Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wF2kIg--qmuEJ699aq6_b7UxjXM.roa
File: wF2kIg--qmuEJ699aq6_b7UxjXM.roa (raw, json)
Hash identifier: xjXygqXPHRrXvO8GbqfiFCzk4Zs8oNZScUb5nOPYfsk=
Subject key identifier: C0:5D:A4:22:0F:BE:AA:6B:84:27:AF:7D:6A:AE:BF:6F:B5:31:8D:73
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0191BC9D2C05A6B5C0BCBB3E75D506523D40
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wF2kIg--qmuEJ699aq6_b7UxjXM.roa
Signing time: Wed 04 Sep 2024 10:38:22 +0000
ROA not before: Wed 04 Sep 2024 10:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52116
IP address blocks: 77.105.6.0/24 maxlen: 24
77.105.11.0/24 maxlen: 24
77.105.31.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.55.0/24 maxlen: 24
81.18.61.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
109.121.60.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
178.219.11.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
178.253.240.0/24 maxlen: 24
185.47.88.0/24 maxlen: 24
185.47.89.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
188.255.130.0/24 maxlen: 24
188.255.140.0/24 maxlen: 24
188.255.185.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
188.255.208.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.226.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.246.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.248.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
188.255.252.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
212.69.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bc:9d:2c:05:a6:b5:c0:bc:bb:3e:75:d5:06:52:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 4 10:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c05da4220fbeaa6b8427af7d6aaebf6fb5318d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:02:30:e1:e8:53:3c:f3:86:74:47:9d:73:9b:
73:e6:3d:6d:c0:09:c8:70:72:d7:3b:f0:7a:2f:f7:
4e:3f:d0:d9:87:0c:d0:b0:3d:d2:92:26:6c:20:06:
22:3d:45:a8:26:0d:fd:00:7d:a3:93:3c:d1:54:e5:
9c:6b:7b:19:c9:57:04:94:80:db:0d:e7:48:a8:ce:
ba:08:5b:9b:f8:97:d6:23:e2:28:7d:ec:1d:be:fc:
3a:26:18:36:fc:fe:ed:02:c6:bf:af:9d:5d:16:81:
aa:bb:af:0c:72:df:11:41:dc:e3:de:f6:b7:89:99:
d6:57:20:10:45:73:b7:f3:e4:e0:a1:11:30:5e:0f:
b4:1f:b7:b2:f7:bd:64:12:1b:d7:79:46:9b:2a:cc:
69:f8:2b:68:26:95:4f:20:27:85:e7:fd:a2:d6:4c:
85:80:4d:32:bb:ab:5c:0f:6f:30:d6:b4:ed:b0:f2:
27:3f:a3:b3:8b:49:c5:97:cb:7d:07:9b:cc:52:19:
4d:c2:03:5e:34:2e:26:b0:ef:61:d2:ca:11:0f:a5:
19:62:d9:57:1b:ae:21:f2:cc:0e:bd:4c:41:58:62:
5a:c2:cb:1e:c8:1c:10:a3:46:a7:a8:8b:aa:db:91:
99:f0:da:d3:cd:f3:86:d0:d9:9c:8c:d6:62:96:92:
e4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5D:A4:22:0F:BE:AA:6B:84:27:AF:7D:6A:AE:BF:6F:B5:31:8D:73
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wF2kIg--qmuEJ699aq6_b7UxjXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.6.0/24
77.105.11.0/24
77.105.31.0/24
79.175.103.0/24
79.175.115.0-79.175.116.255
79.175.118.0/24
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
109.121.60.0/24
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0-185.47.90.255
188.255.130.0/24
188.255.140.0/24
188.255.185.0/24
188.255.190.0/24
188.255.208.0/24
188.255.213.0/24
188.255.219.0/24
188.255.226.0/24
188.255.238.0/24
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/24
212.69.18.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:ba:0d:75:a5:48:80:88:bc:7a:56:ad:5d:05:36:e7:81:54:
cf:1a:29:8e:d4:43:2e:87:94:6e:1c:eb:86:b8:08:56:40:ad:
48:db:16:41:92:6f:1e:ce:a1:27:6d:d4:9f:51:78:28:83:17:
eb:c4:84:84:72:ef:8f:ac:c2:de:1e:03:08:69:d8:cb:c6:b2:
9e:20:c9:76:ea:49:05:5e:69:57:49:e3:b6:12:d9:d4:63:62:
64:4d:7b:ea:92:15:51:03:df:df:b6:c4:d8:4a:cc:b9:47:e1:
4b:49:ef:06:32:23:f8:47:65:7d:e1:6b:f4:6e:b8:6b:2b:96:
fa:44:11:d4:1b:45:73:9a:6a:c2:64:01:a5:26:7a:19:b6:88:
84:e9:c7:06:68:89:d8:5e:18:8f:91:69:ba:20:67:11:ad:93:
d3:bb:99:fc:4a:46:de:74:fb:2a:aa:70:1b:aa:c0:b9:6f:02:
0d:1c:91:5a:3f:66:1c:9b:dd:63:50:e8:db:6f:fd:5d:9f:1e:
93:98:64:c2:ed:3e:4c:1a:63:f7:2c:e3:9f:9e:d4:34:ef:a3:
ad:48:2f:6d:a0:47:f0:59:62:24:5d:3d:5b:4a:0c:a9:e1:16:
8e:75:3f:3f:4c:bc:86:09:e7:e6:82:17:f5:24:63:83:66:cf:
de:dd:5a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:27:21 2024 by rpki-client on console-fra.rpki-client.org