd:34:83:01:6f:f0:79:8e:
f2:1f:14:f4:7f:8d:2f:5a:70:7f:3a:b7:9e:e9:56:
1b:c0:55:a9:b3:c4:b6:55:f8:d5:11:fd:f0:88:9a:
79:3d:09:d2:e3:31:31:f8:38:ba:a0:46:d8:1a:54:
91:5d:f6:84:1e:e1:a0:5f:92:ec:ae:5d:20:83:05:
be:84:85:5f:83:a8:36:f3:d4:8c:36:e4:03:06:c6:
e4:91:61:c2:9e:ed:0b:64:06:e2:a7:aa:e6:64:f3:
1e:f0:81:5a:d9:88:e8:7e:75:67:0d:de:8f:f2:c9:
12:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:13:93:C9:D9:30:02:9F:52:0D:E2:4B:AF:48:B2:A5:3B:E0:5A:1A
X509v3 Authority Key Identifier:
keyid:59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/exOTydkwAp9SDeJLr0iypTvgWho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.128.0/19
62.84.32.0/19
79.134.32.0/20
80.249.137.0-80.249.143.255
80.249.152.0/21
81.88.144.0/20
109.239.32.0/20
185.98.76.0/22
185.98.88.0/22
185.100.224.0/22
185.102.116.0/22
185.102.128.0/22
185.103.168.0/22
185.103.176.0/22
185.103.184.0/22
185.106.156.0/22
212.45.80.0/20
213.232.196.0/23
213.232.201.0/24
213.232.218.0-213.232.224.255
213.232.230.0/23
213.232.242.0-213.232.244.255
213.232.246.0/23
IPv6:
2a06:1a00::/29
Signature Algorithm: sha256WithRSAEncryption
5e:77:ef:d6:7d:29:0f:ff:bb:d6:98:44:9d:01:06:81:a4:96:
07:fd:d3:a4:03:43:7c:f8:a0:30:e7:1e:21:ea:c2:0a:65:29:
de:f8:b6:0e:e6:2d:81:3f:74:a8:11:13:a2:ba:5e:8e:20:36:
98:6d:4e:fc:1b:fc:2c:b0:5f:e3:d5:0c:da:f2:d6:17:0b:e0:
fd:d0:9e:02:7d:19:18:b9:7c:bb:1e:41:93:de:25:fb:a2:b4:
63:0f:56:b6:bf:8c:1d:6c:b8:0c:05:79:41:8e:8d:04:c1:ef:
36:b9:b9:df:51:24:d9:11:e6:b2:d2:43:45:9b:1b:5a:c5:74:
9e:41:c9:08:af:52:f4:bf:3e:f2:4f:1d:e7:d2:5c:5f:d5:25:
08:35:09:8a:e1:97:49:39:a8:8e:c7:8c:00:2c:19:50:a7:9a:
5e:f7:05:a3:90:a1:b3:cd:83:6e:5c:24:11:83:48:11:b4:48:
9d:29:4f:52:da:15:d3:e9:f3:09:5b:df:48:25:29:e4:bb:2e:
c9:35:7c:1d:f6:fd:7b:ae:88:47:19:4e:b2:bb:8f:a5:cf:bc:
16:24:52:64:7d:57:d7:f7:4e:a9:6e:ea:f5:ea:51:41:45:36:
b0:0e:9e:40:5d:28:f4:92:77:a5:28:39:96:f5:b9:91:8d:42:
85:68:98:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:10:50 2024 by rpki-client on console-fra.rpki-client.org