Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/HIB0Ed05n2g7TVdYGGpemu6aOp4.roa
File: HIB0Ed05n2g7TVdYGGpemu6aOp4.roa (raw, json)
Hash identifier: WeYhAmYSzR2yCAO/SbzvTeupXScmINE2tB5DYEcyzB0=
Subject key identifier: 1C:80:74:11:DD:39:9F:68:3B:4D:57:58:18:6A:5E:9A:EE:9A:3A:9E
Certificate issuer: /CN=1034068b5e9f7314277e2be9726c732131b1756c
Certificate serial: 01910D9E4FD78B5905DEE004EC7840E7D85B
Authority key identifier: 10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/HIB0Ed05n2g7TVdYGGpemu6aOp4.roa
Signing time: Thu 01 Aug 2024 11:06:04 +0000
ROA not before: Thu 01 Aug 2024 11:06:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 5.32.192.0/18 maxlen: 24
5.36.0.0/16 maxlen: 24
5.37.0.0/16 maxlen: 24
37.40.0.0/15 maxlen: 24
62.61.160.0/19 maxlen: 24
62.231.192.0/18 maxlen: 24
82.178.0.0/19 maxlen: 24
82.178.34.0/23 maxlen: 24
82.178.36.0/22 maxlen: 24
82.178.40.0/21 maxlen: 24
82.178.48.0/20 maxlen: 24
82.178.64.0/20 maxlen: 24
82.178.80.0/20 maxlen: 24
82.178.96.0/20 maxlen: 24
82.178.112.0/20 maxlen: 24
82.178.128.0/20 maxlen: 24
82.178.144.0/21 maxlen: 24
82.178.152.0/22 maxlen: 24
82.178.156.0/23 maxlen: 24
82.178.160.0/20 maxlen: 24
82.178.176.0/20 maxlen: 24
82.178.192.0/20 maxlen: 24
82.178.208.0/20 maxlen: 24
82.178.224.0/20 maxlen: 24
82.178.240.0/20 maxlen: 24
85.154.0.0/16 maxlen: 24
134.0.128.0/18 maxlen: 24
134.0.192.0/20 maxlen: 24
134.0.208.0/21 maxlen: 24
188.140.128.0/17 maxlen: 24
212.72.0.0/19 maxlen: 24
2001:1670::/32 maxlen: 48
2001:1670:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0d:9e:4f:d7:8b:59:05:de:e0:04:ec:78:40:e7:d8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1034068b5e9f7314277e2be9726c732131b1756c
Validity
Not Before: Aug 1 11:06:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c807411dd399f683b4d5758186a5e9aee9a3a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:79:06:0d:91:08:84:e0:60:f7:ff:3f:91:62:
0e:b7:41:86:7d:2b:4b:2b:91:90:ae:95:b1:c9:a0:
dd:43:c0:6d:9a:be:04:2b:83:a0:81:d2:7b:41:96:
c2:4b:c2:37:b1:a7:5d:b7:41:9a:81:b6:58:27:22:
49:8a:76:fa:27:c9:8d:d8:c1:c9:55:f0:e0:b3:cc:
f1:bc:90:64:0c:7f:d0:ca:90:f7:50:8b:02:39:d2:
e1:46:1a:41:da:d0:13:03:6f:4b:08:9e:8d:77:15:
f8:58:2d:2d:f3:d6:28:7f:90:79:19:3c:87:db:c3:
30:87:6c:95:b5:c3:e3:04:2c:d8:1a:c7:a1:67:8b:
b1:d5:dc:c2:2a:d3:58:6a:6f:70:6f:b3:df:64:bb:
ce:c3:4b:f4:fb:cb:9f:39:8d:f6:e2:9c:b8:70:eb:
b2:6a:66:91:69:0a:ce:70:34:52:bb:fd:6e:6e:b8:
4f:54:f1:e7:af:56:09:c6:90:a4:30:b1:1f:ed:c8:
7b:fa:1f:ee:57:1d:7c:01:e5:db:48:69:ec:43:ed:
11:dc:9a:e0:2c:43:f4:2c:47:36:5c:5c:8c:1b:ca:
d9:da:e8:87:f5:ff:4c:cf:8d:4d:42:1f:61:30:df:
b5:9f:f4:d2:c4:03:95:46:e1:fe:94:62:a4:17:76:
fc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:80:74:11:DD:39:9F:68:3B:4D:57:58:18:6A:5E:9A:EE:9A:3A:9E
X509v3 Authority Key Identifier:
keyid:10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/HIB0Ed05n2g7TVdYGGpemu6aOp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.192.0/18
5.36.0.0/15
37.40.0.0/15
62.61.160.0/19
62.231.192.0/18
82.178.0.0/19
82.178.34.0-82.178.157.255
82.178.160.0-82.178.255.255
85.154.0.0/16
134.0.128.0-134.0.215.255
188.140.128.0/17
212.72.0.0/19
IPv6:
2001:1670::/32
Signature Algorithm: sha256WithRSAEncryption
82:61:2e:ff:d6:4b:c6:23:5c:e5:ed:f8:57:b0:97:81:f6:ac:
51:43:fb:83:87:d7:29:d9:b6:f7:55:04:93:0f:12:3d:64:b6:
48:71:e0:03:94:61:1f:20:10:e3:39:88:d7:ba:08:14:f6:41:
91:1a:1b:ad:83:32:2f:c9:e5:8b:81:3a:62:20:d0:a6:35:75:
dd:0b:ae:c4:16:4b:56:65:f4:69:88:cd:a3:48:af:a7:9c:ef:
91:b2:d2:00:44:7b:bc:6f:8e:d7:db:d4:b9:b2:e5:72:57:5a:
78:03:06:f1:f7:e3:a1:7f:52:c8:61:e1:bd:c8:84:56:94:6c:
29:e1:7a:d9:16:21:b9:2e:4d:15:ae:e5:53:3e:06:54:fc:53:
26:19:19:c5:6b:8d:68:0d:27:11:1e:4e:c4:a4:d1:d3:61:29:
d1:f3:de:d7:d3:ee:c6:ae:1a:5f:10:22:3d:37:76:5d:8d:01:
ff:05:ec:c9:f9:75:88:48:0a:57:d2:68:f5:02:c0:62:2e:7a:
bd:59:ee:04:99:f6:5d:b9:19:18:da:0f:62:d2:51:e2:15:25:
e7:5b:31:2b:7d:ca:67:83:c0:74:c9:a5:ee:51:67:cf:92:f8:
c4:50:0d:82:f4:f0:10:5c:2a:ac:59:e0:31:70:2e:85:0c:5b:
f5:ff:4a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:30:25 2024 by rpki-client on console-fra.rpki-client.org