Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/w-HrDO54JJ8tHtakXhRJBkbofbY.roa
File: w-HrDO54JJ8tHtakXhRJBkbofbY.roa (raw, json)
Hash identifier: vPWUhebWIzXC17smzTp553sjzEqC6TYAJsD54QIh/1o=
Subject key identifier: C3:E1:EB:0C:EE:78:24:9F:2D:1E:D6:A4:5E:14:49:06:46:E8:7D:B6
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 018CC9BC991BAE758F014FF86C762B8954E3
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/w-HrDO54JJ8tHtakXhRJBkbofbY.roa
Signing time: Tue 02 Jan 2024 10:33:49 +0000
ROA not before: Tue 02 Jan 2024 10:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43541
IP address blocks: 185.64.216.0/22 maxlen: 22
185.59.208.0/22 maxlen: 22
93.185.96.0/20 maxlen: 20
46.243.48.0/24 maxlen: 24
46.243.48.0/21 maxlen: 21
185.14.252.0/22 maxlen: 22
46.243.53.0/24 maxlen: 24
46.243.55.0/24 maxlen: 24
217.16.176.0/20 maxlen: 20
178.251.184.0/21 maxlen: 21
78.24.8.0/21 maxlen: 21
185.115.2.0/24 maxlen: 24
185.115.1.0/24 maxlen: 24
2a00:1ed0::/32 maxlen: 32
2a00:1ed1::/32 maxlen: 32
2a00:1ed2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:99:1b:ae:75:8f:01:4f:f8:6c:76:2b:89:54:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Jan 2 10:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3e1eb0cee78249f2d1ed6a45e14490646e87db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:53:df:13:08:c7:5a:ca:da:a3:90:84:8c:
0b:60:78:be:d2:bd:65:90:2f:72:e6:04:7d:27:33:
55:cd:dd:44:45:fa:62:f1:be:0d:fe:b0:88:9c:74:
e7:fe:42:17:4a:82:28:22:e5:b6:25:e0:fa:11:db:
6a:ec:d5:ec:1e:3a:3b:66:36:39:dc:b6:2f:00:60:
53:71:4c:37:cb:90:e4:de:3e:d3:0f:3e:01:a6:8a:
a3:ef:23:c8:d8:dc:c0:f2:79:fe:b5:f0:3c:fd:fd:
36:c2:fb:4b:f2:eb:3a:b3:d9:bd:85:b5:cc:05:94:
3e:02:be:3a:be:09:73:e7:56:bc:23:97:36:ee:b0:
7f:f4:21:ba:30:2f:03:70:3a:56:da:f1:0e:42:f6:
da:5a:a1:00:91:60:08:04:f8:ab:b5:6a:67:ab:df:
f8:86:fb:ed:f9:5b:8c:8d:4e:7c:5a:ff:75:3f:75:
5c:f0:99:c4:e3:86:84:b8:9e:69:95:72:c7:22:36:
b1:85:4c:5b:b8:d8:aa:26:85:6a:6b:4c:fc:42:71:
63:48:23:3e:0c:0b:2c:59:3d:fc:5c:4d:02:f9:ff:
8c:57:7f:cc:13:5d:54:d3:2c:8e:73:cc:f7:5c:b4:
79:ce:20:02:c4:d4:9a:7b:5a:cb:b7:94:83:0f:26:
89:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E1:EB:0C:EE:78:24:9F:2D:1E:D6:A4:5E:14:49:06:46:E8:7D:B6
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/w-HrDO54JJ8tHtakXhRJBkbofbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.48.0/21
78.24.8.0/21
93.185.96.0/20
178.251.184.0/21
185.14.252.0/22
185.59.208.0/22
185.64.216.0/22
185.115.1.0-185.115.2.255
217.16.176.0/20
IPv6:
2a00:1ed0::-2a00:1ed2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
07:68:9a:7a:3e:7e:6d:e1:76:71:e1:95:ab:7c:f0:9d:e1:89:
c9:b5:be:b9:5b:98:c2:89:2d:5f:c6:5e:7e:32:ea:a4:d6:a9:
09:e2:3d:6e:9c:78:84:55:0c:9f:b3:ab:a5:d7:00:6b:09:0b:
a7:c8:64:00:f2:47:63:83:59:53:52:c6:b1:95:2d:6d:e0:18:
03:07:96:bf:49:c1:65:22:17:15:c6:d3:1b:f7:30:87:bd:3d:
10:d8:10:58:86:98:25:8e:d6:15:25:78:eb:00:ac:27:9c:a0:
dc:4e:5d:45:27:c2:63:c4:4d:b4:05:72:89:a6:80:16:3e:9b:
60:ba:4f:f9:12:98:22:2b:6b:94:c3:d6:a5:c8:4e:11:a2:bd:
d8:42:e4:3b:3a:5e:c6:3b:88:a5:8c:32:b9:1a:9e:ea:7c:f4:
31:c0:4f:75:30:6f:53:77:c9:5a:44:81:c9:bb:8d:8d:ee:18:
91:3b:04:02:29:39:e5:9c:a9:11:d6:10:c0:33:d6:33:95:50:
10:ef:99:0e:d9:37:4a:08:60:f8:a8:a4:00:a0:b0:0e:44:69:
02:80:ad:53:8f:f0:2f:50:9b:ec:4e:e0:89:87:61:79:01:1b:
da:f2:9d:be:92:ad:eb:6c:96:e2:74:7c:3c:9b:08:99:c5:c5:
0f:09:cc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 11:41:15 2024 by rpki-client on console-fra.rpki-client.org